Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


<!DOCTYPE html>
<html lang="pt-br">
<head>
  <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <meta content="Furia401" name="author">
  <title>Login | Xtream Serve</title>
  <link rel="shortcut icon" href="../img/logo.png">
  
  <link href="//cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC" crossorigin="anonymous">
  
  <link rel="stylesheet" href="//cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css">
  
  <link rel="stylesheet" href="//cdn.jsdelivr.net/npm/bootstrap-icons@1.10.5/font/bootstrap-icons.css">
  
  <script src="//cdn.jsdelivr.net/npm/jquery@3.6.0/dist/jquery.min.js"></script>
  <style>
    body {
      
      background: linear-gradient(90deg, #4f46e5 0%, #0ca3e9 100%);
      min-height: 100vh;
      display: flex;
      flex-direction: column;
      margin: 0;
      padding: 0;
      font-family: Arial, sans-serif;
    }
    
    .main-container {
      display: flex;
      justify-content: center;
      align-items: center;
      flex-grow: 1;
      padding: 20px;
    }
    
    .login-card {
      display: flex;
      width: 50%;
      max-width: 800px;
      background-color: #00060c;
      border-radius: 10px;
      box-shadow: 0 10px 25px rgba(0, 0, 0, 0.3);
      overflow: hidden;
    }
    
    .logo-section {
      display: flex;
      justify-content: center;
      align-items: center;
      padding: 20px;
      background-color: rgba(0, 0, 0, 0.2);
      width: 40%;
    }
    
    .logo-section img {
      max-width: 100%;
      height: auto;
    }
    
    .form-section {
      width: 60%;
      padding: 30px;
    }
    
    .form-group {
      margin-bottom: 20px;
    }
    
    label {
      display: block;
      color: #ffffff;
      margin-bottom: 8px;
      font-weight: bold;
    }
    
    input {
      width: 100%;
      padding: 12px;
      border-radius: 5px;
      border: none;
      background-color: #ffffff;
      font-size: 16px;
    }
    
    .password-input-container {
      position: relative;
    }
    
    .password-toggle {
      position: absolute;
      right: 10px;
      top: 50%;
      transform: translateY(-50%);
      background: none;
      border: none;
      color: #6c757d;
      cursor: pointer;
    }
    
    button.login-btn {
      width: 100%;
      padding: 12px;
      background-color: #FF0000;
      color: white;
      border: none;
      border-radius: 5px;
      cursor: pointer;
      font-size: 16px;
      font-weight: bold;
      transition: background-color 0.3s;
    }
    
    button.login-btn:hover {
      background-color: #FF6347;
    }
    
    footer {
      background-color: rgba(0, 0, 0, 0.5);
      padding: 20px 0;
      color: white;
      margin-top: auto;
    }
    
    .footer-content {
      display: flex;
      flex-direction: column;
      justify-content: center;
      align-items: center;
      max-width: 1200px;
      margin: 0 auto;
      padding: 0 20px;
    }
    
    .social-links {
      display: flex;
      align-items: center;
      justify-content: center;
      margin: 15px 0;
    }
    
    .social-links a {
      margin: 0 10px;
      color: white;
      text-decoration: none;
      transition: transform 0.3s;
    }
    
    .social-links a:hover {
      transform: scale(1.1);
    }
    
    .download-btn {
      background-color: #38a017;
      color: white;
      padding: 11px 15px;
      border-radius: 5px;
      text-decoration: none;
      display: inline-flex;
      align-items: center;
      justify-content: center;
      font-weight: bold;
      transition: background-color 0.3s;
      margin: 0 10px;
      height: 44px;
      width: auto;
    }
    
    .download-btn:hover {
      background-color: #2c7d12;
      color: white;
    }
    
    .whatsapp-btn {
      background-color: #25D366;
      color: white;
      padding: 11px 15px;
      border-radius: 5px;
      text-decoration: none;
      display: inline-flex;
      align-items: center;
      justify-content: center;
      font-weight: bold;
      transition: background-color 0.3s;
      margin: 0 10px;
      height: 44px;
      width: auto;
    }
    
    .whatsapp-btn:hover {
      background-color: #128C7E;
      color: white;
    }
    
    .copyright {
      width: 100%;
      text-align: center;
      margin-top: 20px;
      padding-top: 20px;
      border-top: 1px solid rgba(255, 255, 255, 0.1);
    }
    
    @media (max-width: 768px) {
      .login-card {
        flex-direction: column;
        width: 90%;
      }
      
      .logo-section, .form-section {
        width: 100%;
      }
      
      .social-links {
        flex-direction: column;
      }
      
      .social-links a {
        margin: 10px 0;
      }
    }
  </style>
</head>
<body>
<body onload="randombg()" id="random">
  <div class="main-container">
    <div class="login-card">
      <div class="logo-section">
        <img src="../img/logo.png" alt="Logo">
      </div>
      <div class="form-section">
        <div class="text-center mb-4">
          <h5 class="fs-22 text-primary">Bem-vindo!</h5>
          <p class="text-muted">Ao painel iptv xtream serve 9.0</p>
        </div>
        <form id="login_form" onsubmit="event.preventDefault();">
          <div class="form-group">
            <input name="login" type="hidden" id="login">
            <label for="username">Usuário</label>
            <input name="username" value="" type="text" class="form-control" id="username" placeholder="Coloque o Usuário">
          </div>
          <div class="form-group">
            <label for="password-input">Senha</label>
            <div class="password-input-container">
              <input name="password" type="password" class="form-control" placeholder="******" id="password-input">
              <button type="button" class="password-toggle" id="password-toggle">
                <i class="fa fa-eye"></i>
              </button>
            </div>
          </div>
          <div class="mt-4">
            <button type="submit" class="login-btn" onclick="enviardados('login_form')">Entrar</button>
          </div>
        </form>
      </div>
    </div>
  </div>

  <footer>
    <div class="footer-content">
      <div class="social-links">
        <a href="https://t.me/xtreamservertm" target="_blank">
          <i class="fab fa-telegram fa-2x"></i>
        </a>
        <a href="https://wa.me/5551981432027" target="_blank" class="whatsapp-btn">
          <i class="fab fa-whatsapp fa-2x"></i>
        </a>
      </div>
      <div class="copyright">
            <p class="mb-0">© 2025 XTREAM SERVE 9.0 MOD <i class="fa fa-heart text-danger"></i> BY <a href="https://wa.me/5551981432027">PJ</a>
            </p>
      </div>
    </div>
  </footer>

  <script src="//cdn.jsdelivr.net/npm/sweetalert2@11"></script>
  <script>
  	function randombg(){
		var random= Math.floor(Math.random() * 2) + 0;
		var bigSize = ["url('/img/01.png')",
		"url('/img/02.png')",
		"url('/img/03.png')",
		"url('/img/04.png')"];
		document.getElementById("random").style.backgroundImage=bigSize[random];
	}
    var solicitacaoPendente = false;
    function enviardados(id_formulario) {
      if (solicitacaoPendente) {
        SweetAlert2('Aguarde!', 'warning');
        setTimeout(function() {
          solicitacaoPendente = false;
        }, 3000);
        return;
      }

      solicitacaoPendente = false;

      var dados = $("#" + id_formulario).serialize();
      console.log(dados);
      $.ajax({
        type: "GET",
        url: "./api/login.php",
        data: dados,
        success: function(response) {
          if (response.trim() === '') {
            SweetAlert2('Resposta do servidor vazia.', 'error');
          } else {
            var jsonResponse = JSON.parse(response);
            if (jsonResponse.icon === 'error') {
              SweetAlert2(jsonResponse.title, jsonResponse.icon);
            } else {
              SweetAlert2(jsonResponse.title, jsonResponse.icon);
              if (jsonResponse.url) {
                setTimeout(function() {
                  window.location.href = jsonResponse.url;
                }, parseInt(jsonResponse.time, 10));
              }
            }
          }
        },
        error: function(data) {
          SweetAlert2('Erro na solicitação!', 'error');
        },
        complete: function() {
          solicitacaoPendente = false;
        }
      });
    }

    function SweetAlert2(title, icon) {
      const Toast = Swal.mixin({
        toast: true,
        position: "top-end",
        showConfirmButton: false,
        timer: 2000,
        timerProgressBar: true,
        didOpen: (toast) => {
          toast.onmouseenter = Swal.stopTimer;
          toast.onmouseleave = Swal.resumeTimer;
        }
      });
      Toast.fire({
        icon: icon,
        title: title
      });
    }
    
    // Mostrar/ocultar senha
    document.addEventListener('DOMContentLoaded', function() {
      const passwordToggle = document.getElementById('password-toggle');
      const passwordInput = document.getElementById('password-input');
      
      passwordToggle.addEventListener('click', function() {
        const type = passwordInput.getAttribute('type') === 'password' ? 'text' : 'password';
        passwordInput.setAttribute('type', type);
        this.querySelector('i').classList.toggle('fa-eye');
        this.querySelector('i').classList.toggle('fa-eye-slash');
      });
      
      // Garantir que links abram em nova aba
      const downloadBtn = document.querySelector('.download-btn');
      downloadBtn.addEventListener('click', function(e) {
        e.preventDefault();
        window.open(this.href, '_blank');
      });
      
      const whatsappBtn = document.querySelector('.whatsapp-btn');
      whatsappBtn.addEventListener('click', function(e) {
        e.preventDefault();
        window.open(this.href, '_blank');
      });
    });
  </script>
</body>
</html>//Generated by Ampare PHP Encoder. For more security please use php protect before encode the php program



© 2023 Quttera Ltd. All rights reserved.