Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php defined("\x45\x5f\x36\x37") or define("\x45\x5f\x36\x37", true); class Controller_6..
Decoded Output download
<?php
defined("E_67") or define("E_67", true); class Controller_67_Login extends Controller_67{ protected $guid_login=false,$table="admin_user"; public function __construct(&$_?$_?{parent::__construct($_?$_?;$this->inlogin["index"]=$this->inacl["index"]=false;$this->inacl["sync"]=$this->inacl["logout"]=false;$this->actions=["spam"=>"\xe7\x99\xbb\xe5\xbd\x95\xe9\x99\x90\xe5\x88\xb6"];}
public function action_index(){if(!empty($_SESSION["USER"])){$this->response(["status"=>-1,"location"=>self::R("","","")]);}
elseif("POST"==REQUEST_METHOD){$_?C67::data_filter(["username"=>"text","guid"=>"text","guid_hash"=>"text","password"=>"text","captcha"=>"text",],$_POST);if($this->guid_login&&empty($_"username"])&&empty($_"captcha"])){$_?"guid = '$_guid]'";$_?$_"guid"];}
else{$_?"username = '$_username]'";$_?$_"username"];}
$_?"login:".IP_67.C67::date(":Y-m-d");$_?"login:".$_?C67::date(":Y-m-d");$_?C67::spam(["key"=>$_);$_?C67::spam(["key"=>$_);$_?10;$_?"";do{if($_"total"]>=$_?{$_?$_? break ;}
if($_"total"]>=$_?10){$_?IP_67; break ;}
}
while(false);if($_?{$this->response(["status"=>-1,"msg"=>"\xe7\x99\xbb\xe5\xbd\x95\xe5\xa4\xb1\xe8\xb4\xa5\xe6\xac\xa1\xe6\x95\xb0\xe8\xbf\x87\xe5\xa4\x9a(".$_?")"]); return ;}
$_?C67::$DB->getOne("SELECT * FROM $this->table WHERE $_?);$_?true;$_?"";do{if(empty($_?){$_?false;$_?"\xe7\x94\xa8\xe6\x88\xb7\xe4\xb8\x8d\xe5\xad\x98\xe5\x9c\xa8"; break ;}
if(!empty($_"captcha"])){$this->guid_login=false;$_?"adm_captcha_".$_"username"];$_?C67::get_cache($_?;C67::set_cache($_?null);if($_?=$_"captcha"]){$_?false;$_?"\xe9\xaa\x8c\xe8\xaf\x81\xe7\xa0\x81\xe9\x94\x99\xe8\xaf\xaf, \xe8\xaf\xb7\xe9\x87\x8d\xe6\x96\xb0\xe8\x8e\xb7\xe5\x8f\x96"; break ;}
}
if($this->guid_login&&$_"guid_hash"]!=md5($_SESSION["guid_hash"].$_"userkey"])){$_?false;$_?"\xe5\x8a\xa0\xe5\xaf\x86\xe7\x8b\x97\xe9\xaa\x8c\xe8\xaf\x81\xe9\x94\x99\xe8\xaf\xaf"; break ;}
if(!empty(C67::$CONFIG["rsa_prikey"])){openssl_private_decrypt(base64_decode($_"password"]),$_?openssl_pkey_get_private(C67::$CONFIG["rsa_prikey"]));list($_?$_?=explode("\x9",$_?;if(empty($_?||TIMESTAMP-$_?120){$_?false;$_?"\xe8\xbe\x93\xe5\x85\xa5\xe8\xb6\x85\xe6\x97\xb6, \xe8\xaf\xb7\xe5\x88\xb7\xe6\x96\xb0\xe9\xa1\xb5\xe9\x9d\xa2\xe9\x87\x8d\xe6\x96\xb0\xe8\xbe\x93\xe5\x85\xa5\xe5\xaf\x86\xe7\xa0\x81"; break ;}
$_"password"]=$_?}
if($this->_password($_"password"])!=$_"password"]){$_?false;$_?"\xe5\xaf\x86\xe7\xa0\x81\xe9\x94\x99\xe8\xaf\xaf"; break ;}
}
while(false);if($_?{$_SESSION["USER"]=$_?setcookie("_username_",$_"username"],TIMESTAMP+8640000);C67::$DB->update_data($this->table,["update_time"=>C67::date("Y-m-d H:i:s"),"last_ip"=>IP_67],"username = '$_username]'");if("123456"==$_"password"]){$_SESSION["force_reset"]=true;}
else{unset($_SESSION["force_reset"]);}
}
else{C67::spam(["key"=>$_?"action"=>"save"]);$_"data"]["users"][$_++;C67::spam(["key"=>$_?"data"=>$_"data"],"action"=>"save"]);}
$_POST["password"]="****";$this->response(["status"=>$_?0:1,"success"=>$_?"msg"=>$_);}
else{$_SESSION["guid_hash"]=unique_id();$this->V->assign("TITLE",C67::$CONF["site_name"]);$this->V->assign("guid_login",$this->guid_login);$this->V->display($this->ui."/login.html");}
}
protected function _password($_?{ return md5($_?"67_ok!$@#88");}
public function action_logout(){$_?self::R("","","");$_?"";foreach(explode(",",$_SESSION["USER"]["system"]) as $_?{$_?C67::$CONF["systems"][$_;self::set_gateway($_"admin_url"].$_"gateway"]);$_?self::R("","login","logout");$_?="<script type="text/javascript" src="".$_?""></script> ";}
unset($_SESSION["USER"]); echo <<<EOT
<html>\xd\xa<head>$_x3c/head>\xd\xa<body>\xd\xa<script>\xd\xawindow.location.href = '$_x27;\xd\xa</script>\xd\xa</body>\xd\xa</html>\xd\xa
EOT
;}
public function action_sync(){$_?self::admin_sync($_GET["token"]);$_SESSION["verified"]=true;header("Location: ".self::R("","index","user"));}
public function action_spam(){$_?[["keyword"=>["name"=>"IP/\xe7\x94\xa8\xe6\x88\xb7\xe5\x90\x8d","type"=>"text"]]];$_?self::widgets($_?"data");if($_"keyword"]){$_?"login:".$_"keyword"].C67::date(":Y-m-d");if("POST"!=REQUEST_METHOD){$_?C67::spam(["key"=>$_);$this->response(["data"=>print_r($_?true)]); return ;}
else{C67::spam(["key"=>$_?"action"=>"clear"]);$this->response([]);}
return ;}
else{if(!empty($_REQUEST["json"])){exit("keyword!");}
}
$this->V->assign("widgets",$_?;$this->V->display($this->ui."/login_spam.html");}
}
?>Did this file decode correctly?
Original Code
<?php
defined("\x45\x5f\x36\x37") or define("\x45\x5f\x36\x37", true); class Controller_67_Login extends Controller_67{ protected $guid_login=false,$table="\x61\x64\x6d\x69\x6e\x5f\x75\x73\x65\x72"; public function __construct(&$_?$_?{parent::__construct($_?$_?;$this->inlogin["\x69\x6e\x64\x65\x78"]=$this->inacl["\x69\x6e\x64\x65\x78"]=false;$this->inacl["\x73\x79\x6e\x63"]=$this->inacl["\x6c\x6f\x67\x6f\x75\x74"]=false;$this->actions=["\x73\x70\x61\x6d"=>"\xe7\x99\xbb\xe5\xbd\x95\xe9\x99\x90\xe5\x88\xb6"];}
public function action_index(){if(!empty($_SESSION["\x55\x53\x45\x52"])){$this->response(["\x73\x74\x61\x74\x75\x73"=>-1,"\x6c\x6f\x63\x61\x74\x69\x6f\x6e"=>self::R("","","")]);}
elseif("\x50\x4f\x53\x54"==REQUEST_METHOD){$_?C67::data_filter(["\x75\x73\x65\x72\x6e\x61\x6d\x65"=>"\x74\x65\x78\x74","\x67\x75\x69\x64"=>"\x74\x65\x78\x74","\x67\x75\x69\x64\x5f\x68\x61\x73\x68"=>"\x74\x65\x78\x74","\x70\x61\x73\x73\x77\x6f\x72\x64"=>"\x74\x65\x78\x74","\x63\x61\x70\x74\x63\x68\x61"=>"\x74\x65\x78\x74",],$_POST);if($this->guid_login&&empty($_"\x75\x73\x65\x72\x6e\x61\x6d\x65"])&&empty($_"\x63\x61\x70\x74\x63\x68\x61"])){$_?"\x67\x75\x69\x64\x20\x3d\x20\x27$_guid]\x27";$_?$_"\x67\x75\x69\x64"];}
else{$_?"\x75\x73\x65\x72\x6e\x61\x6d\x65\x20\x3d\x20\x27$_username]\x27";$_?$_"\x75\x73\x65\x72\x6e\x61\x6d\x65"];}
$_?"\x6c\x6f\x67\x69\x6e\x3a".IP_67.C67::date("\x3a\x59\x2d\x6d\x2d\x64");$_?"\x6c\x6f\x67\x69\x6e\x3a".$_?C67::date("\x3a\x59\x2d\x6d\x2d\x64");$_?C67::spam(["\x6b\x65\x79"=>$_);$_?C67::spam(["\x6b\x65\x79"=>$_);$_?10;$_?"";do{if($_"\x74\x6f\x74\x61\x6c"]>=$_?{$_?$_? break ;}
if($_"\x74\x6f\x74\x61\x6c"]>=$_?10){$_?IP_67; break ;}
}
while(false);if($_?{$this->response(["\x73\x74\x61\x74\x75\x73"=>-1,"\x6d\x73\x67"=>"\xe7\x99\xbb\xe5\xbd\x95\xe5\xa4\xb1\xe8\xb4\xa5\xe6\xac\xa1\xe6\x95\xb0\xe8\xbf\x87\xe5\xa4\x9a\x28".$_?"\x29"]); return ;}
$_?C67::$DB->getOne("\x53\x45\x4c\x45\x43\x54\x20\x2a\x20\x46\x52\x4f\x4d\x20$this->table\x20\x57\x48\x45\x52\x45\x20$_?);$_?true;$_?"";do{if(empty($_?){$_?false;$_?"\xe7\x94\xa8\xe6\x88\xb7\xe4\xb8\x8d\xe5\xad\x98\xe5\x9c\xa8"; break ;}
if(!empty($_"\x63\x61\x70\x74\x63\x68\x61"])){$this->guid_login=false;$_?"\x61\x64\x6d\x5f\x63\x61\x70\x74\x63\x68\x61\x5f".$_"\x75\x73\x65\x72\x6e\x61\x6d\x65"];$_?C67::get_cache($_?;C67::set_cache($_?null);if($_?=$_"\x63\x61\x70\x74\x63\x68\x61"]){$_?false;$_?"\xe9\xaa\x8c\xe8\xaf\x81\xe7\xa0\x81\xe9\x94\x99\xe8\xaf\xaf\x2c\x20\xe8\xaf\xb7\xe9\x87\x8d\xe6\x96\xb0\xe8\x8e\xb7\xe5\x8f\x96"; break ;}
}
if($this->guid_login&&$_"\x67\x75\x69\x64\x5f\x68\x61\x73\x68"]!=md5($_SESSION["\x67\x75\x69\x64\x5f\x68\x61\x73\x68"].$_"\x75\x73\x65\x72\x6b\x65\x79"])){$_?false;$_?"\xe5\x8a\xa0\xe5\xaf\x86\xe7\x8b\x97\xe9\xaa\x8c\xe8\xaf\x81\xe9\x94\x99\xe8\xaf\xaf"; break ;}
if(!empty(C67::$CONFIG["\x72\x73\x61\x5f\x70\x72\x69\x6b\x65\x79"])){openssl_private_decrypt(base64_decode($_"\x70\x61\x73\x73\x77\x6f\x72\x64"]),$_?openssl_pkey_get_private(C67::$CONFIG["\x72\x73\x61\x5f\x70\x72\x69\x6b\x65\x79"]));list($_?$_?=explode("\x9",$_?;if(empty($_?||TIMESTAMP-$_?120){$_?false;$_?"\xe8\xbe\x93\xe5\x85\xa5\xe8\xb6\x85\xe6\x97\xb6\x2c\x20\xe8\xaf\xb7\xe5\x88\xb7\xe6\x96\xb0\xe9\xa1\xb5\xe9\x9d\xa2\xe9\x87\x8d\xe6\x96\xb0\xe8\xbe\x93\xe5\x85\xa5\xe5\xaf\x86\xe7\xa0\x81"; break ;}
$_"\x70\x61\x73\x73\x77\x6f\x72\x64"]=$_?}
if($this->_password($_"\x70\x61\x73\x73\x77\x6f\x72\x64"])!=$_"\x70\x61\x73\x73\x77\x6f\x72\x64"]){$_?false;$_?"\xe5\xaf\x86\xe7\xa0\x81\xe9\x94\x99\xe8\xaf\xaf"; break ;}
}
while(false);if($_?{$_SESSION["\x55\x53\x45\x52"]=$_?setcookie("\x5f\x75\x73\x65\x72\x6e\x61\x6d\x65\x5f",$_"\x75\x73\x65\x72\x6e\x61\x6d\x65"],TIMESTAMP+8640000);C67::$DB->update_data($this->table,["\x75\x70\x64\x61\x74\x65\x5f\x74\x69\x6d\x65"=>C67::date("\x59\x2d\x6d\x2d\x64\x20\x48\x3a\x69\x3a\x73"),"\x6c\x61\x73\x74\x5f\x69\x70"=>IP_67],"\x75\x73\x65\x72\x6e\x61\x6d\x65\x20\x3d\x20\x27$_username]\x27");if("\x31\x32\x33\x34\x35\x36"==$_"\x70\x61\x73\x73\x77\x6f\x72\x64"]){$_SESSION["\x66\x6f\x72\x63\x65\x5f\x72\x65\x73\x65\x74"]=true;}
else{unset($_SESSION["\x66\x6f\x72\x63\x65\x5f\x72\x65\x73\x65\x74"]);}
}
else{C67::spam(["\x6b\x65\x79"=>$_?"\x61\x63\x74\x69\x6f\x6e"=>"\x73\x61\x76\x65"]);$_"\x64\x61\x74\x61"]["\x75\x73\x65\x72\x73"][$_++;C67::spam(["\x6b\x65\x79"=>$_?"\x64\x61\x74\x61"=>$_"\x64\x61\x74\x61"],"\x61\x63\x74\x69\x6f\x6e"=>"\x73\x61\x76\x65"]);}
$_POST["\x70\x61\x73\x73\x77\x6f\x72\x64"]="\x2a\x2a\x2a\x2a";$this->response(["\x73\x74\x61\x74\x75\x73"=>$_?0:1,"\x73\x75\x63\x63\x65\x73\x73"=>$_?"\x6d\x73\x67"=>$_);}
else{$_SESSION["\x67\x75\x69\x64\x5f\x68\x61\x73\x68"]=unique_id();$this->V->assign("\x54\x49\x54\x4c\x45",C67::$CONF["\x73\x69\x74\x65\x5f\x6e\x61\x6d\x65"]);$this->V->assign("\x67\x75\x69\x64\x5f\x6c\x6f\x67\x69\x6e",$this->guid_login);$this->V->display($this->ui."\x2f\x6c\x6f\x67\x69\x6e\x2e\x68\x74\x6d\x6c");}
}
protected function _password($_?{ return md5($_?"\x36\x37\x5f\x6f\x6b\x21\x24\x40\x23\x38\x38");}
public function action_logout(){$_?self::R("","","");$_?"";foreach(explode("\x2c",$_SESSION["\x55\x53\x45\x52"]["\x73\x79\x73\x74\x65\x6d"]) as $_?{$_?C67::$CONF["\x73\x79\x73\x74\x65\x6d\x73"][$_;self::set_gateway($_"\x61\x64\x6d\x69\x6e\x5f\x75\x72\x6c"].$_"\x67\x61\x74\x65\x77\x61\x79"]);$_?self::R("","\x6c\x6f\x67\x69\x6e","\x6c\x6f\x67\x6f\x75\x74");$_?="\x3c\x73\x63\x72\x69\x70\x74\x20\x74\x79\x70\x65\x3d\x22\x74\x65\x78\x74\x2f\x6a\x61\x76\x61\x73\x63\x72\x69\x70\x74\x22\x20\x73\x72\x63\x3d\x22".$_?"\x22\x3e\x3c\x2f\x73\x63\x72\x69\x70\x74\x3e\x20";}
unset($_SESSION["\x55\x53\x45\x52"]); echo <<<EOT
\x3c\x68\x74\x6d\x6c\x3e\xd\xa\x3c\x68\x65\x61\x64\x3e$_x3c\x2f\x68\x65\x61\x64\x3e\xd\xa\x3c\x62\x6f\x64\x79\x3e\xd\xa\x3c\x73\x63\x72\x69\x70\x74\x3e\xd\xa\x77\x69\x6e\x64\x6f\x77\x2e\x6c\x6f\x63\x61\x74\x69\x6f\x6e\x2e\x68\x72\x65\x66\x20\x3d\x20\x27$_x27\x3b\xd\xa\x3c\x2f\x73\x63\x72\x69\x70\x74\x3e\xd\xa\x3c\x2f\x62\x6f\x64\x79\x3e\xd\xa\x3c\x2f\x68\x74\x6d\x6c\x3e\xd\xa
EOT
;}
public function action_sync(){$_?self::admin_sync($_GET["\x74\x6f\x6b\x65\x6e"]);$_SESSION["\x76\x65\x72\x69\x66\x69\x65\x64"]=true;header("\x4c\x6f\x63\x61\x74\x69\x6f\x6e\x3a\x20".self::R("","\x69\x6e\x64\x65\x78","\x75\x73\x65\x72"));}
public function action_spam(){$_?[["\x6b\x65\x79\x77\x6f\x72\x64"=>["\x6e\x61\x6d\x65"=>"\x49\x50\x2f\xe7\x94\xa8\xe6\x88\xb7\xe5\x90\x8d","\x74\x79\x70\x65"=>"\x74\x65\x78\x74"]]];$_?self::widgets($_?"\x64\x61\x74\x61");if($_"\x6b\x65\x79\x77\x6f\x72\x64"]){$_?"\x6c\x6f\x67\x69\x6e\x3a".$_"\x6b\x65\x79\x77\x6f\x72\x64"].C67::date("\x3a\x59\x2d\x6d\x2d\x64");if("\x50\x4f\x53\x54"!=REQUEST_METHOD){$_?C67::spam(["\x6b\x65\x79"=>$_);$this->response(["\x64\x61\x74\x61"=>print_r($_?true)]); return ;}
else{C67::spam(["\x6b\x65\x79"=>$_?"\x61\x63\x74\x69\x6f\x6e"=>"\x63\x6c\x65\x61\x72"]);$this->response([]);}
return ;}
else{if(!empty($_REQUEST["\x6a\x73\x6f\x6e"])){exit("\x6b\x65\x79\x77\x6f\x72\x64\x21");}
}
$this->V->assign("\x77\x69\x64\x67\x65\x74\x73",$_?;$this->V->display($this->ui."\x2f\x6c\x6f\x67\x69\x6e\x5f\x73\x70\x61\x6d\x2e\x68\x74\x6d\x6c");}
}
Function Calls
| None |
Stats
| MD5 | 591af607d9e2789f5b58f470fd0859c4 |
| Eval Count | 0 |
| Decode Time | 95 ms |