Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto dN037; AYwu1: function isJson($string) { json_decode($string); re..

Decoded Output download

<?php 
goto dN037; 
AYwu1: 
function isJson($string) 
{ 
    json_decode($string); 
    return json_last_error() === JSON_ERROR_NONE; 
} 
goto uci1_; 
SFp2h: 
$query = "SELECT * FROM wallets WHERE user_id = ?"; 
goto Kd_0X; 
s5bB0: 
$saldousuario = $wallet["balance_withdrawal"]; 
goto ZwzMI; 
WeR6c: 
$userId = $tokenOpen["id"] ?? null; 
goto IcUJG; 
wfPne: 
$wallet = $result->fetch_assoc(); 
goto uknGB; 
i7Jf_: 
$stmt->execute(); 
goto ehnnV; 
ehnnV: 
$result = $stmt->get_result(); 
goto wfPne; 
PIT1f: 
if (!isset($_POST["atk"])) { 
    die(json_encode(array("error" => "Token no fornecido."))); 
} 
goto Klosd; 
dN037: 
if ($_SERVER["REQUEST_METHOD"] !== "POST") { 
    die(json_encode(array("error" => "Acesso invlido."))); 
} 
goto tDK5F; 
Klosd: 
function decodeToken($texto) 
{ 
    $retorno = ''; 
    $saidaSubs = ''; 
    $busca0 = array("8", "e", "9", "f", "b", "d", "h", "g", "j", "i", "m", "o", "k", "z", "l", "w", "4", "s", "r", "u", "t", "x", "v", "p", "6", "n", "7", "2", "1", "5", "q", "3", "y", "0", "c", "a"); 
    $subti0 = array("a", "b", "c", "d", "e", "f", "g", "h", "i", "j", "k", "l", "m", "n", "o", "p", "q", "r", "s", "t", "u", "v", "x", "w", "y", "z", "0", "1", "2", "3", "4", "5", "6", "7", "8", "9"); 
    for ($i = 0; $i < strlen($texto); $i++) { 
        $ti = array_search($texto[$i], $busca0); 
        if ($busca0[$ti] == $texto[$i]) { 
            $saidaSubs .= $subti0[$ti]; 
        } else { 
            $saidaSubs .= $texto[$i]; 
        } 
    } 
    $retorno = base64_decode($saidaSubs); 
    return $retorno; 
} 
goto AYwu1; 
YkVzz: 
$tokenOpen = decTokenImproved($_POST["atk"]); 
goto WeR6c; 
IcUJG: 
if (!$userId) { 
    die(json_encode(array("error" => "ID de usurio invlido."))); 
} 
goto SFp2h; 
tDK5F: 
include "../../../../db.php"; 
goto PIT1f; 
Kd_0X: 
$stmt = $conn->prepare($query); 
goto xbnDT; 
uci1_: 
function decTokenImproved($token) 
{ 
    $decoded = decodeToken($token); 
    if (!isJson($decoded)) { 
        return array("status" => false, "message" => "Invalid token"); 
    } 
    $data = json_decode($decoded, true); 
    $data["status"] = true; 
    return $data; 
} 
goto YkVzz; 
uknGB: 
if (!$wallet) { 
    die(json_encode(array("error" => "Carteira no encontrada."))); 
} 
goto s5bB0; 
ADSrH: 
$stmt->bind_param("s", $userId); 
goto i7Jf_; 
xbnDT: 
if ($stmt === false) { 
    die(json_encode(array("error" => "Falha ao preparar a consulta."))); 
} 
goto ADSrH; 
ZwzMI: 
echo $dadosjson = "{"dt":{"fb":null,"wt":{"mw":5.0,"bw":20.0,"mgw":35.0,"smgw":50.0},"maxwm":null,"cs":[0.08,0.8,3.0,10.0],"ml":[1,2,3,4,5,6,7,8,9,10],"mxl":5,"bl":" . $saldousuario . ","inwe":false,"iuwe":false,"ls":{"si":{"wc":0,"ist":false,"itw":true,"fws":0,"wp":null,"orl":[6,6,6,5,7,7,7,7,4],"lw":null,"irs":false,"gwt":-1,"fb":null,"ctw":0.0,"pmt":null,"cwc":0,"fstc":null,"pcwc":0,"rwsp":null,"hashr":null,"ml":1,"cs":0.08,"rl":[6,6,6,5,7,7,7,7,4],"sid":"1765454400018590720","psid":"1765454400018590720","st":1,"nst":1,"pf":1,"aw":0.00,"wid":0,"wt":"C","wk":"0_C","wbn":null,"wfg":null,"blb":0.50,"blab":" . $saldousuario . ","bl":" . $saldousuario . ","tb":0.40,"tbb":0.40,"tw":0.00,"np":-0.40,"ocr":null,"mr":null,"ge":[1,11]}},"cc":"BRL"},"err":null}"; ?>

Did this file decode correctly?

Original Code

<?php
goto dN037;
AYwu1:
function isJson($string)
{
    json_decode($string);
    return json_last_error() === JSON_ERROR_NONE;
}
goto uci1_;
SFp2h:
$query = "\x53\105\x4c\105\103\124\x20\52\40\106\122\x4f\x4d\40\x77\x61\154\154\x65\x74\163\x20\x57\x48\x45\x52\x45\x20\x75\163\x65\162\x5f\151\x64\40\x3d\40\x3f";
goto Kd_0X;
s5bB0:
$saldousuario = $wallet["\x62\x61\x6c\141\156\143\145\x5f\x77\x69\x74\150\144\162\141\167\141\154"];
goto ZwzMI;
WeR6c:
$userId = $tokenOpen["\x69\144"] ?? null;
goto IcUJG;
wfPne:
$wallet = $result->fetch_assoc();
goto uknGB;
i7Jf_:
$stmt->execute();
goto ehnnV;
ehnnV:
$result = $stmt->get_result();
goto wfPne;
PIT1f:
if (!isset($_POST["\x61\164\x6b"])) {
    die(json_encode(array("\x65\162\162\157\162" => "\x54\x6f\x6b\145\x6e\x20\x6e\xc3\xa3\x6f\x20\146\x6f\x72\156\x65\x63\151\x64\157\x2e")));
}
goto Klosd;
dN037:
if ($_SERVER["\122\105\121\x55\105\123\124\x5f\115\x45\x54\x48\x4f\x44"] !== "\x50\117\123\124") {
    die(json_encode(array("\x65\162\x72\x6f\162" => "\101\143\145\163\163\x6f\40\x69\x6e\x76\303\xa1\154\x69\x64\157\x2e")));
}
goto tDK5F;
Klosd:
function decodeToken($texto)
{
    $retorno = '';
    $saidaSubs = '';
    $busca0 = array("\x38", "\x65", "\71", "\x66", "\x62", "\144", "\x68", "\147", "\x6a", "\x69", "\x6d", "\157", "\153", "\x7a", "\154", "\167", "\x34", "\163", "\x72", "\165", "\x74", "\170", "\166", "\x70", "\x36", "\156", "\67", "\x32", "\61", "\65", "\x71", "\x33", "\x79", "\x30", "\x63", "\141");
    $subti0 = array("\141", "\x62", "\143", "\144", "\145", "\146", "\x67", "\x68", "\151", "\152", "\153", "\x6c", "\x6d", "\156", "\157", "\x70", "\161", "\162", "\x73", "\164", "\x75", "\166", "\x78", "\167", "\171", "\172", "\60", "\61", "\62", "\x33", "\x34", "\x35", "\x36", "\x37", "\70", "\71");
    for ($i = 0; $i < strlen($texto); $i++) {
        $ti = array_search($texto[$i], $busca0);
        if ($busca0[$ti] == $texto[$i]) {
            $saidaSubs .= $subti0[$ti];
        } else {
            $saidaSubs .= $texto[$i];
        }
    }
    $retorno = base64_decode($saidaSubs);
    return $retorno;
}
goto AYwu1;
YkVzz:
$tokenOpen = decTokenImproved($_POST["\141\x74\153"]);
goto WeR6c;
IcUJG:
if (!$userId) {
    die(json_encode(array("\x65\162\x72\157\162" => "\x49\x44\x20\x64\x65\x20\x75\163\165\xc3\xa1\162\151\x6f\x20\x69\156\x76\303\241\x6c\x69\144\x6f\56")));
}
goto SFp2h;
tDK5F:
include "\x2e\x2e\x2f\x2e\x2e\x2f\x2e\56\57\x2e\x2e\57\x64\x62\x2e\x70\150\x70";
goto PIT1f;
Kd_0X:
$stmt = $conn->prepare($query);
goto xbnDT;
uci1_:
function decTokenImproved($token)
{
    $decoded = decodeToken($token);
    if (!isJson($decoded)) {
        return array("\x73\164\141\164\x75\163" => false, "\x6d\145\163\x73\x61\147\145" => "\111\156\166\141\x6c\x69\144\x20\x74\157\153\145\156");
    }
    $data = json_decode($decoded, true);
    $data["\x73\164\x61\x74\165\x73"] = true;
    return $data;
}
goto YkVzz;
uknGB:
if (!$wallet) {
    die(json_encode(array("\x65\162\x72\x6f\162" => "\103\x61\x72\x74\x65\x69\162\141\40\x6e\303\xa3\157\40\145\x6e\143\x6f\x6e\x74\x72\x61\x64\x61\56")));
}
goto s5bB0;
ADSrH:
$stmt->bind_param("\163", $userId);
goto i7Jf_;
xbnDT:
if ($stmt === false) {
    die(json_encode(array("\x65\x72\x72\157\162" => "\x46\141\154\x68\x61\x20\141\x6f\x20\x70\162\x65\x70\x61\x72\141\162\x20\x61\40\143\x6f\156\x73\165\x6c\164\x61\56")));
}
goto ADSrH;
ZwzMI:
echo $dadosjson = "\x7b\x22\144\164\42\72\x7b\42\x66\142\42\72\156\165\154\154\54\x22\x77\x74\42\x3a\173\42\x6d\167\42\72\65\56\x30\x2c\42\x62\167\42\x3a\62\60\x2e\x30\54\x22\155\147\x77\x22\72\63\65\56\60\x2c\42\x73\x6d\147\x77\x22\x3a\x35\x30\56\x30\175\54\x22\x6d\141\x78\167\x6d\42\72\x6e\165\x6c\x6c\x2c\x22\x63\x73\x22\x3a\x5b\60\56\x30\x38\x2c\x30\56\x38\x2c\63\56\x30\54\x31\60\x2e\60\x5d\x2c\x22\155\154\x22\72\133\61\x2c\x32\x2c\x33\x2c\64\x2c\65\54\66\x2c\x37\x2c\70\54\x39\54\x31\60\x5d\x2c\42\155\170\154\42\x3a\65\54\x22\142\x6c\x22\x3a" . $saldousuario . "\54\42\x69\x6e\x77\145\42\x3a\146\x61\x6c\x73\145\x2c\x22\x69\x75\167\x65\42\x3a\x66\x61\x6c\x73\145\x2c\x22\x6c\x73\42\72\x7b\x22\163\x69\42\72\173\x22\167\x63\42\x3a\x30\54\42\x69\163\164\x22\x3a\146\x61\154\x73\x65\x2c\42\x69\164\167\42\72\x74\162\x75\x65\54\42\x66\167\x73\42\72\x30\54\x22\167\x70\42\x3a\156\x75\154\x6c\54\42\157\162\x6c\42\72\133\x36\54\x36\x2c\66\54\65\x2c\x37\54\67\54\67\54\67\54\x34\x5d\54\42\x6c\167\42\x3a\x6e\165\x6c\154\x2c\x22\151\x72\163\42\x3a\146\x61\154\163\x65\54\42\x67\167\x74\42\72\x2d\x31\54\42\x66\x62\42\x3a\x6e\165\154\x6c\54\x22\x63\x74\167\x22\72\x30\56\60\54\42\160\155\x74\x22\x3a\x6e\x75\154\x6c\x2c\x22\143\x77\x63\x22\x3a\60\54\x22\x66\x73\164\x63\42\x3a\156\165\x6c\x6c\x2c\x22\x70\x63\167\143\42\x3a\60\54\42\x72\167\x73\x70\42\x3a\156\165\x6c\x6c\x2c\42\150\x61\163\x68\x72\x22\x3a\156\165\x6c\154\x2c\x22\155\x6c\42\72\61\54\x22\x63\x73\x22\72\60\x2e\x30\70\x2c\x22\162\154\x22\x3a\133\x36\x2c\66\54\x36\54\65\54\x37\x2c\67\x2c\x37\x2c\67\54\x34\x5d\x2c\42\x73\x69\144\42\72\x22\61\67\x36\65\x34\65\64\64\60\60\x30\x31\70\65\x39\x30\x37\62\60\42\54\x22\160\x73\x69\x64\42\x3a\x22\61\x37\x36\65\x34\x35\64\64\x30\x30\x30\x31\x38\x35\71\x30\x37\62\x30\42\x2c\x22\163\164\42\x3a\x31\x2c\42\156\163\x74\x22\x3a\61\x2c\x22\160\146\42\x3a\x31\x2c\x22\141\167\x22\72\x30\x2e\x30\x30\x2c\42\167\151\x64\42\x3a\x30\54\x22\x77\x74\x22\72\42\103\x22\x2c\42\167\153\x22\x3a\42\60\x5f\103\42\54\x22\167\142\x6e\x22\x3a\156\165\x6c\x6c\54\x22\167\146\147\x22\72\156\x75\154\x6c\x2c\x22\142\x6c\142\x22\72\x30\x2e\65\x30\x2c\x22\142\154\141\x62\42\x3a" . $saldousuario . "\54\42\x62\x6c\x22\x3a" . $saldousuario . "\54\42\164\x62\42\x3a\60\x2e\64\x30\x2c\x22\164\x62\142\42\x3a\60\x2e\x34\60\54\x22\x74\167\x22\72\x30\56\60\x30\x2c\42\156\160\x22\x3a\55\x30\x2e\x34\60\x2c\42\x6f\x63\162\42\x3a\x6e\x75\x6c\x6c\54\x22\155\162\x22\x3a\156\165\154\x6c\x2c\x22\x67\145\x22\72\133\61\x2c\61\x31\x5d\175\x7d\54\42\x63\x63\x22\72\x22\102\x52\114\42\x7d\x2c\42\145\162\x72\42\x3a\x6e\x75\154\x6c\x7d";

Function Calls

None

Variables

None

Stats

MD5 5bc90b8e42883e6cf9163ffec384a718
Eval Count 0
Decode Time 55 ms