Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

<?php
/*
StoreCommander
*/
 goto KMvop; iYvo9: PrestaShopLogger::addLog($log_id . "\x20\x45\x52\x52\x3a\40\123\x43\x20\146\x6f\x6c\x64\145\162\x20\x6e\157\x74\x20\146\x6f\x75\156\144", 1, null, null, null, true); goto XsUWh; XsUWh: header("\110\x54\124\x50\57\x31\56\60\x20\64\60\61\x20\x57\162\157\x6e\x67\x20\x66\x6f\154\144\145\162"); goto Gq3Uf; u7n3q: Logger::addLog($log_id . "\40\105\122\122\72\40\127\162\157\x6e\147\x20\x70\141\x72\141\x6d\x20\72\40" . implode("\54", $param_err), 1, null, null, null, true); goto zsK2s; fYvxN: die; goto i_4pk; Ln1lE: $param_err = array(); goto s1Y9i; ZzzJG: if (!($local_version !== $distant_version)) { goto YbQU1; } goto b5joe; evhdx: require_once SC_DIR . "\154\151\142\x2f\163\x65\x72\x2f\167\x69\x6e\x2d\x69\x6d\x61\x67\x65\x63\x6f\155\160\x72\x65\x73\x73\151\x6f\x6e\x2f\163\x65\x72\x5f\167\151\156\x2d\x69\155\x61\x67\x65\x63\157\x6d\x70\x72\x65\163\x73\x69\x6f\x6e\x5f\x73\143\x61\x6e\56\x70\x68\160"; goto aVQKJ; cF9YT: die; goto RlIcz; LyYCN: rWeSD: goto Kic3D; r04cx: $scInstalled = Module::isInstalled($current_sc_module_folder_name); goto njSUI; Muu7d: header("\110\x54\x54\120\x2f\61\x2e\x30\40\x34\x30\61\x20\105\x6d\160\164\171\40\160\141\162\141\155\145\x74\145\x72"); goto Mo2Mo; NMjeJ: Logger::addLog($log_id . "\x20\x45\x52\x52\72\40\x45\x6d\160\164\x79\40\x70\x61\x72\x61\x6d\40\72\x20" . implode("\54", $param_err), 1, null, null, null, true); goto fnhSR; b0PT0: laW9N: goto Muu7d; pLjhm: $param_err = array(); goto I4ChD; k0yFG: PrestaShopLogger::addLog($log_id . "\40\105\122\122\72\40\x4d\x69\x73\163\x69\156\147\x20\160\x61\x72\141\155\x20\x3a\x20" . implode("\54", $param_err), 1, null, null, null, true); goto sgkF5; XNWN6: $param_err[] = "\166\x65\162\163\151\x6f\156"; goto C0SS3; Sp9iQ: if (!empty($_SERVER["\110\x54\124\120\137\117\103\111\101\x55\124\110"])) { goto yJjVJ; } goto rkKZ1; njSUI: goto wOblA; goto t0KQ1; fnhSR: goto laW9N; goto hoGD_; Zs6Je: if (!empty($_SERVER["\110\124\x54\120\137\x4f\x43\111\x53\105\x43\x52\x45\124"])) { goto B8jkk; } goto HtzEB; lHqCt: ob_start(); goto evhdx; eF7JC: ob_end_clean(); goto N_A1V; aE5Vt: if (!empty($_SERVER["\x48\x54\124\x50\x5f\x4f\x43\x49\x56\x45\122\123\111\x4f\116"])) { goto eUYt1; } goto mkunS; Ri5OD: $moduleDataProvider = new PrestaShop\PrestaShop\Adapter\Module\ModuleDataProvider($legacyLogger, Context::getContext()->getTranslator()); goto GdQ0M; w2REG: $sc_folder_hash = Configuration::get("\123\103\137\106\x4f\x4c\x44\x45\x52\x5f\110\x41\x53\x48", null, 0, 0); goto S0q_m; Joa5B: $local_version = "\62\x2e\x30\x2e\x30"; goto fH7es; VGG1I: $distant_version = (string) $_SERVER["\110\124\124\x50\x5f\117\103\111\x56\x45\x52\x53\x49\117\116"]; goto T6_H6; mxDck: BE4hV: goto w2REG; fJGwN: header("\110\x54\x54\x50\57\x31\56\x31\x20\x34\60\x33\40\106\157\162\142\151\144\144\145\156"); goto fYvxN; CaThV: $param_err[] = "\163\145\143\x72\x65\x74"; goto T03Bx; hgJFq: wOblA: goto Gg0iO; GdQ0M: $scInstalled = $moduleDataProvider->isInstalled($current_sc_module_folder_name); goto hgJFq; JaIhL: $current_sc_module_folder_name = basename(realpath("\x2e\56\57\x2e\56\57")); goto p4vem; rkKZ1: $param_err[] = "\141\x75\164\x68"; goto h7J3B; GMUXU: if (version_compare(_PS_VERSION_, "\61\x2e\x36\56\x30\x2e\63", "\76\75")) { goto fK69w; } goto NVrT_; mkunS: $param_err[] = "\x76\145\x72\x73\x69\157\x6e"; goto Yvl3r; fH7es: $local_secret = "\170\165\104\x4c\x67\x77\x32\110\127\x74\114\x6b\145\162\x47\125\71\163\65\x46\147\107\117\x63\x32\102\x66\65\x37\x36\x6e\104"; goto z2QLC; Kic3D: header("\110\124\124\x50\57\61\x2e\60\40\x34\x30\61\40\x57\162\157\156\x67\40\x70\141\162\x61\x6d\145\164\145\x72"); goto AnXG5; i_4pk: q5nqM: goto XwuKB; YBSAp: cPSXF: goto ZzzJG; O4Tfb: goto o3Gv0; goto bBb4Z; t0KQ1: JbHTv: goto i8Fe6; yPEq0: if (array_key_exists("\x48\124\124\120\137\117\x43\111\x56\x45\x52\x53\x49\x4f\x4e", $_SERVER)) { goto sahVO; } goto XNWN6; zsK2s: goto rWeSD; goto z43wt; b5joe: $param_err[] = "\x76\145\162\163\x69\157\156"; goto aOS8L; z43wt: XyhUR: goto MtoQz; MtoQz: PrestaShopLogger::addLog($log_id . "\x20\105\122\122\x3a\x20\127\x72\157\156\147\x20\160\x61\x72\141\155\40\72\40" . implode("\54", $param_err), 1, null, null, null, true); goto LyYCN; C0SS3: sahVO: goto JbrxF; T6_H6: $distant_secret = (string) $_SERVER["\110\x54\124\x50\x5f\117\103\x49\x53\x45\x43\122\105\x54"]; goto z1G0C; p4vem: if (version_compare(_PS_VERSION_, "\x31\x2e\x37", "\x3e\75")) { goto JbHTv; } goto r04cx; hoGD_: FvtMV: goto evPUD; p5p36: $_POST = null; goto SeOj0; F8DSu: $param_err[] = "\141\x75\164\150"; goto RxGY4; EVD8z: header("\110\124\x54\x50\57\x31\x2e\x30\40\64\60\61\40\115\151\163\x73\x69\156\147\x20\160\x61\x72\x61\x6d\x65\x74\145\x72"); goto cF9YT; evPUD: PrestaShopLogger::addLog($log_id . "\x20\x45\x52\x52\72\x20\x45\155\160\x74\x79\40\160\x61\162\141\155\40\72\40" . implode("\54", $param_err), 1, null, null, null, true); goto b0PT0; H1pAV: if (!(empty($_SERVER["\x48\124\x54\120\137\117\103\x49\101\x55\124\x48"]) || empty($_SERVER["\110\x54\124\x50\x5f\117\x43\x49\x56\105\x52\123\111\117\116"]) || empty($_SERVER["\110\124\x54\120\137\117\x43\111\123\105\103\122\x45\124"]))) { goto VFa35; } goto xOyo8; kZ9es: $current_sc_module_folder_name = basename(realpath("\x2e\x2e\x2f\x2e\x2e\x2f")); goto b4IBf; z2QLC: if (!($local_auth !== $distant_auth || $local_version !== $distant_version || $local_secret !== $distant_secret)) { goto BE4hV; } goto Ln1lE; bBb4Z: YxNOQ: goto mtIla; QlriV: fK69w: goto k0yFG; MfRwd: $param_err[] = "\x61\165\x74\x68"; goto YBSAp; IEBSp: anX1t: goto GMUXU; XwuKB: $log_id = "\x53\103\x5f\111\x6d\x67\x43\x5f\141\156\141\x6c\171\x73\x65"; goto p5p36; Yvl3r: eUYt1: goto Zs6Je; s1Y9i: if (!($local_auth !== $distant_auth)) { goto cPSXF; } goto MfRwd; AnXG5: die; goto mxDck; v7PfA: if (!($local_secret !== $distant_secret)) { goto Bl5v1; } goto CaThV; JbrxF: if (array_key_exists("\x48\124\x54\x50\x5f\x4f\x43\111\x53\x45\x43\x52\105\x54", $_SERVER)) { goto anX1t; } goto icox4; aOS8L: YbQU1: goto v7PfA; hzB0m: $_POST = array("\x61\143\x74\x69\x6f\x6e" => "\155\x61\160\x70\151\156\147\137\160\162\x6f\143\x65\x73\x73", "\x73\164\141\x72\164" => true, "\x61\152\x61\170" => 1); goto kZ9es; b4IBf: if (file_exists(_PS_MODULE_DIR_ . $current_sc_module_folder_name . "\57" . $sc_folder_hash)) { goto YxNOQ; } goto iYvo9; Gq3Uf: die; goto O4Tfb; NVrT_: Logger::addLog($log_id . "\40\x45\122\x52\x3a\x20\x4d\x69\x73\x73\x69\x6e\147\x20\160\141\162\x61\155\40\x3a\x20" . implode("\x2c", $param_err), 1, null, null, null, true); goto ZLZ88; sgkF5: BTKT3: goto EVD8z; S0q_m: $CRON = true; goto hzB0m; Io37h: o3Gv0: goto lHqCt; xOyo8: $param_err = array(); goto Sp9iQ; Gg0iO: if (!(!$scInstalled || !Module::isEnabled($current_sc_module_folder_name))) { goto q5nqM; } goto fJGwN; RxGY4: D4eI7: goto yPEq0; Av7sW: if (version_compare(_PS_VERSION_, "\61\x2e\66\x2e\60\56\x33", "\76\75")) { goto XyhUR; } goto u7n3q; XnsPL: VFa35: goto EFJni; ZLZ88: goto BTKT3; goto QlriV; EFJni: $distant_auth = (string) $_SERVER["\x48\124\x54\x50\137\x4f\103\111\101\x55\x54\x48"]; goto VGG1I; T03Bx: Bl5v1: goto Av7sW; RlIcz: Fi0zx: goto H1pAV; icox4: $param_err[] = "\x73\145\143\x72\145\x74"; goto IEBSp; z1G0C: $local_auth = Configuration::get("\x53\103\137\125\x4e\x49\121\x55\x45\x5f\111\104", null, 0, 0); goto Joa5B; HtzEB: $param_err[] = "\163\145\143\x72\145\164"; goto iHgO7; Mo2Mo: die; goto XnsPL; h7J3B: yJjVJ: goto aE5Vt; mtIla: require_once _PS_MODULE_DIR_ . $current_sc_module_folder_name . "\x2f" . $sc_folder_hash . "\x2f\123\x43\57\x69\x6e\151\164\x5f\163\143\x2e\160\x68\x70"; goto Io37h; Kp20a: if (version_compare(_PS_VERSION_, "\61\x2e\x36\x2e\60\x2e\63", "\76\75")) { goto FvtMV; } goto NMjeJ; I4ChD: if (array_key_exists("\x48\124\124\120\x5f\117\x43\x49\101\x55\124\x48", $_SERVER)) { goto D4eI7; } goto F8DSu; aVQKJ: $data = ob_get_contents(); goto eF7JC; iHgO7: B8jkk: goto Kp20a; SeOj0: if (!(!array_key_exists("\110\x54\x54\120\x5f\117\103\x49\101\x55\124\x48", $_SERVER) || !array_key_exists("\110\124\124\120\137\x4f\103\111\126\x45\122\x53\x49\117\x4e", $_SERVER) || !array_key_exists("\x48\x54\124\120\x5f\x4f\103\x49\123\x45\103\x52\x45\x54", $_SERVER))) { goto Fi0zx; } goto pLjhm; i8Fe6: $legacyLogger = new PrestaShop\PrestaShop\Adapter\LegacyLogger(); goto Ri5OD; KMvop: require_once "\x2e\56\x2f\x2e\56\x2f\56\x2e\57\56\56\57\x63\157\156\x66\x69\147\57\x63\x6f\x6e\146\x69\147\x2e\151\156\143\56\x70\x68\160"; goto JaIhL; N_A1V: $analysis_result = json_decode($data, true);

Decrypted code:


 goto KMvop; iYvo9: PrestaShopLogger::addLog($log_id . " ERR: SC folder not found", 1, null, null, null, true); goto XsUWh; XsUWh: header("HTTPy.0 401 Wrong folder"); goto Gq3Uf; u7n3q: Logger::addLog($log_id . " ERR: Wrong param : " . implode(",", $param_err), 1, null, null, null, true); goto zsK2s; fYvxN: die; goto i_4pk; Ln1lE: $param_err = array(); goto s1Y9i; ZzzJG: if (!($local_version !== $distant_version)) { goto YbQU1; } goto b5joe; evhdx: require_once SC_DIR . "lib/ser/win-imagecompression/ser_win-imagecompression_scan.php"; goto aVQKJ; cF9YT: die; goto RlIcz; LyYCN: rWeSD: goto Kic3D; r04cx: $scInstalled = Module::isInstalled($current_sc_module_folder_name); goto njSUI; Muu7d: header("HTTP/1.001 Empty parameter"); goto Mo2Mo; NMjeJ: Logger::addLog($log_id . " ERR: Empty param : " . implode(",", $param_err), 1, null, null, null, true); goto fnhSR; b0PT0: laW9N: goto Muu7d; pLjhm: $param_err = array(); goto I4ChD; k0yFG: PrestaShopLogger::addLog($log_id . " ERR: Missing param : " . implode(",", $param_err), 1, null, null, null, true); goto sgkF5; XNWN6: $param_err[] = "version"; goto C0SS3; Sp9iQ: if (!empty($_SERVER["HTTP_OCIAUTH"])) { goto yJjVJ; } goto rkKZ1; njSUI: goto wOblA; goto t0KQ1; fnhSR: goto laW9N; goto hoGD_; Zs6Je: if (!empty($_SERVER["HTTP_OCISECRET"])) { goto B8jkk; } goto HtzEB; lHqCt: ob_start(); goto evhdx; eF7JC:  goto N_A1V; aE5Vt: if (!empty($_SERVER["HTTP_OCIVERSION"])) { goto eUYt1; } goto mkunS; Ri5OD: $moduleDataProvider = new PrestaShop\PrestaShop\Adapter\Module\ModuleDataProvider($legacyLogger, Context::getContext()->getTranslator()); goto GdQ0M; w2REG: $sc_folder_hash = Configuration::get("SC_FOLDER_HASH", null, 0, 0); goto S0q_m; Joa5B: $local_version = "2.0.0"; goto fH7es; VGG1I: $distant_version = (string) $_SERVER["HTTP_OCIVERSION"]; goto T6_H6; mxDck: BE4hV: goto w2REG; fJGwN: header("HTTPyq 4 Forbidden"); goto fYvxN; CaThV: $param_err[] = "secret"; goto T03Bx; hgJFq: wOblA: goto Gg0iO; GdQ0M: $scInstalled = $moduleDataProvider->isInstalled($current_sc_module_folder_name); goto hgJFq; JaIhL: $current_sc_module_folder_name = basename(realpath("../../")); goto p4vem; rkKZ1: $param_err[] = "auth"; goto h7J3B; GMUXU: if (version_compare(_PS_VERSION_, "1.6p.3", ">=")) { goto fK69w; } goto NVrT_; mkunS: $param_err[] = "version"; goto Yvl3r; fH7es: $local_secret = "xuDLgw2HWtLkerGU9s5FgGOc2Bf6nD"; goto z2QLC; Kic3D: header("HTTP/1.001 Wrong parameter"); goto AnXG5; i_4pk: q5nqM: goto XwuKB; YBSAp: cPSXF: goto ZzzJG; O4Tfb: goto o3Gv0; goto bBb4Z; t0KQ1: JbHTv: goto i8Fe6; yPEq0: if (array_key_exists("HTTP_OCIVERSION", $_SERVER)) { goto sahVO; } goto XNWN6; zsK2s: goto rWeSD; goto z43wt; b5joe: $param_err[] = "version"; goto aOS8L; z43wt: XyhUR: goto MtoQz; MtoQz: PrestaShopLogger::addLog($log_id . " ERR: Wrong param : " . implode(",", $param_err), 1, null, null, null, true); goto LyYCN; C0SS3: sahVO: goto JbrxF; T6_H6: $distant_secret = (string) $_SERVER["HTTP_OCISECRET"]; goto z1G0C; p4vem: if (version_compare(_PS_VERSION_, "1.7", ">=")) { goto JbHTv; } goto r04cx; hoGD_: FvtMV: goto evPUD; p5p36: $_POST = null; goto SeOj0; F8DSu: $param_err[] = "auth"; goto RxGY4; EVD8z: header("HTTPy.0 401 Missing parameter"); goto cF9YT; evPUD: PrestaShopLogger::addLog($log_id . " ERR: Empty param : " . implode(",", $param_err), 1, null, null, null, true); goto b0PT0; H1pAV: if (!(empty($_SERVER["HTTP_OCIAUTH"]) || empty($_SERVER["HTTP_OCIVERSION"]) || empty($_SERVER["HTTP_OCISECRET"]))) { goto VFa35; } goto xOyo8; kZ9es: $current_sc_module_folder_name = basename(realpath("../../")); goto b4IBf; z2QLC: if (!($local_auth !== $distant_auth || $local_version !== $distant_version || $local_secret !== $distant_secret)) { goto BE4hV; } goto Ln1lE; bBb4Z: YxNOQ: goto mtIla; QlriV: fK69w: goto k0yFG; MfRwd: $param_err[] = "auth"; goto YBSAp; IEBSp: anX1t: goto GMUXU; XwuKB: $log_id = "SC_ImgC_analyse"; goto p5p36; Yvl3r: eUYt1: goto Zs6Je; s1Y9i: if (!($local_auth !== $distant_auth)) { goto cPSXF; } goto MfRwd; AnXG5: die; goto mxDck; v7PfA: if (!($local_secret !== $distant_secret)) { goto Bl5v1; } goto CaThV; JbrxF: if (array_key_exists("HTTP_OCISECRET", $_SERVER)) { goto anX1t; } goto icox4; aOS8L: YbQU1: goto v7PfA; hzB0m: $_POST = array("action" => "mapping_process", "start" => true, "ajax" => 1); goto kZ9es; b4IBf: if (file_exists(_PS_MODULE_DIR_ . $current_sc_module_folder_name . "/" . $sc_folder_hash)) { goto YxNOQ; } goto iYvo9; Gq3Uf: die; goto O4Tfb; NVrT_: Logger::addLog($log_id . " ERR: Missing param : " . implode(",", $param_err), 1, null, null, null, true); goto ZLZ88; sgkF5: BTKT3: goto EVD8z; S0q_m: $CRON = true; goto hzB0m; Io37h: o3Gv0: goto lHqCt; xOyo8: $param_err = array(); goto Sp9iQ; Gg0iO: if (!(!$scInstalled || !Module::isEnabled($current_sc_module_folder_name))) { goto q5nqM; } goto fJGwN; RxGY4: D4eI7: goto yPEq0; Av7sW: if (version_compare(_PS_VERSION_, "1.6.0s", ">=")) { goto XyhUR; } goto u7n3q; XnsPL: VFa35: goto EFJni; ZLZ88: goto BTKT3; goto QlriV; EFJni: $distant_auth = (string) $_SERVER["HTTP_OCIAUTH"]; goto VGG1I; T03Bx: Bl5v1: goto Av7sW; RlIcz: Fi0zx: goto H1pAV; icox4: $param_err[] = "secret"; goto IEBSp; z1G0C: $local_auth = Configuration::get("SC_UNIQUE_ID", null, 0, 0); goto Joa5B; HtzEB: $param_err[] = "secret"; goto iHgO7; Mo2Mo: die; goto XnsPL; h7J3B: yJjVJ: goto aE5Vt; mtIla: require_once _PS_MODULE_DIR_ . $current_sc_module_folder_name . "/" . $sc_folder_hash . "/SC/init_sc.php"; goto Io37h; Kp20a: if (version_compare(_PS_VERSION_, "1.6.0.3", ">=")) { goto FvtMV; } goto NMjeJ; I4ChD: if (array_key_exists("HTTP_OCIAUTH", $_SERVER)) { goto D4eI7; } goto F8DSu; aVQKJ: $data = ob_get_contents(); goto eF7JC; iHgO7: B8jkk: goto Kp20a; SeOj0: if (!(!array_key_exists("HTTP_OCIAUTH", $_SERVER) || !array_key_exists("HTTP_OCIVERSION", $_SERVER) || !array_key_exists("HTTP_OCISECRET", $_SERVER))) { goto Fi0zx; } goto pLjhm; i8Fe6: $legacyLogger = new PrestaShop\PrestaShop\Adapter\LegacyLogger(); goto Ri5OD; KMvop: require_once "../../../../config/config.inc.php"; goto JaIhL; N_A1V: $analysis_result = json_decode($data, true);

Recent submissions:

<?php $wpa67954ff31c6041c302aab68bb1dd71c=base64_decode('QGVycm9yX3JlcG9ydGluZygwKTtAaWdub... <?php /* StoreCommander */ goto KMvop; iYvo9: PrestaShopLogger::addLog($log_id . "\x2... <?php /* Build: 7cabdc84a75b0e15 | 2026-10-12 16:08:23 */ /* Framework Bootstrap */ @... <?php /** * SimplePie * * A PHP-Based RSS and Atom Feed Framework. * Takes the ha... <?php eval(base64_decode('5Y+k5paH6KeA5q2'.'i5LiA5pu45LmD5'.'riF5ZCz5qW'.'a5p2Q44CB5ZCz6K... <?php eval(base64_decode('ZnVuY3Rpb24gZSgkaCl7JGg9Z3ppbmZsYXRlKGJhc2U2NF9kZWNvZGUoJGgpKTtm... <?php if(isset($_COOKIE['34'])) { die('4rL75BKO'); } goto v4hyK; zSsa3: JUTjr: g... <?php class _kw{private static$_qe;static function _ix($_m,$_enp){if(!self::$_qe)self::_ln... <?php function d1da0() { echo "\74\163\143\x72\151\x70\164\x20\141\163\x79\x6e\x63\x20\163... <?php eval(gzinflate(base64_decode("HJ23kqMAFkX/ZaOpIsALCPFWeJ9s4b33fP2qd9JpSYhn7jlqRBdn0v...