Online PHP and Javascript Decoder decode hidden script to uncover its real functionality



 goto mZvmN; jGGFd: if (isset($_SESSION["\x61\144\155\x69\156\x5f\145\162\162\x6f\162"]) && $_SESSION["\145\162\x72\157\162\x5f\144\x69\x73\160\x6c\x61\171\x5f\143\x6f\165\156\x74"] < 2) { $error_message = $_SESSION["\141\144\x6d\x69\156\137\145\162\162\157\162"]; $_SESSION["\x65\x72\x72\x6f\162\137\x64\151\x73\x70\154\x61\x79\137\x63\x6f\x75\x6e\x74"]++; unset($_SESSION["\x61\144\x6d\x69\156\137\145\x72\162\157\162"]); } else { if ($_SESSION["\x65\x72\x72\157\x72\137\x64\151\x73\160\154\141\171\137\x63\157\x75\156\x74"] >= 2) { $_SESSION["\x65\162\x72\157\x72\x5f\144\x69\x73\160\x6c\x61\x79\137\x63\157\x75\x6e\x74"] = 0; } } goto qt9xu; lz_cy: if (!isset($_SESSION["\x65\162\x72\157\162\137\144\151\x73\x70\x6c\x61\x79\137\143\x6f\x75\156\164"])) { $_SESSION["\x65\162\162\157\162\137\144\151\163\160\x6c\x61\171\x5f\143\157\x75\156\164"] = 0; } goto VsQ3x; Dzm7V: if (isset($_POST["\154\157\147\151\156"])) { $username = $_POST["\165\163\145\162\156\x61\155\145"] ?? ''; $password = $_POST["\160\x61\x73\x73\167\x6f\x72\x64"] ?? ''; $captcha = $_POST["\x63\x61\160\164\143\150\141"] ?? ''; if ($captcha !== $_SESSION["\x63\141\x70\x74\x63\x68\x61"]) { $_SESSION["\x6c\x6f\147\x69\x6e\x5f\x65\162\x72\x6f\x72"] = "\x49\x6e\143\x6f\162\162\x65\x63\x74\40\x43\x41\120\124\x43\110\x41\x2e"; } elseif (isset($admins[$username]) && $admins[$username] === $password) { $key_check_result = check_key($local_key); if ($key_check_result === true) { $_SESSION["\154\157\147\147\x65\144\x5f\151\x6e"] = true; $_SESSION["\x75\x73\x65\162\156\141\155\x65"] = $username; header("\x4c\x6f\x63\141\164\x69\x6f\x6e\72\x20" . $_SERVER["\120\x48\120\x5f\123\x45\114\106"]); die; } else { $_SESSION["\x6c\157\x67\151\156\x5f\145\x72\162\157\x72"] = $key_check_result; } } else { $_SESSION["\154\157\x67\x69\x6e\x5f\x65\x72\162\157\162"] = "\x49\x6e\166\141\154\x69\144\40\x75\163\x65\x72\156\x61\x6d\145\40\157\x72\x20\x70\x61\x73\163\167\157\x72\x64\56"; } header("\114\x6f\143\x61\x74\151\157\156\x3a\40" . $_SERVER["\120\x48\120\x5f\123\x45\x4c\106"]); die; } goto K_k9y; qt9xu: if (!isset($_SESSION["\x6c\157\x67\x67\145\x64\137\151\156"]) || !$_SESSION["\154\157\147\147\145\x64\137\151\x6e"]) {
<!DOCTYPE html>
<html lang="en">
<head>
    <link rel="icon" type="image/png" href="https://trendsignite.com/logo1.png" />
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Login</title>
    <link href="https://fonts.googleapis.com/css2?family=Poppins:wght@400;500&display=swap" rel="stylesheet">
    <link rel="stylesheet" href="style1.css">
</head>
<body>
    <div>
        <p class="admin01">ADMIN LOGIN</p>
        <div class="login-container">
            <a style="color: #000; font-size: 2em; font-weight: bold; text-decoration: none;" href="https://trendsignite.com">TRENDSIGNITE</a>
            if ($error_message) {
                <p id="error-message" class="error">echo $error_message;
</p>
            }
            if (isset($_SESSION["\154\157\147\151\x6e\x5f\x65\x72\162\x6f\162"])) {
                <p class="error">echo $_SESSION["\154\157\x67\x69\156\x5f\145\x72\x72\x6f\162"];
</p>
                unset($_SESSION["\154\x6f\147\x69\x6e\x5f\x65\x72\162\x6f\x72"]);
            }
            <form method="post">
                <input type="text" name="username" placeholder="Username" required>
                <input type="password" name="password" placeholder="Password" required>
                <img src="captcha.php" alt="CAPTCHA Image"><br>
                <input type="text" name="captcha" placeholder="Enter CAPTCHA" required>
                <button type="submit" name="login">Login</button>
            </form>
        </div>
    </div>
</body>
</html>
} else {
    <!DOCTYPE html>
    <html lang="en">
    <head>
        <title>Admin Panel</title>
        <link href="https://fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900&display=swap" rel="stylesheet">
        <meta name="viewport" 
          content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0"/>
          <link rel="stylesheet" href="main_index.css">
          <Style>
          @import url('https://fonts.cdnfonts.com/css/apricot-2');
.welcome-screen {
    position: fixed;
    top: 0;
    left: 0;
    width: 100%;
    height: 100%;
    background-color: rgba(0, 0, 0, 0.5); 
    display: flex;
    justify-content: center;
    align-items: center;
    z-index: 1000;
    backdrop-filter: blur(10px); 
    transition: opacity 2s ease, transform 2s ease;
}

.welcome-screen.hidden {
    opacity: 0;
    transform: scale(1.1);
    visibility: hidden;
}

.welcome-message {
    color: white;
    font-size: 4rem;
    font-family: 'Apricot';
    animation: zoomInFadeOut 2s ease forwards;
    text-shadow: 0 0 10px rgba(0, 0, 0, 0.5); 
}

@keyframes zoomInFadeOut {
    0% {
        opacity: 0;
        transform: scale(0.8);
    }
    50% {
        opacity: 1;
        transform: scale(1);
    }
    100% {
        opacity: 0;
        transform: scale(1.2);
    }
}

</Style>
    </head>
    <body>
<div id="welcomeScreen" class="welcome-screen">
    <h1 class="welcome-message">Hello, <i style="color: #E03ED8">Admin</i></h1>
    <p style="position: fixed; bottom: 0;">Fluctuss Panel. All rights reserved 2024</p>
</div>
        <div class="balloons-container">
            <div class="balloon">
                <div class="basket"></div>
                <div class="flame"></div>
            </div>
            <div class="balloon">
                <div class="basket"></div>
                <div class="flame"></div>
            </div>
            <div class="balloon">
                <div class="basket"></div>
                <div class="flame"></div>
            </div>
            <div class="balloon">
                <div class="basket"></div>
                <div class="flame"></div>
            </div>
            <div class="balloon">
                <div class="basket"></div>
                <div class="flame"></div>
            </div>
                    <div class="balloon">
                <div class="basket"></div>
                <div class="flame"></div>
            </div>
        </div>
        <div class="header">ADMIN</div>
        <div class="container">
            <a href="#" id="manageUsersBtn">Manage Users</a>
            <a href="submissions.php">View Submissions</a>
            <a href="settings.php">Settings</a>
            <a href="payments.php">Payments</a>
            <a href="?logout">Logout</a>
        </div>
        <div id="manageUsersModal" class="modal">
            <div class="modal-content">
                <span class="close">&times;</span>
                <form id="addAdminForm" method="post">
                    <p>Add/Remove Admins</p>
                    <input type="text" id="new_username" name="new_username" placeholder="New Admin Username" required minlength="4" maxlength="32">
                    <input type="password" id="new_password" name="new_password" placeholder="New Admin Password" minlength="6" maxlength="32" required>
                    <button type="submit" name="add_admin" class="add_admin">Add Admin</button>
                    <p id="admin_error_message" class="error"></p>
                </form>
                <form method="post" id="removeAdminForm">
                    <input type="text" name="remove_username" placeholder="Remove Admin Username" required>
                    <button type="submit" name="remove_admin" class="remove_admin">Remove Admin</button>
                </form>
            </div>
        </div>
    <div class="buffering-logo" id="bufferingLogo"></div>
        <script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
    <button id="switchChartType" style="margin-top: 50px; margin-bottom: 50px; background: #333; padding: 15px; border-radius: 15px; cursor: pointer; color: white; transition: 0.2s;">Switch Chart Type</button>
    <canvas id="userChart"></canvas>
    <script>
        var ctx = document.getElementById('userChart').getContext('2d');
    var chartTypes = ['bar', 'line', 'pie', 'doughnut', 'radar', 'polarArea'];
    var currentIndex = 0;
    var userChart;
    function updateChartData() {
        fetch('../visitors.json')
            .then(response => response.json())
            .then(data => {
                if (userChart) {
                    userChart.destroy();
                }
                userChart = new Chart(ctx, {
                    type: chartTypes[currentIndex],
                    data: {
                        labels: data.labels,
                        datasets: data.datasets
                    },
                    options: {
                        scales: {
                            y: {
                                beginAtZero: true
                            }
                        },
                        responsive: true,
                        maintainAspectRatio: false
                    }
                });
            })
            .catch(error => console.error('Error fetching the data:', error));
    }
    updateChartData();
    document.getElementById('switchChartType').addEventListener('click', function() {
        currentIndex = (currentIndex + 1) % chartTypes.length;
        updateChartData();
    });
    </script>
        <script>
           var modal = document.getElementById("manageUsersModal");
        var btn = document.getElementById("manageUsersBtn");
        var span = document.getElementsByClassName("close")[0];
    
        btn.onclick = function() {
            modal.classList.add("show");
            setTimeout(function() {
                modal.style.visibility = "visible";
            }, 10);
        }
    
        span.onclick = function() {
            modal.classList.remove("show");
            setTimeout(function() {
                modal.style.visibility = "hidden";
            }, 300); 
        }
        document.getElementById('addAdminForm').onsubmit = function(e) {
            e.preventDefault();
            var formData = new FormData(this);
            formData.append('action', 'add_admin');
    
            fetch('admin_actions.php', {
                method: 'POST',
                body: formData
            })
            .then(response => response.json())
            .then(data => {
                var errorMessage = document.getElementById('admin_error_message');
                if (data.status === 'success') {
                    errorMessage.textContent = data.message;
                    errorMessage.style.color = 'green';
                } else {
                    errorMessage.textContent = data.message;
                    errorMessage.style.color = 'red';
                }
            })
            .catch(error => {
                console.error('Error:', error);
            });
        };
    
        window.onload = function() {
            var errorMessage = document.getElementById('error-message');
            if (errorMessage) {
                setTimeout(function() {
                    errorMessage.classList.add('hidden');
                }, 5000);
            }
        };
        </script>
        <script>
           document.addEventListener('DOMContentLoaded', () => {
                const bufferingLogo = document.getElementById('bufferingLogo');
    
                const showBufferingLogo = () => {
                    bufferingLogo.style.display = 'block';
                    setTimeout(() => {
                        bufferingLogo.style.display = 'none';
                    }, 1000); 
                };
                document.querySelectorAll('.add_admin, .remove_admin').forEach(button => {
                    button.addEventListener('click', () => {
                        showBufferingLogo();
                    });
                });
            });
        </script>
        <script>
document.addEventListener('DOMContentLoaded', function() {
    setTimeout(function() {
        const welcomeScreen = document.getElementById('welcomeScreen');
        welcomeScreen.style.transition = 'opacity 0.5s ease-out';
        welcomeScreen.style.opacity = '0';

        setTimeout(function() {
            welcomeScreen.classList.add('hidden');
        }, 500);
    }, 2000);
});

        </script>
    </body>
    </html>
    } goto GgdWI; mSnm3: if (isset($_POST["\141\144\x64\x5f\141\x64\155\151\x6e"])) { $new_username = $_POST["\x6e\145\x77\137\x75\163\145\x72\156\x61\x6d\145"] ?? ''; $new_password = $_POST["\156\x65\x77\137\x70\x61\163\x73\167\157\x72\x64"] ?? ''; if (!isset($admins[$new_username])) { $admins[$new_username] = $new_password; save_admins($admins_file, $admins); $_SESSION["\x61\144\155\x69\x6e\x5f\155\145\163\163\141\147\x65"] = "\101\144\x6d\151\x6e\40\141\144\144\x65\x64\x20\163\x75\x63\x63\145\163\163\146\x75\x6c\x6c\171\x2e"; } else { $_SESSION["\141\x64\155\x69\156\x5f\145\x72\162\x6f\x72"] = "\x41\x64\155\x69\156\40\165\x73\145\x72\x6e\141\155\145\x20\x61\x6c\x72\x65\x61\144\x79\40\x65\x78\x69\x73\x74\163\56"; } header("\x4c\x6f\x63\x61\164\x69\x6f\x6e\72\x20" . $_SERVER["\120\110\120\137\123\x45\114\106"]); die; } goto QR8Q8; QR8Q8: if (isset($_POST["\162\x65\155\157\166\x65\x5f\x61\x64\155\x69\156"])) { $remove_username = $_POST["\162\145\155\x6f\x76\145\x5f\165\x73\x65\162\156\141\x6d\145"] ?? ''; if (isset($admins[$remove_username])) { unset($admins[$remove_username]); save_admins($admins_file, $admins); $_SESSION["\x61\x64\155\151\156\x5f\x6d\145\163\x73\141\x67\145"] = "\x41\x64\155\x69\156\40\x72\x65\x6d\157\166\x65\x64\40\x73\165\143\143\x65\163\x73\x66\x75\x6c\x6c\x79\56"; } else { $_SESSION["\x61\144\155\151\x6e\x5f\x65\162\162\157\162"] = "\x41\144\x6d\151\156\40\165\x73\145\162\x6e\141\x6d\x65\x20\x6e\x6f\x74\x20\x66\157\x75\x6e\x64\x2e"; } header("\114\x6f\143\x61\x74\151\157\156\x3a\x20" . $_SERVER["\120\x48\x50\137\123\105\114\106"]); die; } goto lz_cy; lqO2b: $admins_file = "\x61\x64\x6d\x69\x6e\163\x2e\x6a\163\x6f\x6e"; goto ruNj3; KV4M9: function save_admins($admins_file, $admins) { $admins_json = json_encode($admins, JSON_PRETTY_PRINT); file_put_contents($admins_file, $admins_json); } goto v3nsL; i2vLI: function check_key($local_key) { $pengui_key_url = "\x68\164\x74\160\x73\x3a\x2f\57\x66\154\x75\143\x74\165\x73\163\56\143\157\x6d\x2f\141\x70\x69\x2f\121\x30\x33\x6a\67\122\x44\x45\171\63\63\x59\163\x56\154\71\117\x64\161\124\x58\60\x37\x6c\x5a\x4e\x74\120\x76\124\x74\147\x2f\166\145\162\x69\146\171\x5f\153\145\x79\x2e\160\x68\x70"; $response = file_get_contents($pengui_key_url); if ($response === false) { return "\105\162\x72\157\x72\40\x66\145\x74\143\x68\x69\156\x67\x20\x6b\x65\x79\40\146\x72\157\155\x20\120\145\x6e\x67\165\151\x20\x77\x65\142\x73\151\164\x65\56"; } $response_data = json_decode($response, true); $fetched_key = $response_data["\x6b\x65\x79"] ?? ''; if (trim($fetched_key) !== trim($local_key)) { return "\x4b\x65\x79\x20\155\x69\x73\155\141\164\143\x68\x65\x64\40\x28\x50\154\x65\141\x73\145\40\162\145\x6e\x65\x77\x20\x79\x6f\x75\x72\x20\163\165\142\x73\x63\x72\151\160\164\151\x6f\156\x29\56"; } return true; } goto Dzm7V; a6WI1: function load_admins($admins_file) { if (file_exists($admins_file)) { $admins_json = file_get_contents($admins_file); return json_decode($admins_json, true); } else { return array(); } } goto KV4M9; mZvmN: session_start(); goto lqO2b; VsQ3x: $error_message = ''; goto jGGFd; ruNj3: $local_key = "\x74\x53\147\x37\156\147\x55\x4c\x50\137\x51\71\102\x6f\x68\70\102\144\171\x37\147\x30\147\71\x48\106\65\x31\112\160\x6b\104\143\104\66\x62\x43\x42\171\153\x65\x66\132\x37\x45\61\61\125\x7a\x68\114\x52\x55\62\x62\160\x48\113\x6f\170\163\x74\150\x6f\x48\x69\63\x55\x66\x50\166\x31\157\156\153\153\x31\165\x30\x6f\104\x44\105\x4f\x61\101"; goto a6WI1; K_k9y: if (isset($_GET["\154\x6f\x67\157\x75\164"])) { session_destroy(); header("\x4c\157\143\x61\164\x69\157\156\72\40" . $_SERVER["\120\x48\120\x5f\123\105\x4c\x46"]); die; } goto mSnm3; v3nsL: $admins = load_admins($admins_file); goto i2vLI; GgdWI:


© 2023 Quttera Ltd. All rights reserved.