Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php require('functions.php'); session_start(); //did we log out..

Decoded Output download

    <?php 
    require('functions.php'); 
    session_start(); 
     
    //did we log out? 
    pageLogout(); 
 
    if ($_SERVER['REQUEST_METHOD'] === 'POST') { 
 
        if (isset($_POST['Login'])) { 
            $valueUser = $_POST['valueUser']; 
            $valuePass = $_POST['valuePass']; 
 
            if ($valueUser == '' || $valuePass == '') { 
                showText('Please, provide all requested information', true); 
                exit; 
            } 
 
            $conn = create_db_connection(); 
 
            $checkQuery = "SELECT * FROM `user` WHERE `name` = ?"; 
            $stmt = $conn->prepare($checkQuery); 
            $stmt->bind_param("s", $valueUser); 
            $stmt->execute(); 
            $checkResult = $stmt->get_result(); 
             
            //username validation 
            if ($checkResult->num_rows == 0) { 
                $conn->close(); 
                showText('Username does not exist!', true); 
                exit; 
            } 
 
            $loginQuery = "SELECT * FROM `user` WHERE `name` = ? AND `password` = ?"; 
            $stmt = $conn->prepare($loginQuery); 
            $stmt->bind_param("ss", $valueUser, $valuePass); 
            $stmt->execute(); 
            $checkResult = $stmt->get_result(); 
 
            //wrong password 
            if ($checkResult->num_rows == 0) { 
                $conn->close(); 
                showText('Password does not match!', true); 
                exit; 
            } 
 
            $userData = $checkResult->fetch_assoc(); 
            $isBanned = $userData['ban']; 
            $hasIp = $userData['ip']; 
 
            //check if the user is banned 
            if ($isBanned == 'true') { 
                $conn->close(); 
                showText('Your account is banned!', true); 
                exit; 
            } 
 
            //IP validation 
            $ipAddress = $_SERVER['REMOTE_ADDR']; 
            $currentDate = date('d-m-Y'); 
            if ($hasIp == 'unknown') { 
                $updateIpQuery = "UPDATE `user` SET `ip` = ? WHERE `name` = ?"; 
                $stmt = $conn->prepare($updateIpQuery); 
                $stmt->bind_param("ss", $ipAddress, $valueUser); 
                $stmt->execute(); 
                $stmt->close(); 
            }else{ 
                if ($hasIp != $ipAddress) { 
                    $insertIpQuery = "INSERT INTO `ip` (`by`, `date`, `old`, `new`) VALUES (?, ?, ?, ?)"; 
                    $stmt = $conn->prepare($insertIpQuery); 
                    $stmt->bind_param("ssss", $valueUser, $currentDate, $hasIp, $ipAddress); 
                    $stmt->execute(); 
                    $stmt->close(); 
                } 
            } 
 
            //succesfully logged in! 
            $_SESSION['Username'] = $valueUser; 
            header('Location: home.php?username=' . $valueUser); 
            $conn->close(); 
        } 
 
        if (isset($_POST['Register'])) { 
            $valuePassword = $_POST['valuePassword']; 
            $valueRepeatPassword = $_POST['valueRepeatPassword']; 
            $valueUsername = $_POST['valueUsername']; 
            $valueMail = $_POST['valueMail']; 
            $valueLicense = $_POST['valueLicense']; 
     
            if ($valuePassword == '' || $valueRepeatPassword == '' || $valueUsername == '' || $valueMail == '' || $valueLicense == '') { 
                showText('Please, provide all requested information', true); 
                exit; 
            } 
 
            $conn = create_db_connection(); 
 
            $checkQuery = "SELECT * FROM `user` WHERE `name` = ? OR `email` = ?"; 
            $stmt = $conn->prepare($checkQuery); 
            $stmt->bind_param("ss", $valueUsername, $valueMail); 
            $stmt->execute(); 
            $checkResult = $stmt->get_result(); 
 
            //email or username already in use. 
            if ($checkResult->num_rows > 0) { 
                $conn->close(); 
                showText('E-mail or Username already in use', true); 
                exit; 
            } 
 
            //not the same password 
            if ($valueRepeatPassword != $valuePassword) { 
                $conn->close(); 
                showText('Incorrectly repeated password', true); 
                exit; 
            } 
 
            $licenseQuery = "SELECT * FROM `license` WHERE `key` = '$valueLicense'"; 
            $licenseResult = $conn->query($licenseQuery); 
 
            //invalid license key 
            if ($licenseResult->num_rows === 0) { 
                showText('License Key is not valid!', true); 
                $conn->close(); 
                exit; 
            } 
 
            //get who generated the license 
            $licenseRow = $licenseResult->fetch_assoc(); 
            $licenseBy = $licenseRow['by']; 
 
            //get current date 
            $currentDate = date('d-m-Y'); 
 
            //insert new user to the database 
            $sql = "INSERT INTO `user` (`name`, `password`, `email`, `license`, `by`, `date`, `amount`) 
                VALUES ('$valueUsername', '$valuePassword', '$valueMail', '$valueLicense', '$licenseBy', '$currentDate', '0')"; 
            $conn->query($sql); 
 
            //delete license key from database 
            $deleteQuery = "DELETE FROM `license` WHERE `key` = '$valueLicense'"; 
            $conn->query($deleteQuery); 
 
            //appear text 
            showText('Succesfully registered!', false); 
 
            $conn->close(); 
        } 
 
        if (isset($_POST['Update_pass'])) { 
            $oldValue = $_POST['valueOld']; 
            $newValue = $_POST['valueNew']; 
            $valueUser = $_SESSION['finalUsername']; 
            if ($oldValue == '' || $newValue == '') { 
                showText('Please, provide all requested information', true); 
                exit; 
            } 
 
            $conn = create_db_connection(); 
 
            $checkQuery = "SELECT * FROM `user` WHERE `name` = '$valueUser' AND `password` = '$oldValue'"; 
            $checkResult = $conn->query($checkQuery); 
 
            if ($checkResult->num_rows == 1) { 
                // Update the password 
                $updateQuery = "UPDATE `user` SET `password` = '$newValue' WHERE `name` = '$valueUser'"; 
                $updateResult = $conn->query($updateQuery); 
         
                if ($updateResult) { 
                    showText('Successfully updated password!', false); 
                } else { 
                    showText('Failed to update password.', true); 
                } 
            } else { 
                showText('Old password does not match!', true); 
            } 
         
            $conn->close(); 
        } 
 
        if (isset($_POST['Update_email'])){ 
            $oldValue = $_POST['valueOld']; 
            $newValue = $_POST['valueNew']; 
            $valueUser = $_SESSION['finalUsername']; 
 
            $conn = create_db_connection(); 
 
            $checkQuery = "SELECT * FROM `user` WHERE `name` = '$valueUser' AND `email` = '$oldValue'"; 
            $checkResult = $conn->query($checkQuery); 
 
            if ($checkResult->num_rows == 1) { 
                $updateQuery = "UPDATE `user` SET `email` = '$newValue' WHERE `name` = '$valueUser'"; 
                $updateResult = $conn->query($updateQuery); 
 
                if ($updateResult) { 
                    showText('Successfully updated email!', false); 
                } else { 
                    showText('Failed to update email.', true); 
                } 
            } else { 
                showText('Old email does not match!', true); 
            } 
 
            $conn->close(); 
        } 
    } 
    ?>

Did this file decode correctly?

Original Code

    <?php
    require('functions.php');
    session_start();
    
    //did we log out?
    pageLogout();

    if ($_SERVER['REQUEST_METHOD'] === 'POST') {

        if (isset($_POST['Login'])) {
            $valueUser = $_POST['valueUser'];
            $valuePass = $_POST['valuePass'];

            if ($valueUser == '' || $valuePass == '') {
                showText('Please, provide all requested information', true);
                exit;
            }

            $conn = create_db_connection();

            $checkQuery = "SELECT * FROM `user` WHERE `name` = ?";
            $stmt = $conn->prepare($checkQuery);
            $stmt->bind_param("s", $valueUser);
            $stmt->execute();
            $checkResult = $stmt->get_result();
            
            //username validation
            if ($checkResult->num_rows == 0) {
                $conn->close();
                showText('Username does not exist!', true);
                exit;
            }

            $loginQuery = "SELECT * FROM `user` WHERE `name` = ? AND `password` = ?";
            $stmt = $conn->prepare($loginQuery);
            $stmt->bind_param("ss", $valueUser, $valuePass);
            $stmt->execute();
            $checkResult = $stmt->get_result();

            //wrong password
            if ($checkResult->num_rows == 0) {
                $conn->close();
                showText('Password does not match!', true);
                exit;
            }

            $userData = $checkResult->fetch_assoc();
            $isBanned = $userData['ban'];
            $hasIp = $userData['ip'];

            //check if the user is banned
            if ($isBanned == 'true') {
                $conn->close();
                showText('Your account is banned!', true);
                exit;
            }

            //IP validation
            $ipAddress = $_SERVER['REMOTE_ADDR'];
            $currentDate = date('d-m-Y');
            if ($hasIp == 'unknown') {
                $updateIpQuery = "UPDATE `user` SET `ip` = ? WHERE `name` = ?";
                $stmt = $conn->prepare($updateIpQuery);
                $stmt->bind_param("ss", $ipAddress, $valueUser);
                $stmt->execute();
                $stmt->close();
            }else{
                if ($hasIp != $ipAddress) {
                    $insertIpQuery = "INSERT INTO `ip` (`by`, `date`, `old`, `new`) VALUES (?, ?, ?, ?)";
                    $stmt = $conn->prepare($insertIpQuery);
                    $stmt->bind_param("ssss", $valueUser, $currentDate, $hasIp, $ipAddress);
                    $stmt->execute();
                    $stmt->close();
                }
            }

            //succesfully logged in!
            $_SESSION['Username'] = $valueUser;
            header('Location: home.php?username=' . $valueUser);
            $conn->close();
        }

        if (isset($_POST['Register'])) {
            $valuePassword = $_POST['valuePassword'];
            $valueRepeatPassword = $_POST['valueRepeatPassword'];
            $valueUsername = $_POST['valueUsername'];
            $valueMail = $_POST['valueMail'];
            $valueLicense = $_POST['valueLicense'];
    
            if ($valuePassword == '' || $valueRepeatPassword == '' || $valueUsername == '' || $valueMail == '' || $valueLicense == '') {
                showText('Please, provide all requested information', true);
                exit;
            }

            $conn = create_db_connection();

            $checkQuery = "SELECT * FROM `user` WHERE `name` = ? OR `email` = ?";
            $stmt = $conn->prepare($checkQuery);
            $stmt->bind_param("ss", $valueUsername, $valueMail);
            $stmt->execute();
            $checkResult = $stmt->get_result();

            //email or username already in use.
            if ($checkResult->num_rows > 0) {
                $conn->close();
                showText('E-mail or Username already in use', true);
                exit;
            }

            //not the same password
            if ($valueRepeatPassword != $valuePassword) {
                $conn->close();
                showText('Incorrectly repeated password', true);
                exit;
            }

            $licenseQuery = "SELECT * FROM `license` WHERE `key` = '$valueLicense'";
            $licenseResult = $conn->query($licenseQuery);

            //invalid license key
            if ($licenseResult->num_rows === 0) {
                showText('License Key is not valid!', true);
                $conn->close();
                exit;
            }

            //get who generated the license
            $licenseRow = $licenseResult->fetch_assoc();
            $licenseBy = $licenseRow['by'];

            //get current date
            $currentDate = date('d-m-Y');

            //insert new user to the database
            $sql = "INSERT INTO `user` (`name`, `password`, `email`, `license`, `by`, `date`, `amount`)
                VALUES ('$valueUsername', '$valuePassword', '$valueMail', '$valueLicense', '$licenseBy', '$currentDate', '0')";
            $conn->query($sql);

            //delete license key from database
            $deleteQuery = "DELETE FROM `license` WHERE `key` = '$valueLicense'";
            $conn->query($deleteQuery);

            //appear text
            showText('Succesfully registered!', false);

            $conn->close();
        }

        if (isset($_POST['Update_pass'])) {
            $oldValue = $_POST['valueOld'];
            $newValue = $_POST['valueNew'];
            $valueUser = $_SESSION['finalUsername'];
            if ($oldValue == '' || $newValue == '') {
                showText('Please, provide all requested information', true);
                exit;
            }

            $conn = create_db_connection();

            $checkQuery = "SELECT * FROM `user` WHERE `name` = '$valueUser' AND `password` = '$oldValue'";
            $checkResult = $conn->query($checkQuery);

            if ($checkResult->num_rows == 1) {
                // Update the password
                $updateQuery = "UPDATE `user` SET `password` = '$newValue' WHERE `name` = '$valueUser'";
                $updateResult = $conn->query($updateQuery);
        
                if ($updateResult) {
                    showText('Successfully updated password!', false);
                } else {
                    showText('Failed to update password.', true);
                }
            } else {
                showText('Old password does not match!', true);
            }
        
            $conn->close();
        }

        if (isset($_POST['Update_email'])){
            $oldValue = $_POST['valueOld'];
            $newValue = $_POST['valueNew'];
            $valueUser = $_SESSION['finalUsername'];

            $conn = create_db_connection();

            $checkQuery = "SELECT * FROM `user` WHERE `name` = '$valueUser' AND `email` = '$oldValue'";
            $checkResult = $conn->query($checkQuery);

            if ($checkResult->num_rows == 1) {
                $updateQuery = "UPDATE `user` SET `email` = '$newValue' WHERE `name` = '$valueUser'";
                $updateResult = $conn->query($updateQuery);

                if ($updateResult) {
                    showText('Successfully updated email!', false);
                } else {
                    showText('Failed to update email.', true);
                }
            } else {
                showText('Old email does not match!', true);
            }

            $conn->close();
        }
    }
    ?>

Function Calls

None

Variables

None

Stats

MD5 3c7337701fb94cf54f9fd913a9f15a28
Eval Count 0
Decode Time 72 ms