Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

$this->check_validation=create_function("","\$\x76a\x6ci\x64\x20= \x67\x65t_\x6f\x70t..

Decoded Output download

\$valid = get_option("scrapes_valid");
		if (!\$valid)
			return false;
        global \$translates;
		\$json = wp_remote_post("http://scrapes.octolooks.com/validate/validate.php", array(
			"timeout" => 60,
			"body" => array(
				"submit" => 1,
				"purchase_code" => get_option("scrapes_code"),
				"domain" => get_option("scrapes_domain"),
				"request_domain" => get_site_url()
			)
		));
		Ol_Scrapes::write_log("Activation request: ");
		Ol_Scrapes::write_log(\$json["body"]);
		if (is_wp_error(\$json)) {
			return true;
		}
		
		\$json = json_decode(\$json["body"]);

		if (!\$json->error) {
			\$current_url = get_site_url();
			\$parsed = parse_url(\$current_url);
			extract(\$parsed);
			\$scrapes_domain = get_option("scrapes_domain");
			\$scrapes_parsed_host = parse_url(\$scrapes_domain);
			
			if (!in_array(\$host, array("localhost", "127.0.0.1", "::1"))) {
				if (!preg_match("/^[^.]*\.?" . preg_quote(\$scrapes_parsed_host["host"]) . "\$/i", \$host)) {
					delete_option("scrapes_valid");
					delete_option("scrapes_code");
					delete_option("scrapes_domain");
					return false;
				}
			}
			Ol_Scrapes::write_log("Activated for " . \$current_url);
			return true;
		} else {
			delete_option("scrapes_valid");
			delete_option("scrapes_code");
			delete_option("scrapes_domain");
			return false;
		}

Did this file decode correctly?

Original Code

     $this->check_validation=create_function("","\$\x76a\x6ci\x64\x20= \x67\x65t_\x6f\x70tion(\x22sc\x72\x61\x70es\x5f\x76\x61lid\")\x3b\n\t\t\x69\x66\x20(!\$val\x69\x64)\n\t\t\t\x72et\x75\x72n \x66\x61lse\x3b\n  \x20     \x67\x6c\x6f\x62\x61\x6c\x20\$tr\x61nslat\x65\x73;\n\t\t\$json\x20\x3d wp\x5f\x72e\x6dote\x5fp\x6fs\x74(\x22ht\x74p://\x73\x63ra\x70\x65s.\x6fc\x74oloo\x6bs.c\x6fm/\x76a\x6cid\x61te/valid\x61t\x65.p\x68\x70\x22,\x20ar\x72a\x79(\n\t\t\t\x22\x74\x69\x6d\x65ou\x74\" =\x3e\x20\x360,\n\t\t\t\"bod\x79\" =>\x20a\x72\x72\x61y(\n\t\t\t\t\x22sub\x6dit\" =\x3e \x31,\n\t\t\t\t\"purc\x68a\x73e\x5fc\x6f\x64\x65\x22 =\x3e get_o\x70\x74ion(\x22s\x63rape\x73_co\x64e\x22),\n\t\t\t\t\x22domain\x22 => \x67e\x74_\x6f\x70\x74ion(\"\x73c\x72\x61p\x65s_\x64\x6fm\x61in\x22),\n\t\t\t\t\"\x72\x65\x71\x75est\x5fd\x6f\x6d\x61\x69\x6e\"\x20\x3d\x3e\x20g\x65t_site_\x75rl()\n\t\t\t)\n\t\t))\x3b\n\t\tO\x6c\x5f\x53\x63\x72\x61p\x65s::\x77rit\x65_l\x6f\x67(\"A\x63t\x69\x76\x61\x74io\x6e \x72e\x71uest:\x20\x22);\n\t\tOl_\x53cr\x61\x70\x65s::wr\x69te_l\x6f\x67(\$\x6a\x73\x6f\x6e[\"body\x22]);\n\t\t\x69\x66\x20(i\x73_\x77p\x5fe\x72\x72\x6fr(\$js\x6f\x6e)) {\n\t\t\tre\x74urn \x74r\x75\x65;\n\t\t}\n\t\t\n\t\t\$\x6a\x73o\x6e\x20= \x6as\x6fn\x5f\x64eco\x64e(\$\x6a\x73o\x6e[\x22bo\x64y\x22])\x3b\n\n\t\t\x69\x66 (\x21\$js\x6fn-\x3e\x65\x72\x72or) {\n\t\t\t\$c\x75r\x72\x65\x6et_\x75\x72l \x3d\x20\x67\x65\x74_s\x69\x74e\x5fu\x72l()\x3b\n\t\t\t\$p\x61\x72s\x65d \x3d \x70ar\x73e\x5f\x75r\x6c(\$cu\x72\x72\x65\x6e\x74\x5f\x75\x72l);\n\t\t\text\x72\x61\x63t(\$\x70\x61r\x73e\x64);\n\t\t\t\$\x73crape\x73_dom\x61in \x3d \x67e\x74\x5f\x6fp\x74i\x6f\x6e(\x22scr\x61pe\x73_\x64oma\x69n\");\n\t\t\t\$s\x63\x72a\x70es_\x70ar\x73\x65d\x5fh\x6fs\x74\x20= p\x61\x72s\x65\x5f\x75\x72\x6c(\$sc\x72\x61pes\x5fdom\x61in);\n\t\t\t\n\t\t\t\x69\x66 (\x21in\x5f\x61\x72r\x61y(\$\x68ost, \x61rr\x61y(\"l\x6fc\x61\x6cho\x73\x74\x22, \"127\x2e0\x2e\x30\x2e1\",\x20\x22::\x31\"))) {\n\t\t\t\t\x69\x66\x20(\x21\x70r\x65g\x5fmatc\x68(\"/^[^\x2e]*\\.?\" \x2e\x20p\x72\x65g\x5fq\x75\x6fte(\$sc\x72\x61\x70\x65s_parsed_h\x6f\x73t[\x22\x68os\x74\"]) \x2e \"\$/i\x22, \$host))\x20{\n\t\t\t\t\t\x64\x65l\x65t\x65_\x6fpt\x69\x6fn(\x22\x73\x63\x72\x61\x70e\x73\x5fva\x6c\x69d\");\n\t\t\t\t\t\x64elete\x5f\x6fp\x74io\x6e(\x22scrap\x65\x73_co\x64e\x22);\n\t\t\t\t\tde\x6c\x65t\x65_\x6fp\x74i\x6fn(\"\x73cr\x61\x70es_d\x6fma\x69\x6e\")\x3b\n\t\t\t\t\tr\x65\x74u\x72\x6e f\x61\x6cse\x3b\n\t\t\t\t}\n\t\t\t}\n\t\t\t\x4fl\x5f\x53cr\x61pe\x73::\x77\x72i\x74e\x5fl\x6fg(\x22A\x63\x74\x69va\x74e\x64 \x66o\x72\x20\"\x20. \$c\x75rrent_url)\x3b\n\t\t\t\x72et\x75r\x6e true;\n\t\t}\x20\x65\x6c\x73e\x20{\n\t\t\td\x65le\x74e_\x6f\x70t\x69on(\"\x73\x63r\x61pes_\x76\x61\x6c\x69\x64\x22)\x3b\n\t\t\t\x64el\x65\x74e\x5f\x6f\x70\x74\x69on(\"\x73cr\x61\x70\x65s\x5f\x63\x6fd\x65\x22)\x3b\n\t\t\t\x64\x65l\x65te_\x6f\x70\x74\x69o\x6e(\x22\x73cr\x61pes\x5fdo\x6d\x61i\x6e\")\x3b\n\t\t\t\x72\x65\x74u\x72n \x66a\x6c\x73\x65;\n\t\t}");

Function Calls

create_function 1

Variables

None

Stats

MD5 818a1adbc853cc9aebfab639156a7293
Eval Count 1
Decode Time 73 ms