Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto TSfa0; XSooJ: require_once $incl . "\144\142\143\157\x6e\x66\x2e\160\150\160"..
Decoded Output download
<?php
goto TSfa0; XSooJ: require_once $incl . "dbconf.php"; goto BYgdk; TSfa0: require_once "version.php"; goto XSooJ; BYgdk: if (isset($_POST["userLogin"], $_POST["userPassw"])) { try { $userLogin = $_POST["userLogin"]; $userPassw = $_POST["userPassw"]; $message = ''; $query = "SELECT * FROM `r_users` WHERE agent_email = :a_email"; $statement = $pdo->prepare($query); $statement->bindValue(":a_email", $userLogin, PDO::PARAM_STR); $statement->execute(); $count = $statement->rowCount(); if ($count > 0) { $result = $statement->fetchAll(); foreach ($result as $row) { if ($row["agent_stat"] == "1") { if (password_verify($userPassw, $row["agent_passw"])) { session_start(); $_SESSION["agent_id"] = $row["id"]; $_SESSION["agent_email"] = $row["agent_email"]; $_SESSION["agent_name"] = $row["agent_name"]; $_SESSION["currentLanguage"] = $row["lang"]; if ($row["agent_type"] == "1") { $_SESSION["priv_name"] = "Admin"; } else { if ($row["agent_type"] == "2") { $_SESSION["priv_name"] = "Personal"; } } $_SESSION["right_insert"] = $row["right_insert"]; $_SESSION["right_update"] = $row["right_update"]; $_SESSION["right_delete"] = $row["right_delete"]; $_SESSION["right_finance"] = $row["right_finance"]; $_SESSION["right_reports"] = $row["right_reports"]; $stmt = $pdo->prepare("UPDATE `r_users` SET last_login = ? WHERE id = ?"); $stmt->execute(array(date("Y-m-d H:i:s"), $row["id"])); $message = "success"; } else { $message = "Wrong password"; } } else { $message = "Your account has been disabled"; } } } else { $message = "Wrong username"; } $data = array("status" => $message); } catch (Exception $e) { $data = array("status" => "failed"); } finally { echo json_encode($data); } } goto Rd2hj; Rd2hj: ?>
Did this file decode correctly?
Original Code
<?php
goto TSfa0; XSooJ: require_once $incl . "\144\142\143\157\x6e\x66\x2e\160\150\160"; goto BYgdk; TSfa0: require_once "\x76\x65\x72\163\x69\x6f\x6e\x2e\160\x68\x70"; goto XSooJ; BYgdk: if (isset($_POST["\165\x73\x65\x72\114\x6f\147\151\156"], $_POST["\165\163\145\x72\x50\141\x73\163\x77"])) { try { $userLogin = $_POST["\x75\163\145\162\114\x6f\147\x69\x6e"]; $userPassw = $_POST["\x75\163\145\x72\120\141\x73\163\x77"]; $message = ''; $query = "\123\105\114\x45\103\x54\40\52\x20\x46\x52\x4f\115\x20\x60\x72\x5f\165\x73\x65\x72\x73\x60\x20\x57\110\x45\122\105\x20\x61\x67\145\x6e\164\x5f\x65\155\x61\151\x6c\x20\75\x20\72\x61\x5f\x65\155\141\x69\x6c"; $statement = $pdo->prepare($query); $statement->bindValue("\x3a\x61\x5f\145\155\x61\151\154", $userLogin, PDO::PARAM_STR); $statement->execute(); $count = $statement->rowCount(); if ($count > 0) { $result = $statement->fetchAll(); foreach ($result as $row) { if ($row["\x61\147\x65\156\x74\137\163\x74\x61\164"] == "\x31") { if (password_verify($userPassw, $row["\141\x67\x65\x6e\164\137\160\141\x73\163\x77"])) { session_start(); $_SESSION["\x61\147\x65\x6e\164\137\151\x64"] = $row["\151\x64"]; $_SESSION["\x61\147\x65\x6e\x74\137\145\155\141\x69\x6c"] = $row["\x61\x67\145\x6e\164\x5f\145\155\141\x69\154"]; $_SESSION["\141\147\145\x6e\x74\x5f\156\x61\x6d\x65"] = $row["\141\147\145\156\x74\x5f\x6e\x61\155\x65"]; $_SESSION["\x63\x75\162\x72\x65\156\x74\x4c\x61\156\x67\165\x61\147\x65"] = $row["\154\141\156\147"]; if ($row["\141\x67\x65\156\164\x5f\x74\171\160\145"] == "\x31") { $_SESSION["\x70\162\151\166\x5f\156\x61\x6d\x65"] = "\101\x64\155\x69\156"; } else { if ($row["\141\x67\x65\156\164\137\x74\171\x70\x65"] == "\x32") { $_SESSION["\160\162\x69\x76\137\156\x61\155\145"] = "\x50\145\162\x73\157\x6e\141\154"; } } $_SESSION["\162\x69\x67\150\164\x5f\x69\x6e\163\x65\x72\x74"] = $row["\x72\151\147\150\x74\137\151\156\163\x65\x72\x74"]; $_SESSION["\x72\x69\x67\150\x74\x5f\165\160\144\141\x74\x65"] = $row["\x72\151\x67\150\164\x5f\x75\x70\144\x61\x74\145"]; $_SESSION["\162\151\147\150\164\137\144\x65\x6c\x65\164\x65"] = $row["\x72\151\x67\150\x74\137\x64\x65\x6c\145\164\x65"]; $_SESSION["\x72\151\147\x68\164\137\146\x69\x6e\x61\156\x63\x65"] = $row["\x72\x69\x67\x68\164\x5f\146\x69\x6e\141\x6e\143\145"]; $_SESSION["\x72\x69\x67\x68\164\137\162\x65\x70\x6f\162\164\x73"] = $row["\162\151\147\x68\x74\137\x72\145\160\157\162\x74\163"]; $stmt = $pdo->prepare("\x55\x50\104\101\124\x45\x20\140\x72\137\x75\163\x65\x72\x73\x60\40\123\x45\124\40\x6c\141\163\x74\x5f\x6c\x6f\147\151\x6e\40\x3d\40\x3f\x20\127\x48\105\x52\x45\40\x69\144\40\75\40\x3f"); $stmt->execute(array(date("\131\x2d\x6d\55\x64\40\x48\72\x69\72\x73"), $row["\151\144"])); $message = "\163\x75\x63\143\145\x73\163"; } else { $message = "\127\162\157\156\x67\40\160\141\x73\163\x77\157\x72\x64"; } } else { $message = "\x59\x6f\x75\x72\40\x61\x63\143\x6f\x75\156\x74\x20\150\141\163\40\x62\x65\145\x6e\40\x64\x69\x73\x61\x62\154\145\144"; } } } else { $message = "\127\162\157\156\x67\x20\x75\x73\145\x72\x6e\141\x6d\145"; } $data = array("\163\x74\141\164\x75\x73" => $message); } catch (Exception $e) { $data = array("\163\x74\141\164\165\163" => "\146\x61\x69\x6c\x65\144"); } finally { echo json_encode($data); } } goto Rd2hj; Rd2hj: ?>
Function Calls
None |
Stats
MD5 | b7435519d200e0ab8f81ebc6edabbb8f |
Eval Count | 0 |
Decode Time | 35 ms |