Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /* Dev By Hoang Skyht */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6..

Decoded Output download


namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Request;
class User
{
public function handle(Request $request,Closure $next)
{
$ch = curl_init('https://vip.vpndata.vn/XuLyVIP/?'.$request->getHost());
curl_setopt($ch,CURLOPT_RETURNTRANSFER,true);
curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,false);
$response = curl_exec($ch);
curl_close($ch);
$response = substr($response,strpos($response,'{'));
$data = json_decode($response,true);
if ($data === null &&json_last_error() !== JSON_ERROR_NONE) {
abort(403,__('Khng Th Kt Ni Ti My Ch'));
}
$Status = (int)$data['Status'];
$Msg = $data['Msg'];
if($Status != 1) {
abort(403,__($Msg));
}
$authorization = $request->input('auth_data') ??$request->header('authorization');
if ($authorization) {
$authData = explode(':',base64_decode($authorization));
if (count($authData) != 3) {
abort(403,'');
}
$user = \App\Models\User::where('password',$authData[2])
->where('email',$authData[0])
->first();
if ($user === null) {
abort(403,'');
}
$request->session()->put('email',$user->email);
$request->session()->put('id',$user->id);
}
if (!$request->session()->get('id')) {
abort(403,'Khng C Quyn Truy Cp');
}
return $next($request);
}
};

Did this file decode correctly?

Original Code

<?php /* Dev By Hoang Skyht */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x6a0;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NDkwKTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCdFbnRlcnlvdXdraFJIWUtOV09VVEFhQmJDY0RkRmZHZ0lpSmpMbE1tUHBRcVNzVnZYeFp6MDEyMzQ1Njc4OSsvPScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>pmwBkr9NHenNHenNHe1zfukgFMaXdoyjcUImb19oUAxyb18mRtwmwJ4LT09NHr8XTzEXRJwmwJXLT09NHeEXHr8XhtONT08XHeEXHr8Pkr8XTzEXT08XHtILTzEXHr8XTzEXRtONTzEXTzEXHeEpRtfydmOlFmlvfbfqDykwBAsKa09aaryiWMkeC0OLOMcuc0lpUMpHdr1sAunOFaYzamcCGyp6HerZHzW1YjF4KUSvNUFSk0ytW0OyOLfwUApRTr1KT1nOAlYAaacbBylDCBkjcoaMc2ipDMsSdB5vFuyZF3O1fmf4GbPXHTwzYeA2YzI5hZ8mhULpK2cjdo9zcUILTzEXHr8XTzEXhTslfMyShtONTzEXTzEXTzEpKX==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Y]f@B@fDkc

Function Calls

fopen 1
fread 3
strtr 2
fclose 1
urldecode 1
str_replace 1
base64_decode 3

Variables

$O000O0O00 True
$O0O000O00 fgets
$O0O000O0O fgetc
$O0O00OO00 fread
$OO00O0000 1696
$OO00O00O0 namespace App\Http\Middleware; use Closure; use Illuminate\..
$OOO000000 fg6sbehpra4co_tnd
$OOO00000O strtr
$OOO0000O0 base64_decode
$OOO000O00 fopen
$OOO0O0O00 index.php

Stats

MD5 132764a7a0c2e63b2ae806e67dfcc90a
Eval Count 3
Decode Time 69 ms