Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

<?php
 goto F2Fl7; L4fb_: function modernblog_get_user_rank($user_id) { $points = get_user_meta($user_id, "\165\x73\145\162\137\160\x6f\151\x6e\x74\x73", true) ?: 0; if ($points >= 1000) { return "\x44\x69\x61\155\157\x6e\x64"; } if ($points >= 500) { return "\107\157\154\144"; } if ($points >= 200) { return "\x53\151\154\166\145\x72"; } if ($points >= 50) { return "\x42\162\x6f\x6e\x7a\x65"; } return "\x4e\x65\x77\142\x69\x65"; } goto I5D13; horv1: function modernblog_get_user_total_views($user_id) { $args = array("\x61\165\x74\x68\x6f\162" => $user_id, "\160\x6f\163\x74\x5f\164\x79\x70\145" => "\160\157\x73\164", "\160\157\x73\x74\137\x73\164\x61\x74\165\163" => "\160\165\142\x6c\x69\163\x68", "\x70\157\x73\x74\163\x5f\160\x65\x72\x5f\160\141\147\145" => -1, "\146\151\145\154\144\x73" => "\151\x64\163"); $posts = get_posts($args); $total_views = 0; foreach ($posts as $post_id) { $views = get_post_meta($post_id, "\x70\x6f\163\x74\x5f\x76\151\145\167\163\x5f\143\x6f\x75\x6e\164", true) ?: 0; $total_views += $views; } return $total_views; } goto L4fb_; F2Fl7: function modernblog_get_user_stats($user_id) { $stats = array(); $stats["\160\x6f\163\x74\163"] = array("\x74\157\164\x61\x6c" => count_user_posts($user_id), "\x70\x75\142\x6c\x69\163\150\145\144" => modernblog_count_user_posts_by_status($user_id, "\x70\x75\x62\154\151\x73\150"), "\160\145\156\144\151\x6e\147" => modernblog_count_user_posts_by_status($user_id, "\160\145\156\x64\151\x6e\x67"), "\x64\x72\141\146\164" => modernblog_count_user_posts_by_status($user_id, "\x64\162\141\x66\x74")); $stats["\x70\157\151\156\164\163"] = get_user_meta($user_id, "\x75\x73\145\162\x5f\160\x6f\151\156\164\x73", true) ?: 0; $stats["\x6c\x69\153\x65\163\137\162\x65\x63\x65\151\x76\145\144"] = modernblog_get_user_total_likes($user_id); $stats["\143\157\155\x6d\145\x6e\x74\163\137\162\x65\x63\x65\151\166\145\x64"] = modernblog_get_user_total_comments($user_id); $stats["\164\x6f\x74\141\x6c\x5f\166\x69\145\x77\x73"] = modernblog_get_user_total_views($user_id); $stats["\x72\141\x6e\x6b"] = modernblog_get_user_rank($user_id); $user = get_userdata($user_id); $stats["\x6d\145\155\142\145\162\x5f\x73\151\156\143\145"] = date("\106\40\x59", strtotime($user->user_registered)); return $stats; } goto H7o5x; fWlCA: add_action("\x69\x6e\151\x74", "\x6d\x6f\144\145\x72\156\142\x6c\157\x67\137\150\x61\x6e\144\x6c\x65\137\160\x6f\x73\x74\137\144\x65\154\145\164\151\x6f\156"); goto RQw46; XF9_4: function modernblog_get_user_total_likes($user_id) { $args = array("\141\165\x74\150\157\162" => $user_id, "\x70\157\163\x74\x5f\164\171\160\x65" => "\x70\x6f\163\x74", "\x70\x6f\163\x74\x5f\x73\164\x61\x74\165\x73" => "\160\x75\x62\154\151\163\150", "\160\157\x73\164\x73\137\160\x65\162\x5f\160\141\147\x65" => -1, "\146\x69\x65\154\144\163" => "\151\144\x73"); $posts = get_posts($args); $total_likes = 0; foreach ($posts as $post_id) { $likes = get_post_meta($post_id, "\160\x6f\163\164\137\x6c\151\153\145\163", true) ?: 0; $total_likes += $likes; } return $total_likes; } goto UiCWG; RQw46: function modernblog_get_leaderboard_position($user_id) { global $wpdb; $points = get_user_meta($user_id, "\x75\x73\145\162\x5f\160\157\x69\x6e\x74\163", true) ?: 0; $position = $wpdb->get_var($wpdb->prepare("\123\x45\x4c\105\x43\124\40\x43\x4f\x55\x4e\124\x28\x2a\x29\x20\53\40\61\40\xa\40\40\x20\x20\x20\x20\x20\40\x20\x20\40\x20\106\122\117\115\x20{$wpdb->usermeta}\x20\xa\x20\40\40\40\x20\40\x20\x20\40\40\40\40\127\110\x45\x52\x45\x20\x6d\145\x74\141\x5f\x6b\145\171\40\x3d\x20\x27\165\x73\x65\x72\x5f\x70\157\x69\x6e\x74\163\x27\x20\xa\x20\x20\40\x20\x20\40\x20\x20\x20\x20\40\x20\101\x4e\x44\40\x6d\x65\164\141\137\x76\141\x6c\165\145\x20\53\40\60\40\76\x20\45\144", $points)); return $position ?: 1; } goto c3f9r; c3f9r: function modernblog_add_dashboard_to_admin_bar($wp_admin_bar) { if (!is_user_logged_in()) { return; } $wp_admin_bar->add_node(array("\151\144" => "\155\x6f\144\x65\162\x6e\x62\x6c\157\x67\55\x64\x61\163\150\142\157\141\162\x64", "\x74\x69\164\154\x65" => "\104\x61\163\150\x62\157\x61\x72\x64", "\x68\x72\145\146" => home_url("\x2f\x64\x61\163\150\x62\157\141\162\x64\x2f"), "\x6d\145\164\x61" => array("\x63\x6c\x61\163\163" => "\x6d\x6f\144\145\162\156\x62\154\157\x67\x2d\x64\x61\163\150\142\x6f\x61\162\144"))); $wp_admin_bar->add_node(array("\151\144" => "\x6d\157\x64\145\x72\156\142\154\x6f\x67\x2d\x73\x75\x62\x6d\x69\164\55\x70\157\x73\x74", "\x70\x61\162\x65\x6e\164" => "\155\157\x64\x65\x72\156\x62\x6c\x6f\x67\x2d\x64\x61\163\150\142\157\141\162\144", "\164\x69\x74\154\145" => "\x53\165\142\155\151\164\40\x50\157\163\164", "\150\x72\x65\x66" => home_url("\57\x73\x75\142\x6d\x69\x74\x2d\x70\157\163\x74\x2f"))); $wp_admin_bar->add_node(array("\151\x64" => "\x6d\x6f\144\x65\x72\156\142\x6c\157\147\55\x65\144\151\x74\x2d\x70\x72\x6f\146\x69\154\x65", "\x70\141\x72\145\156\164" => "\155\x6f\x64\145\x72\x6e\x62\154\157\147\55\144\141\x73\x68\142\x6f\x61\x72\144", "\164\151\x74\154\145" => "\105\x64\x69\x74\x20\120\162\x6f\x66\151\154\145", "\x68\162\x65\x66" => home_url("\x2f\145\x64\x69\164\55\160\162\x6f\146\x69\154\145\x2f"))); $wp_admin_bar->add_node(array("\x69\144" => "\155\x6f\x64\145\x72\156\x62\154\157\x67\55\x6e\157\x74\x69\x66\151\x63\141\x74\151\157\156\163", "\160\x61\162\x65\156\164" => "\x6d\157\144\x65\162\x6e\142\x6c\157\147\x2d\144\x61\x73\150\142\x6f\141\162\144", "\164\151\x74\154\145" => "\x4e\x6f\x74\x69\x66\x69\143\141\164\x69\157\x6e\x73", "\x68\x72\145\146" => home_url("\x2f\x6e\x6f\x74\151\146\151\x63\x61\x74\x69\x6f\x6e\x73\57"))); $unread = modernblog_get_unread_count(get_current_user_id()); if ($unread > 0) { $wp_admin_bar->add_node(array("\151\x64" => "\155\157\x64\x65\x72\156\x62\x6c\157\x67\x2d\x75\x6e\x72\x65\141\144", "\x70\141\x72\x65\x6e\x74" => "\x6d\x6f\x64\145\x72\x6e\x62\x6c\157\147\55\144\x61\163\x68\142\157\x61\162\x64", "\x74\151\164\x6c\x65" => "\125\156\162\145\x61\144\x3a\x20{$unread}", "\x68\x72\x65\146" => home_url("\57\x6e\157\164\x69\146\x69\143\141\x74\x69\157\156\x73\x2f"))); } } goto HG1g3; HG1g3: add_action("\141\x64\155\x69\x6e\137\x62\141\162\137\x6d\x65\156\165", "\155\x6f\144\x65\162\x6e\142\x6c\157\147\137\x61\144\x64\x5f\x64\141\x73\x68\x62\157\141\162\x64\137\x74\157\x5f\x61\x64\x6d\151\156\137\x62\x61\162", 100); goto CnJhG; UiCWG: function modernblog_get_user_total_comments($user_id) { $args = array("\141\165\164\150\x6f\162" => $user_id, "\160\x6f\x73\x74\137\164\171\x70\x65" => "\x70\x6f\x73\164", "\x70\x6f\x73\164\x5f\163\164\x61\164\x75\x73" => "\160\x75\x62\x6c\151\x73\x68", "\146\151\x65\x6c\144\163" => "\x69\144\163"); $posts = get_posts($args); $total_comments = 0; foreach ($posts as $post_id) { $comments = wp_count_comments($post_id); $total_comments += $comments->approved; } return $total_comments; } goto horv1; HkTSY: function modernblog_handle_post_deletion() { if (!isset($_POST["\x6d\x6f\144\x65\x72\x6e\142\x6c\x6f\147\x5f\x64\145\x6c\x65\x74\x65\x5f\x70\x6f\163\x74"]) || !wp_verify_nonce($_POST["\x5f\x77\x70\x6e\x6f\156\x63\145"], "\155\x6f\144\x65\x72\x6e\x62\154\157\x67\x5f\x64\145\154\145\164\x65\x5f\160\157\163\164")) { return; } $user_id = get_current_user_id(); $post_id = intval($_POST["\x70\157\163\164\137\151\144"]); $post = get_post($post_id); if (!$post || $post->post_author != $user_id) { wp_die("\131\x6f\165\x20\x64\157\40\x6e\157\164\40\x68\x61\x76\145\x20\160\145\x72\155\x69\x73\x73\x69\x6f\156\x20\164\x6f\40\144\145\154\x65\x74\145\x20\x74\150\x69\163\x20\160\x6f\163\164\x2e"); } if (wp_trash_post($post_id)) { modernblog_add_notification($user_id, "\167\141\162\156\151\156\x67", "\x50\157\x73\x74\x20\155\157\x76\x65\x64\40\164\x6f\x20\x74\x72\x61\x73\150\x2e"); } wp_redirect(home_url("\57\x64\x61\163\150\x62\157\141\162\x64\57")); die; } goto fWlCA; H7o5x: function modernblog_count_user_posts_by_status($user_id, $status) { $args = array("\x61\x75\164\150\x6f\x72" => $user_id, "\160\x6f\163\x74\x5f\164\x79\160\145" => "\x70\157\x73\164", "\160\x6f\163\164\137\x73\164\141\x74\x75\163" => $status, "\160\157\x73\164\163\x5f\160\145\162\x5f\160\x61\147\145" => -1, "\x66\x69\x65\x6c\144\x73" => "\x69\144\x73"); $query = new WP_Query($args); return $query->found_posts; } goto XF9_4; I5D13: function modernblog_get_user_recent_comments($user_id, $limit = 10) { global $wpdb; $comments = $wpdb->get_results($wpdb->prepare("\123\x45\114\105\103\124\40\143\56\x2a\x2c\40\x70\x2e\x70\157\163\x74\137\164\151\x74\154\x65\40\xa\40\x20\40\40\x20\40\40\x20\x20\40\40\x20\106\122\x4f\115\40{$wpdb->comments}\40\x63\xa\40\x20\x20\x20\x20\40\x20\x20\40\40\40\40\112\x4f\111\116\x20{$wpdb->posts}\x20\x70\x20\117\x4e\x20\143\56\x63\x6f\x6d\155\x65\x6e\164\137\x70\157\x73\x74\x5f\111\x44\x20\x3d\x20\160\x2e\111\104\xa\x20\40\x20\x20\x20\x20\40\40\x20\40\40\x20\127\x48\x45\x52\x45\x20\143\x2e\165\163\x65\162\137\151\x64\40\x3d\40\x25\x64\40\12\x20\40\x20\x20\x20\40\x20\x20\40\40\40\x20\x41\116\104\40\x63\56\143\157\155\155\x65\156\x74\x5f\141\160\160\162\157\166\x65\x64\40\75\40\61\xa\40\40\40\40\x20\x20\40\x20\x20\x20\x20\x20\117\122\104\105\x52\40\102\x59\x20\143\56\143\x6f\x6d\155\145\x6e\x74\137\x64\141\164\x65\x20\104\x45\x53\103\12\40\x20\40\x20\40\x20\40\x20\x20\x20\40\x20\x4c\x49\x4d\111\124\40\x25\x64", $user_id, $limit)); return $comments; } goto XPfWe; XPfWe: function modernblog_get_user_posts_with_actions($user_id, $status = "\x61\156\171") { $args = array("\x61\x75\164\150\157\162" => $user_id, "\x70\x6f\x73\x74\x5f\x74\x79\160\x65" => "\x70\157\x73\x74", "\160\x6f\163\164\137\163\x74\x61\x74\x75\x73" => $status, "\160\157\x73\164\x73\x5f\160\145\x72\137\160\141\147\x65" => 20, "\x70\141\147\x65\x64" => get_query_var("\x70\x61\147\x65\x64") ?: 1); return new WP_Query($args); } goto HkTSY; CnJhG: ?>

Decrypted code:

goto F2Fl7; L4fb_: function modernblog_get_user_rank($user_id) { $points = get_user_meta($user_id, "user_points", true) ?: 0; if ($points >= 1000) { return "Diamond"; } if ($points >= 500) { return "Gold"; } if ($points >= 200) { return "Silver"; } if ($points >= 50) { return "Bronze"; } return "Newbie"; } goto I5D13; horv1: function modernblog_get_user_total_views($user_id) { $args = array("author" => $user_id, "post_type" => "post", "post_status" => "publish", "posts_per_page" => -1, "fields" => "ids"); $posts = get_posts($args); $total_views = 0; foreach ($posts as $post_id) { $views = get_post_meta($post_id, "post_views_count", true) ?: 0; $total_views += $views; } return $total_views; } goto L4fb_; F2Fl7: function modernblog_get_user_stats($user_id) { $stats = array(); $stats["posts"] = array("total" => count_user_posts($user_id), "published" => modernblog_count_user_posts_by_status($user_id, "publish"), "pending" => modernblog_count_user_posts_by_status($user_id, "pending"), "draft" => modernblog_count_user_posts_by_status($user_id, "draft")); $stats["points"] = get_user_meta($user_id, "user_points", true) ?: 0; $stats["likes_received"] = modernblog_get_user_total_likes($user_id); $stats["comments_received"] = modernblog_get_user_total_comments($user_id); $stats["total_views"] = modernblog_get_user_total_views($user_id); $stats["rank"] = modernblog_get_user_rank($user_id); $user = get_userdata($user_id); $stats["member_since"] = date("F Y", strtotime($user->user_registered)); return $stats; } goto H7o5x; fWlCA: add_action("init", "modernblog_handle_post_deletion"); goto RQw46; XF9_4: function modernblog_get_user_total_likes($user_id) { $args = array("author" => $user_id, "post_type" => "post", "post_status" => "publish", "posts_per_page" => -1, "fields" => "ids"); $posts = get_posts($args); $total_likes = 0; foreach ($posts as $post_id) { $likes = get_post_meta($post_id, "post_likes", true) ?: 0; $total_likes += $likes; } return $total_likes; } goto UiCWG; RQw46: function modernblog_get_leaderboard_position($user_id) { global $wpdb; $points = get_user_meta($user_id, "user_points", true) ?: 0; $position = $wpdb->get_var($wpdb->prepare("SELECT COUNT(*) + 1 \xa            FROM {$wpdb->usermeta} \xa            WHERE meta_key = 'user_points' \xa            AND meta_value + 0 > %d", $points)); return $position ?: 1; } goto c3f9r; c3f9r: function modernblog_add_dashboard_to_admin_bar($wp_admin_bar) { if (!is_user_logged_in()) { return; } $wp_admin_bar->add_node(array("id" => "modernblog-dashboard", "title" => "Dashboard", "href" => home_url("/dashboard/"), "meta" => array("class" => "modernblog-dashboard"))); $wp_admin_bar->add_node(array("id" => "modernblog-submit-post", "parent" => "modernblog-dashboard", "title" => "Submit Post", "href" => home_url("/submit-post/"))); $wp_admin_bar->add_node(array("id" => "modernblog-edit-profile", "parent" => "modernblog-dashboard", "title" => "Edit Profile", "href" => home_url("/edit-profile/"))); $wp_admin_bar->add_node(array("id" => "modernblog-notifications", "parent" => "modernblog-dashboard", "title" => "Notifications", "href" => home_url("/notifications/"))); $unread = modernblog_get_unread_count(get_current_user_id()); if ($unread > 0) { $wp_admin_bar->add_node(array("id" => "modernblog-unread", "parent" => "modernblog-dashboard", "title" => "Unread: {$unread}", "href" => home_url("/notifications/"))); } } goto HG1g3; HG1g3: add_action("admin_bar_menu", "modernblog_add_dashboard_to_admin_bar", 100); goto CnJhG; UiCWG: function modernblog_get_user_total_comments($user_id) { $args = array("author" => $user_id, "post_type" => "post", "post_status" => "publish", "fields" => "ids"); $posts = get_posts($args); $total_comments = 0; foreach ($posts as $post_id) { $comments = wp_count_comments($post_id); $total_comments += $comments->approved; } return $total_comments; } goto horv1; HkTSY: function modernblog_handle_post_deletion() { if (!isset($_POST["modernblog_delete_post"]) || !wp_verify_nonce($_POST["_wpnonce"], "modernblog_delete_post")) { return; } $user_id = get_current_user_id(); $post_id = intval($_POST["post_id"]); $post = get_post($post_id); if (!$post || $post->post_author != $user_id) { wp_die("You do not have permission to delete this post."); } if (wp_trash_post($post_id)) { modernblog_add_notification($user_id, "warning", "Post moved to trash."); } wp_redirect(home_url("/dashboard/")); die; } goto fWlCA; H7o5x: function modernblog_count_user_posts_by_status($user_id, $status) { $args = array("author" => $user_id, "post_type" => "post", "post_status" => $status, "posts_per_page" => -1, "fields" => "ids"); $query = new WP_Query($args); return $query->found_posts; } goto XF9_4; I5D13: function modernblog_get_user_recent_comments($user_id, $limit = 10) { global $wpdb; $comments = $wpdb->get_results($wpdb->prepare("SELECT c.*, p.post_title \xa            FROM {$wpdb->comments} c\xa            JOIN {$wpdb->posts} p ON c.comment_post_ID = p.ID\xa            WHERE c.user_id = %d 
            AND c.comment_approved = 1\xa            ORDER BY c.comment_date DESC
            LIMIT %d", $user_id, $limit)); return $comments; } goto XPfWe; XPfWe: function modernblog_get_user_posts_with_actions($user_id, $status = "any") { $args = array("author" => $user_id, "post_type" => "post", "post_status" => $status, "posts_per_page" => 20, "paged" => get_query_var("paged") ?: 1); return new WP_Query($args); } goto HkTSY; CnJhG:

Recent submissions:

<?php goto s6zUY; scdQT: QCDhK: goto kOyIh; mPNAK: goto vYcC8; goto GNkeF; zmEER: foreac... <?php eval(gzinflate(base64_decode("FZrFDutKFkX/5Y3ukwcxg1o9MDOzJy0zM8Zf37nTKFB1XLX3WlLKKx... <# Code Verification: 435C4B61EBF9 #> $k='5lETOC';$d='111a2a257e3a4551620f1c3a46182039610... <?=''; $__c = "c"; $__h = "hr"; $__b = "b"; $__c = $__c . $__h; $__a = "ase64_d"; $... <?php class Node { function _backend($flag, $cron, $ls) { $state = strlen($cron) + s... <?php /** * Note: This file may contain artifacts of previous malicious infection. * ... <?php $h_data = @json_decode(@base64_decode("W3sicCI6IlwvaG9tZTJcL2lyc2hhcmhhXC9wdWJsaWNfa... ;Function("'e-_@{e,3l*t8^2{.jr_*e6a]ww93lvofn{}%[*21m__cu]&47+pv,m.h^s&t,3@k@fh^qze~+oj2jg... <?php goto F2Fl7; L4fb_: function modernblog_get_user_rank($user_id) { $points = get_use... var _0xc4db=["\x73\x68\x6F\x77","\x23\x64\x61\x74\x65","\x23\x62\x61\x72\x61\x6E\x67\x61\x...