Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

<?php
 goto gdBLV; yHXro: $db_user = "\151\x66\60\x5f\x33\x38\65\x30\x32\62\x34\x32"; goto v75e8; mbnwO: if ($result->num_rows > 0) { echo json_encode(array("\163\x75\143\143\145\163\x73" => false, "\x6d\145\163\x73\141\x67\145" => "\xd0\222\xd1\213\x20\xd1\x83\xd0\xb6\320\xb5\40\xd0\276\321\x81\xd1\x82\xd0\xb0\320\262\320\273\xd1\x8f\320\xbb\320\xb8\40\xd0\xbe\321\202\320\267\xd1\x8b\320\262\x20\xd1\x81\x20\xd1\215\321\202\xd0\xbe\xd0\263\xd0\276\40\xd1\203\321\x81\xd1\202\xd1\x80\xd0\xbe\320\271\321\201\321\x82\320\262\320\xb0\x2e")); die; } goto mVZyq; G10Sd: $message = $conn->real_escape_string(trim($_POST["\155\145\x73\163\x61\147\145"] ?? '')); goto NGcxR; NGcxR: if (empty($name) || empty($message) || $rating < 1 || $rating > 5) { echo json_encode(array("\x73\165\143\x63\145\163\163" => false, "\155\145\x73\163\x61\147\x65" => "\xd0\x9f\xd0\276\xd0\xb6\xd0\xb0\320\273\321\x83\320\271\xd1\201\321\202\xd0\260\x2c\x20\xd0\267\xd0\xb0\320\277\xd0\276\xd0\xbb\xd0\275\320\270\321\202\xd0\265\40\xd0\262\xd1\x81\xd0\xb5\40\xd0\xbe\320\261\xd1\217\xd0\xb7\xd0\260\xd1\x82\320\xb5\xd0\xbb\xd1\x8c\320\xbd\xd1\x8b\320\xb5\40\320\277\xd0\276\320\273\321\x8f\40\320\xbf\xd1\x80\xd0\xb0\320\262\xd0\xb8\320\xbb\xd1\214\320\275\320\276\56")); die; } goto BlGVk; RoVpg: $db_host = "\x73\161\154\x31\60\x39\x2e\151\156\x66\151\x6e\x69\164\x79\x66\162\145\x65\x2e\x63\157\x6d"; goto yHXro; mVZyq: $insert_query = "\x49\116\x53\x45\x52\124\40\111\116\x54\x4f\x20\146\145\145\x64\142\141\143\x6b\x73\x20\x28\x6e\x61\155\x65\x2c\40\145\x6d\141\x69\x6c\54\x20\162\141\x74\x69\156\x67\x2c\40\x6d\x65\163\x73\x61\x67\x65\x2c\40\151\x70\x5f\141\x64\x64\162\x65\163\x73\51\x20\12\x20\x20\40\x20\40\40\40\x20\40\x20\x20\40\x20\x20\x20\x20\x20\126\101\x4c\125\105\123\40\x28\x27{$name}\47\x2c\x20\x27{$email}\47\x2c\x20{$rating}\x2c\40\47{$message}\x27\54\x20\47{$user_ip}\x27\x29"; goto Ab8Rm; SOv8S: $rating = intval($_POST["\x72\x61\164\x69\156\147"] ?? 0); goto G10Sd; BlGVk: $user_ip = $_SERVER["\122\105\x4d\x4f\x54\105\x5f\101\104\104\122"]; goto r96I7; dJp4D: $conn->close(); goto Ab9pP; a3UaV: $email = $conn->real_escape_string(trim($_POST["\145\155\x61\x69\x6c"] ?? '')); goto SOv8S; uKgiS: $db_name = "\x69\146\60\x5f\63\70\x35\60\x32\x32\x34\62\x5f\146\x65\145\144\142\141\x63\x6b\x73\137\x64\x62"; goto d517j; v75e8: $db_pass = "\x4e\110\x37\x78\172\x50\61\x5a\111\65\116\161"; goto uKgiS; Ab8Rm: if ($conn->query($insert_query) === TRUE) { $discord_message = array("\143\157\x6e\x74\145\156\x74" => "\360\237\223\xa2\x20\xd0\x9d\xd0\276\xd0\262\xd1\x8b\xd0\xb9\40\320\xbe\321\202\320\267\xd1\x8b\320\xb2\41", "\x65\155\x62\x65\x64\x73" => array(array("\164\151\x74\x6c\x65" => "\xd0\x9e\xd1\202\xd0\267\xd1\213\xd0\262\x20\320\xbe\321\x82\40{$name}", "\x64\x65\x73\143\x72\x69\x70\164\x69\x6f\156" => $message, "\x63\x6f\x6c\x6f\162" => 16738740, "\x66\x69\x65\154\x64\x73" => array(array("\156\141\x6d\x65" => "\xd0\236\321\x86\xd0\xb5\xd0\275\xd0\xba\320\xb0", "\x76\141\154\x75\145" => str_repeat("\342\255\x90", $rating) . "\x20\x28{$rating}\57\x35\x29", "\151\x6e\154\151\156\x65" => true), array("\156\141\x6d\145" => "\105\155\x61\x69\154", "\166\141\x6c\165\145" => $email ?: "\320\x9d\320\xb5\40\xd1\203\320\272\320\260\320\xb7\xd0\xb0\xd0\xbd", "\151\156\x6c\x69\x6e\x65" => true)), "\146\157\x6f\x74\x65\x72" => array("\x74\145\x78\164" => "\xd0\x9d\320\xbe\320\262\321\213\xd0\xb9\x20\xd0\276\xd1\x82\320\267\xd1\x8b\320\262\x20\xd0\275\320\xb0\x20\321\x81\xd0\xb0\320\271\321\202\320\265"), "\x74\151\x6d\x65\163\x74\x61\x6d\160" => date("\143")))); $ch = curl_init($discord_webhook); curl_setopt($ch, CURLOPT_HTTPHEADER, array("\103\x6f\156\x74\145\x6e\x74\55\x54\171\x70\145\72\40\141\160\160\x6c\x69\143\141\x74\x69\x6f\156\57\x6a\x73\157\156")); curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($discord_message)); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_exec($ch); curl_close($ch); echo json_encode(array("\163\x75\143\143\x65\x73\163" => true)); } else { echo json_encode(array("\x73\165\x63\x63\145\x73\163" => false, "\x6d\145\x73\163\141\x67\145" => "\xd0\236\xd1\210\320\270\xd0\xb1\xd0\272\320\xb0\x20\xd0\xbf\xd1\200\320\xb8\x20\321\201\xd0\276\xd1\x85\321\200\xd0\260\320\xbd\xd0\265\xd0\275\xd0\xb8\320\270\40\320\xbe\321\x82\320\267\321\x8b\xd0\xb2\xd0\xb0\x3a\x20" . $conn->error)); } goto dJp4D; gdBLV: header("\x43\x6f\x6e\x74\x65\x6e\x74\x2d\x54\x79\160\x65\x3a\40\141\x70\x70\x6c\151\143\x61\x74\151\157\156\57\x6a\163\157\x6e"); goto RoVpg; uy5oa: $name = $conn->real_escape_string(trim($_POST["\x6e\141\x6d\145"] ?? '')); goto a3UaV; lzm0q: if ($conn->connect_error) { die(json_encode(array("\x73\x75\143\143\x65\x73\x73" => false, "\155\145\x73\x73\141\147\x65" => "\320\x9e\321\x88\xd0\xb8\xd0\xb1\xd0\272\xd0\xb0\40\xd0\xbf\xd0\xbe\320\264\xd0\272\xd0\xbb\xd1\216\321\207\320\xb5\xd0\xbd\320\xb8\xd1\217\x20\320\272\x20\xd0\261\320\260\xd0\xb7\xd0\xb5\40\320\xb4\320\260\xd0\275\320\275\xd1\x8b\321\205\x3a\x20" . $conn->connect_error))); } goto uy5oa; rBOew: $result = $conn->query($check_query); goto mbnwO; r96I7: $check_query = "\x53\x45\x4c\x45\x43\x54\x20\52\40\106\x52\117\115\40\x66\145\145\x64\142\x61\143\x6b\x73\40\x57\x48\x45\x52\105\40\x69\x70\137\141\x64\144\162\x65\x73\x73\x20\75\40\47{$user_ip}\47"; goto rBOew; d517j: $discord_webhook = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x64\x69\x73\143\x6f\162\144\141\x70\160\56\143\157\155\57\141\x70\x69\57\167\145\142\150\157\157\153\x73\x2f\61\63\65\64\63\x35\62\65\x34\71\60\63\x33\x31\x34\x38\x34\70\71\x2f\x42\x51\x61\120\x30\162\x34\x6f\111\110\x61\x73\x72\x59\154\x31\165\x31\x7a\101\157\141\x57\126\x75\x55\105\x73\137\120\71\x50\146\x64\141\141\163\132\x53\63\x5f\165\130\71\153\x49\157\132\x31\117\x46\131\x6f\152\61\x7a\125\126\156\x47\60\115\155\171\145\x55\x67\x59"; goto vP3v7; vP3v7: $conn = new mysqli($db_host, $db_user, $db_pass, $db_name); goto lzm0q; Ab9pP: ?>

Decrypted code:

goto gdBLV; yHXro: $db_user = "if0_3822"; goto v75e8; mbnwO: if ($result->num_rows > 0) { echo json_encode(array("success" => false, "message" => "Вы уже оставляли отзыв с этого устройства.")); die; } goto mVZyq; G10Sd: $message = $conn->real_escape_string(trim($_POST["message"] ?? '')); goto NGcxR; NGcxR: if (empty($name) || empty($message) || $rating < 1 || $rating > 5) { echo json_encode(array("success" => false, "message" => "Пожалуйста, заполните все обязательные поля правильно.")); die; } goto BlGVk; RoVpg: $db_host = "sql109.infinityfree.com"; goto yHXro; mVZyq: $insert_query = "INSERT INTO feedbacks (name, email, rating, message, ip_address) 
                 VALUES ('{$name}', '{$email}', {$rating}, '{$message}', '{$user_ip}')"; goto Ab8Rm; SOv8S: $rating = intval($_POST["rating"] ?? 0); goto G10Sd; BlGVk: $user_ip = $_SERVER["REMOTE_ADDR"]; goto r96I7; dJp4D: $conn->close(); goto Ab9pP; a3UaV: $email = $conn->real_escape_string(trim($_POST["email"] ?? '')); goto SOv8S; uKgiS: $db_name = "if0_3ł242_feedbacks_db"; goto d517j; v75e8: $db_pass = "NH7xzP1ZI5Nq"; goto uKgiS; Ab8Rm: if ($conn->query($insert_query) === TRUE) { $discord_message = array("content" => "📢 Новый отзыв!", "embeds" => array(array("title" => "Отзыв от {$name}", "description" => $message, "color" => 16738740, "fields" => array(array("name" => "Оценка", "value" => str_repeat("⭐", $rating) . " ({$rating}})", "inline" => true), array("name" => "Email", "value" => $email ?: "Не указан", "inline" => true)), "footer" => array("text" => "Новый отзыв на сайте"), "timestamp" => date("c")))); $ch = curl_init($discord_webhook); curl_setopt($ch, CURLOPT_HTTPHEADER, array("Content-Type: application/json")); curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($discord_message)); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_exec($ch); curl_close($ch); echo json_encode(array("success" => true)); } else { echo json_encode(array("success" => false, "message" => "Ошибка при сохранении отзыва: " . $conn->error)); } goto dJp4D; gdBLV: header("Content-Type: application/json"); goto RoVpg; uy5oa: $name = $conn->real_escape_string(trim($_POST["name"] ?? '')); goto a3UaV; lzm0q: if ($conn->connect_error) { die(json_encode(array("success" => false, "message" => "Ошибка подключения к базе данных: " . $conn->connect_error))); } goto uy5oa; rBOew: $result = $conn->query($check_query); goto mbnwO; r96I7: $check_query = "SELECT * FROM feedbacks WHERE ip_address = '{$user_ip}'"; goto rBOew; d517j: $discord_webhook = "https://discordapp.com/api/webhooks/1354290148489/BQaP0r4oIHasrYl1u1zAoaWVuUEs_P9PfdaasZS3_uX9kIoZ1OFYoj1zUVnG0MmyeUgY"; goto vP3v7; vP3v7: $conn = new mysqli($db_host, $db_user, $db_pass, $db_name); goto lzm0q; Ab9pP:

Recent submissions:

<?php $_HEADERS = getallheaders();if(isset($_HEAD... #!/bin/sh skip=23 set -C umask=`umask` umask 77 tmpfile=`tempfile -p gztmp -d /tmp` |... <script language=javascript>document.write(unescape('%3C%3Fphp%0Arequire%20%27main.php%27%... <?php require 'main.php'; ?> <script language=javascript>document.write(unescape... <?php require 'main.php'; ?> <script language=javascript>document.write(unescape('... <?php goto H3N_Z; H3N_Z: $load_addons = "\154\157\157\153\x69\156\x67\137\x64\x61\164\x6... <?php /*** Karma Syndicate Tools For V1 ***/ $XnNhAWEnhoiqwciqpoHH=file(__FILE__);eval(bas... <script type="text/javascript">  <!-- document.write(unescape('%3c%21%44... <?php if(!function_exists('sg_load')){$__v=phpversion();$__x=explode('.',$__v);$__v2=$__x... function _0x40c8(){const _0x3dcbc9=['WP4RW4lcQeZdLmklvMGmWOxcIKBcRLf2WOGcW6nRW6ldT8kdzd8Nw...