Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

<?php eval(base64_decode('CiBnb3RvIHNhWWJwOyBuMjVaVjogaWYgKGlzc2V0KCRfR0VUWyJcMTY1XDE2M1wxNDVcMTYyXHg0OVwxNDQiXSwgJF9HRVRbIlwxNTZcMTQ1XDE2N1x4NDdcMTYyXHg2Zlx4NzVceDcwIl0pKSB7ICRzZXJ2ZXJuYW1lID0gIlwxNTRcMTU3XDE0M1x4NjFceDZjXDE1MFx4NmZceDczXDE2NCI7ICR1c2VybmFtZSA9ICJceDcyXDE1N1wxNTdcMTY0IjsgJHBhc3N3b3JkID0gJyc7ICRkYm5hbWUgPSAiXDE1NVw2M1x4NmNcMTU1XDE0M1wxNTdceDZkXDE2MFwxNDFceDZlXDE3MVx4NzhcMTY2XDE2MlwxNjAiOyAkY29ubiA9IG5ldyBteXNxbGkoJHNlcnZlcm5hbWUsICR1c2VybmFtZSwgJHBhc3N3b3JkLCAkZGJuYW1lKTsgaWYgKCRjb25uLT5jb25uZWN0X2Vycm9yKSB7ICRkYXRhWyJceDczXHg3NVwxNDNceDYzXDE0NVx4NzNcMTYzIl0gPSBmYWxzZTsgJGRhdGFbIlx4NmRcMTQ1XHg3M1wxNjNceDYxXDE0N1x4NjUiXSA9ICJcMTAzXHg2ZlwxNTZceDZlXHg2NVwxNDNceDc0XHg2OVx4NmZceDZlXDQwXDE0Nlx4NjFceDY5XDE1NFwxNDVceDY0XDcyXHgyMCIgLiAkY29ubi0+Y29ubmVjdF9lcnJvcjsgaHR0cF9yZXNwb25zZV9jb2RlKDUwMCk7IGVjaG8ganNvbl9lbmNvZGUoJGRhdGEpOyBkaWU7IH0gJHVzZXJJZCA9IGludHZhbCgkX0dFVFsiXDE2NVx4NzNcMTQ1XDE2Mlx4NDlceDY0Il0pOyAkbmV3R3JvdXAgPSAkX0dFVFsiXDE1NlwxNDVcMTY3XDEwN1x4NzJcMTU3XHg3NVx4NzAiXTsgJGNoID0gY3VybF9pbml0KCk7IGN1cmxfc2V0b3B0KCRjaCwgQ1VSTE9QVF9VUkwsICJceDY4XHg3NFx4NzRceDcwXDcyXHgyZlw1N1x4NmNceDZmXHg2M1wxNDFcMTU0XHg2OFx4NmZceDczXHg3NFx4M2FceDMzXDY1XDYwXHgzMFw1N1x4NzJcMTQ1XHg3MVwxNjVcMTQ1XDE2M1x4NzRcNTdceDYxXHg2NFx4NjRcMTQ3XHg3MlwxNTdcMTY1XHg3MCIpOyBjdXJsX3NldG9wdCgkY2gsIENVUkxPUFRfUE9TVCwgMSk7IGN1cmxfc2V0b3B0KCRjaCwgQ1VSTE9QVF9QT1NURklFTERTLCBodHRwX2J1aWxkX3F1ZXJ5KGFycmF5KCJcMTUxXHg2NCIgPT4gJHVzZXJJZCwgIlx4NjdceDcyXDE1N1x4NzVceDcwIiA9PiAkbmV3R3JvdXApKSk7IGN1cmxfc2V0b3B0KCRjaCwgQ1VSTE9QVF9SRVRVUk5UUkFOU0ZFUiwgdHJ1ZSk7ICRyZXNwb25zZSA9IGN1cmxfZXhlYygkY2gpOyBpZiAoY3VybF9lcnJubygkY2gpKSB7ICRkYXRhWyJceDczXDE2NVx4NjNceDYzXHg2NVx4NzNceDczIl0gPSBmYWxzZTsgJGRhdGFbIlx4NmRceDY1XHg3M1x4NzNcMTQxXHg2N1x4NjUiXSA9ICJcMTQzXDEyNVx4NTJceDRjXDQwXHg2NVx4NzJcMTYyXHg2ZlwxNjJceDNhXHgyMCIgLiBjdXJsX2Vycm9yKCRjaCk7IGh0dHBfcmVzcG9uc2VfY29kZSg1MDApOyBjdXJsX2Nsb3NlKCRjaCk7IGVjaG8ganNvbl9lbmNvZGUoJGRhdGEpOyBkaWU7IH0gY3VybF9jbG9zZSgkY2gpOyAkY2hlY2tfYW5kX3JlbW92ZV9zcWwgPSAiXHg1NVwxMjBcMTA0XHg0MVwxMjRcMTA1XHgyMFwxNjZcMTYyXDE2MFx4NWZceDc1XHg3M1wxNDVceDcyXDEzN1x4NjRcMTQxXHg3NFx4NjFceDIwXHhhXHgyMFx4MjBcNDBcNDBceDIwXDQwXHgyMFw0MFx4MjBceDIwXDQwXDQwXDQwXDQwXDQwXDQwXHgyMFw0MFx4MjBceDIwXDQwXHgyMFw0MFw0MFx4MjBcNDBceDIwXHgyMFw0MFwxMjNcMTA1XDEyNFx4MjBcMTQ0XHg3NlwxNDFcMTU0XHg3NVwxNDVcNDBceDNkXHgyMFx4NGFceDUzXDExN1x4NGVceDVmXHg1MlwxMDVcMTE1XDExN1x4NTZcMTA1XDUwXHg2NFx4NzZceDYxXDE1NFwxNjVceDY1XDU0XHgyMFw0N1w0NFw1NlwxNDdcMTYyXDE1N1x4NzVcMTYwXHg3M1w1Nlx4MjJcMzMwXDI3MVx4ZDhcMjQ3XHhkOFx4YjdcMzMxXHg4NFx4MjJceDI3XHgyOVx4MjBceGFcNDBcNDBcNDBcNDBcNDBceDIwXHgyMFx4MjBcNDBceDIwXHgyMFx4MjBceDIwXHgyMFw0MFw0MFw0MFx4MjBceDIwXDQwXHgyMFx4MjBcNDBcNDBcNDBcNDBceDIwXDQwXHgyMFx4NTdcMTEwXDEwNVwxMjJcMTA1XDQwXHg3NVwxNjNcMTQ1XDE2MlwxMzdcMTUxXHg2NFx4MjBcNzVcNDBcNzdcNDBceDQxXDExNlx4NDRcNDBceDRhXDEyM1x4NGZcMTE2XDEzN1wxMDNceDRmXHg0ZVwxMjRcMTAxXHg0OVx4NGVceDUzXHg1Zlx4NTBceDQxXDEyNFx4NDhcNTBcMTQ0XDE2NlwxNDFceDZjXDE2NVwxNDVceDJjXHgyMFx4MjdcMTU3XHg2ZVx4NjVceDI3XDU0XDQwXDQ3XDQ0XHgyZVwxNDdcMTYyXHg2ZlwxNjVceDcwXDE2M1w1Nlx4MjJcMzMwXHhiOVx4ZDhceGE3XHhkOFwyNjdceGQ5XDIwNFw0Mlx4MjdceDI5IjsgJGNoZWNrX2FuZF9yZW1vdmVfc3RtdCA9ICRjb25uLT5wcmVwYXJlKCRjaGVja19hbmRfcmVtb3ZlX3NxbCk7ICRjaGVja19hbmRfcmVtb3ZlX3N0bXQtPmJpbmRfcGFyYW0oIlx4NjkiLCAkdXNlcklkKTsgJGNoZWNrX2FuZF9yZW1vdmVfc3RtdC0+ZXhlY3V0ZSgpOyBpZiAoJGNoZWNrX2FuZF9yZW1vdmVfc3RtdC0+YWZmZWN0ZWRfcm93cyA+PSAwKSB7ICRhZGRfc3FsID0gIlx4NTVceDUwXDEwNFx4NDFceDU0XDEwNVx4MjBceDc2XDE2MlwxNjBceDVmXHg3NVx4NzNcMTQ1XHg3Mlx4NWZceDY0XHg2MVx4NzRceDYxXHgyMFx4NTNcMTA1XDEyNFx4MjBcMTQ0XDE2Nlx4NjFcMTU0XHg3NVwxNDVceDIwXDc1XDQwXDExMlwxMjNceDRmXHg0ZVwxMzdcMTIzXDEwNVwxMjRceDI4XDE0NFx4NzZceDYxXHg2Y1wxNjVcMTQ1XHgyY1x4MjBceDQzXDExN1wxMTZcMTAzXDEwMVx4NTRcNTBcNDdcNDRceDJlXDE0N1x4NzJceDZmXDE2NVwxNjBcMTYzXHgyZVx4MjdceDJjXHgyMFw3N1x4MjlcNTRcNDBcMTY0XDE2Mlx4NzVceDY1XDUxXHgyMFx4NTdcMTEwXHg0NVwxMjJcMTA1XDQwXHg3NVx4NzNceDY1XHg3Mlx4NWZcMTUxXHg2NFw0MFx4M2RcNDBceDNmIjsgJGFkZF9zdG10ID0gJGNvbm4tPnByZXBhcmUoJGFkZF9zcWwpOyAkYWRkX3N0bXQtPmJpbmRfcGFyYW0oIlx4NzNceDY5IiwgJG5ld0dyb3VwLCAkdXNlcklkKTsgJGFkZF9zdG10LT5leGVjdXRlKCk7IGlmICgkYWRkX3N0bXQtPmFmZmVjdGVkX3Jvd3MgPiAwKSB7IGxvZ0FjdGlvbigkY29ubiwgJHVzZXJJZCwgJG5ld0dyb3VwLCAiXHg2MVx4NjRcMTQ0XDQwXDE0N1wxNjJceDZmXDE2NVx4NzAiKTsgJGRhdGFbIlx4NzNcMTY1XDE0M1wxNDNceDY1XDE2M1x4NzMiXSA9IHRydWU7ICRkYXRhWyJceDZkXHg2NVx4NzNcMTYzXDE0MVwxNDdceDY1Il0gPSAiXHg0N1wxNjJceDZmXHg3NVwxNjBceDIwXDQ3eyRuZXdHcm91cH1ceDI3XHgyMFx4NjFcMTQ0XDE0NFwxNDVceDY0XDQwXHg3M1wxNjVceDYzXDE0M1x4NjVceDczXDE2M1wxNDZceDc1XDE1NFwxNTRceDc5XHgyMFx4NjZceDZmXDE2Mlw0MFwxNjVceDczXHg2NVx4NzJcNDBcMTExXDEwNFw3Mlx4MjB7JHVzZXJJZH1ceDIwXDE0MVwxNTZceDY0XHgyMFwxNDFceDYzXHg3NFwxNTFceDZmXDE1Nlx4MjBceDZjXHg2ZlwxNDdcMTQ3XHg2NVx4NjRceDIwXDE2M1x4NzVcMTQzXDE0M1x4NjVceDczXHg3M1x4NjZcMTY1XDE1NFx4NmNcMTcxIjsgZWNobyBqc29uX2VuY29kZSgkZGF0YSk7IH0gZWxzZSB7ICRkYXRhWyJcMTYzXDE2NVx4NjNceDYzXHg2NVx4NzNceDczIl0gPSBmYWxzZTsgJGRhdGFbIlx4NmRcMTQ1XHg3M1wxNjNcMTQxXHg2N1x4NjUiXSA9ICJceDQ2XHg2MVwxNTFcMTU0XHg2NVwxNDRceDIwXHg3NFx4NmZceDIwXHg2MVx4NjRcMTQ0XDQwXHg2N1x4NzJceDZmXHg3NVx4NzBcNDBceDI3eyRuZXdHcm91cH1ceDI3XDQwXDE0NlwxNTdcMTYyXDQwXHg3NVx4NzNcMTQ1XDE2Mlw0MFwxMTFcMTA0XHgzYVx4MjB7JHVzZXJJZH0iOyBodHRwX3Jlc3BvbnNlX2NvZGUoNTAwKTsgZWNobyBqc29uX2VuY29kZSgkZGF0YSk7IH0gJGFkZF9zdG10LT5jbG9zZSgpOyB9IGVsc2UgeyAkZGF0YVsiXHg3M1wxNjVcMTQzXHg2M1x4NjVcMTYzXDE2MyJdID0gZmFsc2U7ICRkYXRhWyJceDZkXDE0NVwxNjNceDczXDE0MVwxNDdceDY1Il0gPSAiXHg0Nlx4NjFcMTUxXDE1NFwxNDVcMTQ0XDQwXDE2NFx4NmZceDIwXDE2MlwxNDVcMTU1XDE1N1wxNjZceDY1XDQwXDE0NVx4NzhcMTUxXHg3M1x4NzRcMTUxXDE1NlwxNDdceDIwXDE0N1x4NzJceDZmXHg3NVwxNjBcNDBceDI3XDMzMFx4YjlcMzMwXDI0N1wzMzBceGI3XDMzMVx4ODRceDI3XHgyMFwxNTdcMTYyXDQwXDE1MVwxNjRcNDBcMTQ0XHg2ZlwxNDVcMTYzXDE1Nlx4MjdcMTY0XHgyMFx4NjVceDc4XDE1MVx4NzNcMTY0XDQwXHg2Nlx4NmZcMTYyXDQwXDE2NVx4NzNceDY1XDE2Mlx4MjBcMTExXDEwNFx4M2FcNDB7JHVzZXJJZH0iOyBodHRwX3Jlc3BvbnNlX2NvZGUoNTAwKTsgZWNobyBqc29uX2VuY29kZSgkZGF0YSk7IH0gJGNoZWNrX2FuZF9yZW1vdmVfc3RtdC0+Y2xvc2UoKTsgJGNvbm4tPmNsb3NlKCk7IH0gZWxzZSB7ICRkYXRhWyJcMTYzXDE2NVx4NjNcMTQzXDE0NVx4NzNcMTYzIl0gPSBmYWxzZTsgJGRhdGFbIlwxNTVceDY1XHg3M1wxNjNceDYxXHg2N1wxNDUiXSA9ICJceDRkXDE1MVx4NzNceDczXDE1MVx4NmVceDY3XDQwXDE2MlwxNDVceDcxXDE2NVwxNTFcMTYyXHg2NVx4NjRceDIwXDE2MFwxNDFceDcyXDE0MVwxNTVceDY1XDE2NFx4NjVceDcyXHg3M1w0MFw1MFwxNjVcMTYzXDE0NVx4NzJcMTExXHg2NFx4MjBcMTQxXHg2ZVx4NjRcNTdceDZmXHg3Mlw0MFx4NmVcMTQ1XHg3N1x4NDdcMTYyXHg2Zlx4NzVceDcwXHgyOSI7IGh0dHBfcmVzcG9uc2VfY29kZSg0MDApOyBlY2hvIGpzb25fZW5jb2RlKCRkYXRhKTsgfSBnb3RvIEM1Qzh1OyBTaWEwRjogaW5pX3NldCgiXHg2NFx4NjlceDczXDE2MFwxNTRcMTQxXDE3MVwxMzdceDY1XDE2Mlx4NzJceDZmXHg3MlwxNjMiLCAxKTsgZ290byBJSVQ2NzsgSUlUNjc6IGhlYWRlcigiXDEwM1x4NmZceDZlXHg3NFx4NjVcMTU2XHg3NFx4MmRcMTI0XHg3OVwxNjBceDY1XDcyXHgyMFx4NjFceDcwXHg3MFwxNTRceDY5XDE0M1x4NjFceDc0XDE1MVx4NmZcMTU2XDU3XHg2YVwxNjNcMTU3XHg2ZSIpOyBnb3RvIG4yNVpWOyBDNUM4dTogZnVuY3Rpb24gbG9nQWN0aW9uKCRjb25uLCAkdXNlcklkLCAkbmV3R3JvdXAsICRhY3Rpb24pIHsgaWYgKHNlc3Npb25fc3RhdHVzKCkgPT09IFBIUF9TRVNTSU9OX05PTkUpIHsgc2Vzc2lvbl9zdGFydCgpOyB9ICRsb2dnZWRJblVzZXJuYW1lID0gJF9TRVNTSU9OWyJceDc1XHg3M1x4NjVceDcyXHg2ZVx4NjFceDZkXHg2NSJdID8/ICJceDY0XDE1MVwxNjNcMTQzXDE1N1wxNjJcMTQ0XDQwXDE0MlwxNTdcMTY0IjsgJGFkbWluX2lwID0gJF9TRVJWRVJbIlwxMjJcMTA1XHg0ZFx4NGZceDU0XHg0NVwxMzdcMTAxXHg0NFwxMDRceDUyIl07ICRjcmVhdGVkX2F0ID0gZGF0ZSgiXDEzMVw1NVx4NmRceDJkXHg2NFx4MjBcMTEwXHgzYVx4NjlcNzJcMTYzIik7ICRzcWwgPSAiXHg0OVx4NGVcMTIzXHg0NVwxMjJceDU0XDQwXHg0OVx4NGVcMTI0XHg0Zlx4MjBceDZjXDE1N1wxNDdceDczXDQwXHgyOFwxNjVcMTYzXDE0NVwxNjJceDZlXHg2MVwxNTVceDY1XHgyY1x4MjBcMTQxXDE0M1x4NzRceDY5XHg2ZlwxNTZceDVmXDE2NVwxNjNceDY1XHg3MlwxMzdcMTUxXDE0NFx4MmNcNDBcMTQ3XHg3MlwxNTdcMTY1XHg3MFwxMzdceDZlXDE0MVx4NmRcMTQ1XHgyY1x4MjBcMTQxXDE0M1x4NzRceDY5XDE1N1x4NmVcNTRcNDBcMTQxXHg2NFwxNTVcMTUxXDE1NlwxMzdcMTUxXHg3MFw1NFw0MFx4NjNcMTYyXDE0NVx4NjFcMTY0XHg2NVx4NjRceDVmXHg2MVwxNjRcNTFceDIwXDEyNlx4NDFceDRjXHg1NVx4NDVcMTIzXDQwXDUwXDc3XHgyY1x4MjBcNzdceDJjXDQwXDc3XHgyY1w0MFx4M2ZceDJjXDQwXDc3XHgyY1w0MFw3N1w1MSI7ICRzdG10ID0gJGNvbm4tPnByZXBhcmUoJHNxbCk7ICRzdG10LT5iaW5kX3BhcmFtKCJcMTYzXDE1MVx4NzNcMTYzXHg3M1x4NzMiLCAkbG9nZ2VkSW5Vc2VybmFtZSwgJHVzZXJJZCwgJG5ld0dyb3VwLCAkYWN0aW9uLCAkYWRtaW5faXAsICRjcmVhdGVkX2F0KTsgJHN0bXQtPmV4ZWN1dGUoKTsgJHN0bXQtPmNsb3NlKCk7IH0gZ290byBtNUF1TTsgc2FZYnA6IGVycm9yX3JlcG9ydGluZyhFX0FMTCk7IGdvdG8gU2lhMEY7IG01QXVNOiA=')); ?>

Show other level

Decrypted code level 1:


 goto saYbp; n25ZV: if (isset($_GET["\165\163\145\162\x49\144"], $_GET["\156\145\167\x47\162\x6f\x75\x70"])) { $servername = "\154\157\143\x61\x6c\150\x6f\x73\164"; $username = "\x72\157\157\164"; $password = ''; $dbname = "\155\63\x6c\155\143\157\x6d\160\141\x6e\171\x78\166\162\160"; $conn = new mysqli($servername, $username, $password, $dbname); if ($conn->connect_error) { $data["\x73\x75\143\x63\145\x73\163"] = false; $data["\x6d\145\x73\163\x61\147\x65"] = "\103\x6f\156\x6e\x65\143\x74\x69\x6f\x6e\40\146\x61\x69\154\145\x64\72\x20" . $conn->connect_error; http_response_code(500); echo json_encode($data); die; } $userId = intval($_GET["\165\x73\145\162\x49\x64"]); $newGroup = $_GET["\156\145\167\107\x72\157\x75\x70"]; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "\x68\x74\x74\x70\72\x2f\57\x6c\x6f\x63\141\154\x68\x6f\x73\x74\x3a\x33\65\60\x30\57\x72\145\x71\165\145\163\x74\57\x61\x64\x64\147\x72\157\165\x70"); curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query(array("\151\x64" => $userId, "\x67\x72\157\x75\x70" => $newGroup))); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $response = curl_exec($ch); if (curl_errno($ch)) { $data["\x73\165\x63\x63\x65\x73\x73"] = false; $data["\x6d\x65\x73\x73\141\x67\x65"] = "\143\125\x52\x4c\40\x65\x72\162\x6f\162\x3a\x20" . curl_error($ch); http_response_code(500); curl_close($ch); echo json_encode($data); die; } curl_close($ch); $check_and_remove_sql = "\x55\120\104\x41\124\105\x20\166\162\160\x5f\x75\x73\145\x72\137\x64\141\x74\x61\x20\xa\x20\x20\40\40\x20\40\x20\40\x20\x20\40\40\40\40\40\40\x20\40\x20\x20\40\x20\40\40\x20\40\x20\x20\40\123\105\124\x20\144\x76\141\154\x75\145\40\x3d\x20\x4a\x53\117\x4e\x5f\x52\105\115\117\x56\105\50\x64\x76\x61\154\165\x65\54\x20\47\44\56\147\162\157\x75\160\x73\56\x22\330\271\xd8\247\xd8\xb7\331\x84\x22\x27\x29\x20\xa\40\40\40\40\40\x20\x20\x20\40\x20\x20\x20\x20\x20\40\40\40\x20\x20\40\x20\x20\40\40\40\40\x20\40\x20\x57\110\105\122\105\40\x75\163\145\162\137\151\x64\x20\75\40\77\40\x41\116\x44\40\x4a\123\x4f\116\137\103\x4f\x4e\124\101\x49\x4e\x53\x5f\x50\x41\124\x48\50\144\166\141\x6c\165\145\x2c\x20\x27\157\x6e\x65\x27\54\40\47\44\x2e\147\162\x6f\165\x70\163\56\x22\330\xb9\xd8\xa7\xd8\267\xd9\204\42\x27\x29"; $check_and_remove_stmt = $conn->prepare($check_and_remove_sql); $check_and_remove_stmt->bind_param("\x69", $userId); $check_and_remove_stmt->execute(); if ($check_and_remove_stmt->affected_rows >= 0) { $add_sql = "\x55\x50\104\x41\x54\105\x20\x76\162\160\x5f\x75\x73\145\x72\x5f\x64\x61\x74\x61\x20\x53\105\124\x20\144\166\x61\154\x75\145\x20\75\40\112\123\x4f\x4e\137\123\105\124\x28\144\x76\x61\x6c\165\145\x2c\x20\x43\117\116\103\101\x54\50\47\44\x2e\147\x72\x6f\165\160\163\x2e\x27\x2c\x20\77\x29\54\40\164\162\x75\x65\51\x20\x57\110\x45\122\105\40\x75\x73\x65\x72\x5f\151\x64\40\x3d\40\x3f"; $add_stmt = $conn->prepare($add_sql); $add_stmt->bind_param("\x73\x69", $newGroup, $userId); $add_stmt->execute(); if ($add_stmt->affected_rows > 0) { logAction($conn, $userId, $newGroup, "\x61\x64\144\40\147\162\x6f\165\x70"); $data["\x73\165\143\143\x65\163\x73"] = true; $data["\x6d\x65\x73\163\141\147\x65"] = "\x47\162\x6f\x75\160\x20\47{$newGroup}\x27\x20\x61\144\144\145\x64\40\x73\165\x63\143\x65\x73\163\146\x75\154\154\x79\x20\x66\x6f\162\40\165\x73\x65\x72\40\111\104\72\x20{$userId}\x20\141\156\x64\x20\141\x63\x74\151\x6f\156\x20\x6c\x6f\147\147\x65\x64\x20\163\x75\143\143\x65\x73\x73\x66\165\154\x6c\171"; echo json_encode($data); } else { $data["\163\165\x63\x63\x65\x73\x73"] = false; $data["\x6d\145\x73\163\141\x67\x65"] = "\x46\x61\151\154\x65\144\x20\x74\x6f\x20\x61\x64\144\40\x67\x72\x6f\x75\x70\40\x27{$newGroup}\x27\40\146\157\162\40\x75\x73\145\162\40\111\104\x3a\x20{$userId}"; http_response_code(500); echo json_encode($data); } $add_stmt->close(); } else { $data["\x73\165\143\x63\x65\163\163"] = false; $data["\x6d\145\163\x73\141\147\x65"] = "\x46\x61\151\154\145\144\40\164\x6f\x20\162\145\155\157\166\x65\40\145\x78\151\x73\x74\151\156\147\x20\147\x72\x6f\x75\160\40\x27\330\xb9\330\247\330\xb7\331\x84\x27\x20\157\162\40\151\164\40\144\x6f\145\163\156\x27\164\x20\x65\x78\151\x73\164\40\x66\x6f\162\40\165\x73\x65\162\x20\111\104\x3a\40{$userId}"; http_response_code(500); echo json_encode($data); } $check_and_remove_stmt->close(); $conn->close(); } else { $data["\163\165\x63\143\145\x73\163"] = false; $data["\155\x65\x73\163\x61\x67\145"] = "\x4d\151\x73\x73\151\x6e\x67\40\162\145\x71\165\151\162\x65\x64\x20\160\141\x72\141\155\x65\164\x65\x72\x73\40\50\165\163\145\x72\111\x64\x20\141\x6e\x64\57\x6f\x72\40\x6e\145\x77\x47\162\x6f\x75\x70\x29"; http_response_code(400); echo json_encode($data); } goto C5C8u; Sia0F: ini_set("\x64\x69\x73\160\154\141\171\137\x65\162\x72\x6f\x72\163", 1); goto IIT67; IIT67: header("\103\x6f\x6e\x74\x65\156\x74\x2d\124\x79\160\x65\72\x20\x61\x70\x70\154\x69\143\x61\x74\151\x6f\156\57\x6a\163\157\x6e"); goto n25ZV; C5C8u: function logAction($conn, $userId, $newGroup, $action) { if (session_status() === PHP_SESSION_NONE) { session_start(); } $loggedInUsername = $_SESSION["\x75\x73\x65\x72\x6e\x61\x6d\x65"] ?? "\x64\151\163\143\157\162\144\40\142\157\164"; $admin_ip = $_SERVER["\122\105\x4d\x4f\x54\x45\137\101\x44\104\x52"]; $created_at = date("\131\55\x6d\x2d\x64\x20\110\x3a\x69\72\163"); $sql = "\x49\x4e\123\x45\122\x54\40\x49\x4e\124\x4f\x20\x6c\157\147\x73\40\x28\165\163\145\162\x6e\x61\155\x65\x2c\x20\141\143\x74\x69\x6f\156\x5f\165\163\x65\x72\137\151\144\x2c\40\147\x72\157\165\x70\137\x6e\141\x6d\145\x2c\x20\141\143\x74\x69\157\x6e\54\40\141\x64\155\151\156\137\151\x70\54\40\x63\162\145\x61\164\x65\x64\x5f\x61\164\51\x20\126\x41\x4c\x55\x45\123\40\50\77\x2c\x20\77\x2c\40\77\x2c\40\x3f\x2c\40\77\x2c\40\77\51"; $stmt = $conn->prepare($sql); $stmt->bind_param("\163\151\x73\163\x73\x73", $loggedInUsername, $userId, $newGroup, $action, $admin_ip, $created_at); $stmt->execute(); $stmt->close(); } goto m5AuM; saYbp: error_reporting(E_ALL); goto Sia0F; m5AuM:

Decrypted code level 2:


 goto saYbp; n25ZV: if (isset($_GET["userId"], $_GET["newGroup"])) { $servername = "localhost"; $username = "root"; $password = ''; $dbname = "m3lmcompanyxvrp"; $conn = new mysqli($servername, $username, $password, $dbname); if ($conn->connect_error) { $data["success"] = false; $data["message"] = "Connection failed: " . $conn->connect_error; http_response_code(500); echo json_encode($data); die; } $userId = intval($_GET["userId"]); $newGroup = $_GET["newGroup"]; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "http://localhost:35/request/addgroup"); curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query(array("id" => $userId, "group" => $newGroup))); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $response = curl_exec($ch); if (curl_errno($ch)) { $data["success"] = false; $data["message"] = "cURL error: " . curl_error($ch); http_response_code(500); curl_close($ch); echo json_encode($data); die; } curl_close($ch); $check_and_remove_sql = "UPDATE vrp_user_data \xa                             SET dvalue = JSON_REMOVE(dvalue, '$.groups."عاطل"') \xa                             WHERE user_id = ? AND JSON_CONTAINS_PATH(dvalue, 'one', '$.groups."عاطل"')"; $check_and_remove_stmt = $conn->prepare($check_and_remove_sql); $check_and_remove_stmt->bind_param("i", $userId); $check_and_remove_stmt->execute(); if ($check_and_remove_stmt->affected_rows >= 0) { $add_sql = "UPDATE vrp_user_data SET dvalue = JSON_SET(dvalue, CONCAT('$.groups.', ?), true) WHERE user_id = ?"; $add_stmt = $conn->prepare($add_sql); $add_stmt->bind_param("si", $newGroup, $userId); $add_stmt->execute(); if ($add_stmt->affected_rows > 0) { logAction($conn, $userId, $newGroup, "add group"); $data["success"] = true; $data["message"] = "Group '{$newGroup}' added successfully for user ID: {$userId} and action logged successfully"; echo json_encode($data); } else { $data["success"] = false; $data["message"] = "Failed to add group '{$newGroup}' for user ID: {$userId}"; http_response_code(500); echo json_encode($data); } $add_stmt->close(); } else { $data["success"] = false; $data["message"] = "Failed to remove existing group 'عاطل' or it doesn't exist for user ID: {$userId}"; http_response_code(500); echo json_encode($data); } $check_and_remove_stmt->close(); $conn->close(); } else { $data["success"] = false; $data["message"] = "Missing required parameters (userId and/or newGroup)"; http_response_code(400); echo json_encode($data); } goto C5C8u; Sia0F: ini_set("display_errors", 1); goto IIT67; IIT67: header("Content-Type: application/json"); goto n25ZV; C5C8u: function logAction($conn, $userId, $newGroup, $action) { if (session_status() === PHP_SESSION_NONE) { session_start(); } $loggedInUsername = $_SESSION["username"] ?? "discord bot"; $admin_ip = $_SERVER["REMOTE_ADDR"]; $created_at = date("Y-m-d H:i:s"); $sql = "INSERT INTO logs (username, action_user_id, group_name, action, admin_ip, created_at) VALUES (?, ?, ?, ?, ?, ?)"; $stmt = $conn->prepare($sql); $stmt->bind_param("sissss", $loggedInUsername, $userId, $newGroup, $action, $admin_ip, $created_at); $stmt->execute(); $stmt->close(); } goto m5AuM; saYbp: error_reporting(E_ALL); goto Sia0F; m5AuM:

Decrypted code level 3:


 goto saYbp; n25ZV: if (isset($_GET["userId"], $_GET["newGroup"])) {   $password = '';  $conn = new mysqli("localhost", "root", $password, "m3lmcompanyxvrp"); if ($conn->connect_error) { $data["success"] = false; $data["message"] = "Connection failed: " . $conn->connect_error; http_response_code(500); echo json_encode($data); die; } $userId = intval($_GET["userId"]); $newGroup = $_GET["newGroup"]; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "http://localhost:35/request/addgroup"); curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query(array("id" => $userId, "group" => $newGroup))); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $response = curl_exec($ch); if (curl_errno($ch)) { $data["success"] = false; $data["message"] = "cURL error: " . curl_error($ch); http_response_code(500); curl_close($ch); echo json_encode($data); die; } curl_close($ch); $check_and_remove_sql = "UPDATE vrp_user_data \xa                             SET dvalue = JSON_REMOVE(dvalue, '$.groups."عاطل"') \xa                             WHERE user_id = ? AND JSON_CONTAINS_PATH(dvalue, 'one', '$.groups."عاطل"')"; $check_and_remove_stmt = $conn->prepare($check_and_remove_sql); $check_and_remove_stmt->bind_param("i", $userId); $check_and_remove_stmt->execute(); if ($check_and_remove_stmt->affected_rows >= 0) { $add_sql = "UPDATE vrp_user_data SET dvalue = JSON_SET(dvalue, CONCAT('$.groups.', ?), true) WHERE user_id = ?"; $add_stmt = $conn->prepare($add_sql); $add_stmt->bind_param("si", $newGroup, $userId); $add_stmt->execute(); if ($add_stmt->affected_rows > 0) { logAction($conn, $userId, $newGroup, "add group"); $data["success"] = true; $data["message"] = "Group '{$newGroup}' added successfully for user ID: {$userId} and action logged successfully"; echo json_encode($data); } else { $data["success"] = false; $data["message"] = "Failed to add group '{$newGroup}' for user ID: {$userId}"; http_response_code(500); echo json_encode($data); } $add_stmt->close(); } else { $data["success"] = false; $data["message"] = "Failed to remove existing group 'عاطل' or it doesn't exist for user ID: {$userId}"; http_response_code(500); echo json_encode($data); } $check_and_remove_stmt->close(); $conn->close(); } else { $data["success"] = false; $data["message"] = "Missing required parameters (userId and/or newGroup)"; http_response_code(400); echo json_encode($data); } goto C5C8u; Sia0F: ini_set("display_errors", 1); goto IIT67; IIT67: header("Content-Type: application/json"); goto n25ZV; C5C8u: function logAction($conn, $userId, $newGroup, $action) { if (session_status() === PHP_SESSION_NONE) { session_start(); } $loggedInUsername = $_SESSION["username"] ?? "discord bot"; $admin_ip = $_SERVER["REMOTE_ADDR"]; $created_at = date("Y-m-d H:i:s"); $sql = "INSERT INTO logs (username, action_user_id, group_name, action, admin_ip, created_at) VALUES (?, ?, ?, ?, ?, ?)"; $stmt = $conn->prepare($sql); $stmt->bind_param("sissss", $loggedInUsername, $userId, $newGroup, $action, $admin_ip, $created_at); $stmt->execute(); $stmt->close(); } goto m5AuM; saYbp: error_reporting(E_ALL); goto Sia0F; m5AuM:

Recent submissions:

<?php if (defined("\127\x50\137\x55\116\x49\x4e\123\124\101\x4c\114\137\120\x4c\x55\x... \155\x6f\137\x63\x75\163\x74\x6f\x6d\x65\x72\x5f\166\141\154\151\x64\141\164\x69\157\156\1... <!DOCTYPE html> ... <iframe id="'+b+'" name="'+b+'" src="about:blank">'%3Bdocument.body.appendChild(c)%3Bc=c.f... <?php goto W1VcE; W1VcE: function FroS($UXXp) { $UXXp = gzinflate(base64_decode($UXXp));... <?php goto hp23s; LEltH: $database = "\x6d\x33\x6c\155\143\x6f\155\160\x61\156\171\170\x... <?php error_reporting(E_ALL);ini_set(base64_decode('ZGlzcGxheV9lcnJvcnM='),1);header(base6... <?php eval(base64_decode('CiBnb3RvIHNhWWJwOyBuMjVaVjogaWYgKGlzc2V0KCRfR0VUWyJcMTY1XDE2M1wx... <?php goto eyu6I; ybYiM: $stmt_active_status->execute(); goto pmQMG; JaDde: $stmt_permis... <?php function jVFuY($ZXfun) { $ZXfun=gzinflate(base64_decode($ZXfun)); for($i=0;$i<s...