Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /* This file is protected by copyright law and provided under license. Reverse engin..
Decoded Output download
define('WP_USE_THEMES',false);
require('../../../../wp-config.php');
$wp->init();
$wp->parse_request();
$wp->query_posts();
$wp->register_globals();
global $current_user;
get_currentuserinfo();
$s3fsNonce= wp_create_nonce('s3fsNonce');
$s3fsWPUser = $current_user->user_login;
$s3fsClientIP = $_SERVER['REMOTE_ADDR'];
$s3fsUserAgent = $_SERVER['HTTP_USER_AGENT'];
if ($_REQUEST['type'] == "s") {
$s3fsURLCheck = md5(base64_decode(urldecode($_REQUEST['fl'])) .base64_decode(urldecode($_REQUEST['bk'])) .get_option('siteurl') .get_option('s3fsActivationTimeStamp'));
}else {
$s3fsURLCheck = md5($_COOKIE['s3fs'] .urlencode($_REQUEST['fl']) .urlencode($_REQUEST['bk']) .$_REQUEST['e'] .$s3fsWPUser .get_option('s3fsActivationTimeStamp'));
}
if ($s3fsURLCheck == $_REQUEST['check']) {
if ($_REQUEST['cb'] == "true") {
$s3File = getAuthenticatedURL(base64_decode(urldecode($_REQUEST['bk'])),base64_decode(urldecode($_REQUEST['fl'])),$_REQUEST['e'],$hostbucket = true);
}else {
$s3File = getAuthenticatedURL(base64_decode(urldecode($_REQUEST['bk'])),base64_decode(urldecode($_REQUEST['fl'])),$_REQUEST['e'],$hostbucket = false);
}
if ($_REQUEST['type'] == "m") {
Header( "Location: ".urldecode($s3File) );
}else {
Header( "Location: ".$s3File );
}
}else {
Header( "Location: ".get_option('siteurl') );
}
function getAuthenticatedURL($bucket,$uri,$lifetime,$hostBucket = false,$https = false) {
$AWSKey = get_option('s3fsAWSKey');
$expires = time() +$lifetime;
$uri = str_replace('%2F','/',rawurlencode($uri));
return sprintf(($https ?'https': 'http').'://%s/%s?AWSAccessKeyId=%s&Expires=%u&Signature=%s',
$hostBucket ?$bucket : $bucket.'.s3.amazonaws.com',$uri,$AWSKey,$expires,
urlencode(getHash("GET
{$expires}
/{$bucket}/{$uri}")));
}
function getHash($string) {
$AWSSecret = get_option('s3fsAWSSecret');
return base64_encode(extension_loaded('hash') ?
hash_hmac('sha1',$string,$AWSSecret,true) : pack('H*',sha1(
(str_pad($AWSSecret,64,chr(0x00)) ^(str_repeat(chr(0x5c),64))) .
pack('H*',sha1((str_pad($AWSSecret,64,chr(0x00)) ^
(str_repeat(chr(0x36),64))) .$string)))));
}
Did this file decode correctly?
Original Code
<?php /* This file is protected by copyright law and provided under license. Reverse engineering of this file is strictly prohibited. Copyright 2011 Rapid Crush, Inc. Contact [email protected] or visit http://www.S3FlowShield.com/license.html for additional information. */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0xad4;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NThhKTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCdGNUovVzRMbVMzQWpHZnBUY292d3Q4K1ZscUkwT1FEeHVuTUg2azJOQjFDRWlYc1BZaHk5S2VnZDdSWlVyemFiPScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>PefT3WzTG/5TG/5TG/e9Qm3xO28Y0L4HqvuNVezLvth4VerNjJSNSM76wKzTGWrYw9FYjMSNSMY6wKzTG/FYGWrYAJoTwKrYG/FYGWrB3WrYw9FYwKrYGJu6w9FYGWrYw9FYjJoTw9FYw9FYG/F1jJQLftBP89oG08G9c+1mqN5tlgzgQdc7AeqiOt6Ywe4WDm8swtugI93pcH4/o+klOe5qIm6Rvg8Nq/Qv+k8yD24MTvOi3K4JcKo4o6QSvt1jwWepwe5otkft88qV+4kIl+3HqL82qgn1I2Xi0+RPOm4yOdoeQNQ7DVBYGwS9f/tgf9uRAyrNAv61pgqH0Lz9qvu6w9FYGWrYw9FYAwXkQ24iAJoTw9FYw9FYw9F1pY==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 Calls
| fopen | 1 |
| fread | 3 |
| strtr | 2 |
| fclose | 1 |
| urldecode | 1 |
| str_replace | 1 |
| base64_decode | 3 |
Stats
| MD5 | 14a051c6297b8fe2dd585c85786f524c |
| Eval Count | 3 |
| Decode Time | 87 ms |