Online PHP and Javascript Decoder decode hidden script to uncover its real functionality



$load_addons = "CS_Poke";
require('../../../system/config_addons.php');
redisUpdateAddons('CS_Poke');

if ($_POST) {
    global $mysqli, $data;
    $id = (int)$_POST["id"];
    $message = trim($_POST["message"]);

    if ($_POST['action'] == 'send') {
        $query = "INSERT INTO boom_poke_messages (hunter, target, message, show_modal) 
                  VALUES ({$data['user_id']}, {$id}, '{$mysqli->real_escape_string($message)}', 1)";
        $mysqli->query($query);
		 boomNotify('poke_me', array(
            'hunter' => $data['user_id'],
            'target' => $id,
            'source' => 'CS_Poke',
            'reason' => 'You have been poked!',
            'icon' => 'poke',
            'data' => 'Poked by ' . $data['user_name']
        ));
        echo 1;
    }

    if ($_POST['action'] == 'accept') {
        $query = "DELETE FROM boom_poke_messages WHERE target = '{$data['user_id']}' AND hunter = '$id'";
        $mysqli->query($query);
        echo 1;
    }
}



© 2023 Quttera Ltd. All rights reserved.