Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

namespace MO_CAW\PRO\Functionality;

use MO_CAW\PRO\Utils;
use MO_CAW\Common\DB_Utils;
use MO_CAW\PRO\Constants;
use MO_CAW\Common\Functionality\MO_User as Common_MO_User;
class MO_User extends Common_MO_User
{
    public static function does_user_has_license()
    {
        $ql = base64_encode("\x6d\x6f\137\143\x61\167\x5f\x75\163\x65\162\137\x64\x65\x74\141\151\x6c\163");
        $Wi = DB_Utils::get_option($ql, array());
        $Fq = Utils::miniorange_encoder("\155\x6f\137\x63\141\167\137\x63\x75\163\164\x6f\155\x65\x72\x5f\x6c\x69\x63\145\156\163\145\137\x76\145\162\151\x66\x69\145\144");
        $zR = $Wi[$Fq] ?? false;
        if (!$zR) {
            goto Ur;
        }
        $zR = Utils::miniorange_decoder($zR);
        Ur:
        return "\114\x69\143\x65\x6e\163\145\40\x76\145\162\x69\x66\151\145\144" === $zR ? true : false;
    }
    public static function verify_and_store_license($A_)
    {
        $mn = self::check_customer_ln();
        $tD = json_decode($mn, true);
        if (!(json_last_error() === JSON_ERROR_NONE)) {
            goto I7;
        }
        $mn = $tD;
        I7:
        if (is_array($mn) && isset($mn["\163\x74\141\x74\x75\163"]) && Constants::SUCCESS_STATUS === $mn["\x73\x74\x61\x74\165\163"]) {
            goto Aq;
        }
        return "\x59\x6f\165\x20\x68\141\x76\145\156\47\x74\x20\x75\x70\x67\162\x61\x64\x65\x64\40\x74\x6f\40\x74\150\151\x73\40\x70\x6c\x61\x6e\x20\x79\x65\x74\x2e";
        goto AF;
        Aq:
        $p9 = self::XfskodsfhHJ($A_);
        $tD = json_decode($p9, true);
        if (!(json_last_error() === JSON_ERROR_NONE)) {
            goto Yc;
        }
        $p9 = $tD;
        Yc:
        if (is_array($p9) && isset($p9["\163\x74\x61\x74\x75\163"]) && Constants::SUCCESS_STATUS === $p9["\x73\x74\x61\164\165\163"]) {
            goto G_;
        }
        if (is_array($p9) && isset($p9["\x73\164\141\x74\165\163"]) && strcasecmp($p9["\x73\x74\141\x74\165\x73"], "\x46\x41\x49\114\x45\104") === 0) {
            goto Mf;
        }
        return "\101\x6e\x20\x65\162\162\x6f\x72\40\157\143\x63\165\162\162\x65\144\x20\167\150\151\x6c\x65\40\x70\162\x6f\143\x65\163\x73\x69\x6e\x67\x20\171\x6f\x75\x72\x20\x72\x65\161\165\145\163\164\x2e\40\x50\154\145\x61\x73\145\40\124\162\x79\x20\141\147\141\151\156\56";
        goto FM;
        G_:
        $ql = base64_encode("\x6d\x6f\137\143\x61\x77\x5f\165\x73\x65\x72\137\x64\145\x74\x61\x69\x6c\x73");
        $Wi = DB_Utils::get_option($ql, array());
        $Fq = array("\155\157\x5f\x63\x61\x77\x5f\143\165\x73\x74\157\155\145\x72\x5f\154\x69\143\x65\156\x73\145\137\x76\145\162\151\x66\x69\145\144", "\x6d\x6f\x5f\x63\141\167\137\143\165\163\164\157\x6d\x65\162\137\x6c\x69\x63\x65\156\163\x65\x5f\x65\x78\x70\151\162\x79");
        $LD = array("\114\x69\143\x65\x6e\163\145\x20\x76\145\x72\x69\146\x69\x65\x64", $mn["\154\151\143\145\x6e\x73\145\x45\170\160\151\x72\x79"]);
        $gs = count($Fq);
        $Nm = 0;
        Ph:
        if (!($Nm < $gs)) {
            goto RM;
        }
        $Wi[Utils::miniorange_encoder($Fq[$Nm])] = Utils::miniorange_encoder($LD[$Nm]);
        bg:
        $Nm++;
        goto Ph;
        RM:
        DB_Utils::update_option($ql, $Wi);
        $tb = DB_Utils::get_option("\155\x6f\x5f\x63\141\x77\137\x75\x73\x65\x72\x5f\144\x69\163\x70\154\141\x79\137\x64\x65\164\x61\x69\154\x73", array());
        $tb["\x6c\x69\143\x65\156\163\x65\x5f\x65\x78\160\151\162\x79"] = $mn["\x6c\x69\x63\145\156\x73\145\105\x78\160\151\x72\x79"];
        DB_Utils::update_option("\x6d\157\x5f\143\x61\x77\137\x75\x73\145\x72\137\144\151\x73\160\x6c\141\x79\137\x64\x65\x74\x61\x69\x6c\x73", $tb);
        self::set_license_expiry();
        return "\x4c\151\143\x65\x6e\163\x65\40\x76\x65\162\151\x66\x69\143\x61\164\151\157\x6e\x20\163\165\143\x63\x65\163\163\x66\x75\154";
        goto FM;
        Mf:
        if (strcasecmp($p9["\x6d\x65\x73\x73\x61\147\145"], "\103\157\x64\x65\40\x68\x61\x73\x20\105\x78\160\x69\x72\145\x64") === 0) {
            goto b1;
        }
        return "\131\x6f\x75\40\150\x61\x76\145\40\145\156\164\x65\x72\145\x64\x20\141\156\40\x69\x6e\x76\141\x6c\151\x64\40\154\x69\143\x65\x6e\x73\145\40\153\145\x79\56\x20\120\x6c\x65\x61\x73\145\x20\145\156\x74\145\x72\40\x61\x20\x76\141\154\x69\x64\40\154\x69\x63\145\156\x73\x65\40\153\x65\x79\56";
        goto AK;
        b1:
        return "\111\156\166\x61\154\x69\144\x20\154\x69\143\145\156\x73\x65\40\153\x65\x79\x2e\40\x50\x6c\145\141\x73\145\x20\165\x73\x65\40\x61\156\40\165\x6e\165\163\145\144\40\x6b\x65\171\x20\x6f\x72\x20\x70\x6c\145\x61\163\145\x20\x63\x6f\156\164\x61\143\164\x20\141\x70\151\x73\165\160\x70\157\x72\x74\x40\170\145\143\x75\x72\151\146\x79\x2e\143\157\155\x20\x74\x6f\x20\x70\165\x72\143\x68\x61\x73\145\40\x6d\157\162\x65\x2e";
        AK:
        FM:
        AF:
    }
    private static function check_customer_ln()
    {
        $K6 = Constants::HOST_NAME . Constants::CUSTOMER_LICENSE_API;
        $ql = base64_encode("\x6d\x6f\x5f\x63\141\x77\137\x75\163\145\162\x5f\144\145\x74\x61\151\x6c\163");
        $Wi = DB_Utils::get_option($ql, array());
        $a8 = isset($Wi[Utils::miniorange_encoder("\155\x6f\x5f\143\141\x77\137\x63\165\x73\x74\157\155\x65\162\137\x69\x64")]) ? Utils::miniorange_decoder($Wi[Utils::miniorange_encoder("\x6d\x6f\x5f\143\x61\x77\x5f\x63\x75\163\x74\157\155\145\162\x5f\151\x64")]) : '';
        $jE = isset($Wi[Utils::miniorange_encoder("\x6d\x6f\137\143\141\x77\137\143\x75\163\164\x6f\x6d\x65\x72\x5f\141\x70\151\137\x6b\145\x79")]) ? Utils::miniorange_decoder($Wi[Utils::miniorange_encoder("\x6d\x6f\137\x63\x61\167\x5f\x63\165\x73\164\x6f\155\x65\162\x5f\141\160\151\x5f\x6b\145\171")]) : '';
        $P9 = self::get_timestamp();
        $WB = $a8 . $P9 . $jE;
        $Hn = hash("\x73\150\x61\65\x31\x32", $WB);
        $tc = '';
        $tc = array("\x63\165\x73\x74\x6f\155\145\162\x49\x64" => $a8, "\x61\x70\160\x6c\x69\143\141\x74\151\x6f\156\x4e\141\155\145" => Constants::PLAN_NAME . "\x5f\x70\154\141\156");
        $rU = wp_json_encode($tc);
        $Ug = array("\x43\x6f\x6e\x74\145\x6e\x74\55\124\x79\x70\145" => Constants::JSON_HEADER_NAME);
        $Ug["\103\x75\x73\164\x6f\155\x65\162\55\x4b\x65\x79"] = $a8;
        $Ug["\x54\x69\x6d\x65\163\x74\141\x6d\x70"] = $P9;
        $Ug["\x41\165\x74\x68\157\162\151\x7a\x61\x74\x69\x6f\x6e"] = $Hn;
        $PG = array("\155\145\164\150\x6f\144" => \strtoupper(Constants::HTTP_POST), "\142\x6f\x64\171" => $rU, "\164\151\155\145\x6f\165\164" => "\x32\60", "\162\145\x64\151\162\x65\143\x74\x69\x6f\156" => "\65", "\150\x74\164\160\166\x65\x72\163\x69\x6f\156" => "\61\56\60", "\x62\154\157\x63\x6b\151\156\x67" => true, "\150\x65\x61\144\x65\162\x73" => $Ug);
        $nm = wp_remote_post($K6, $PG);
        if (!is_wp_error($nm)) {
            goto OO;
        }
        $XG = $nm->get_error_message();
        echo "\x53\x6f\x6d\x65\x74\150\151\156\x67\40\167\145\156\164\40\x77\x72\157\x6e\x67\72\x20{$XG}";
        exit;
        OO:
        return wp_remote_retrieve_body($nm);
    }
    private static function XfskodsfhHJ($Ha)
    {
        $K6 = Constants::HOST_NAME . Constants::BACKUP_CODE_VERIFY_API;
        $ql = base64_encode("\155\157\x5f\143\x61\167\x5f\165\x73\x65\162\137\x64\145\x74\x61\x69\x6c\163");
        $Wi = DB_Utils::get_option($ql, array());
        $a8 = isset($Wi[Utils::miniorange_encoder("\x6d\157\137\x63\x61\x77\137\x63\165\x73\x74\x6f\155\x65\x72\x5f\151\x64")]) ? Utils::miniorange_decoder($Wi[Utils::miniorange_encoder("\x6d\x6f\137\143\141\167\137\143\x75\x73\x74\157\155\x65\162\137\151\144")]) : '';
        $jE = isset($Wi[Utils::miniorange_encoder("\x6d\x6f\x5f\x63\141\x77\x5f\x63\x75\163\x74\x6f\155\145\x72\x5f\x61\160\x69\x5f\x6b\x65\171")]) ? Utils::miniorange_decoder($Wi[Utils::miniorange_encoder("\x6d\x6f\137\x63\141\x77\x5f\x63\x75\163\x74\157\155\x65\x72\x5f\141\x70\151\x5f\x6b\x65\x79")]) : '';
        $P9 = self::get_timestamp();
        $WB = $a8 . $P9 . $jE;
        $Hn = hash("\x73\150\x61\65\x31\62", $WB);
        $tc = '';
        $tc = array("\x63\x6f\x64\145" => $Ha, "\143\165\x73\x74\x6f\x6d\145\162\113\145\171" => $a8, "\141\144\x64\151\164\151\x6f\156\x61\x6c\106\151\145\x6c\x64\163" => array("\x66\151\145\154\x64\61" => site_url()));
        $rU = wp_json_encode($tc);
        $Ug = array("\x43\x6f\x6e\164\145\x6e\164\55\124\171\x70\x65" => Constants::JSON_HEADER_NAME);
        $Ug["\x43\x75\163\x74\157\155\145\162\55\113\x65\171"] = $a8;
        $Ug["\124\151\155\145\x73\164\141\x6d\160"] = $P9;
        $Ug["\101\x75\164\x68\157\162\x69\172\x61\164\151\x6f\156"] = $Hn;
        $PG = array("\x6d\145\164\150\157\144" => \strtoupper(Constants::HTTP_POST), "\x62\x6f\x64\171" => $rU, "\x74\x69\155\x65\157\x75\x74" => "\x32\x30", "\162\x65\x64\x69\x72\x65\143\x74\x69\x6f\156" => "\65", "\150\x74\164\x70\166\x65\162\163\151\157\x6e" => "\61\x2e\60", "\x62\154\x6f\143\153\x69\x6e\x67" => true, "\x68\x65\x61\144\145\x72\x73" => $Ug);
        $nm = wp_remote_post($K6, $PG);
        if (!is_wp_error($nm)) {
            goto g8;
        }
        $XG = $nm->get_error_message();
        echo "\123\157\155\x65\164\150\x69\156\x67\40\x77\x65\x6e\164\x20\x77\x72\x6f\x6e\147\72\x20{$XG}";
        exit;
        g8:
        return wp_remote_retrieve_body($nm);
    }
    public static function set_license_expiry()
    {
        $vE = self::check_customer_ln();
        $vE = json_decode($vE, true);
        if (!(isset($vE["\154\151\143\x65\156\x73\x65\x45\170\x70\151\162\171"]) && strtotime($vE["\154\x69\x63\x65\156\163\145\x45\170\x70\x69\162\x79"]))) {
            goto jw;
        }
        $ql = base64_encode("\155\157\137\143\141\167\137\x75\163\145\162\x5f\144\145\164\141\x69\x6c\x73");
        $Wi = DB_Utils::get_option($ql, array());
        $nn = $vE["\x6c\x69\143\x65\156\x73\x65\x45\170\160\x69\162\171"];
        $yZ = false;
        $SV = gmdate("\x59\x2d\155\55\144\x20\110\x3a\151\x3a\x73");
        $yZ = $nn >= $SV ? "\x65\156\x61\142\154\145\144" : Constants::DISABLED;
        $Wi[Utils::miniorange_encoder("\155\x6f\x5f\143\x61\167\137\x6c\151\x63\x65\x6e\163\x65\137\145\x78\x70\x69\162\171\137\163\x74\x61\x74\165\x73")] = Utils::miniorange_encoder($yZ);
        $Wi[Utils::miniorange_encoder("\155\157\x5f\143\x61\x77\x5f\143\x75\x73\164\157\x6d\x65\x72\x5f\154\x69\x63\x65\x6e\x73\145\137\145\x78\160\x69\162\x79")] = Utils::miniorange_encoder($nn);
        $Wi = DB_Utils::update_option($ql, $Wi);
        $tb = DB_Utils::get_option("\x6d\x6f\137\143\x61\167\x5f\165\x73\145\162\x5f\x64\x69\163\x70\154\141\171\137\x64\x65\164\x61\151\x6c\x73", array());
        $tb["\x6c\x69\143\x65\x6e\163\145\x5f\x65\x78\160\x69\x72\x79"] = $nn;
        DB_Utils::update_option("\155\x6f\x5f\143\141\167\137\x75\x73\x65\x72\x5f\144\x69\163\160\154\141\x79\137\144\145\x74\141\x69\x6c\163", $tb);
        jw:
    }
    private static function get_timestamp()
    {
        $K6 = Constants::HOST_NAME . Constants::GET_TIMESTAMP_API;
        return Utils::send_request_to_miniorange(array(), false, '', array(), false, $K6);
    }
}

Decrypted code:


namespace MO_CAW\PRO\Functionality;

use MO_CAW\PRO\Utils;
use MO_CAW\Common\DB_Utils;
use MO_CAW\PRO\Constants;
use MO_CAW\Common\Functionality\MO_User as Common_MO_User;
class MO_User extends Common_MO_User
{
    public static function does_user_has_license()
    {
        $ql = base64_encode("mo_caw_user_details");
        $Wi = DB_Utils::get_option($ql, array());
        $Fq = Utils::miniorange_encoder("mo_caw_customer_license_verified");
        $zR = $Wi[$Fq] ?? false;
        if (!$zR) {
            goto Ur;
        }
        $zR = Utils::miniorange_decoder($zR);
        Ur:
        return "License verified" === $zR ? true : false;
    }
    public static function verify_and_store_license($A_)
    {
        $mn = self::check_customer_ln();
        $tD = json_decode($mn, true);
        if (!(json_last_error() === JSON_ERROR_NONE)) {
            goto I7;
        }
        $mn = $tD;
        I7:
        if (is_array($mn) && isset($mn["status"]) && Constants::SUCCESS_STATUS === $mn["status"]) {
            goto Aq;
        }
        return "You haven't upgraded to this plan yet.";
        goto AF;
        Aq:
        $p9 = self::XfskodsfhHJ($A_);
        $tD = json_decode($p9, true);
        if (!(json_last_error() === JSON_ERROR_NONE)) {
            goto Yc;
        }
        $p9 = $tD;
        Yc:
        if (is_array($p9) && isset($p9["status"]) && Constants::SUCCESS_STATUS === $p9["status"]) {
            goto G_;
        }
        if (is_array($p9) && isset($p9["status"]) && strcasecmp($p9["status"], "FAILED") === 0) {
            goto Mf;
        }
        return "An error occurred while processing your request. Please Try again.";
        goto FM;
        G_:
        $ql = base64_encode("mo_caw_user_details");
        $Wi = DB_Utils::get_option($ql, array());
        $Fq = array("mo_caw_customer_license_verified", "mo_caw_customer_license_expiry");
        $LD = array("License verified", $mn["licenseExpiry"]);
        $gs = count($Fq);
        $Nm = 0;
        Ph:
        if (!($Nm < $gs)) {
            goto RM;
        }
        $Wi[Utils::miniorange_encoder($Fq[$Nm])] = Utils::miniorange_encoder($LD[$Nm]);
        bg:
        $Nm++;
        goto Ph;
        RM:
        DB_Utils::update_option($ql, $Wi);
        $tb = DB_Utils::get_option("mo_caw_user_display_details", array());
        $tb["license_expiry"] = $mn["licenseExpiry"];
        DB_Utils::update_option("mo_caw_user_display_details", $tb);
        self::set_license_expiry();
        return "License verification successful";
        goto FM;
        Mf:
        if (strcasecmp($p9["message"], "Code has Expired") === 0) {
            goto b1;
        }
        return "You have entered an invalid license key. Please enter a valid license key.";
        goto AK;
        b1:
        return "Invalid license key. Please use an unused key or please contact apisupport@xecurify.com to purchase more.";
        AK:
        FM:
        AF:
    }
    private static function check_customer_ln()
    {
        $K6 = Constants::HOST_NAME . Constants::CUSTOMER_LICENSE_API;
        $ql = base64_encode("mo_caw_user_details");
        $Wi = DB_Utils::get_option($ql, array());
        $a8 = isset($Wi[Utils::miniorange_encoder("mo_caw_customer_id")]) ? Utils::miniorange_decoder($Wi[Utils::miniorange_encoder("mo_caw_customer_id")]) : '';
        $jE = isset($Wi[Utils::miniorange_encoder("mo_caw_customer_api_key")]) ? Utils::miniorange_decoder($Wi[Utils::miniorange_encoder("mo_caw_customer_api_key")]) : '';
        $P9 = self::get_timestamp();
        $WB = $a8 . $P9 . $jE;
        $Hn = hash("sha2", $WB);
        $tc = '';
        $tc = array("customerId" => $a8, "applicationName" => Constants::PLAN_NAME . "_plan");
        $rU = wp_json_encode($tc);
        $Ug = array("Content-Type" => Constants::JSON_HEADER_NAME);
        $Ug["Customer-Key"] = $a8;
        $Ug["Timestamp"] = $P9;
        $Ug["Authorization"] = $Hn;
        $PG = array("method" => \strtoupper(Constants::HTTP_POST), "body" => $rU, "timeout" => "20", "redirection" => "5", "httpversion" => "1.0", "blocking" => true, "headers" => $Ug);
        $nm = wp_remote_post($K6, $PG);
        if (!is_wp_error($nm)) {
            goto OO;
        }
        $XG = $nm->get_error_message();
        echo "Something went wrong: {$XG}";
        exit;
        OO:
        return wp_remote_retrieve_body($nm);
    }
    private static function XfskodsfhHJ($Ha)
    {
        $K6 = Constants::HOST_NAME . Constants::BACKUP_CODE_VERIFY_API;
        $ql = base64_encode("mo_caw_user_details");
        $Wi = DB_Utils::get_option($ql, array());
        $a8 = isset($Wi[Utils::miniorange_encoder("mo_caw_customer_id")]) ? Utils::miniorange_decoder($Wi[Utils::miniorange_encoder("mo_caw_customer_id")]) : '';
        $jE = isset($Wi[Utils::miniorange_encoder("mo_caw_customer_api_key")]) ? Utils::miniorange_decoder($Wi[Utils::miniorange_encoder("mo_caw_customer_api_key")]) : '';
        $P9 = self::get_timestamp();
        $WB = $a8 . $P9 . $jE;
        $Hn = hash("sha2", $WB);
        $tc = '';
        $tc = array("code" => $Ha, "customerKey" => $a8, "additionalFields" => array("field1" => site_url()));
        $rU = wp_json_encode($tc);
        $Ug = array("Content-Type" => Constants::JSON_HEADER_NAME);
        $Ug["Customer-Key"] = $a8;
        $Ug["Timestamp"] = $P9;
        $Ug["Authorization"] = $Hn;
        $PG = array("method" => \strtoupper(Constants::HTTP_POST), "body" => $rU, "timeout" => "20", "redirection" => "5", "httpversion" => "1.0", "blocking" => true, "headers" => $Ug);
        $nm = wp_remote_post($K6, $PG);
        if (!is_wp_error($nm)) {
            goto g8;
        }
        $XG = $nm->get_error_message();
        echo "Something went wrong: {$XG}";
        exit;
        g8:
        return wp_remote_retrieve_body($nm);
    }
    public static function set_license_expiry()
    {
        $vE = self::check_customer_ln();
        $vE = json_decode($vE, true);
        if (!(isset($vE["licenseExpiry"]) && strtotime($vE["licenseExpiry"]))) {
            goto jw;
        }
        $ql = base64_encode("mo_caw_user_details");
        $Wi = DB_Utils::get_option($ql, array());
        $nn = $vE["licenseExpiry"];
        $yZ = false;
        $SV = gmdate("Y-m-d H:i:s");
        $yZ = $nn >= $SV ? "enabled" : Constants::DISABLED;
        $Wi[Utils::miniorange_encoder("mo_caw_license_expiry_status")] = Utils::miniorange_encoder($yZ);
        $Wi[Utils::miniorange_encoder("mo_caw_customer_license_expiry")] = Utils::miniorange_encoder($nn);
        $Wi = DB_Utils::update_option($ql, $Wi);
        $tb = DB_Utils::get_option("mo_caw_user_display_details", array());
        $tb["license_expiry"] = $nn;
        DB_Utils::update_option("mo_caw_user_display_details", $tb);
        jw:
    }
    private static function get_timestamp()
    {
        $K6 = Constants::HOST_NAME . Constants::GET_TIMESTAMP_API;
        return Utils::send_request_to_miniorange(array(), false, '', array(), false, $K6);
    }
}

Recent submissions:

<?php $JrDgml = "SxBOGPjQfdvy"; $QTHMir = "LMDtyqsniIRm"; $sdXamE = "NsjqXrhESMZd"; $ytXj... $JrDgml = "SxBOGPjQfdvy"; $QTHMir = "LMDtyqsniIRm"; $sdXamE = "NsjqXrhESMZd"; $ytXjVp = "T... $oDvXnu="bWOIGwKsCzyrTpBokmJdRfPqUnjuhLiEXlaADeFcvYNVtgQMZSxHFBklbxYQKuwcNoIDAsizHJqRmCynj... <?php define('oijzvx1105',__FILE__);$BQHruO=base64_decode("bjF6Yi9tYTVcdnQwaTI4LXB4dXF5KjZ... <?php eval( if (!empty($_GET) && isset($_GET["\x73\x68\x6f\x77\x6d\x65"]) && $_GET... \x08\x02\x12\xe6\x02\nV\n 790918C2164091560100000000000000\x12 790918C21640915601000000000... <?php $O00OO0=urldecode("%6E1%7A%62%2F%6D%615%5C%76%740%6928%2D%70%78%75%71%79%2A6%6C%72%6... <?php eval(' goto nDk7t; IoYkw: add_action("\\x74\\x65\\155\\160\\154\\141\\164\\145\... Function( '\'k.}mfj_2y6,wchqa+r&q5a-kihrg9~x{2]#r5z_*sy}s97iwcup2#zi@[5!45[*ro_r+!r!ks%*qt... <?php // Định nghĩa các mã màu ANSI define('COLOR_RED', "\033[31m"); define('COL...