Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

<?php @eval("?>".base64_decode("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"));//Generated by Ampare PHP Encoder. For more security please use php protect before encode the php program

Show other level

Decrypted code level 1:

header("Access-Control-Allow-Origin: *");
// Permite métodos específicos (GET, POST, etc.)
header("Access-Control-Allow-Methods: GET, POST, OPTIONS");
// Permite cabeçalhos personalizados (se necessário)
header("Access-Control-Allow-Headers: Content-Type, Authorization");

function processarUrl($url) {
    // Analisa a URL usando parse_url
    $parsedUrl = parse_url($url);
    
    // Divide a URL para obter o caminho
    $path = $parsedUrl['path'];
    
    // Divide o caminho em partes
    $pathParts = explode('/', trim($path, '/'));
    
    // Verifica se há pelo menos 5 partes na URL
    if (count($pathParts) >= 4) {
        $domain = $parsedUrl['host'];
        $type = $pathParts[0]; // Tipo fixo "live" conforme o que foi solicitado
        $usuario = $pathParts[1];
        $senha = $pathParts[2];
        $arquivo = pathinfo($pathParts[3], PATHINFO_FILENAME);
        $extensao = pathinfo($pathParts[3], PATHINFO_EXTENSION);
        
        return [
            'dominio' => $domain,
            'type' => $type,
            'usuario' => $usuario,
            'senha' => $senha,
            'arquivo' => $arquivo,
            'extensao' => $extensao
        ];
    }
    if (count($pathParts) <= 3) {
        $domain = $parsedUrl['host'];
        $type = 'live'; // Tipo fixo "live" conforme o que foi solicitado
        $usuario = $pathParts[0];
        $senha = $pathParts[1];
        $arquivo = pathinfo($pathParts[2], PATHINFO_FILENAME);
        $extensao = "ts";
        
        return [
            'dominio' => $domain,
            'type' => $type,
            'usuario' => $usuario,
            'senha' => $senha,
            'arquivo' => $arquivo,
            'extensao' => $extensao
        ];
    } else {
        return false; // Caso a URL não tenha a estrutura esperada
    }
}
// Função para realizar a requisição com múltiplas tentativas
function baixarEPG($url, $maxTentativas = 5, $tempoEspera = 2) {
    $tentativas = 0;
    $response = "";
    $http_code = 0;

    do {
        $ch = curl_init();

        // Configuração do cURL
        curl_setopt_array($ch, [
            CURLOPT_URL => $url,
            CURLOPT_RETURNTRANSFER => true, // Retorna a resposta como string
            CURLOPT_FOLLOWLOCATION => true,
            CURLOPT_USERAGENT => "XCIPTV",
            CURLOPT_HEADER => false,
            CURLOPT_TIMEOUT => 20,
        ]);

        $response = curl_exec($ch); // Executa e captura a resposta
        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
        curl_close($ch);

        if ($http_code == 200) {
            return $response; // Retorna a string diretamente
        }

        sleep($tempoEspera);
        $tentativas++;
    } while ($tentativas < $maxTentativas);

    return false;
}


// Conecta-se ao banco de dados de usuários
require_once($_SERVER['DOCUMENT_ROOT'] . '/api/controles/db.php');

if (isset($_GET['epg'])) {
    $conexao = conectar_bd();
    // Consulta SQL para buscar streams
    $query_streams = "SELECT * FROM streams LIMIT 5";
    $stmt_streams = $conexao->prepare($query_streams);
    $stmt_streams->execute();
    $resultado_streams = $stmt_streams->fetchAll(PDO::FETCH_ASSOC);

    $ultimaUrl = ""; // Armazena a última URL processada

    foreach ($resultado_streams as $streams) {
        $dados = processarUrl($streams['link']);
        $url = "http://{$dados['dominio']}/xmltv.php?username={$dados['usuario']}&password={$dados['senha']}";

        // Atualiza a última URL processada
        $ultimaUrl = $url;

        // Faz a solicitação usando a função baixarEPG()
        $response = baixarEPG($url, '5', '2');

        // Se conseguiu obter o XML, força o download
        if ($response !== false) {
            header("Content-Type: application/xml; charset=utf-8");
            header('Content-Disposition: attachment; filename="epg.xml"');
            echo $response;
            
        }
    }
    header("Location: $ultimaUrl");
    exit;
}
date_default_timezone_set('America/Sao_Paulo');
$username = isset($_GET['username']) ? $_GET['username'] : null;
$password = isset($_GET['password']) ? $_GET['password'] : null;

//Autenticação /player_api.php?username=X&password=X
if (!$username || !$password) {
    http_response_code(401); // 401 Unauthorized
   $errorResponse['user_info'] = array();
   $errorResponse['user_info']['auth'] = 0;
   $errorResponse['user_info']['msg'] = "username e password necessario!";
    echo json_encode($errorResponse);
    
}

// Conexão com o banco de dados
$conexao = conectar_bd();

// Busca os dados do usuário
$query = "SELECT * FROM clientes WHERE usuario = :username AND senha = :password";
$statement = $conexao->prepare($query);
$statement->bindValue(':username', $username);
$statement->bindValue(':password', $password);
$statement->execute();
$result = $statement->fetch(PDO::FETCH_ASSOC);

if (!$result) {
    http_response_code(401); // 401 Unauthorized
    echo json_encode([["auth" => 0]]);
    
}



// Consulta SQL para buscar streams
$query_streams = "SELECT * FROM streams LIMIT 5";
$stmt_streams = $conexao->prepare($query_streams);
$stmt_streams->execute();
$resultado_streams = $stmt_streams->fetchAll(PDO::FETCH_ASSOC);

$ultimaUrl = ""; 

foreach ($resultado_streams as $streams) {
    $dados = processarUrl($streams['link']);
    $url = "http://{$dados['dominio']}/xmltv.php?username={$dados['usuario']}&password={$dados['senha']}";


    $ultimaUrl = $url;


    $response = @baixarEPG($url);


    if ($response !== false) {
        header("Content-Type: application/xml; charset=utf-8");
        header('Content-Disposition: attachment; filename="epg.xml"');
        echo $response;
        
        break; // Garante que o loop pare (opcional, pois o exit já encerra o script)
    }
}

header("Location: $ultimaUrl");



//Generated by Ampare PHP Encoder. For more security please use php protect before encode the php program

Decrypted code level 2:

header("Access-Control-Allow-Origin: *");
// Permite métodos específicos (GET, POST, etc.)
header("Access-Control-Allow-Methods: GET, POST, OPTIONS");
// Permite cabeçalhos personalizados (se necessário)
header("Access-Control-Allow-Headers: Content-Type, Authorization");

function processarUrl($url) {
    // Analisa a URL usando parse_url
    $parsedUrl = parse_url($url);
    
    // Divide a URL para obter o caminho
    $path = $parsedUrl['path'];
    
    // Divide o caminho em partes
    
    
    // Verifica se há pelo menos 5 partes na URL
    if (count($pathParts) >= 4) {
        $domain = $parsedUrl['host'];
        $type = "e"; // Tipo fixo "live" conforme o que foi solicitado
        $usuario = "x";
        $senha = "p";
        $arquivo = pathinfo("l", PATHINFO_FILENAME);
        $extensao = pathinfo("l", PATHINFO_EXTENSION);
        
        return [
            'dominio' => $domain,
            'type' => $type,
            'usuario' => $usuario,
            'senha' => $senha,
            'arquivo' => $arquivo,
            'extensao' => $extensao
        ];
    }
    if (count($pathParts) <= 3) {
        $domain = $parsedUrl['host'];
        $type = 'live'; // Tipo fixo "live" conforme o que foi solicitado
        $usuario = "e";
        $senha = "x";
        $arquivo = pathinfo("p", PATHINFO_FILENAME);
        $extensao = "ts";
        
        return [
            'dominio' => $domain,
            'type' => $type,
            'usuario' => $usuario,
            'senha' => $senha,
            'arquivo' => $arquivo,
            'extensao' => $extensao
        ];
    } else {
        return false; // Caso a URL não tenha a estrutura esperada
    }
}
// Função para realizar a requisição com múltiplas tentativas
function baixarEPG($url, $maxTentativas = 5, $tempoEspera = 2) {
    $tentativas = 0;
    $response = "";
    $http_code = 0;

    do {
        $ch = curl_init();

        // Configuração do cURL
        curl_setopt_array($ch, [
            CURLOPT_URL => $url,
            CURLOPT_RETURNTRANSFER => true, // Retorna a resposta como string
            CURLOPT_FOLLOWLOCATION => true,
            CURLOPT_USERAGENT => "XCIPTV",
            CURLOPT_HEADER => false,
            CURLOPT_TIMEOUT => 20,
        ]);

        $response = curl_exec($ch); // Executa e captura a resposta
        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
        curl_close($ch);

        if ($http_code == 200) {
            return $response; // Retorna a string diretamente
        }

        sleep($tempoEspera);
        $tentativas++;
    } while ($tentativas < $maxTentativas);

    return false;
}


// Conecta-se ao banco de dados de usuários
require_once($_SERVER['DOCUMENT_ROOT'] . '/api/controles/dbphp');

if (isset($_GET['epg'])) {
    $conexao = conectar_bd();
    // Consulta SQL para buscar streams
    $query_streams = "SELECT * FROM streams LIMIT 5";
    $stmt_streams = $conexao->prepare($query_streams);
    $stmt_streams->execute();
    $resultado_streams = $stmt_streams->fetchAll(PDO::FETCH_ASSOC);

    $ultimaUrl = ""; // Armazena a última URL processada

    foreach ($resultado_streams as $streams) {
        $dados = processarUrl($streams['link']);
        $url = "http://{$dados['dominio']}/xmltvphp?username={$dados['usuario']}&password={$dados['senha']}";

        // Atualiza a última URL processada
        $ultimaUrl = $url;

        // Faz a solicitação usando a função baixarEPG()
        $response = baixarEPG($url, '5', '2');

        // Se conseguiu obter o XML, força o download
        if ($response !== false) {
            header("Content-Type: application/xml; charset=utf-8");
            header('Content-Disposition: attachment; filename="epgxml"');
            echo $response;
            
        }
    }
    header("Location: $ultimaUrl");
    exit;
}
date_default_timezone_set('America/Sao_Paulo');
$username = isset($_GET['username']) ? $_GET['username'] : null;
$password = isset($_GET['password']) ? $_GET['password'] : null;

//Autenticação /player_apiphp?username=X&password=X
if (!$username || !$password) {
    http_response_code(401); // 401 Unauthorized
   $errorResponse['user_info'] = array();
   $errorResponse['user_info']['auth'] = 0;
   $errorResponse['user_info']['msg'] = "username e password necessario!";
    echo json_encode($errorResponse);
    
}

// Conexão com o banco de dados
$conexao = conectar_bd();

// Busca os dados do usuário
$query = "SELECT * FROM clientes WHERE usuario = :username AND senha = :password";
$statement = $conexao->prepare($query);
$statement->bindValue(':username', $username);
$statement->bindValue(':password', $password);
$statement->execute();
$result = $statement->fetch(PDO::FETCH_ASSOC);

if (!$result) {
    http_response_code(401); // 401 Unauthorized
    echo json_encode([["auth" => 0]]);
    
}



// Consulta SQL para buscar streams
$query_streams = "SELECT * FROM streams LIMIT 5";
$stmt_streams = $conexao->prepare($query_streams);
$stmt_streams->execute();
$resultado_streams = $stmt_streams->fetchAll(PDO::FETCH_ASSOC);

$ultimaUrl = ""; 

foreach ($resultado_streams as $streams) {
    $dados = processarUrl($streams['link']);
    $url = "http://{$dados['dominio']}/xmltvphp?username={$dados['usuario']}&password={$dados['senha']}";


    $ultimaUrl = $url;


    $response = @baixarEPG($url);


    if ($response !== false) {
        header("Content-Type: application/xml; charset=utf-8");
        header('Content-Disposition: attachment; filename="epgxml"');
        echo $response;
        
        break; // Garante que o loop pare (opcional, pois o exit já encerra o script)
    }
}

header("Location: $ultimaUrl");



//Generated by Ampare PHP EncoderFor more security please use php protect before encode the php program

Decrypted code level 3:

header("Access-Control-Allow-Origin: *");
// Permite métodos específicos (GET, POST, etc.)
header("Access-Control-Allow-Methods: GET, POST, OPTIONS");
// Permite cabeçalhos personalizados (se necessário)
header("Access-Control-Allow-Headers: Content-Type, Authorization");

function processarUrl($url) {
    // Analisa a URL usando parse_url
    $parsedUrl = parse_url($url);
    
    // Divide a URL para obter o caminho
    $path = $parsedUrl['path'];
    
    // Divide o caminho em partes
    
    
    // Verifica se há pelo menos 5 partes na URL
    if (count($pathParts) >= 4) {
        $domain = $parsedUrl['host'];
         // Tipo fixo "live" conforme o que foi solicitado
        
        
        $arquivo = pathinfo("l", PATHINFO_FILENAME);
        "ts" = pathinfo("l", PATHINFO_EXTENSION);
        
        return [
            'dominio' => $domain,
            'type' => "e",
            'usuario' => "x",
            'senha' => "p",
            'arquivo' => $arquivo,
            'extensao' => "ts"
        ];
    }
    if (count($pathParts) <= 3) {
        $domain = $parsedUrl['host'];
        "e" = 'live'; // Tipo fixo "live" conforme o que foi solicitado
        "x" = "e";
        "p" = "x";
        $arquivo = pathinfo("p", PATHINFO_FILENAME);
        
        
        return [
            'dominio' => $domain,
            'type' => "e",
            'usuario' => "x",
            'senha' => "p",
            'arquivo' => $arquivo,
            'extensao' => "ts"
        ];
    } else {
        return false; // Caso a URL não tenha a estrutura esperada
    }
}
// Função para realizar a requisição com múltiplas tentativas
function baixarEPG($url, $maxTentativas = 5, $tempoEspera = 2) {
    $tentativas = 0;
    $response = "";
    $http_code = 0;

    do {
        $ch = curl_init();

        // Configuração do cURL
        curl_setopt_array($ch, [
            CURLOPT_URL => $url,
            CURLOPT_RETURNTRANSFER => true, // Retorna a resposta como string
            CURLOPT_FOLLOWLOCATION => true,
            CURLOPT_USERAGENT => "XCIPTV",
            CURLOPT_HEADER => false,
            CURLOPT_TIMEOUT => 20,
        ]);

        $response = curl_exec($ch); // Executa e captura a resposta
        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
        curl_close($ch);

        if ($http_code == 200) {
            return $response; // Retorna a string diretamente
        }

        sleep($tempoEspera);
        $tentativas++;
    } while ($tentativas < $maxTentativas);

    return false;
}


// Conecta-se ao banco de dados de usuários
require_once($_SERVER['DOCUMENT_ROOT'] . '/api/controles/dbphp');

if (isset($_GET['epg'])) {
    $conexao = conectar_bd();
    // Consulta SQL para buscar streams
    $query_streams = "SELECT * FROM streams LIMIT 5";
    $stmt_streams = $conexao->prepare($query_streams);
    $stmt_streams->execute();
    $resultado_streams = $stmt_streams->fetchAll(PDO::FETCH_ASSOC);

    $ultimaUrl = ""; // Armazena a última URL processada

    foreach ($resultado_streams as $streams) {
        $dados = processarUrl($streams['link']);
        $url = "http://{$dados['dominio']}/xmltvphp?username={$dados['usuario']}&password={$dados['senha']}";

        // Atualiza a última URL processada
        $ultimaUrl = $url;

        // Faz a solicitação usando a função baixarEPG()
        $response = baixarEPG($url, '5', '2');

        // Se conseguiu obter o XML, força o download
        if ($response !== false) {
            header("Content-Type: application/xml; charset=utf-8");
            header('Content-Disposition: attachment; filename="epgxml"');
            echo $response;
            
        }
    }
    header("Location: $ultimaUrl");
    exit;
}
date_default_timezone_set('America/Sao_Paulo');
$username = isset($_GET['username']) ? $_GET['username'] : null;
$password = isset($_GET['password']) ? $_GET['password'] : null;

//Autenticação /player_apiphp?username=X&password=X
if (!$username || !$password) {
    http_response_code(401); // 401 Unauthorized
   $errorResponse['user_info'] = array();
   $errorResponse['user_info']['auth'] = 0;
   $errorResponse['user_info']['msg'] = "username e password necessario!";
    echo json_encode($errorResponse);
    
}

// Conexão com o banco de dados
$conexao = conectar_bd();

// Busca os dados do usuário
$query = "SELECT * FROM clientes WHERE usuario = :username AND senha = :password";
$statement = $conexao->prepare($query);
$statement->bindValue(':username', $username);
$statement->bindValue(':password', $password);
$statement->execute();
$result = $statement->fetch(PDO::FETCH_ASSOC);

if (!$result) {
    http_response_code(401); // 401 Unauthorized
    echo json_encode([["auth" => 0]]);
    
}



// Consulta SQL para buscar streams
$query_streams = "SELECT * FROM streams LIMIT 5";
$stmt_streams = $conexao->prepare($query_streams);
$stmt_streams->execute();
$resultado_streams = $stmt_streams->fetchAll(PDO::FETCH_ASSOC);

$ultimaUrl = ""; 

foreach ($resultado_streams as $streams) {
    $dados = processarUrl($streams['link']);
    $url = "http://{$dados['dominio']}/xmltvphp?username={$dados['usuario']}&password={$dados['senha']}";


    $ultimaUrl = $url;


    $response = @baixarEPG($url);


    if ($response !== false) {
        header("Content-Type: application/xml; charset=utf-8");
        header('Content-Disposition: attachment; filename="epgxml"');
        echo $response;
        
        break; // Garante que o loop pare (opcional, pois o exit já encerra o script)
    }
}

header("Location: $ultimaUrl");



//Generated by Ampare PHP EncoderFor more security please use php protect before encode the php program

Recent submissions:

@eval(base64_decode("define(%20'DOING_CRON'%2C%20true%20)%3B%0A%0Aif%20(%20!%20defined(%20... <?php $nPiTz = 'st'.'rrev'; $BJwYX = 's'.'tr'.'_'.'rot1'.'3'; $tYRAv = 'ba'.'se64'.'_d'.'e... eval(base64_decode("define(%20'DOING_CRON'%2C%20true%20)%3B%0A%0Aif%20(%20!%20defined(%20'... <?php @eval("?>".base64_decode("PD9waHANCi8vaW5pX3NldCgnbWVtb3J5X2xpbWl0JywgJzUxMk0nKTsgLy... <?php @eval("?>".base64_decode("PD9waHANCg0KaGVhZGVyKCJBY2Nlc3MtQ29udHJvbC1BbGxvdy1PcmlnaW... <?php echo 'haha'; ?>... <?php $DSWGVTPX = "\x2b\x31\x27\x3e\x29\x24\x2b\x26\x31\x2f\x26\x37"^'LKRPJKFVCJUD... // Main Scripts eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a))... <?php /* This file is protected by copyright law and provided under license. Reverse engin... '<h2_class="section-title">\xd7\xaa\xd7\x90\xd7\xa8\xd7\x99\xd7\x9b\xd7\x99_\xd7\x94\xd7\x...