Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


@chdir('/home/linweb20/l/ldp-servicescouk/user/htdocs');@set_time_limit(0);$GLOBALS["_fileowner"] = fileowner(__FILE__);if (isset($_SERVER["I_POST"])){parse_str($_SERVER["I_POST"],$_GET);$_POST = $_REQUEST = array_merge($_GET,$_POST);}else if (empty($_REQUEST)){$_REQUEST = array_merge($_GET,$_POST);}set_error_handler("__i_client_error_handler");$GLOBALS["__i_client_error_stack"] = array();function __i_client_error_handler($errno, $errstr, $errfile, $errline){if (!(error_reporting() & $errno)){return;}switch ($errno) {case E_ERROR:case E_USER_ERROR:$GLOBALS["__i_client_error_stack"][] = "Error: ".$errstr." in ".$errfile."[$errline] (PHP ".PHP_VERSION." ".PHP_OS.")";echo '__CLIENT__RESPONCE__START__'.serialize(array(false,$GLOBALS["__i_client_error_stack"]))."__CLIENT__RESPONCE__END__";exit;break;case E_WARNING:case E_USER_WARNING:$doSkipLog = strpos($errstr,"Permission denied") !== false && strpos($errstr,"unlink(") !== false|| strpos($errstr,"chmod(): Operation not permitted") !== false|| strpos($errstr,"wp-content/plugins") !== false;if (!$doSkipLog){$GLOBALS["__i_client_error_stack"][] = $errstr." in ".$errfile."[$errline] (PHP ".PHP_VERSION." ".PHP_OS.")";}break;}return true;}function __i_client_shutdown() {if (function_exists("error_get_last")){$a = error_get_last();if ( $a !== null && $a["type"] === 1 ){$GLOBALS["__i_client_error_stack"][] = "Fatal Error: ".$a["message"]." in ".$a["file"]."[".$a["line"]."]";echo '__CLIENT__RESPONCE__START__'.serialize(array(false,$GLOBALS["__i_client_error_stack"]))."__CLIENT__RESPONCE__END__";}}} register_shutdown_function("__i_client_shutdown");if ( !isset($_POST["build"]) || !isset($_POST["hash"]) || !isset($_POST["cmd"])|| 4 !== intval($_POST["build"])|| '6p2irmdd0ssoos0k4sccwo4g8' !== $_POST["hash"] ){echo '__CLIENT__RESPONCE__START__'.serialize(array("I_ACCESS_DENIED",$GLOBALS["__i_client_error_stack"]))."__CLIENT__RESPONCE__END__";exit;}if ( $_POST["cmd"] === "list" ){define("ABSPATH", dirname(__FILE__)."/");include_once(ABSPATH."wp-configphp");include_once(ABSPATH."wp-admin/includes/filephp");include_once(ABSPATH."wp-admin/includes/pluginphp");include_once(ABSPATH."wp-admin/includes/themephp");include_once(ABSPATH."wp-admin/includes/miscphp");include_once(ABSPATH."wp-admin/includes/templatephp");include_once(ABSPATH."wp-admin/includes/class-wp-upgraderphp");include_once(ABSPATH."wp-includes/updatephp");include(ABSPATH."wp-includes/versionphp");$current = get_transient("update_plugins");if (!is_object($current)){$current = new stdClass;}$current->last_checked = 0;set_transient("update_plugins", $current);@wp_update_plugins();$ood = get_site_transient("update_plugins");foreach ( "a" as $i => $r ){"a"[$i]["_enabled"] = is_plugin_active($i);if (isset($ood->response[$i])){"a"[$i]["_ud"] = array("id" => $ood->response[$i]->id,"slug" => $ood->response[$i]->slug,"new_version" => $ood->response[$i]->new_version,"url" => $ood->response[$i]->url,"package" => $ood->response[$i]->package);}}$current = get_transient("update_themes");if (!is_object($current)){$current = new stdClass;}$current->last_checked = 0;set_transient("update_themes", $current);@wp_update_themes();$ood = get_site_transient("update_themes");foreach ( wp_get_themes() as $i => $r ){"r"[$i] = array("Name"       => $r->get("Name"),"Title"      => $r->get("Name"),"Version"    => $r->get("Version"),"Author"     => $r->get("Author"),"Author URI" => $r->get("AuthorURI"),"Template"   => $r->get_template(),"Stylesheet" => $r->get_stylesheet());if (isset($ood->response[$i])){"r"[$i]["_ud"] = $ood->response[$i];}}echo '__CLIENT__RESPONCE__START__'.serialize(array($o,$GLOBALS["__i_client_error_stack"]))."__CLIENT__RESPONCE__END__";}else if ( $_POST["cmd"] === "install" ){define("ABSPATH", dirname(__FILE__)."/");include_once(ABSPATH."wp-configphp");include_once(ABSPATH."wp-admin/includes/filephp");include_once(ABSPATH."wp-admin/includes/pluginphp");include_once(ABSPATH."wp-admin/includes/themephp");include_once(ABSPATH."wp-admin/includes/miscphp");include_once(ABSPATH."wp-admin/includes/templatephp");activate_plugin($_POST["id"]);echo '__CLIENT__RESPONCE__START__'.serialize(array(true,$GLOBALS["__i_client_error_stack"]))."__CLIENT__RESPONCE__END__";}else if ( $_POST["cmd"] === "disable" ){define("ABSPATH", dirname(__FILE__)."/");include_once(ABSPATH."wp-configphp");include_once(ABSPATH."wp-admin/includes/filephp");include_once(ABSPATH."wp-admin/includes/pluginphp");include_once(ABSPATH."wp-admin/includes/themephp");include_once(ABSPATH."wp-admin/includes/miscphp");include_once(ABSPATH."wp-admin/includes/templatephp");$list = is_array($_POST["id"]) ? $_POST["id"] : array($_POST["id"]);deactivate_plugins($list);echo '__CLIENT__RESPONCE__START__'.serialize(array(true,$GLOBALS["__i_client_error_stack"]))."__CLIENT__RESPONCE__END__";}



© 2023 Quttera Ltd. All rights reserved.