Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ini_set('display_errors', 1); error_reporting(E_ALL); $flag = shell_exec("/re..

Decoded Output download

<?php 
 
ini_set('display_errors', 1); 
error_reporting(E_ALL); 
 
$flag = shell_exec("/readflag"); 
 
if(isset($_GET['action']) && isset($_GET['p'])) { 
    $action = $_REQUEST['action']; 
    $p = $_REQUEST['p']; 
 
    if($p == 'flag') { 
        die("p contains an illegal value"); 
    } 
     
    if($_GET['action'] == 'flag') { 
        die("action contains an illegal value"); 
    } 
     
    if($_SERVER['CONTENT_TYPE'] != 'application/x-www-form-urlencoded' && strpos($_SERVER['CONTENT_TYPE'], "multipart") !== 0) { 
        if($_REQUEST['token'] == 0 && md5($_REQUEST['token']) == 0) { 
            echo compact($action)[trim($p)]; 
        } 
        else { 
            echo "Almost there"; 
        } 
    } 
} 
 
?>

Did this file decode correctly?

Original Code

<?php

ini_set('display_errors', 1);
error_reporting(E_ALL);

$flag = shell_exec("/readflag");

if(isset($_GET['action']) && isset($_GET['p'])) {
    $action = $_REQUEST['action'];
    $p = $_REQUEST['p'];

    if($p == 'flag') {
        die("p contains an illegal value");
    }
    
    if($_GET['action'] == 'flag') {
        die("action contains an illegal value");
    }
    
    if($_SERVER['CONTENT_TYPE'] != 'application/x-www-form-urlencoded' && strpos($_SERVER['CONTENT_TYPE'], "multipart") !== 0) {
        if($_REQUEST['token'] == 0 && md5($_REQUEST['token']) == 0) {
            echo compact($action)[trim($p)];
        }
        else {
            echo "Almost there";
        }
    }
}

?>

Function Calls

None

Variables

None

Stats

MD5 31d827eff2c182e5f4b014810a4b846a
Eval Count 0
Decode Time 58 ms