Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php require_once "\x2e\x2e\57\56\x2e\x2f\x2e\x2e\x2f\x77\x70\55\154\157\x61\144\x2e..
Decoded Output download
<?php
require_once "../../../wp-load.php";
$mC = get_site_option("mo_saml_sp_base_url");
if (!empty($mC)) {
goto um;
}
$mC = network_site_url();
if (!(substr($mC, -1) == "/")) {
goto E3;
}
$mC = substr($mC, 0, -1);
E3:
um:
$Xn = $mC . "/wp-content/plugins/miniorange-saml-20-single-sign-on/";
$a6 = $mC . "/";
$OS = file_get_contents(plugin_dir_path(__FILE__) . "resources" . DIRECTORY_SEPARATOR . "sp-certificate.crt");
$OS = Utilities::desanitize_certificate($OS);
ob_clean();
header("Content-Type: text/xml");
echo "<?xml version="1.0"?>
\xa<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" validUntil="2020-10-28T23:59:59Z" cacheDuration="PT1446808792S" entityID="" . $Xn . "">\xd\xa <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
\xa <md:KeyDescriptor use="signing">\xd\xa <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
\xa <ds:X509Data>\xd
<ds:X509Certificate>" . $OS . "</ds:X509Certificate>
\xa </ds:X509Data>\xd\xa </ds:KeyInfo>\xd\xa </md:KeyDescriptor>\xd
<md:KeyDescriptor use="encryption">\xd
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">\xd
<ds:X509Data>\xd
<ds:X509Certificate>" . $OS . "</ds:X509Certificate>\xd
</ds:X509Data>
</ds:KeyInfo>\xd\xa </md:KeyDescriptor>\xd
\x9<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="" . $a6 . ""/>\xd\xa <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="" . $a6 . ""/>\xd\xa <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>\xd\xa <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
\x9<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>\xd
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="" . $a6 . "" index="1"/>\xd\xa </md:SPSSODescriptor>\xd\xa <md:Organization>
\xa <md:OrganizationName xml:lang="en-US">miniOrange</md:OrganizationName>\xd\xa <md:OrganizationDisplayName xml:lang="en-US">miniOrange</md:OrganizationDisplayName>
\xa <md:OrganizationURL xml:lang="en-US">http://miniorange.com</md:OrganizationURL>
</md:Organization>
\xa <md:ContactPerson contactType="technical">\xd\xa <md:GivenName>miniOrange</md:GivenName>
\xa <md:EmailAddress>[email protected]</md:EmailAddress>
\xa </md:ContactPerson>\xd
<md:ContactPerson contactType="support">
\xa <md:GivenName>miniOrange</md:GivenName>
\xa <md:EmailAddress>[email protected]</md:EmailAddress>\xd
</md:ContactPerson>
\xa</md:EntityDescriptor>";
?>
Did this file decode correctly?
Original Code
<?php
require_once "\x2e\x2e\57\56\x2e\x2f\x2e\x2e\x2f\x77\x70\55\154\157\x61\144\x2e\x70\x68\x70";
$mC = get_site_option("\155\x6f\x5f\163\x61\x6d\x6c\x5f\x73\160\x5f\x62\x61\163\145\137\x75\162\x6c");
if (!empty($mC)) {
goto um;
}
$mC = network_site_url();
if (!(substr($mC, -1) == "\57")) {
goto E3;
}
$mC = substr($mC, 0, -1);
E3:
um:
$Xn = $mC . "\57\167\x70\x2d\x63\x6f\156\x74\145\156\164\57\160\x6c\x75\147\151\156\x73\x2f\x6d\151\x6e\151\157\162\x61\x6e\x67\145\55\163\x61\x6d\x6c\x2d\62\60\55\x73\151\x6e\147\x6c\145\x2d\x73\x69\x67\156\x2d\157\x6e\57";
$a6 = $mC . "\57";
$OS = file_get_contents(plugin_dir_path(__FILE__) . "\x72\145\x73\x6f\165\162\x63\x65\163" . DIRECTORY_SEPARATOR . "\163\x70\55\x63\x65\x72\x74\151\x66\x69\143\141\164\145\x2e\x63\162\x74");
$OS = Utilities::desanitize_certificate($OS);
ob_clean();
header("\103\x6f\x6e\164\145\x6e\x74\x2d\x54\x79\x70\x65\x3a\x20\164\x65\x78\164\x2f\x78\155\154");
echo "\x3c\x3f\x78\x6d\x6c\x20\166\145\162\x73\151\x6f\x6e\x3d\42\61\x2e\x30\42\x3f\76\15\xa\x3c\x6d\x64\x3a\105\156\164\x69\164\171\104\x65\163\143\162\151\x70\164\157\x72\x20\170\x6d\154\156\x73\x3a\x6d\x64\x3d\42\165\162\156\x3a\157\141\163\151\x73\x3a\x6e\x61\x6d\x65\x73\x3a\x74\143\x3a\x53\101\x4d\114\x3a\62\56\60\x3a\x6d\145\x74\141\x64\141\164\x61\x22\40\x76\x61\154\151\144\x55\156\x74\151\x6c\x3d\x22\62\x30\62\60\55\x31\x30\55\x32\70\124\62\63\72\x35\x39\x3a\65\x39\132\42\40\x63\141\x63\150\x65\x44\165\x72\x61\x74\x69\157\x6e\75\x22\120\x54\61\64\x34\66\70\60\70\x37\x39\62\x53\42\x20\145\x6e\164\151\x74\171\111\x44\75\x22" . $Xn . "\42\x3e\xd\xa\x20\40\x3c\155\x64\72\123\x50\x53\x53\x4f\x44\x65\163\143\x72\151\x70\164\x6f\x72\x20\101\x75\x74\150\156\122\x65\161\x75\145\163\x74\163\x53\151\x67\x6e\145\144\75\x22\164\162\165\x65\x22\x20\127\141\156\164\x41\x73\x73\145\x72\x74\151\157\156\x73\x53\151\x67\156\145\x64\75\x22\164\162\165\145\42\40\x70\162\157\164\x6f\143\157\154\x53\165\x70\x70\157\x72\x74\x45\156\165\155\145\162\141\164\x69\157\156\75\42\x75\162\156\x3a\x6f\x61\163\x69\x73\72\x6e\x61\155\145\x73\x3a\x74\143\x3a\x53\x41\x4d\114\72\62\56\60\x3a\160\x72\157\x74\x6f\143\157\x6c\x22\x3e\15\xa\40\40\40\x20\x3c\x6d\x64\x3a\113\x65\171\104\145\163\143\162\x69\x70\x74\157\x72\x20\x75\163\x65\75\x22\163\151\147\156\x69\x6e\x67\42\x3e\xd\xa\x20\x20\x20\40\x20\40\74\144\163\x3a\x4b\x65\171\111\156\x66\157\40\x78\x6d\x6c\x6e\x73\x3a\144\x73\x3d\42\x68\164\164\160\x3a\x2f\x2f\167\x77\x77\56\167\63\56\157\x72\147\x2f\62\x30\x30\x30\x2f\60\x39\x2f\x78\155\x6c\144\163\151\147\x23\x22\x3e\15\xa\40\x20\x20\x20\40\40\x20\x20\74\x64\163\x3a\x58\65\60\71\104\x61\164\141\76\xd\12\x20\40\40\40\40\40\40\40\x20\x20\74\144\x73\x3a\130\65\x30\x39\x43\x65\162\164\x69\146\x69\x63\x61\x74\145\x3e" . $OS . "\x3c\x2f\144\163\x3a\x58\x35\x30\71\x43\145\162\164\151\146\x69\x63\141\164\x65\x3e\15\xa\40\x20\40\x20\x20\40\x20\x20\x3c\x2f\x64\163\x3a\130\65\x30\71\104\141\164\x61\76\xd\xa\40\x20\x20\x20\40\x20\x3c\57\x64\163\x3a\x4b\x65\171\111\156\146\x6f\76\xd\xa\x20\x20\40\40\x3c\x2f\x6d\x64\x3a\x4b\x65\171\x44\145\x73\143\x72\x69\160\164\157\x72\76\xd\12\x20\40\x20\x20\74\155\x64\x3a\113\145\171\104\145\163\x63\x72\x69\160\x74\157\x72\x20\x75\x73\145\x3d\x22\x65\x6e\143\x72\171\x70\x74\x69\x6f\156\42\x3e\xd\12\40\40\x20\40\x20\40\x3c\x64\163\72\x4b\145\171\111\x6e\x66\x6f\x20\170\155\154\x6e\163\72\144\x73\75\42\150\164\x74\160\72\57\x2f\x77\167\x77\56\167\x33\56\157\162\x67\57\62\x30\x30\60\57\x30\x39\x2f\170\155\154\144\x73\x69\147\43\x22\76\xd\12\40\x20\x20\40\40\40\40\x20\74\144\x73\x3a\x58\x35\60\71\104\141\164\141\76\xd\12\x20\40\40\x20\40\40\40\40\40\x20\x3c\144\163\x3a\130\x35\x30\x39\103\x65\162\164\151\146\151\x63\x61\164\145\76" . $OS . "\74\x2f\x64\163\72\130\x35\x30\x39\x43\x65\162\164\x69\x66\x69\x63\141\164\x65\x3e\xd\12\x20\40\40\x20\40\40\40\40\x3c\57\x64\163\x3a\130\65\60\x39\104\141\x74\x61\x3e\15\12\x20\40\40\x20\x20\40\x3c\x2f\144\x73\72\113\145\171\x49\x6e\x66\157\76\xd\xa\40\x20\x20\x20\x3c\57\x6d\144\x3a\113\145\171\104\x65\163\143\x72\x69\160\164\x6f\162\x3e\xd\12\x9\74\155\144\72\123\x69\156\x67\154\145\x4c\157\147\x6f\x75\164\123\145\x72\x76\151\x63\145\40\102\x69\156\144\x69\x6e\x67\75\x22\x75\162\156\x3a\157\141\x73\x69\163\x3a\x6e\x61\x6d\x65\x73\x3a\x74\x63\72\123\101\x4d\114\72\62\x2e\60\x3a\x62\x69\x6e\x64\151\x6e\147\163\72\110\x54\124\120\55\120\x4f\123\x54\42\40\114\157\143\141\x74\x69\x6f\156\75\42" . $a6 . "\42\x2f\76\xd\xa\40\x20\40\40\74\x6d\x64\72\x53\151\156\147\x6c\145\x4c\x6f\147\x6f\x75\164\x53\x65\162\166\x69\143\145\40\x42\151\156\x64\x69\x6e\147\75\42\165\x72\x6e\x3a\x6f\x61\x73\x69\x73\x3a\x6e\x61\x6d\x65\x73\x3a\164\143\x3a\123\101\x4d\114\72\x32\x2e\x30\72\x62\x69\156\144\151\156\x67\163\x3a\110\x54\124\120\x2d\122\x65\144\151\x72\145\x63\x74\42\40\x4c\x6f\143\x61\164\x69\x6f\x6e\75\x22" . $a6 . "\42\57\x3e\xd\xa\40\x20\x20\40\74\155\144\72\x4e\x61\x6d\x65\x49\x44\106\x6f\x72\155\x61\164\76\x75\162\156\x3a\x6f\141\x73\151\x73\72\x6e\141\x6d\x65\x73\x3a\x74\143\72\x53\x41\x4d\114\72\61\56\61\x3a\156\x61\x6d\x65\151\x64\55\146\157\162\155\x61\x74\x3a\x65\155\x61\x69\154\101\x64\144\x72\145\x73\163\x3c\x2f\x6d\144\72\x4e\x61\155\x65\111\x44\106\x6f\x72\155\x61\x74\x3e\xd\xa\11\74\x6d\144\72\116\x61\155\x65\111\x44\106\157\x72\x6d\x61\164\76\x75\162\156\x3a\157\141\x73\x69\163\x3a\x6e\x61\x6d\x65\x73\x3a\164\143\x3a\x53\x41\115\114\x3a\62\56\x30\x3a\x6e\141\x6d\x65\x69\144\x2d\x66\x6f\162\x6d\x61\164\72\x70\x65\x72\163\151\163\x74\145\x6e\x74\x3c\x2f\x6d\144\x3a\116\x61\155\145\111\104\x46\x6f\162\155\141\164\x3e\15\12\x9\x3c\x6d\x64\72\x4e\x61\155\x65\x49\104\x46\x6f\162\155\x61\x74\x3e\165\162\x6e\x3a\157\x61\163\x69\x73\72\x6e\141\155\145\163\72\x74\x63\72\123\x41\115\x4c\72\62\56\x30\72\156\x61\x6d\145\x69\x64\55\146\157\162\155\x61\164\x3a\x74\162\141\156\x73\151\x65\156\164\x3c\x2f\155\144\72\x4e\141\155\x65\111\104\106\157\x72\155\141\164\x3e\xd\12\x20\x20\x20\40\74\x6d\144\72\101\163\x73\145\162\x74\x69\157\x6e\x43\157\156\x73\165\x6d\x65\x72\123\145\x72\166\151\143\145\40\x42\151\x6e\x64\x69\156\x67\x3d\42\165\162\x6e\72\157\141\x73\151\x73\x3a\156\141\155\x65\x73\72\x74\x63\x3a\x53\x41\115\x4c\x3a\x32\56\x30\72\142\151\156\144\151\x6e\x67\x73\72\110\x54\124\120\x2d\x50\117\123\124\x22\40\114\157\143\x61\x74\x69\x6f\x6e\75\42" . $a6 . "\42\40\x69\156\144\145\170\x3d\42\x31\x22\x2f\76\xd\xa\40\40\x3c\57\x6d\x64\x3a\x53\120\x53\123\x4f\104\145\163\143\x72\151\160\x74\x6f\162\x3e\xd\xa\40\x20\74\155\x64\72\117\162\147\x61\x6e\x69\x7a\141\x74\151\x6f\x6e\76\15\xa\x20\40\x20\x20\74\x6d\x64\x3a\117\162\x67\x61\x6e\151\172\141\164\x69\157\x6e\116\141\x6d\145\40\x78\x6d\154\x3a\x6c\141\x6e\147\75\x22\145\156\55\125\123\42\x3e\155\x69\156\151\x4f\162\x61\x6e\147\x65\74\57\155\x64\x3a\x4f\x72\x67\x61\156\x69\172\141\164\x69\157\156\116\x61\x6d\x65\76\xd\xa\x20\40\x20\x20\x3c\155\x64\x3a\117\x72\147\141\156\x69\x7a\x61\x74\x69\x6f\156\x44\x69\x73\160\154\x61\x79\x4e\141\x6d\x65\40\x78\155\x6c\72\x6c\141\x6e\147\75\42\145\156\55\125\x53\x22\x3e\155\151\x6e\151\117\x72\141\156\147\x65\x3c\x2f\x6d\x64\72\x4f\x72\147\x61\x6e\151\x7a\x61\x74\151\x6f\x6e\x44\x69\163\x70\154\141\171\116\141\155\x65\x3e\15\xa\x20\x20\40\x20\x3c\x6d\x64\x3a\x4f\x72\147\141\x6e\x69\172\x61\164\x69\x6f\x6e\x55\122\x4c\x20\170\155\x6c\72\x6c\141\x6e\x67\x3d\x22\145\x6e\55\x55\123\42\76\x68\x74\164\160\72\57\57\155\151\x6e\x69\x6f\162\x61\156\147\145\56\143\x6f\x6d\x3c\57\x6d\144\72\117\x72\x67\x61\156\151\x7a\x61\x74\151\x6f\156\125\x52\x4c\76\15\12\40\x20\x3c\x2f\155\x64\72\x4f\x72\147\141\x6e\151\x7a\141\164\151\x6f\x6e\x3e\15\xa\40\x20\74\155\x64\72\103\157\156\164\x61\143\x74\120\x65\162\163\157\156\40\143\x6f\x6e\164\141\143\x74\x54\171\160\x65\75\42\164\x65\x63\150\x6e\x69\x63\141\x6c\42\76\xd\xa\x20\x20\x20\40\x3c\155\x64\72\107\151\166\x65\x6e\x4e\141\x6d\x65\x3e\155\x69\156\151\117\162\x61\x6e\x67\x65\x3c\x2f\x6d\144\72\x47\151\x76\145\156\116\x61\x6d\145\x3e\15\xa\40\x20\x20\x20\x3c\155\x64\72\x45\155\x61\151\x6c\101\144\144\162\145\163\163\x3e\151\x6e\146\x6f\100\x6d\x69\x6e\151\x6f\x72\141\x6e\x67\145\56\x63\x6f\x6d\74\x2f\x6d\144\x3a\105\x6d\141\151\x6c\101\144\144\x72\x65\163\x73\76\15\xa\x20\40\x3c\x2f\155\144\72\103\x6f\156\164\x61\x63\x74\x50\145\x72\163\157\x6e\x3e\xd\12\x20\40\74\x6d\x64\x3a\x43\x6f\156\x74\x61\x63\x74\120\145\x72\163\157\x6e\40\143\157\156\164\141\x63\164\x54\171\x70\x65\75\x22\x73\x75\x70\x70\157\162\164\x22\x3e\15\xa\x20\x20\x20\40\x3c\x6d\x64\72\x47\151\166\145\x6e\x4e\x61\x6d\x65\x3e\x6d\x69\x6e\151\x4f\162\x61\156\147\x65\74\57\155\144\72\x47\x69\166\x65\x6e\116\141\x6d\x65\x3e\15\xa\40\x20\40\40\x3c\x6d\144\72\105\x6d\141\151\x6c\101\144\144\x72\145\163\x73\76\151\x6e\x66\x6f\x40\155\151\156\x69\157\162\141\156\147\x65\56\x63\x6f\155\x3c\x2f\x6d\144\x3a\105\x6d\x61\151\154\x41\144\x64\162\x65\163\x73\x3e\xd\12\40\40\x3c\57\x6d\144\72\x43\157\156\x74\x61\x63\164\120\145\162\x73\x6f\156\x3e\15\xa\x3c\57\x6d\x64\x3a\x45\156\x74\x69\x74\x79\x44\x65\163\143\x72\151\x70\164\x6f\162\76";
Function Calls
None |
Stats
MD5 | 24031a242eed1a2713755c84d594f869 |
Eval Count | 0 |
Decode Time | 103 ms |