Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"\x47\x4c\x4f\x42\x41LS"}["b\x71\x77ko\x6e\x74\x65o\x6e\x73"] = "\x73oN\x67\x61\x7..
Decoded Output download
<?php ${"GLOBALS"}["bqwkonteons"] = "soNgayConLai";
${"GLOBALS"}["ouikmd"] = "NgayHienTai";
${"GLOBALS"}["rfbiij"] = "soNgayConLaitInt";
$hyqoadu = "config";
${"GLOBALS"}["yewwmhpqc"] = "arrayinfossl";
${"GLOBALS"}["dhophyjizt"] = "runDomainName";
${"GLOBALS"}["xollbmjenuqi"] = "flagdomain";
${"GLOBALS"}["mrccjiqkhgzq"] = "stringDomainName";
${"GLOBALS"}["xuxnegit"] = "arrayDomain";
${"GLOBALS"}["fcrmxwdb"] = "arrayInfossl";
${"GLOBALS"}["phxtxowjyok"] = "check_domain";
${"GLOBALS"}["lpisuoaoje"] = "cer_domainlist";
${"GLOBALS"}["gibuuebn"] = "certinfo";
${"GLOBALS"}["gulcjlkzz"] = "read";
${"GLOBALS"}["cdvsnqsceqkr"] = "cert";
${"GLOBALS"}["fqcqxye"] = "errno";
${"GLOBALS"}["tpllci"] = "get";
${"GLOBALS"}["utqwuxloc"] = "orignal_parse";
${"GLOBALS"}["fmaeptbpkls"] = "file";
${"GLOBALS"}["mvmquj"] = "domainName";
${"GLOBALS"}["tddufvd"] = "pageURL";
${"GLOBALS"}["pvcdwjyj"] = "arrayurl";
${"GLOBALS"}["ydhjsdxlfli"] = "url";
$gondzyqgiy = "Protocol";
${$gondzyqgiy} = getProtocol();
function redirectphp($url)
{
$ceydeoe = "url";
$urvnprdmqm = "url";
${$urvnprdmqm} = str_replace("https//", "", ${$ceydeoe});
${"GLOBALS"}["deswsfjbdrn"] = "url";
${${"GLOBALS"}["deswsfjbdrn"]} = str_replace("https/", "https://", ${${"GLOBALS"}["ydhjsdxlfli"]});
${${"GLOBALS"}["pvcdwjyj"]} = explode("://", ${${"GLOBALS"}["ydhjsdxlfli"]});
if (count(${${"GLOBALS"}["pvcdwjyj"]}) == 3) {
${"GLOBALS"}["jfjgevlgoqe"] = "arrayurl";
$yogyji = "url";
${$yogyji} = ${${"GLOBALS"}["pvcdwjyj"]}[0] . "://" . ${${"GLOBALS"}["jfjgevlgoqe"]}[2];
}
header("HTTP/1.1 301 Moved Permanently");
header("Location: $url");
}
function getCurrentPageURLSSL()
{
${${"GLOBALS"}["tddufvd"]} = "http";
if ($_SERVER["HTTPS"] == "on") {
${"GLOBALS"}["jomlglopkj"] = "pageURL";
${${"GLOBALS"}["jomlglopkj"]} .= "s";
}
$hevhdjlm = "pageURL";
${"GLOBALS"}["hpkcsnnixmzm"] = "pageURL";
${${"GLOBALS"}["tddufvd"]} .= "://";
${${"GLOBALS"}["hpkcsnnixmzm"]} .= $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"];
return ${$hevhdjlm};
}
function getProtocol()
{
${${"GLOBALS"}["tddufvd"]} = "http";
if ($_SERVER["HTTPS"] == "on") {
$fdcyleqc = "pageURL";
${$fdcyleqc} .= "s";
}
${${"GLOBALS"}["tddufvd"]} .= "://";
return ${${"GLOBALS"}["tddufvd"]};
}
function checkTimeSSL($domainName)
{
$drelvvhnb = "domainName";
$arvzxvny = "file";
if (!${$drelvvhnb}) {
return;
}
$tvkdbsf = "file";
$ikuhkhya = "file";
${$arvzxvny} = $_SERVER["DOCUMENT_ROOT"] . "/upload/" . parse_url(${${"GLOBALS"}["mvmquj"]})["host"] . ".ssl";
if (!file_exists(${$ikuhkhya}) || filemtime(${${"GLOBALS"}["fmaeptbpkls"]}) + 7 * 24 * 3600 < time()) {
$xrbjqscx = "read";
$njxivop = "url";
${"GLOBALS"}["cjlpty"] = "domainName";
$losbtsom = "errstr";
${"GLOBALS"}["usjexq"] = "orignal_parse";
$cugpuwu = "file";
${${"GLOBALS"}["ydhjsdxlfli"]} = ${${"GLOBALS"}["cjlpty"]};
$yuuupn = "orignal_parse";
${${"GLOBALS"}["utqwuxloc"]} = parse_url(${$njxivop}, PHP_URL_HOST);
${${"GLOBALS"}["tpllci"]} = stream_context_create(array("ssl" => array("capture_peer_cert" => TRUE)));
stream_context_set_option(${${"GLOBALS"}["tpllci"]}, "ssl", "verify_peer", false);
${$xrbjqscx} = stream_socket_client("ssl://" . ${$yuuupn} . ":443", ${${"GLOBALS"}["fqcqxye"]}, ${$losbtsom}, 30, STREAM_CLIENT_CONNECT, ${${"GLOBALS"}["tpllci"]});
${${"GLOBALS"}["cdvsnqsceqkr"]} = stream_context_get_params(${${"GLOBALS"}["gulcjlkzz"]});
${${"GLOBALS"}["gibuuebn"]} = openssl_x509_parse(${${"GLOBALS"}["cdvsnqsceqkr"]}["options"]["ssl"]["peer_certificate"]);
if (strpos(${${"GLOBALS"}["usjexq"]}, "www") !== false) {
${"GLOBALS"}["empunuccse"] = "orignal_parse";
${${"GLOBALS"}["empunuccse"]} = str_replace("www.", "", ${${"GLOBALS"}["utqwuxloc"]});
}
if (${${"GLOBALS"}["gibuuebn"]}["extensions"]["subjectAltName"] != "") {
${"GLOBALS"}["dbiongdpc"] = "certinfo";
$rrsxrmewbxkl = "orignal_parse";
$bbxmrzec = "cer_domainlist";
${${"GLOBALS"}["lpisuoaoje"]} = explode(",", ${${"GLOBALS"}["dbiongdpc"]}["extensions"]["subjectAltName"]);
${$bbxmrzec} = array_map("trim", ${${"GLOBALS"}["lpisuoaoje"]});
${${"GLOBALS"}["phxtxowjyok"]} = "DNS:" . ${$rrsxrmewbxkl};
if (!in_array(${${"GLOBALS"}["phxtxowjyok"]}, ${${"GLOBALS"}["lpisuoaoje"]})) {
${"GLOBALS"}["yoigjtwt"] = "arrayInfossl";
${${"GLOBALS"}["yoigjtwt"]} = array("songay" => 0, "version" => ${${"GLOBALS"}["gibuuebn"]}["version"]);
} else {
${"GLOBALS"}["gigzqurcc"] = "certinfo";
${${"GLOBALS"}["fcrmxwdb"]} = array("songay" => ${${"GLOBALS"}["gibuuebn"]}["validTo_time_t"], "version" => ${${"GLOBALS"}["gigzqurcc"]}["version"]);
}
} else {
$cvyxlbza = "arrayInfossl";
${$cvyxlbza} = array("songay" => ${${"GLOBALS"}["gibuuebn"]}["validTo_time_t"], "version" => ${${"GLOBALS"}["gibuuebn"]}["version"]);
}
file_put_contents(${$cugpuwu}, json_encode(${${"GLOBALS"}["fcrmxwdb"]}));
}
return json_decode(file_get_contents(${$tvkdbsf}), true);
}
function changeDomainssl($domainName)
{
$xyfslmdx = "arrayDomain";
${$xyfslmdx} = explode("://", ${${"GLOBALS"}["mvmquj"]});
if (${${"GLOBALS"}["xuxnegit"]}[0] == "http") {
${"GLOBALS"}["ciytfeqzbwg"] = "domainName";
${${"GLOBALS"}["mrccjiqkhgzq"]} = str_replace("http:", "https:", ${${"GLOBALS"}["ciytfeqzbwg"]});
${"GLOBALS"}["ghodkgw"] = "stringDomainName";
redirectphp(${${"GLOBALS"}["ghodkgw"]});
}
}
function CheckChangSLL($runDomainName, $arrayConfig)
{
$xbmdypwvc = "soNgayConLaitInt";
${"GLOBALS"}["jrnvjhfwjy"] = "timeSLL";
${"GLOBALS"}["benpymg"] = "arrayinfossl";
${"GLOBALS"}["cwfvpjfvdrx"] = "flagdomain";
${"GLOBALS"}["kbskuqmdbi"] = "DomainRun";
${"GLOBALS"}["wcebtq"] = "timeSLL";
$quqztos = "NgayHienTai";
$hfkwdyphwyj = "version";
$ebfzxbnv = "DomainRun";
${${"GLOBALS"}["cwfvpjfvdrx"]} = 1;
${$ebfzxbnv} = $_SERVER["SERVER_NAME"];
$mrcnmcj = "arrayConfig";
$ltepxkite = "soNgayConLai";
if (in_array(${${"GLOBALS"}["kbskuqmdbi"]}, ${$mrcnmcj})) {
${${"GLOBALS"}["xollbmjenuqi"]} = 1;
} else {
${"GLOBALS"}["amrvnfi"] = "flagdomain";
$ivndqxoyy = "runDomainName";
${${"GLOBALS"}["amrvnfi"]} = 0;
${"GLOBALS"}["kqbgwebp"] = "arrayConfig";
${$ivndqxoyy} = "http://" . ${${"GLOBALS"}["kqbgwebp"]}["0"] . $_SERVER["REQUEST_URI"];
}
${${"GLOBALS"}["benpymg"]} = checkTimeSSL(${${"GLOBALS"}["dhophyjizt"]});
${${"GLOBALS"}["jrnvjhfwjy"]} = ${${"GLOBALS"}["yewwmhpqc"]}["songay"];
${$hfkwdyphwyj} = ${${"GLOBALS"}["yewwmhpqc"]}["version"];
${$quqztos} = date("d-m-Y", time());
${"GLOBALS"}["yzsdkbgovg"] = "version";
${${"GLOBALS"}["rfbiij"]} = ${${"GLOBALS"}["wcebtq"]} - strtotime(${${"GLOBALS"}["ouikmd"]});
${$ltepxkite} = (int)(${$xbmdypwvc} / 24 / 60 / 60);
${${"GLOBALS"}["xuxnegit"]} = explode("://", ${${"GLOBALS"}["dhophyjizt"]});
if (${${"GLOBALS"}["bqwkonteons"]} >= 1 && ${${"GLOBALS"}["yzsdkbgovg"]} > 0) {
changeDomainssl(${${"GLOBALS"}["dhophyjizt"]});
} else {
if (${${"GLOBALS"}["xollbmjenuqi"]} == 0) {
} else {
$pgadniix = "arrayDomain";
if (${$pgadniix}[0] == "https") {
$wnbygpsev = "runDomainName";
$kqildovntrdv = "stringDomainName";
$erncege = "stringDomainName";
${$kqildovntrdv} = str_replace("https:", "http:", ${$wnbygpsev});
redirectphp(${$erncege});
}
}
}
}
${${"GLOBALS"}["dhophyjizt"]} = getCurrentPageURLSSL();
CheckChangSLL(${${"GLOBALS"}["dhophyjizt"]}, ${$hyqoadu}["arrayDomainSSL"]);
?>
Did this file decode correctly?
Original Code
<?php ${"\x47\x4c\x4f\x42\x41LS"}["b\x71\x77ko\x6e\x74\x65o\x6e\x73"] = "\x73oN\x67\x61\x79\x43\x6fn\x4ca\x69";
${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6f\x75i\x6b\x6d\x64"] = "\x4e\x67ayH\x69\x65n\x54\x61\x69";
${"\x47LO\x42A\x4c\x53"}["rf\x62\x69i\x6a"] = "\x73oN\x67a\x79\x43\x6fn\x4c\x61itI\x6e\x74";
$hyqoadu = "\x63o\x6e\x66\x69\x67";
${"\x47LO\x42AL\x53"}["y\x65\x77wmhp\x71\x63"] = "\x61r\x72\x61\x79\x69\x6e\x66\x6f\x73\x73\x6c";
${"\x47\x4c\x4f\x42\x41L\x53"}["\x64\x68\x6f\x70\x68\x79\x6a\x69z\x74"] = "\x72\x75\x6e\x44\x6f\x6d\x61\x69\x6eNa\x6d\x65";
${"\x47\x4c\x4f\x42\x41L\x53"}["x\x6f\x6c\x6c\x62\x6dje\x6eu\x71i"] = "\x66l\x61g\x64\x6fm\x61\x69\x6e";
${"\x47L\x4f\x42\x41\x4c\x53"}["mr\x63\x63\x6ai\x71\x6b\x68\x67\x7aq"] = "\x73\x74\x72\x69\x6e\x67D\x6fma\x69n\x4eam\x65";
${"GL\x4f\x42\x41\x4cS"}["\x78\x75\x78\x6eeg\x69\x74"] = "\x61r\x72\x61\x79Doma\x69\x6e";
${"\x47\x4c\x4f\x42ALS"}["f\x63\x72\x6d\x78w\x64\x62"] = "\x61\x72\x72a\x79\x49\x6e\x66\x6fs\x73\x6c";
${"\x47\x4c\x4f\x42\x41\x4cS"}["\x70\x68x\x74x\x6f\x77\x6ayok"] = "\x63\x68\x65\x63k\x5f\x64\x6f\x6d\x61in";
${"\x47\x4c\x4f\x42\x41L\x53"}["\x6cp\x69\x73uo\x61oj\x65"] = "\x63er\x5fd\x6fm\x61\x69\x6e\x6ci\x73\x74";
${"G\x4c\x4f\x42A\x4cS"}["\x67\x69\x62\x75\x75e\x62\x6e"] = "\x63\x65\x72tin\x66\x6f";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x67\x75l\x63j\x6c\x6b\x7a\x7a"] = "r\x65\x61\x64";
${"G\x4cO\x42\x41L\x53"}["c\x64\x76s\x6e\x71\x73\x63\x65q\x6b\x72"] = "\x63\x65\x72t";
${"\x47\x4c\x4fB\x41LS"}["\x66\x71\x63\x71\x78\x79e"] = "\x65\x72\x72no";
${"\x47\x4cOB\x41\x4cS"}["\x74\x70\x6c\x6cc\x69"] = "\x67e\x74";
${"\x47\x4cO\x42\x41L\x53"}["\x75\x74\x71\x77\x75\x78l\x6fc"] = "ori\x67\x6ea\x6c_p\x61\x72\x73\x65";
${"\x47\x4cOB\x41\x4c\x53"}["fm\x61e\x70tbpk\x6cs"] = "\x66\x69\x6c\x65";
${"\x47\x4c\x4fB\x41\x4c\x53"}["mvm\x71\x75\x6a"] = "dom\x61\x69n\x4e\x61\x6de";
${"\x47\x4c\x4fB\x41\x4c\x53"}["\x74\x64\x64\x75\x66\x76\x64"] = "\x70\x61\x67\x65UR\x4c";
${"\x47\x4cO\x42A\x4c\x53"}["\x70\x76cdw\x6ay\x6a"] = "\x61\x72\x72ay\x75\x72\x6c";
${"\x47\x4c\x4f\x42\x41LS"}["\x79\x64\x68jsd\x78\x6c\x66l\x69"] = "\x75r\x6c";
$gondzyqgiy = "\x50\x72\x6fto\x63\x6f\x6c";
${$gondzyqgiy} = getProtocol();
function redirectphp($url)
{
$ceydeoe = "u\x72l";
$urvnprdmqm = "\x75r\x6c";
${$urvnprdmqm} = str_replace("h\x74tp\x73//", "", ${$ceydeoe});
${"\x47L\x4f\x42\x41\x4cS"}["d\x65\x73\x77\x73\x66\x6a\x62d\x72\x6e"] = "url";
${${"\x47\x4c\x4f\x42A\x4cS"}["\x64\x65s\x77\x73\x66\x6ab\x64r\x6e"]} = str_replace("\x68t\x74ps/", "ht\x74\x70s://", ${${"GL\x4fB\x41\x4cS"}["yd\x68j\x73d\x78\x6cf\x6c\x69"]});
${${"\x47\x4c\x4fB\x41L\x53"}["\x70\x76\x63\x64\x77\x6ayj"]} = explode("://", ${${"G\x4c\x4f\x42\x41LS"}["y\x64\x68js\x64\x78l\x66\x6c\x69"]});
if (count(${${"\x47L\x4f\x42\x41LS"}["\x70v\x63d\x77\x6a\x79j"]}) == 3) {
${"\x47L\x4f\x42AL\x53"}["\x6a\x66\x6a\x67\x65\x76\x6cgoq\x65"] = "\x61\x72\x72\x61\x79ur\x6c";
$yogyji = "\x75\x72\x6c";
${$yogyji} = ${${"\x47\x4c\x4f\x42\x41L\x53"}["\x70\x76c\x64\x77\x6ay\x6a"]}[0] . "://" . ${${"\x47\x4c\x4f\x42\x41LS"}["\x6af\x6age\x76\x6c\x67o\x71\x65"]}[2];
}
header("HTTP/1\x2e\x31 3\x30\x31\x20M\x6f\x76ed \x50er\x6d\x61n\x65\x6etly");
header("\x4coc\x61t\x69o\x6e: $url");
}
function getCurrentPageURLSSL()
{
${${"\x47L\x4f\x42AL\x53"}["\x74\x64\x64u\x66\x76\x64"]} = "h\x74\x74\x70";
if ($_SERVER["\x48\x54\x54P\x53"] == "\x6f\x6e") {
${"\x47\x4cO\x42\x41\x4c\x53"}["\x6ao\x6d\x6c\x67l\x6fp\x6bj"] = "\x70\x61\x67eU\x52\x4c";
${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6a\x6f\x6d\x6c\x67l\x6fp\x6bj"]} .= "s";
}
$hevhdjlm = "\x70\x61\x67\x65\x55RL";
${"\x47L\x4f\x42\x41\x4cS"}["\x68p\x6bc\x73\x6e\x6ei\x78\x6d\x7a\x6d"] = "p\x61\x67\x65UR\x4c";
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x74\x64d\x75f\x76\x64"]} .= "://";
${${"\x47\x4cOBAL\x53"}["\x68\x70\x6b\x63\x73\x6e\x6e\x69\x78mzm"]} .= $_SERVER["S\x45RVER_\x4eAM\x45"] . $_SERVER["\x52EQUES\x54\x5f\x55RI"];
return ${$hevhdjlm};
}
function getProtocol()
{
${${"\x47\x4c\x4f\x42\x41LS"}["\x74\x64\x64\x75f\x76\x64"]} = "\x68tt\x70";
if ($_SERVER["HT\x54\x50S"] == "\x6f\x6e") {
$fdcyleqc = "\x70a\x67e\x55\x52\x4c";
${$fdcyleqc} .= "s";
}
${${"\x47L\x4fB\x41L\x53"}["t\x64du\x66\x76\x64"]} .= "://";
return ${${"G\x4c\x4fBA\x4c\x53"}["\x74dd\x75\x66v\x64"]};
}
function checkTimeSSL($domainName)
{
$drelvvhnb = "d\x6f\x6d\x61in\x4e\x61m\x65";
$arvzxvny = "f\x69l\x65";
if (!${$drelvvhnb}) {
return;
}
$tvkdbsf = "f\x69\x6c\x65";
$ikuhkhya = "\x66\x69\x6c\x65";
${$arvzxvny} = $_SERVER["\x44O\x43UME\x4eT_\x52O\x4f\x54"] . "/\x75plo\x61d/" . parse_url(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["mv\x6d\x71\x75\x6a"]})["\x68\x6f\x73t"] . "\x2e\x73s\x6c";
if (!file_exists(${$ikuhkhya}) || filemtime(${${"\x47\x4c\x4f\x42A\x4cS"}["f\x6d\x61e\x70\x74\x62\x70\x6bls"]}) + 7 * 24 * 3600 < time()) {
$xrbjqscx = "\x72e\x61d";
$njxivop = "\x75\x72\x6c";
${"\x47\x4cO\x42AL\x53"}["cjl\x70ty"] = "\x64om\x61\x69nN\x61\x6de";
$losbtsom = "\x65\x72\x72\x73t\x72";
${"G\x4c\x4fBALS"}["\x75\x73\x6a\x65\x78\x71"] = "\x6f\x72\x69\x67n\x61\x6c\x5f\x70\x61r\x73\x65";
$cugpuwu = "\x66i\x6ce";
${${"G\x4c\x4f\x42\x41\x4c\x53"}["ydhj\x73\x64x\x6cfli"]} = ${${"\x47\x4cOB\x41\x4c\x53"}["\x63jl\x70\x74y"]};
$yuuupn = "o\x72\x69\x67n\x61\x6c\x5f\x70ars\x65";
${${"GL\x4fB\x41\x4c\x53"}["u\x74\x71w\x75x\x6c\x6f\x63"]} = parse_url(${$njxivop}, PHP_URL_HOST);
${${"GLOB\x41\x4cS"}["\x74\x70l\x6c\x63i"]} = stream_context_create(array("s\x73l" => array("captur\x65_pe\x65r_\x63\x65\x72\x74" => TRUE)));
stream_context_set_option(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x74\x70ll\x63\x69"]}, "\x73\x73\x6c", "verify_\x70\x65e\x72", false);
${$xrbjqscx} = stream_socket_client("\x73sl://" . ${$yuuupn} . ":4\x343", ${${"GLO\x42A\x4c\x53"}["fq\x63q\x78\x79\x65"]}, ${$losbtsom}, 30, STREAM_CLIENT_CONNECT, ${${"\x47\x4cOB\x41\x4cS"}["\x74\x70\x6cl\x63i"]});
${${"\x47\x4cOBALS"}["\x63\x64\x76\x73\x6e\x71\x73\x63\x65\x71\x6br"]} = stream_context_get_params(${${"GL\x4f\x42A\x4c\x53"}["\x67\x75lcjl\x6bz\x7a"]});
${${"\x47L\x4f\x42ALS"}["\x67\x69\x62\x75ue\x62\x6e"]} = openssl_x509_parse(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x63\x64\x76sn\x71s\x63\x65\x71\x6br"]}["opti\x6fn\x73"]["ssl"]["peer_c\x65\x72t\x69\x66i\x63a\x74\x65"]);
if (strpos(${${"\x47L\x4fBAL\x53"}["\x75sjex\x71"]}, "w\x77w") !== false) {
${"G\x4c\x4f\x42A\x4cS"}["emp\x75\x6eu\x63\x63\x73e"] = "o\x72\x69\x67\x6e\x61\x6c\x5f\x70\x61\x72\x73e";
${${"G\x4c\x4f\x42\x41\x4cS"}["\x65\x6d\x70\x75\x6e\x75cc\x73\x65"]} = str_replace("\x77ww\x2e", "", ${${"G\x4c\x4fB\x41\x4cS"}["\x75\x74\x71\x77\x75xl\x6f\x63"]});
}
if (${${"\x47\x4cO\x42\x41\x4c\x53"}["gi\x62uu\x65\x62\x6e"]}["\x65xte\x6e\x73ion\x73"]["\x73\x75\x62\x6ae\x63t\x41\x6c\x74\x4ea\x6d\x65"] != "") {
${"\x47LO\x42A\x4c\x53"}["d\x62\x69ong\x64p\x63"] = "\x63\x65r\x74i\x6ef\x6f";
$rrsxrmewbxkl = "o\x72\x69\x67\x6ea\x6c_\x70\x61\x72\x73\x65";
$bbxmrzec = "\x63\x65\x72_\x64\x6f\x6dai\x6el\x69\x73t";
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["lp\x69suoaoj\x65"]} = explode(",", ${${"GL\x4fB\x41\x4c\x53"}["\x64\x62\x69o\x6e\x67d\x70c"]}["\x65xt\x65\x6e\x73io\x6es"]["sub\x6a\x65ct\x41\x6ctNam\x65"]);
${$bbxmrzec} = array_map("tri\x6d", ${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6cp\x69\x73uo\x61\x6f\x6a\x65"]});
${${"\x47\x4cO\x42\x41\x4c\x53"}["\x70\x68\x78\x74x\x6f\x77\x6ayo\x6b"]} = "DN\x53:" . ${$rrsxrmewbxkl};
if (!in_array(${${"\x47\x4c\x4f\x42A\x4c\x53"}["p\x68\x78\x74x\x6f\x77\x6a\x79\x6f\x6b"]}, ${${"GL\x4f\x42\x41\x4cS"}["\x6c\x70isu\x6f\x61\x6fje"]})) {
${"\x47\x4cOBA\x4cS"}["\x79\x6f\x69gj\x74\x77\x74"] = "\x61\x72\x72\x61yIn\x66\x6f\x73\x73\x6c";
${${"\x47L\x4f\x42A\x4cS"}["\x79\x6f\x69\x67j\x74\x77\x74"]} = array("\x73o\x6e\x67ay" => 0, "v\x65r\x73i\x6f\x6e" => ${${"\x47\x4cO\x42A\x4c\x53"}["\x67ib\x75\x75e\x62\x6e"]}["\x76\x65\x72s\x69\x6f\x6e"]);
} else {
${"\x47\x4cOB\x41\x4cS"}["\x67\x69\x67zq\x75\x72\x63\x63"] = "c\x65r\x74\x69n\x66\x6f";
${${"\x47L\x4f\x42A\x4cS"}["\x66\x63\x72m\x78\x77d\x62"]} = array("s\x6f\x6egay" => ${${"\x47\x4c\x4fB\x41\x4c\x53"}["g\x69\x62\x75\x75\x65b\x6e"]}["val\x69dTo\x5ftim\x65_t"], "v\x65r\x73\x69\x6fn" => ${${"GLO\x42\x41\x4c\x53"}["g\x69\x67\x7a\x71u\x72\x63\x63"]}["\x76ersion"]);
}
} else {
$cvyxlbza = "\x61\x72ra\x79I\x6e\x66o\x73s\x6c";
${$cvyxlbza} = array("\x73\x6fng\x61\x79" => ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x67i\x62\x75\x75\x65bn"]}["\x76alidTo\x5ft\x69m\x65\x5f\x74"], "versio\x6e" => ${${"GL\x4f\x42A\x4c\x53"}["\x67i\x62\x75\x75eb\x6e"]}["\x76er\x73\x69\x6fn"]);
}
file_put_contents(${$cugpuwu}, json_encode(${${"G\x4c\x4f\x42\x41LS"}["\x66c\x72\x6d\x78\x77d\x62"]}));
}
return json_decode(file_get_contents(${$tvkdbsf}), true);
}
function changeDomainssl($domainName)
{
$xyfslmdx = "\x61\x72\x72a\x79\x44o\x6dain";
${$xyfslmdx} = explode("://", ${${"GL\x4f\x42\x41LS"}["\x6d\x76\x6d\x71\x75j"]});
if (${${"\x47\x4cO\x42\x41L\x53"}["\x78\x75\x78\x6e\x65\x67\x69\x74"]}[0] == "h\x74tp") {
${"\x47\x4c\x4fB\x41L\x53"}["\x63\x69\x79\x74\x66\x65\x71z\x62\x77\x67"] = "\x64o\x6d\x61\x69nName";
${${"G\x4c\x4fBA\x4cS"}["\x6d\x72\x63\x63\x6a\x69\x71\x6bh\x67\x7a\x71"]} = str_replace("http:", "\x68ttps:", ${${"\x47L\x4f\x42\x41\x4cS"}["ci\x79\x74\x66\x65q\x7a\x62\x77g"]});
${"\x47\x4c\x4f\x42A\x4c\x53"}["g\x68o\x64k\x67\x77"] = "\x73t\x72in\x67Do\x6d\x61\x69\x6eNa\x6d\x65";
redirectphp(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x67\x68od\x6b\x67w"]});
}
}
function CheckChangSLL($runDomainName, $arrayConfig)
{
$xbmdypwvc = "\x73\x6f\x4e\x67ay\x43\x6fn\x4c\x61\x69\x74\x49\x6et";
${"\x47\x4c\x4fB\x41LS"}["j\x72nv\x6a\x68\x66w\x6ay"] = "\x74i\x6d\x65\x53\x4cL";
${"\x47L\x4f\x42\x41\x4cS"}["b\x65n\x70y\x6d\x67"] = "\x61\x72\x72\x61\x79\x69\x6efos\x73\x6c";
${"G\x4cO\x42\x41L\x53"}["\x63wfv\x70\x6a\x66\x76dr\x78"] = "f\x6c\x61\x67do\x6d\x61\x69n";
${"\x47LO\x42AL\x53"}["\x6bb\x73ku\x71\x6ddb\x69"] = "\x44\x6fma\x69n\x52\x75n";
${"\x47LO\x42A\x4c\x53"}["\x77\x63\x65b\x74\x71"] = "ti\x6deS\x4c\x4c";
$quqztos = "\x4eg\x61\x79\x48\x69e\x6e\x54\x61\x69";
$hfkwdyphwyj = "ve\x72\x73\x69o\x6e";
$ebfzxbnv = "\x44\x6f\x6da\x69n\x52\x75n";
${${"G\x4c\x4fB\x41\x4c\x53"}["\x63wf\x76\x70\x6a\x66v\x64rx"]} = 1;
${$ebfzxbnv} = $_SERVER["SE\x52\x56\x45R_NAM\x45"];
$mrcnmcj = "\x61r\x72a\x79\x43\x6f\x6e\x66\x69g";
$ltepxkite = "s\x6f\x4e\x67\x61\x79\x43\x6f\x6e\x4c\x61i";
if (in_array(${${"GLO\x42A\x4c\x53"}["kb\x73\x6b\x75q\x6dd\x62\x69"]}, ${$mrcnmcj})) {
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x78\x6f\x6c\x6cbm\x6a\x65nu\x71\x69"]} = 1;
} else {
${"\x47\x4c\x4f\x42\x41\x4cS"}["\x61m\x72v\x6e\x66\x69"] = "f\x6ca\x67d\x6f\x6d\x61\x69\x6e";
$ivndqxoyy = "\x72u\x6e\x44o\x6d\x61\x69n\x4ea\x6de";
${${"\x47\x4c\x4fB\x41\x4cS"}["\x61\x6d\x72\x76\x6e\x66\x69"]} = 0;
${"\x47\x4c\x4fB\x41L\x53"}["k\x71\x62\x67w\x65\x62\x70"] = "\x61\x72r\x61y\x43o\x6e\x66ig";
${$ivndqxoyy} = "\x68t\x74\x70://" . ${${"\x47\x4c\x4fB\x41\x4cS"}["kqb\x67\x77\x65b\x70"]}["\x30"] . $_SERVER["\x52E\x51UES\x54\x5fURI"];
}
${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x62\x65np\x79\x6dg"]} = checkTimeSSL(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x64\x68\x6f\x70\x68\x79\x6a\x69\x7a\x74"]});
${${"\x47L\x4f\x42AL\x53"}["\x6a\x72\x6e\x76\x6a\x68\x66w\x6a\x79"]} = ${${"\x47\x4cO\x42AL\x53"}["\x79\x65\x77\x77m\x68\x70q\x63"]}["songa\x79"];
${$hfkwdyphwyj} = ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x79\x65\x77\x77\x6d\x68\x70q\x63"]}["v\x65rs\x69\x6fn"];
${$quqztos} = date("\x64-m-Y", time());
${"\x47L\x4f\x42\x41L\x53"}["yzs\x64\x6bb\x67\x6fv\x67"] = "v\x65\x72s\x69\x6f\x6e";
${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x72\x66b\x69i\x6a"]} = ${${"G\x4cOB\x41\x4c\x53"}["w\x63e\x62\x74q"]} - strtotime(${${"\x47\x4cO\x42\x41L\x53"}["\x6f\x75\x69\x6bm\x64"]});
${$ltepxkite} = (int)(${$xbmdypwvc} / 24 / 60 / 60);
${${"G\x4c\x4f\x42A\x4c\x53"}["\x78u\x78ne\x67\x69\x74"]} = explode("://", ${${"\x47\x4c\x4f\x42\x41L\x53"}["d\x68\x6f\x70\x68\x79\x6a\x69z\x74"]});
if (${${"G\x4cO\x42\x41\x4c\x53"}["\x62\x71\x77k\x6fn\x74e\x6fns"]} >= 1 && ${${"G\x4c\x4fB\x41L\x53"}["\x79z\x73\x64k\x62go\x76\x67"]} > 0) {
changeDomainssl(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x64\x68\x6fp\x68y\x6a\x69\x7at"]});
} else {
if (${${"G\x4cOB\x41\x4cS"}["\x78o\x6cl\x62\x6d\x6a\x65\x6e\x75q\x69"]} == 0) {
} else {
$pgadniix = "\x61\x72\x72\x61y\x44\x6fm\x61\x69n";
if (${$pgadniix}[0] == "\x68\x74\x74p\x73") {
$wnbygpsev = "\x72un\x44o\x6d\x61\x69\x6eNa\x6de";
$kqildovntrdv = "\x73\x74r\x69\x6eg\x44omai\x6e\x4e\x61\x6d\x65";
$erncege = "\x73t\x72\x69\x6e\x67\x44\x6fm\x61\x69\x6eN\x61\x6d\x65";
${$kqildovntrdv} = str_replace("ht\x74ps:", "h\x74tp:", ${$wnbygpsev});
redirectphp(${$erncege});
}
}
}
}
${${"\x47\x4c\x4f\x42\x41L\x53"}["\x64\x68\x6fp\x68\x79j\x69\x7a\x74"]} = getCurrentPageURLSSL();
CheckChangSLL(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x64\x68\x6fphy\x6ai\x7a\x74"]}, ${$hyqoadu}["ar\x72\x61y\x44\x6fm\x61in\x53S\x4c"]);
Function Calls
None |
Stats
MD5 | 748368812f0373146470d53327e6a5cd |
Eval Count | 0 |
Decode Time | 72 ms |