Online PHP and Javascript Decoder decode hidden script to uncover its real functionality



 goto PYf_S; satA1: require_once __DIR__ . "\x2f\x69\x6e\x63\154\x75\144\145\163\57\141\x75\x74\150\x2e\160\x68\160"; goto RbTBY; ltg0v: $action = $_GET["\141\143\164\x69\157\x6e"] ?? ''; goto gCHHQ; AZ33C: $db = getDB(); goto ltg0v; PYf_S: require_once __DIR__ . "\57\x63\x6f\x6e\146\x69\x67\56\x70\x68\160"; goto gHyhE; gHyhE: header("\x43\157\x6e\x74\145\x6e\164\55\124\171\160\145\72\40\x61\160\160\154\x69\143\141\164\151\x6f\156\57\x6a\163\157\156\73\40\x63\x68\141\162\x73\145\x74\x3d\x75\164\x66\x2d\x38"); goto ZxM3A; RbTBY: require_once __DIR__ . "\57\151\156\x63\154\165\x64\x65\x73\57\x66\165\x6e\143\164\x69\157\x6e\x73\x2e\x70\x68\x70"; goto AHGpv; AHGpv: if (!isLoggedIn()) { echo json_encode(array("\145\162\x72\157\162" => "\125\156\141\x75\x74\x68\157\162\151\172\145\x64")); die; } goto AZ33C; gCHHQ: $method = $_SERVER["\122\105\121\125\x45\123\x54\137\x4d\x45\x54\x48\x4f\x44"]; goto KO_tc; KO_tc: if (in_array($method, array("\x50\x4f\x53\124", "\x44\x45\x4c\x45\x54\x45", "\120\125\x54"))) { $token = $_SERVER["\x48\x54\x54\120\137\x58\137\103\123\122\106\x5f\124\117\x4b\x45\x4e"] ?? ''; if (empty($token)) { $jsonBody = json_decode(file_get_contents("\x70\x68\x70\72\x2f\x2f\151\156\160\x75\164"), true); if ($jsonBody && isset($jsonBody["\143\163\x72\146\x5f\x74\x6f\x6b\x65\156"])) { $token = $jsonBody["\x63\163\162\146\137\x74\x6f\153\x65\156"]; } } if (!verifyCSRFToken($token)) { http_response_code(403); echo json_encode(array("\145\162\162\157\162" => "\111\x6e\x76\x61\x6c\x69\144\40\x6f\162\x20\155\x69\163\x73\x69\x6e\x67\40\x43\123\122\x46\40\x74\x6f\x6b\145\x6e")); die; } } goto KQQMX; ZxM3A: if (!defined("\111\116\x53\124\101\114\x4c\x45\104") || INSTALLED !== true) { echo json_encode(array("\145\x72\x72\x6f\162" => "\x53\171\x73\x74\x65\x6d\x20\x6e\x6f\x74\40\x69\x6e\x73\x74\x61\154\x6c\145\x64")); die; } goto satA1; KQQMX: try { switch ($action) { case "\x67\145\164\137\160\141\x74\151\x65\156\164": $id = (int) ($_GET["\151\144"] ?? 0); $stmt = $db->prepare("\123\105\114\105\103\x54\x20\151\x64\x2c\x20\146\x75\154\154\x5f\156\x61\x6d\145\54\40\146\x69\x6c\x65\137\x6e\x75\155\x62\145\162\x2c\x20\160\x68\157\x6e\145\54\40\x70\x68\x6f\156\145\62\x2c\x20\147\x65\156\x64\145\162\54\40\x64\x61\x74\145\x5f\x6f\x66\137\142\x69\162\164\x68\x2c\40\x62\154\157\157\144\137\164\171\160\x65\54\40\x6d\x65\x64\x69\143\141\154\x5f\x68\x69\163\x74\x6f\x72\x79\x2c\x20\141\x6c\x6c\x65\162\x67\x69\x65\163\x2c\x20\143\x68\162\x6f\x6e\151\143\x5f\144\x69\x73\x65\x61\163\x65\163\x20\x46\122\117\115\40\x70\141\x74\x69\x65\156\x74\163\40\127\x48\105\x52\105\40\151\x64\x20\75\x20\77"); $stmt->execute(array($id)); $patient = $stmt->fetch(PDO::FETCH_ASSOC); if ($patient) { echo json_encode(array("\x73\x75\143\143\x65\163\x73" => true, "\x64\141\164\141" => $patient)); } else { echo json_encode(array("\145\162\162\x6f\x72" => "\120\141\x74\151\145\156\x74\x20\x6e\157\x74\x20\x66\157\165\x6e\144")); } break; case "\147\x65\164\137\163\x65\x72\166\151\x63\x65\x5f\160\x72\151\143\x65": $name = trim($_GET["\156\141\x6d\x65"] ?? ''); $stmt = $db->prepare("\123\105\x4c\x45\103\x54\x20\144\x65\146\x61\165\154\x74\x5f\160\x72\151\143\x65\x20\106\x52\x4f\115\x20\163\x65\162\166\x69\143\145\x73\x20\127\x48\x45\x52\105\x20\156\141\155\145\x20\x3d\40\77"); $stmt->execute(array($name)); $service = $stmt->fetch(PDO::FETCH_ASSOC); if ($service) { echo json_encode(array("\x73\165\x63\143\145\x73\163" => true, "\x70\162\x69\143\x65" => $service["\x64\145\x66\141\165\154\x74\137\x70\x72\x69\x63\145"])); } else { echo json_encode(array("\145\162\162\157\162" => "\123\x65\162\x76\151\x63\x65\40\x6e\x6f\164\x20\x66\157\x75\156\x64", "\x70\162\151\143\145" => 0)); } break; case "\x73\x65\x61\162\x63\150\137\163\x65\x72\x76\151\143\145\163": $term = "\45" . trim($_GET["\x74\145\162\x6d"] ?? '') . "\x25"; $stmt = $db->prepare("\123\105\114\x45\103\x54\x20\x6e\141\155\x65\x2c\40\144\x65\146\141\165\x6c\164\137\160\x72\151\x63\x65\40\106\122\x4f\x4d\40\x73\x65\162\x76\x69\143\145\x73\40\x57\x48\x45\x52\105\40\x6e\141\x6d\x65\x20\x4c\111\x4b\105\40\77\40\x4f\122\40\x63\141\x74\145\x67\157\162\x79\x20\x4c\x49\113\105\40\x3f\x20\x4c\x49\x4d\111\124\40\61\x30"); $stmt->execute(array($term, $term)); $services = $stmt->fetchAll(PDO::FETCH_ASSOC); echo json_encode(array("\163\165\x63\143\x65\x73\163" => true, "\x64\141\164\x61" => $services)); break; case "\x71\x75\x69\143\153\x5f\x74\157\157\164\150\x5f\x73\141\166\x65": requireRole("\144\157\x63\x74\157\x72"); $patientId = (int) ($_POST["\x70\141\164\x69\x65\156\164\137\151\144"] ?? 0); $toothNum = (int) ($_POST["\x74\x6f\157\x74\150\137\156\x75\x6d\x62\145\162"] ?? 0); $cond = $_POST["\143\x6f\x6e\144\151\x74\151\x6f\156"] ?? ''; if ($patientId && $toothNum && $cond) { if ($cond === "\x68\x65\141\154\164\x68\171\137\162\x65\155\157\x76\145") { $stmt = $db->prepare("\x44\105\114\105\124\x45\x20\106\x52\117\115\40\144\145\x6e\x74\141\x6c\137\143\x68\x61\x72\x74\x20\127\110\x45\122\105\40\x70\x61\164\x69\145\x6e\164\x5f\x69\144\x20\x3d\40\77\40\x41\x4e\x44\40\x74\x6f\x6f\164\150\137\x6e\165\155\x62\x65\x72\x20\x3d\x20\x3f"); $stmt->execute(array($patientId, $toothNum)); } else { $stmt = $db->prepare("\x49\116\x53\x45\122\x54\40\111\x4e\124\117\x20\144\x65\x6e\164\x61\154\137\x63\150\141\162\164\40\x28\x70\141\164\x69\145\156\x74\x5f\151\144\54\40\x74\x6f\x6f\x74\150\x5f\x6e\x75\155\142\x65\162\x2c\x20\143\x6f\156\144\151\164\x69\157\x6e\137\x63\x6f\144\145\x2c\x20\x64\x6f\x63\x74\157\162\x5f\x69\144\51\x20\126\x41\x4c\x55\105\123\40\x28\x3f\x2c\77\54\77\54\77\51"); $stmt->execute(array($patientId, $toothNum, $cond, $_SESSION["\165\163\x65\x72\x5f\x69\x64"])); } echo json_encode(array("\163\x75\143\143\145\x73\x73" => true)); } else { echo json_encode(array("\x65\x72\x72\x6f\162" => "\115\151\163\163\x69\x6e\x67\40\x64\x61\164\x61")); } break; case "\144\145\154\x65\x74\145\137\164\157\x6f\x74\x68\137\143\157\x6e\x64\151\x74\x69\157\156": requireRole("\144\x6f\143\164\x6f\162"); $id = (int) ($_POST["\x69\144"] ?? 0); if ($id) { $stmt = $db->prepare("\x44\x45\x4c\x45\124\x45\x20\106\122\x4f\x4d\x20\x64\x65\x6e\164\x61\154\137\143\150\141\162\x74\x20\x57\x48\105\x52\105\x20\x69\144\40\x3d\40\x3f"); $stmt->execute(array($id)); echo json_encode(array("\163\x75\143\x63\145\163\x73" => true)); } else { echo json_encode(array("\x65\162\162\157\x72" => "\x4d\x69\x73\x73\151\156\147\40\144\141\x74\141")); } break; case "\143\141\154\x6c\x5f\x70\x61\x74\151\145\x6e\x74": requireRole("\162\145\x63\x65\160\164\151\157\156\x69\x73\164"); $wid = (int) ($_POST["\167\x69\x64"] ?? 0); if ($wid) { $stmt = $db->prepare("\x55\x50\x44\101\x54\105\40\x77\141\x69\164\151\156\147\137\x6c\x69\x73\x74\40\123\x45\x54\40\x73\x74\141\164\165\163\40\x3d\x20\47\143\x61\154\x6c\x65\144\47\54\x20\x63\x61\x6c\154\x65\x64\x5f\164\151\x6d\145\40\75\40\x4e\117\x57\50\51\40\x57\110\105\122\x45\40\x69\x64\40\x3d\40\77"); $stmt->execute(array($wid)); echo json_encode(array("\163\165\x63\x63\145\163\163" => true)); } else { echo json_encode(array("\x65\x72\x72\x6f\x72" => "\x4d\151\163\x73\151\156\147\40\x49\104")); } break; case "\143\x68\x65\x63\153\137\x61\160\x70\157\x69\x6e\164\x6d\x65\x6e\x74\137\x63\x6f\x6e\x66\154\x69\x63\x74": $doctorId = (int) ($_GET["\x64\x6f\x63\x74\x6f\x72\137\x69\144"] ?? 0); $date = $_GET["\144\141\164\145"] ?? ''; $time = $_GET["\164\x69\x6d\x65"] ?? ''; if (!$doctorId || !$date || !$time) { echo json_encode(array("\163\x75\x63\x63\x65\163\163" => true, "\143\x6f\x6e\x66\154\151\x63\x74" => false)); die; } $stmt = $db->prepare("\12\x20\x20\x20\40\x20\x20\40\x20\40\x20\40\40\x20\40\x20\x20\x53\105\114\x45\x43\124\40\x61\56\141\x70\160\157\x69\156\164\155\x65\156\164\x5f\x74\151\155\x65\54\40\160\56\x66\165\x6c\154\x5f\x6e\141\x6d\145\40\x61\x73\40\160\x61\164\151\145\x6e\x74\x5f\x6e\141\155\x65\x2c\x20\x70\56\146\x69\154\145\137\x6e\165\x6d\142\145\x72\x2c\x20\x70\x2e\x70\150\157\156\x65\12\40\40\40\40\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\40\106\122\117\115\40\141\160\160\x6f\x69\x6e\164\x6d\145\156\x74\163\x20\141\xa\x20\40\x20\x20\x20\x20\x20\40\40\x20\x20\x20\x20\x20\40\x20\x4a\117\x49\116\40\x70\x61\x74\x69\x65\156\x74\x73\x20\x70\40\x4f\116\40\x61\x2e\160\x61\164\x69\x65\156\164\137\151\144\40\x3d\x20\x70\56\x69\x64\12\40\40\40\x20\40\40\x20\x20\40\40\x20\x20\40\x20\x20\40\127\x48\105\122\105\x20\x61\x2e\x64\157\143\164\x6f\x72\137\151\x64\x20\75\x20\x3f\40\xa\40\40\40\40\x20\40\x20\40\x20\40\x20\x20\x20\x20\40\x20\x41\x4e\104\40\x61\56\141\x70\160\157\x69\156\x74\155\145\156\164\137\144\x61\164\x65\40\x3d\40\77\40\xa\40\40\x20\40\40\40\40\x20\40\x20\40\x20\40\40\x20\x20\x41\116\x44\40\x61\x2e\x61\160\x70\157\x69\156\x74\x6d\x65\156\x74\x5f\164\x69\x6d\x65\x20\x3d\40\77\40\12\x20\x20\40\x20\x20\40\x20\x20\40\40\x20\x20\x20\x20\40\x20\101\x4e\104\x20\141\x2e\163\164\141\164\x75\x73\x20\x4e\117\124\x20\111\116\40\50\47\143\141\156\x63\145\x6c\x6c\145\x64\x27\x2c\x20\47\x6e\157\x5f\163\x68\x6f\167\x27\x29\12\40\x20\x20\x20\x20\x20\x20\40\x20\40\40\x20\40\40\x20\x20\114\x49\115\x49\x54\40\x31\xa\40\x20\40\40\x20\40\x20\40\x20\x20\x20\40"); $stmt->execute(array($doctorId, $date, $time)); $conflict = $stmt->fetch(PDO::FETCH_ASSOC); if ($conflict) { echo json_encode(array("\x73\165\x63\143\145\x73\x73" => true, "\143\x6f\156\146\154\151\143\x74" => true, "\144\x61\164\141" => array("\x70\x61\164\x69\x65\x6e\164\x5f\156\x61\155\x65" => $conflict["\160\x61\164\x69\145\x6e\x74\x5f\156\x61\155\145"], "\x66\x69\154\x65\x5f\156\165\155\142\x65\162" => $conflict["\x66\151\x6c\145\137\156\165\155\142\x65\162"], "\160\x68\x6f\x6e\145" => $conflict["\160\150\x6f\x6e\145"], "\x74\x69\x6d\x65" => date("\150\x3a\151\x20\101", strtotime($conflict["\141\x70\x70\x6f\151\156\164\155\145\x6e\164\137\164\151\x6d\145"])), "\144\141\x74\x65" => $date))); } else { echo json_encode(array("\163\x75\x63\x63\145\x73\x73" => true, "\x63\157\x6e\x66\154\151\143\164" => false)); } break; case "\x63\x68\145\x63\153\137\160\x68\x6f\156\145": $phone = trim($_GET["\x70\150\x6f\x6e\145"] ?? ''); $exclude_id = (int) ($_GET["\145\x78\x63\x6c\165\144\x65\137\x69\144"] ?? 0); if (empty($phone)) { echo json_encode(array("\x73\165\143\x63\x65\163\163" => true, "\x65\170\151\x73\x74\x73" => false)); die; } $sql = "\123\x45\x4c\x45\x43\x54\x20\146\x75\x6c\x6c\137\x6e\x61\x6d\x65\x2c\x20\x66\x69\154\x65\137\x6e\x75\x6d\142\145\162\40\x46\x52\117\x4d\x20\x70\x61\164\x69\145\x6e\x74\x73\40\x57\x48\105\122\105\40\x70\150\x6f\x6e\x65\x20\x3d\x20\77\x20\x41\x4e\104\x20\151\163\137\141\143\x74\x69\166\x65\40\x3d\40\61"; $params = array($phone); if ($exclude_id > 0) { $sql .= "\x20\x41\x4e\104\x20\151\144\40\41\75\x20\x3f"; $params[] = $exclude_id; } $stmt = $db->prepare($sql); $stmt->execute($params); $patient = $stmt->fetch(PDO::FETCH_ASSOC); if ($patient) { echo json_encode(array("\163\x75\143\x63\145\163\163" => true, "\x65\x78\x69\163\x74\x73" => true, "\160\x61\164\x69\x65\156\x74" => array("\156\141\155\x65" => $patient["\x66\x75\154\x6c\137\x6e\x61\155\145"], "\x66\151\x6c\x65\137\x6e\165\x6d\142\x65\162" => $patient["\146\151\154\x65\137\156\x75\x6d\x62\x65\162"]))); } else { echo json_encode(array("\x73\165\x63\143\145\x73\163" => true, "\145\x78\x69\x73\164\x73" => false)); } break; default: echo json_encode(array("\145\x72\162\157\x72" => "\111\x6e\166\141\x6c\x69\x64\x20\141\143\x74\x69\x6f\156")); break; } } catch (Exception $e) { http_response_code(500); echo json_encode(array("\145\x72\162\157\162" => "\123\x65\x72\x76\x65\162\x20\145\x72\x72\x6f\162\72\x20" . $e->getMessage()));



© 2023 Quttera Ltd. All rights reserved.