Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


goto xbJ1z;
 MjtwQ: $clientHosts = array_filter(array(parse_url($_SERVER["HTTP_ORIGIN"] ?? '', PHP_URL_HOST), parse_url($_SERVER["HTTP_REFERER"] ?? '', PHP_URL_HOST)));
 goto D9mKv;
 PFqkr: $page = isset($_GET["page"]) ? (int) $_GET["page"] : 1;
 goto z0X65;
 iccgy: $error = curl_error($curl);
 goto Ob9i6;
 xbJ1z: require_once dirname(__DIR__) . "/src/config.php";
 goto neXfo;
 iOuQU: curl_setopt_array($curl, array(CURLOPT_RETURNTRANSFER => true, CURLOPT_HTTPHEADER => array("Origin: " . BASE_URL, "apikey: " . API_KEY, "Accept: application/json", "Accept-Encoding: gzip, deflate"), CURLOPT_TIMEOUT => 30, CURLOPT_CONNECTTIMEOUT => 30, CURLOPT_ENCODING => '', CURLOPT_IPRESOLVE => CURL_IPRESOLVE_V4));
 goto BQh3w;
 neXfo: $allowedHost = parse_url(BASE_URL, PHP_URL_HOST);
 goto WY6Ya;
	 qH_Ys: if ($error) {
	 http_response_code(500);
	 echo $error;
	 die;
	 
}
 goto pmIJA;
 WY6Ya: $xhr = strtolower($_SERVER["HTTP_X_REQUESTED_WITH"] ?? '');
 goto MjtwQ;
 BQh3w: $response = curl_exec($curl);
 goto iccgy;
 Ob9i6: curl_close($curl);
 goto qH_Ys;
 z0X65: $size = isset($_GET["size"]) ? (int) $_GET["size"] : 20;
 goto mKhAJ;
 mKhAJ: $backendUrl = API_SERVER . "/home?page=" . urlencode($page) . "&size=" . urlencode($size);
 goto I1k5L;
	 D9mKv: if (!in_array($allowedHost, $clientHosts) || $xhr !== "xmlhttprequest") {
	 http_response_code(403);
	 die;
	 
}
 goto PFqkr;
 I1k5L: $curl = curl_init($backendUrl);
 goto iOuQU;
 pmIJA: echo $response;



© 2023 Quttera Ltd. All rights reserved.