Online PHP and Javascript Decoder decode hidden script to uncover its real functionality



text/x-generic login.php ( PHP script, ASCII text, with very long lines )
if (!function_exists('gzinflate')) { http_response_code(500); exit('Decoder not available'); }
require_once __DIR__ . '/../config.php'; if (isAdminLoggedIn()) { redirect(ADMIN_URL . '/dashboard.php'); } $error = ''; $stationName = getSetting('station_name', 'FM Station'); if ($_SERVER['REQUEST_METHOD'] === 'POST') { $username = trim($_POST['username'] ?? ''); $password = $_POST['password'] ?? ''; if (empty($username) || empty($password)) { $error = 'Please enter both username and password.'; } else { $db = getDB(); $stmt = $db->prepare("SELECT id, username, password, full_name FROM admins WHERE username = :username LIMIT 1"); $stmt->bindValue(':username', $username, SQLITE3_TEXT); $result = $stmt->execute(); $admin = $result->fetchArray(SQLITE3_ASSOC); if ($admin && password_verify($password, $admin['password'])) { $_SESSION['admin_id'] = $admin['id']; $_SESSION['admin_name'] = $admin['full_name'] ?: $admin['username']; redirect(ADMIN_URL . '/dashboard.php'); } else { $error = 'Invalid username or password.'; } } } echo '<!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Admin Login - ';echo sanitize($stationName) ;echo '</title> <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css"> <link rel="stylesheet" href="';echo BASE_URL ;echo '/admin/assets/css/admin.css?v=';echo filemtime(__DIR__ . '/assets/css/admin.css') ;echo '"> </head> <body class="login-page"> <div class="login-card"> <div class="login-brand"> <span class="brand-logo"><i class="fas fa-broadcast-tower"></i></span> <h1>';echo sanitize($stationName) ;echo '</h1> <p>Admin Panel</p> </div> ';if (!empty($error)): ;echo ' <div class="login-alert"> <i class="fas fa-exclamation-circle"></i> ';echo sanitize($error); echo ' </div> ';endif; echo ' <form method="POST" action=""> <div class="form-group"> <label class="form-label" for="username">Username</label> <div class="input-icon-group"> <i class="fas fa-user"></i> <input type="text" class="form-control" id="username" name="username" placeholder="Enter username" autocomplete="username" autofocus value="';echo sanitize($_POST['username'] ?? ''); echo '"> </div> </div> <div class="form-group"> <label class="form-label" for="password">Password</label> <div class="input-icon-group"> <i class="fas fa-lock"></i> <input type="password" class="form-control" id="password" name="password" placeholder="Enter password" autocomplete="current-password"> </div> </div> <button type="submit" class="btn btn-primary btn-block mt-3"> <i class="fas fa-sign-in-alt"></i>Login </button> </form> </div> </body> </html> ';


© 2023 Quttera Ltd. All rights reserved.