Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php eval(base64_decode('CiBnb3RvIEh1SjVUOyBONlVUOTogJGZpbGVfbmFtZSA9ICRfUkVRVUVTVFsiXHg3..
Decoded Output download
goto HuJ5T; N6UT9: $file_name = $_REQUEST["r"]; goto wt64G; HuJ5T: function readfile_chunked($filename, $retbytes = true) { $chunksize = 1 * (1024 * 1024); $buffer = ''; $cnt = 0; $handle = fopen($filename, "rb"); if ($handle === false) { return false; } while (!feof($handle)) { $buffer = fread($handle, $chunksize); echo $buffer; ob_flush(); flush(); if ($retbytes) { $cnt += strlen($buffer); } } $status = fclose($handle); if ($retbytes && $status) { return $cnt; } return $status; } goto N6UT9; wt64G: $file_url = $_SERVER["DOCUMENT_ROOT"] . "/uploads/" . $file_name; goto y1QFh; y1QFh: if (file_exists($file_url)) { $f_name = substr($file_name, 41); header("Content-Type: " . mime_content_type($file_url)); header("Cache-Control: No-Cache"); header("Content-Length: " . filesize($file_url)); header("Content-disposition: attachment; filename="" . $f_name . """); readfile_chunked($file_url); } else { die("Invalid path."); } goto FumXR; FumXR:
Did this file decode correctly?
Original Code
<?php eval(base64_decode('CiBnb3RvIEh1SjVUOyBONlVUOTogJGZpbGVfbmFtZSA9ICRfUkVRVUVTVFsiXHg3MiJdOyBnb3RvIHd0NjRHOyBIdUo1VDogZnVuY3Rpb24gcmVhZGZpbGVfY2h1bmtlZCgkZmlsZW5hbWUsICRyZXRieXRlcyA9IHRydWUpIHsgJGNodW5rc2l6ZSA9IDEgKiAoMTAyNCAqIDEwMjQpOyAkYnVmZmVyID0gJyc7ICRjbnQgPSAwOyAkaGFuZGxlID0gZm9wZW4oJGZpbGVuYW1lLCAiXHg3Mlx4NjIiKTsgaWYgKCRoYW5kbGUgPT09IGZhbHNlKSB7IHJldHVybiBmYWxzZTsgfSB3aGlsZSAoIWZlb2YoJGhhbmRsZSkpIHsgJGJ1ZmZlciA9IGZyZWFkKCRoYW5kbGUsICRjaHVua3NpemUpOyBlY2hvICRidWZmZXI7IG9iX2ZsdXNoKCk7IGZsdXNoKCk7IGlmICgkcmV0Ynl0ZXMpIHsgJGNudCArPSBzdHJsZW4oJGJ1ZmZlcik7IH0gfSAkc3RhdHVzID0gZmNsb3NlKCRoYW5kbGUpOyBpZiAoJHJldGJ5dGVzICYmICRzdGF0dXMpIHsgcmV0dXJuICRjbnQ7IH0gcmV0dXJuICRzdGF0dXM7IH0gZ290byBONlVUOTsgd3Q2NEc6ICRmaWxlX3VybCA9ICRfU0VSVkVSWyJceDQ0XDExN1x4NDNcMTI1XHg0ZFwxMDVceDRlXHg1NFx4NWZceDUyXHg0ZlwxMTdceDU0Il0gLiAiXHgyZlwxNjVceDcwXDE1NFwxNTdceDYxXHg2NFx4NzNceDJmIiAuICRmaWxlX25hbWU7IGdvdG8geTFRRmg7IHkxUUZoOiBpZiAoZmlsZV9leGlzdHMoJGZpbGVfdXJsKSkgeyAkZl9uYW1lID0gc3Vic3RyKCRmaWxlX25hbWUsIDQxKTsgaGVhZGVyKCJceDQzXDE1N1x4NmVcMTY0XDE0NVwxNTZcMTY0XHgyZFwxMjRceDc5XDE2MFx4NjVcNzJceDIwIiAuIG1pbWVfY29udGVudF90eXBlKCRmaWxlX3VybCkpOyBoZWFkZXIoIlwxMDNcMTQxXHg2M1x4NjhceDY1XDU1XHg0M1wxNTdcMTU2XDE2NFx4NzJcMTU3XHg2Y1w3Mlw0MFwxMTZceDZmXDU1XDEwM1wxNDFcMTQzXHg2OFwxNDUiKTsgaGVhZGVyKCJceDQzXDE1N1wxNTZcMTY0XHg2NVwxNTZceDc0XDU1XDExNFx4NjVcMTU2XDE0N1wxNjRceDY4XHgzYVw0MCIgLiBmaWxlc2l6ZSgkZmlsZV91cmwpKTsgaGVhZGVyKCJcMTAzXHg2Zlx4NmVceDc0XHg2NVx4NmVcMTY0XHgyZFx4NjRcMTUxXDE2M1wxNjBcMTU3XDE2M1x4NjlceDc0XHg2OVwxNTdcMTU2XDcyXHgyMFwxNDFcMTY0XDE2NFwxNDFcMTQzXDE1MFx4NmRceDY1XHg2ZVx4NzRcNzNcNDBcMTQ2XDE1MVwxNTRcMTQ1XDE1Nlx4NjFcMTU1XDE0NVx4M2RcNDIiIC4gJGZfbmFtZSAuICJceDIyIik7IHJlYWRmaWxlX2NodW5rZWQoJGZpbGVfdXJsKTsgfSBlbHNlIHsgZGllKCJcMTExXHg2ZVx4NzZceDYxXDE1NFx4NjlcMTQ0XHgyMFwxNjBceDYxXHg3NFx4NjhcNTYiKTsgfSBnb3RvIEZ1bVhSOyBGdW1YUjog')); ?>
Function Calls
base64_decode | 1 |
Stats
MD5 | d1b8e8d84d0a90d26ceaff0c9c04d158 |
Eval Count | 1 |
Decode Time | 86 ms |