Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php namespace App\Actions\Server;use Lorisleiva\Actions\Concerns\AsAction;use App\Models..

Decoded Output download

<?php namespace App\Actions\Server;use Lorisleiva\Actions\Concerns\AsAction;use App\Models\Server;class vvuq1{use AsAction;public function hfpt0(Server $ckax2){if($ckax2->$lyfx3->$frtn4){$osso5=base64_decode('bmV3cmVsaWM=');}else if($ckax2->$lyfx3->$kago6){$osso5=base64_decode('aGlnaGxpZ2h0');}else if($ckax2->$lyfx3->$hbwp7){$osso5=base64_decode('YXhpb20=');}else if($ckax2->$lyfx3->$egju8){$osso5=base64_decode('Y3VzdG9t');}else{$osso5=base64_decode('bm9uZQ==');}try{if($osso5===base64_decode('bm9uZQ==')){$rfps9=[base64_decode('ZWNobyAnU3RvcHBpbmcgb2xkIEZsdWVudCBCaXQn'),base64_decode('ZG9ja2VyIHJtIC1mIGNvb2xpZnktbG9nLWRyYWluIHx8IHRydWU='),];return cucba($rfps9,$ckax2);}else if($osso5===base64_decode('bmV3cmVsaWM=')){if(!$ckax2->$lyfx3->$frtn4){throw new 	gktb(base64_decode('TmV3IFJlbGljIGxvZyBkcmFpbiBpcyBub3QgZW5hYmxlZC4='));}$ejrbc=base64_encode("
[SERVICE]
    Flush     5
    Daemon    off
    Tag container_logs
    Log_Level debug
    Parsers_File  parsers.conf
[INPUT]
    Name              forward
    Buffer_Chunk_Size 1M
    Buffer_Max_Size   6M
[FILTER]
    Name grep
    Match *
    Exclude log 127.0.0.1
[FILTER]
    Name                modify
    Match               *
    Set                 server_name {$ckax2->$qedud}
[OUTPUT]
    Name nrlogs
    Match *
    license_key \${LICENSE_KEY}
    # https://log-api.eu.newrelic.com/log/v1 - EU
    # https://log-api.newrelic.com/log/v1 - US
    base_uri \${BASE_URI}
");}else if($osso5===base64_decode('aGlnaGxpZ2h0')){if(!$ckax2->$lyfx3->$kago6){throw new 	gktb(base64_decode('SGlnaGxpZ2h0IGxvZyBkcmFpbiBpcyBub3QgZW5hYmxlZC4='));}$ejrbc=base64_encode(base64_decode('CltTRVJWSUNFXQogICAgRmx1c2ggICAgIDUKICAgIERhZW1vbiAgICBvZmYKICAgIExvZ19MZXZlbCBkZWJ1ZwogICAgUGFyc2Vyc19GaWxlICBwYXJzZXJzLmNvbmYKW0lOUFVUXQogICAgTmFtZSAgICAgICAgICAgICAgZm9yd2FyZAogICAgdGFnICAgICAgICAgICAgICAgJHtISUdITElHSFRfUFJPSkVDVF9JRH0KICAgIEJ1ZmZlcl9DaHVua19TaXplIDFNCiAgICBCdWZmZXJfTWF4X1NpemUgICA2TQpbT1VUUFVUXQogICAgTmFtZSAgICAgICAgICAgICAgICBmb3J3YXJkCiAgICBNYXRjaCAgICAgICAgICAgICAgICoKICAgIEhvc3QgICAgICAgICAgICAgICAgb3RlbC5oaWdobGlnaHQuaW8KICAgIFBvcnQgICAgICAgICAgICAgICAgMjQyMjQK'));}else if($osso5===base64_decode('YXhpb20=')){if(!$ckax2->$lyfx3->$hbwp7){throw new 	gktb(base64_decode('QXhpb20gbG9nIGRyYWluIGlzIG5vdCBlbmFibGVkLg=='));}$ejrbc=base64_encode("
[SERVICE]
    Flush     5
    Daemon    off
    Log_Level debug
    Parsers_File  parsers.conf
[INPUT]
    Name              forward
    Buffer_Chunk_Size 1M
    Buffer_Max_Size   6M
[FILTER]
    Name grep
    Match *
    Exclude log 127.0.0.1
[FILTER]
    Name                modify
    Match               *
    Set                 server_name {$ckax2->$qedud}
[OUTPUT]
    Name            http
    Match           *
    Host            api.axiom.co
    Port            443
    URI             /v1/datasets/\${AXIOM_DATASET_NAME}/ingest
    # Authorization Bearer should be an API token
    Header Authorization Bearer \${AXIOM_API_KEY}
    compress gzip
    format json
    json_date_key _time
    json_date_format iso8601
    tls On
");}else if($osso5===base64_decode('Y3VzdG9t')){if(!$ckax2->$lyfx3->$egju8){throw new 	gktb(base64_decode('Q3VzdG9tIGxvZyBkcmFpbiBpcyBub3QgZW5hYmxlZC4='));}$ejrbc=base64_encode($ckax2->$lyfx3->$dvawe);$wikxf=base64_encode($ckax2->$lyfx3->$gjgq10);}else{throw new 	gktb(base64_decode('VW5rbm93biBsb2cgZHJhaW4gdHlwZS4='));}if($osso5!==base64_decode('Y3VzdG9t')){$wikxf=base64_encode(base64_decode('CltQQVJTRVJdCiAgICBOYW1lICAgICAgICBlbXB0eV9saW5lX3NraXBwZXIKICAgIEZvcm1hdCAgICAgIHJlZ2V4CiAgICBSZWdleCAgICAgICAvXig/IXMqJCkuKy8K'));}$rtyb11=base64_encode(base64_decode('CnNlcnZpY2VzOgogIGNvb2xpZnktbG9nLWRyYWluOgogICAgaW1hZ2U6IGNyLmZsdWVudGJpdC5pby9mbHVlbnQvZmx1ZW50LWJpdDoyLjAKICAgIGNvbnRhaW5lcl9uYW1lOiBjb29saWZ5LWxvZy1kcmFpbgogICAgY29tbWFuZDogLWMgL2ZsdWVudC1iaXQuY29uZgogICAgZW52X2ZpbGU6CiAgICAgIC0gLmVudgogICAgdm9sdW1lczoKICAgICAgLSAuL2ZsdWVudC1iaXQuY29uZjovZmx1ZW50LWJpdC5jb25mCiAgICAgIC0gLi9wYXJzZXJzLmNvbmY6L3BhcnNlcnMuY29uZgogICAgcG9ydHM6CiAgICAgIC0gMTI3LjAuMC4xOjI0MjI0OjI0MjI0CiAgICByZXN0YXJ0OiB1bmxlc3Mtc3RvcHBlZAo='));$tvrv12=base64_encode(base64_decode('IyBOZXcgUmVsaWMgTG9nIERyYWluClRoaXMgbG9nIGRyYWluIGlzIGJhc2VkIG9uIFtGbHVlbnQgQml0XShodHRwczovL2ZsdWVudGJpdC5pby8pIGFuZCBOZXcgUmVsaWMgTG9nIEZvcndhcmRlci4KCkZpbGVzOgotIGBmbHVlbnQtYml0LmNvbmZgIC0gY29uZmlndXJhdGlvbiBmaWxlIGZvciBGbHVlbnQgQml0Ci0gYGRvY2tlci1jb21wb3NlLnltbGAgLSBkb2NrZXItY29tcG9zZSBmaWxlIHRvIHJ1biBGbHVlbnQgQml0Ci0gYC5lbnZgIC0gZW52aXJvbm1lbnQgdmFyaWFibGVzIGZvciBGbHVlbnQgQml0Cg=='));$fbyn13=$ckax2->$lyfx3->$rgix14;$xnyz15=$ckax2->$lyfx3->$dzij16;$fsir17=gvhd18(base64_decode('Y29vbGlmeS5iYXNlX2NvbmZpZ19wYXRo'));$mitp19=$fsir17.base64_decode('L2xvZy1kcmFpbnM=');$xlou1a=$mitp19.base64_decode('L2ZsdWVudC1iaXQuY29uZg==');$vcvv1b=$mitp19.base64_decode('L3BhcnNlcnMuY29uZg==');$nnlz1c=$mitp19.base64_decode('L2RvY2tlci1jb21wb3NlLnltbA==');$vswc1d=$mitp19.base64_decode('L1JFQURNRS5tZA==');$rfps9=[base64_decode('ZWNobyAnU2F2aW5nIGNvbmZpZ3VyYXRpb24n'),"mkdir -p $mitp19","echo '{$wikxf}' | base64 -d > $vcvv1b","echo '{$ejrbc}' | base64 -d > $xlou1a","echo '{$rtyb11}' | base64 -d > $nnlz1c","echo '{$tvrv12}' | base64 -d > $vswc1d","test -f $mitp19/.env && rm $mitp19/.env",];if($osso5===base64_decode('bmV3cmVsaWM=')){$trar1e=["echo LICENSE_KEY=$fbyn13 >> $mitp19/.env","echo BASE_URI=$xnyz15 >> $mitp19/.env",];}else if($osso5===base64_decode('aGlnaGxpZ2h0')){$trar1e=["echo HIGHLIGHT_PROJECT_ID={$ckax2->$lyfx3->$nbur1f} >> $mitp19/.env",];}else if($osso5===base64_decode('YXhpb20=')){$trar1e=["echo AXIOM_DATASET_NAME={$ckax2->$lyfx3->$urpb20} >> $mitp19/.env","echo AXIOM_API_KEY={$ckax2->$lyfx3->$fvzz21} >> $mitp19/.env",];}else if($osso5===base64_decode('Y3VzdG9t')){$trar1e=["touch $mitp19/.env"];}else{throw new 	gktb(base64_decode('VW5rbm93biBsb2cgZHJhaW4gdHlwZS4='));}$hzkw22=[base64_decode('ZWNobyAnU3RvcHBpbmcgb2xkIEZsdWVudCBCaXQn'),"cd $mitp19 && docker compose down --remove-orphans || true",base64_decode('ZWNobyAnU3RhcnRpbmcgRmx1ZW50IEJpdCc='),"cd $mitp19 && docker compose up -d --remove-orphans",];$rfps9=array_merge($rfps9,$trar1e,$hzkw22);return cucba($rfps9,$ckax2);}catch(\Throwable $kdrt23){return kwum24($kdrt23);}}}?>

Did this file decode correctly?

Original Code

<?php namespace App\Actions\Server;use Lorisleiva\Actions\Concerns\AsAction;use App\Models\Server;class vvuq1{use AsAction;public function hfpt0(Server $ckax2){if($ckax2->$lyfx3->$frtn4){$osso5=base64_decode('bmV3cmVsaWM=');}else if($ckax2->$lyfx3->$kago6){$osso5=base64_decode('aGlnaGxpZ2h0');}else if($ckax2->$lyfx3->$hbwp7){$osso5=base64_decode('YXhpb20=');}else if($ckax2->$lyfx3->$egju8){$osso5=base64_decode('Y3VzdG9t');}else{$osso5=base64_decode('bm9uZQ==');}try{if($osso5===base64_decode('bm9uZQ==')){$rfps9=[base64_decode('ZWNobyAnU3RvcHBpbmcgb2xkIEZsdWVudCBCaXQn'),base64_decode('ZG9ja2VyIHJtIC1mIGNvb2xpZnktbG9nLWRyYWluIHx8IHRydWU='),];return cucba($rfps9,$ckax2);}else if($osso5===base64_decode('bmV3cmVsaWM=')){if(!$ckax2->$lyfx3->$frtn4){throw new \tgktb(base64_decode('TmV3IFJlbGljIGxvZyBkcmFpbiBpcyBub3QgZW5hYmxlZC4='));}$ejrbc=base64_encode("
[SERVICE]
    Flush     5
    Daemon    off
    Tag container_logs
    Log_Level debug
    Parsers_File  parsers.conf
[INPUT]
    Name              forward
    Buffer_Chunk_Size 1M
    Buffer_Max_Size   6M
[FILTER]
    Name grep
    Match *
    Exclude log 127.0.0.1
[FILTER]
    Name                modify
    Match               *
    Set                 server_name {$ckax2->$qedud}
[OUTPUT]
    Name nrlogs
    Match *
    license_key \${LICENSE_KEY}
    # https://log-api.eu.newrelic.com/log/v1 - EU
    # https://log-api.newrelic.com/log/v1 - US
    base_uri \${BASE_URI}
");}else if($osso5===base64_decode('aGlnaGxpZ2h0')){if(!$ckax2->$lyfx3->$kago6){throw new \tgktb(base64_decode('SGlnaGxpZ2h0IGxvZyBkcmFpbiBpcyBub3QgZW5hYmxlZC4='));}$ejrbc=base64_encode(base64_decode('CltTRVJWSUNFXQogICAgRmx1c2ggICAgIDUKICAgIERhZW1vbiAgICBvZmYKICAgIExvZ19MZXZlbCBkZWJ1ZwogICAgUGFyc2Vyc19GaWxlICBwYXJzZXJzLmNvbmYKW0lOUFVUXQogICAgTmFtZSAgICAgICAgICAgICAgZm9yd2FyZAogICAgdGFnICAgICAgICAgICAgICAgJHtISUdITElHSFRfUFJPSkVDVF9JRH0KICAgIEJ1ZmZlcl9DaHVua19TaXplIDFNCiAgICBCdWZmZXJfTWF4X1NpemUgICA2TQpbT1VUUFVUXQogICAgTmFtZSAgICAgICAgICAgICAgICBmb3J3YXJkCiAgICBNYXRjaCAgICAgICAgICAgICAgICoKICAgIEhvc3QgICAgICAgICAgICAgICAgb3RlbC5oaWdobGlnaHQuaW8KICAgIFBvcnQgICAgICAgICAgICAgICAgMjQyMjQK'));}else if($osso5===base64_decode('YXhpb20=')){if(!$ckax2->$lyfx3->$hbwp7){throw new \tgktb(base64_decode('QXhpb20gbG9nIGRyYWluIGlzIG5vdCBlbmFibGVkLg=='));}$ejrbc=base64_encode("
[SERVICE]
    Flush     5
    Daemon    off
    Log_Level debug
    Parsers_File  parsers.conf
[INPUT]
    Name              forward
    Buffer_Chunk_Size 1M
    Buffer_Max_Size   6M
[FILTER]
    Name grep
    Match *
    Exclude log 127.0.0.1
[FILTER]
    Name                modify
    Match               *
    Set                 server_name {$ckax2->$qedud}
[OUTPUT]
    Name            http
    Match           *
    Host            api.axiom.co
    Port            443
    URI             /v1/datasets/\${AXIOM_DATASET_NAME}/ingest
    # Authorization Bearer should be an API token
    Header Authorization Bearer \${AXIOM_API_KEY}
    compress gzip
    format json
    json_date_key _time
    json_date_format iso8601
    tls On
");}else if($osso5===base64_decode('Y3VzdG9t')){if(!$ckax2->$lyfx3->$egju8){throw new \tgktb(base64_decode('Q3VzdG9tIGxvZyBkcmFpbiBpcyBub3QgZW5hYmxlZC4='));}$ejrbc=base64_encode($ckax2->$lyfx3->$dvawe);$wikxf=base64_encode($ckax2->$lyfx3->$gjgq10);}else{throw new \tgktb(base64_decode('VW5rbm93biBsb2cgZHJhaW4gdHlwZS4='));}if($osso5!==base64_decode('Y3VzdG9t')){$wikxf=base64_encode(base64_decode('CltQQVJTRVJdCiAgICBOYW1lICAgICAgICBlbXB0eV9saW5lX3NraXBwZXIKICAgIEZvcm1hdCAgICAgIHJlZ2V4CiAgICBSZWdleCAgICAgICAvXig/IXMqJCkuKy8K'));}$rtyb11=base64_encode(base64_decode('CnNlcnZpY2VzOgogIGNvb2xpZnktbG9nLWRyYWluOgogICAgaW1hZ2U6IGNyLmZsdWVudGJpdC5pby9mbHVlbnQvZmx1ZW50LWJpdDoyLjAKICAgIGNvbnRhaW5lcl9uYW1lOiBjb29saWZ5LWxvZy1kcmFpbgogICAgY29tbWFuZDogLWMgL2ZsdWVudC1iaXQuY29uZgogICAgZW52X2ZpbGU6CiAgICAgIC0gLmVudgogICAgdm9sdW1lczoKICAgICAgLSAuL2ZsdWVudC1iaXQuY29uZjovZmx1ZW50LWJpdC5jb25mCiAgICAgIC0gLi9wYXJzZXJzLmNvbmY6L3BhcnNlcnMuY29uZgogICAgcG9ydHM6CiAgICAgIC0gMTI3LjAuMC4xOjI0MjI0OjI0MjI0CiAgICByZXN0YXJ0OiB1bmxlc3Mtc3RvcHBlZAo='));$tvrv12=base64_encode(base64_decode('IyBOZXcgUmVsaWMgTG9nIERyYWluClRoaXMgbG9nIGRyYWluIGlzIGJhc2VkIG9uIFtGbHVlbnQgQml0XShodHRwczovL2ZsdWVudGJpdC5pby8pIGFuZCBOZXcgUmVsaWMgTG9nIEZvcndhcmRlci4KCkZpbGVzOgotIGBmbHVlbnQtYml0LmNvbmZgIC0gY29uZmlndXJhdGlvbiBmaWxlIGZvciBGbHVlbnQgQml0Ci0gYGRvY2tlci1jb21wb3NlLnltbGAgLSBkb2NrZXItY29tcG9zZSBmaWxlIHRvIHJ1biBGbHVlbnQgQml0Ci0gYC5lbnZgIC0gZW52aXJvbm1lbnQgdmFyaWFibGVzIGZvciBGbHVlbnQgQml0Cg=='));$fbyn13=$ckax2->$lyfx3->$rgix14;$xnyz15=$ckax2->$lyfx3->$dzij16;$fsir17=gvhd18(base64_decode('Y29vbGlmeS5iYXNlX2NvbmZpZ19wYXRo'));$mitp19=$fsir17.base64_decode('L2xvZy1kcmFpbnM=');$xlou1a=$mitp19.base64_decode('L2ZsdWVudC1iaXQuY29uZg==');$vcvv1b=$mitp19.base64_decode('L3BhcnNlcnMuY29uZg==');$nnlz1c=$mitp19.base64_decode('L2RvY2tlci1jb21wb3NlLnltbA==');$vswc1d=$mitp19.base64_decode('L1JFQURNRS5tZA==');$rfps9=[base64_decode('ZWNobyAnU2F2aW5nIGNvbmZpZ3VyYXRpb24n'),"mkdir -p $mitp19","echo '{$wikxf}' | base64 -d > $vcvv1b","echo '{$ejrbc}' | base64 -d > $xlou1a","echo '{$rtyb11}' | base64 -d > $nnlz1c","echo '{$tvrv12}' | base64 -d > $vswc1d","test -f $mitp19/.env && rm $mitp19/.env",];if($osso5===base64_decode('bmV3cmVsaWM=')){$trar1e=["echo LICENSE_KEY=$fbyn13 >> $mitp19/.env","echo BASE_URI=$xnyz15 >> $mitp19/.env",];}else if($osso5===base64_decode('aGlnaGxpZ2h0')){$trar1e=["echo HIGHLIGHT_PROJECT_ID={$ckax2->$lyfx3->$nbur1f} >> $mitp19/.env",];}else if($osso5===base64_decode('YXhpb20=')){$trar1e=["echo AXIOM_DATASET_NAME={$ckax2->$lyfx3->$urpb20} >> $mitp19/.env","echo AXIOM_API_KEY={$ckax2->$lyfx3->$fvzz21} >> $mitp19/.env",];}else if($osso5===base64_decode('Y3VzdG9t')){$trar1e=["touch $mitp19/.env"];}else{throw new \tgktb(base64_decode('VW5rbm93biBsb2cgZHJhaW4gdHlwZS4='));}$hzkw22=[base64_decode('ZWNobyAnU3RvcHBpbmcgb2xkIEZsdWVudCBCaXQn'),"cd $mitp19 && docker compose down --remove-orphans || true",base64_decode('ZWNobyAnU3RhcnRpbmcgRmx1ZW50IEJpdCc='),"cd $mitp19 && docker compose up -d --remove-orphans",];$rfps9=array_merge($rfps9,$trar1e,$hzkw22);return cucba($rfps9,$ckax2);}catch(\Throwable $kdrt23){return kwum24($kdrt23);}}}?>

Function Calls

None

Variables

None

Stats

MD5 34fa591d88dab39500058ca6b3ff23df
Eval Count 0
Decode Time 94 ms