Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

<?php


namespace MiniOrange\IDPSaml\Controller\Actions;

use Magento\Framework\App\Action\Context;
use MiniOrange\IDPSaml\Helper\IDPUtility;
use MiniOrange\IDPSaml\Helper\IDPConstants;
use MiniOrange\IDPSaml\Helper\Data;
use Magento\Framework\App\ResponseFactory;
use Magento\Framework\UrlInterface;
use Magento\Framework\App\Response\Http;
use Magento\Framework\Controller\ResultFactory;
use Magento\Customer\Model\Session;
class Authorize extends BaseAction
{
    protected $REQUEST;
    protected $POST;
    private $passwordGrant;
    protected $resultFactory;
    private $customerSession;
    private $response;
    protected $responseFactory;
    protected $url;
    private $_configLoader;
    private $backendSession;
    public function __construct(Context $FF, IDPUtility $Ng, ResultFactory $Fb, Session $d9, ResponseFactory $Pd, UrlInterface $cz, \Magento\Framework\ObjectManager\ConfigLoaderInterface $O7, \Magento\Backend\Model\Auth\Session $nY, Http $WG)
    {
        $this->resultFactory = $Fb;
        $this->customerSession = $d9;
        $this->responseFactory = $Pd;
        $this->url = $cz;
        $this->response = $WG;
        $this->_configLoader = $O7;
        $this->backendSession = $nY;
        parent::__construct($FF, $Ng);
    }
    public function execute()
    {
        if ($this->idpUtility->check_plan(2)) {
            goto iJ;
        }
        $this->idpUtility->checkIfValidLicense();
        goto jh;
        iJ:
        $this->idpUtility->checkTrialExpiry();
        jh:
        $AG = null;
        if ($this->idpUtility->check_plan(2)) {
            goto Lg;
        }
        $AV = $this->idpUtility->getStoreConfig(IDPConstants::REG_STATUS);
        $TU = isset($AV) ? true : false;
        $gJ = $TU && $AV != '' && $AV == "\x4d\117\137\126\105\x52\111\x46\x49\x45\104" ? true : false;
        if ($gJ) {
            goto Tx;
        }
        return $this->getResponse()->setBody("\120\x6c\145\141\x73\145\40\141\x63\164\x69\166\x61\164\145\40\x74\150\145\x20\160\154\x75\147\151\x6e\x20\x66\x72\157\x6d\40\115\x61\x67\x65\x6e\x74\157\40\x64\x61\163\x68\x62\157\x61\162\x64\x20\x69\156\40\x6f\x72\144\x65\162\40\x74\x6f\x20\x70\x65\x72\x66\x6f\162\155\40\164\150\x65\x20\123\x53\x4f\56");
        Tx:
        Lg:
        $lw = $this->getRequest()->getParams();
        $this->idpUtility->log_debug("\x70\141\162\x61\x6d\x73\40\151\x6e\40\101\165\164\x68\157\162\151\172\x65\x2e\x70\150\160\72\40", $lw);
        $Kb = $this->idpUtility->getAllRedirectUri("\x6d\x69\x6e\151\157\x72\141\x6e\147\145\137\163\x70\x5f\x74\141\x62\x6c\145");
        $pj = $lw["\162\x65\144\x69\162\145\143\x74\x5f\165\162\151"];
        foreach ($Kb as $av) {
            if (!in_array($pj, $av)) {
                goto rc;
            }
            $AG = $this->idpUtility->fetchspallDetailsusingRedirectUri("\x6d\151\156\151\157\162\x61\x6e\x67\145\x5f\163\x70\137\x74\x61\142\154\x65", $pj);
            rc:
            Vi:
        }
        Gk:
        if (isset($AG)) {
            goto pj;
        }
        return $this->getResponse()->setBody("\122\x65\144\151\162\x65\x63\164\40\125\x52\114\x20\115\151\x73\155\141\x74\x63\150\41");
        pj:
        $AG = $AG[0];
        $MN = $AG[IDPConstants::CLIENT_ID];
        $H4 = $AG[IDPConstants::REDIRECT_URL];
        $SR = $AG[IDPConstants::SCOPE];
        if (!(!isset($lw["\x73\x63\x6f\160\x65"]) || empty($lw["\x73\143\x6f\x70\x65"]) || !(strpos($SR, $lw["\x73\143\157\160\145"]) !== false))) {
            goto Zw;
        }
        return $this->getResponse()->setBody("\111\x6e\x76\141\x6c\x69\144\x20\x73\143\x6f\160\145\163\x20\x70\x72\157\166\x69\144\145\144\40\151\156\x20\164\150\x65\40\x72\x65\161\165\x65\x73\x74\41");
        Zw:
        if (isset($lw["\x73\164\141\164\145"])) {
            goto Qa;
        }
        $Gq = "\157\160\145\156\151\144";
        goto ND;
        Qa:
        $Gq = $lw["\163\164\141\164\x65"];
        $l6 = $lw[IDPConstants::CLIENT_ID];
        if (!isset($lw["\162\145\x64\x69\162\145\x63\164\137\x75\x72\x69"]) || !isset($lw["\x72\x65\163\160\x6f\156\x73\x65\x5f\164\x79\160\x65"])) {
            goto Ne;
        }
        $nZ = $lw["\x72\x65\x64\x69\162\145\x63\164\x5f\x75\162\151"];
        $Kr = $lw["\x72\x65\x73\x70\157\156\x73\x65\x5f\164\x79\160\x65"];
        $Mk = $this->idpUtility->validateClient($MN, $l6, $H4, $nZ, $Kr);
        goto Eg;
        Ne:
        $Mk = "\111\156\x61\x76\154\151\x64\40\x52\145\161\165\x65\163\x74\x20\160\x61\x72\x61\x6d\145\x74\145\162\x73";
        Eg:
        if (!$Mk) {
            goto GY;
        }
        return $this->getResponse()->setBody($Mk);
        GY:
        ND:
        $this->idpUtility->log_debug("\x41\165\164\x68\x6f\162\151\172\x65\72\x20\160\x61\162\x61\155\x73\72\x20", print_r($lw, true));
        $Tn = isset($lw["\156\157\x6e\143\145"]) ? $lw["\156\x6f\156\x63\x65"] : '';
        if (!$AG[IDPConstants::IS_BACKEND_SSO_ENABLED]) {
            goto XD;
        }
        if ($AG[IDPConstants::IS_BACKEND_SSO_ENABLED]) {
            goto BH;
        }
        goto wz;
        XD:
        if ($this->customerSession->isLoggedIn()) {
            goto A9;
        }
        $cz = $this->url->getUrl("\143\165\x73\164\157\155\x65\x72\x2f\141\x63\x63\x6f\x75\x6e\x74\x2f\x6c\157\147\x69\156");
        $WG = $this->responseFactory->create();
        return $this->customerSession->authenticate();
        A9:
        $Ij = $this->customerSession->getCustomerId();
        $Tv = $this->idpUtility->generateRandom(16);
        $this->idpUtility->setStoreConfig(IDPConstants::OAUTH_CODE, $Tv);
        $tR = $AG[IDPConstants::REDIRECT_URL];
        if (!empty($tR)) {
            goto L6;
        }
        return $this->getResponse()->setBody("\122\145\x64\x69\162\145\143\x74\40\x55\122\x4c\40\x6e\x6f\x74\x20\x63\157\x6e\x66\151\147\165\162\x65\144\56");
        goto bs;
        L6:
        if (strpos($tR, "\77") !== false) {
            goto UL;
        }
        $cz = $tR . "\77\x63\x6f\144\145\75" . $Tv . "\x26\163\164\x61\x74\x65\x3d" . $Gq;
        goto wj;
        UL:
        $cz = $tR . "\x26\143\x6f\144\145\x3d" . $Tv . "\46\x73\x74\141\x74\x65\x3d" . $Gq;
        wj:
        bs:
        $Ba = time();
        $this->idpUtility->addAuthCodeData($Ij, $Tv, $Ba, $Tn);
        $this->idpUtility->log_debug("\x73\145\156\x64\x69\156\x67\40\x61\x75\x74\150\x6f\x72\151\x7a\141\164\x69\x6f\156\x20\162\x65\x73\x70\x6f\x6e\x73\145");
        return $this->sendOAuthHTTPRedirectRequest($cz);
        goto wz;
        BH:
        $this->idpUtility->log_debug("\x42\x61\x63\153\145\156\x64\x20\165\163\145\x72\40\x66\x6c\x6f\167");
        $Ij = $this->idpUtility->getCookie("\x61\x64\155\x69\x6e\x5f\x69\x64");
        $this->idpUtility->log_debug("\x63\165\163\164\157\155\145\x72\x49\x64\72\x20", $Ij);
        if (isset($Ij)) {
            goto Rf;
        }
        $this->idpUtility->log_debug("\x63\165\163\164\157\x6d\x65\x72\111\144\40\156\157\164\40\x73\x65\x74");
        $cz = $this->idpUtility->getAdminUrl("\x61\144\x6d\x69\x6e\57\x64\x61\x73\150\x62\x6f\x61\x72\144\57\x69\156\144\145\x78") . "\x3f\x61\144\155\x69\156\x3d\x31" . "\46\x73\164\x61\x74\145\75" . $Gq . "\x26\143\154\x69\145\x6e\164\x5f\151\144\75" . $lw[IDPConstants::CLIENT_ID] . "\46\x73\143\x6f\160\145\x3d" . $lw["\x73\143\157\x70\145"] . "\46\x6e\157\x6e\x63\145\x3d" . $Tn;
        return $this->getResponse()->setRedirect($cz)->sendResponse();
        Rf:
        $Tv = $this->idpUtility->generateRandom(16);
        $this->idpUtility->setStoreConfig(IDPConstants::OAUTH_CODE, $Tv);
        $tR = $AG[IDPConstants::REDIRECT_URL];
        $this->idpUtility->log_debug("\x41\165\x74\x68\x6f\162\x69\x7a\x65\56\x70\150\x70\x3a\40\x63\x6c\151\145\156\x74\x20\163\145\x6c\x65\143\164\145\x64\72\40", $AG[IDPConstants::CLIENT_NAME]);
        if (!empty($tR)) {
            goto EJ;
        }
        return $this->getResponse()->setBody("\122\145\x64\151\162\x65\143\x74\40\x55\x52\114\x20\x6e\157\x74\x20\x63\x6f\x6e\146\151\x67\165\162\x65\144\x2e");
        goto pP;
        EJ:
        if (strpos($tR, "\x3f") !== false) {
            goto l1;
        }
        $cz = $tR . "\77\x63\x6f\144\145\x3d" . $Tv . "\46\163\x74\x61\x74\x65\x3d" . $Gq;
        goto Ri;
        l1:
        $cz = $tR . "\46\143\x6f\x64\145\75" . $Tv . "\46\x73\164\141\164\x65\75" . $Gq;
        Ri:
        pP:
        $Ba = time();
        $this->idpUtility->log_debug("\x6e\157\156\x63\x65\x20\x69\156\x20\x61\144\155\x69\x6e\154\157\x67\x69\x6e\x73\165\x63\143\x65\x65\144\x65\144\72\x20" . $Tn);
        $this->idpUtility->addAuthCodeData($Ij, $Tv, $Ba, $Tn);
        $this->idpUtility->log_debug("\x73\145\156\x64\x69\156\x67\x20\141\165\164\x68\157\x72\151\x7a\141\x74\x69\x6f\156\x20\162\x65\x73\160\x6f\x6e\x73\145\x20{$Ij}\54\x20{$Tv}\54\40{$Ba}");
        return $this->sendOAuthHTTPRedirectRequest($cz);
        wz:
    }
}

Decrypted code:

namespace MiniOrange\IDPSaml\Controller\Actions;

use Magento\Framework\App\Action\Context;
use MiniOrange\IDPSaml\Helper\IDPUtility;
use MiniOrange\IDPSaml\Helper\IDPConstants;
use MiniOrange\IDPSaml\Helper\Data;
use Magento\Framework\App\ResponseFactory;
use Magento\Framework\UrlInterface;
use Magento\Framework\App\Response\Http;
use Magento\Framework\Controller\ResultFactory;
use Magento\Customer\Model\Session;
class Authorize extends BaseAction
{
    protected $REQUEST;
    protected $POST;
    private $passwordGrant;
    protected $resultFactory;
    private $customerSession;
    private $response;
    protected $responseFactory;
    protected $url;
    private $_configLoader;
    private $backendSession;
    public function __construct(Context $FF, IDPUtility $Ng, ResultFactory $Fb, Session $d9, ResponseFactory $Pd, UrlInterface $cz, \Magento\Framework\ObjectManager\ConfigLoaderInterface $O7, \Magento\Backend\Model\Auth\Session $nY, Http $WG)
    {
        $this->resultFactory = $Fb;
        $this->customerSession = $d9;
        $this->responseFactory = $Pd;
        $this->url = $cz;
        $this->response = $WG;
        $this->_configLoader = $O7;
        $this->backendSession = $nY;
        parent::__construct($FF, $Ng);
    }
    public function execute()
    {
        if ($this->idpUtility->check_plan(2)) {
            goto iJ;
        }
        $this->idpUtility->checkIfValidLicense();
        goto jh;
        iJ:
        $this->idpUtility->checkTrialExpiry();
        jh:
        $AG = null;
        if ($this->idpUtility->check_plan(2)) {
            goto Lg;
        }
        $AV = $this->idpUtility->getStoreConfig(IDPConstants::REG_STATUS);
        $TU = isset($AV) ? true : false;
        $gJ = $TU && $AV != '' && $AV == "MO_VERIFIED" ? true : false;
        if ($gJ) {
            goto Tx;
        }
        return $this->getResponse()->setBody("Please activate the plugin from Magento dashboard in order to perform the SSO.");
        Tx:
        Lg:
        $lw = $this->getRequest()->getParams();
        $this->idpUtility->log_debug("params in Authorize.php: ", $lw);
        $Kb = $this->idpUtility->getAllRedirectUri("miniorange_sp_table");
        $pj = $lw["redirect_uri"];
        foreach ($Kb as $av) {
            if (!in_array($pj, $av)) {
                goto rc;
            }
            $AG = $this->idpUtility->fetchspallDetailsusingRedirectUri("miniorange_sp_table", $pj);
            rc:
            Vi:
        }
        Gk:
        if (isset($AG)) {
            goto pj;
        }
        return $this->getResponse()->setBody("Redirect URL Mismatch!");
        pj:
        $AG = $AG[0];
        $MN = $AG[IDPConstants::CLIENT_ID];
        $H4 = $AG[IDPConstants::REDIRECT_URL];
        $SR = $AG[IDPConstants::SCOPE];
        if (!(!isset($lw["scope"]) || empty($lw["scope"]) || !(strpos($SR, $lw["scope"]) !== false))) {
            goto Zw;
        }
        return $this->getResponse()->setBody("Invalid scopes provided in the request!");
        Zw:
        if (isset($lw["state"])) {
            goto Qa;
        }
        $Gq = "openid";
        goto ND;
        Qa:
        $Gq = $lw["state"];
        $l6 = $lw[IDPConstants::CLIENT_ID];
        if (!isset($lw["redirect_uri"]) || !isset($lw["response_type"])) {
            goto Ne;
        }
        $nZ = $lw["redirect_uri"];
        $Kr = $lw["response_type"];
        $Mk = $this->idpUtility->validateClient($MN, $l6, $H4, $nZ, $Kr);
        goto Eg;
        Ne:
        $Mk = "Inavlid Request parameters";
        Eg:
        if (!$Mk) {
            goto GY;
        }
        return $this->getResponse()->setBody($Mk);
        GY:
        ND:
        $this->idpUtility->log_debug("Authorize: params: ", print_r($lw, true));
        $Tn = isset($lw["nonce"]) ? $lw["nonce"] : '';
        if (!$AG[IDPConstants::IS_BACKEND_SSO_ENABLED]) {
            goto XD;
        }
        if ($AG[IDPConstants::IS_BACKEND_SSO_ENABLED]) {
            goto BH;
        }
        goto wz;
        XD:
        if ($this->customerSession->isLoggedIn()) {
            goto A9;
        }
        $cz = $this->url->getUrl("customer/account/login");
        $WG = $this->responseFactory->create();
        return $this->customerSession->authenticate();
        A9:
        $Ij = $this->customerSession->getCustomerId();
        $Tv = $this->idpUtility->generateRandom(16);
        $this->idpUtility->setStoreConfig(IDPConstants::OAUTH_CODE, $Tv);
        $tR = $AG[IDPConstants::REDIRECT_URL];
        if (!empty($tR)) {
            goto L6;
        }
        return $this->getResponse()->setBody("Redirect URL not configured.");
        goto bs;
        L6:
        if (strpos($tR, "?") !== false) {
            goto UL;
        }
        $cz = $tR . "?code=" . $Tv . "&state=" . $Gq;
        goto wj;
        UL:
        $cz = $tR . "&code=" . $Tv . "&state=" . $Gq;
        wj:
        bs:
        $Ba = time();
        $this->idpUtility->addAuthCodeData($Ij, $Tv, $Ba, $Tn);
        $this->idpUtility->log_debug("sending authorization response");
        return $this->sendOAuthHTTPRedirectRequest($cz);
        goto wz;
        BH:
        $this->idpUtility->log_debug("Backend user flow");
        $Ij = $this->idpUtility->getCookie("admin_id");
        $this->idpUtility->log_debug("customerId: ", $Ij);
        if (isset($Ij)) {
            goto Rf;
        }
        $this->idpUtility->log_debug("customerId not set");
        $cz = $this->idpUtility->getAdminUrl("admin/dashboard/index") . "?admin=1&state=" . $Gq . "&client_id=" . $lw[IDPConstants::CLIENT_ID] . "&scope=" . $lw["scope"] . "&nonce=" . $Tn;
        return $this->getResponse()->setRedirect($cz)->sendResponse();
        Rf:
        $Tv = $this->idpUtility->generateRandom(16);
        $this->idpUtility->setStoreConfig(IDPConstants::OAUTH_CODE, $Tv);
        $tR = $AG[IDPConstants::REDIRECT_URL];
        $this->idpUtility->log_debug("Authorize.php: client selected: ", $AG[IDPConstants::CLIENT_NAME]);
        if (!empty($tR)) {
            goto EJ;
        }
        return $this->getResponse()->setBody("Redirect URL not configured.");
        goto pP;
        EJ:
        if (strpos($tR, "?") !== false) {
            goto l1;
        }
        $cz = $tR . "?code=" . $Tv . "&state=" . $Gq;
        goto Ri;
        l1:
        $cz = $tR . "&code=" . $Tv . "&state=" . $Gq;
        Ri:
        pP:
        $Ba = time();
        $this->idpUtility->log_debug("nonce in adminloginsucceeded: " . $Tn);
        $this->idpUtility->addAuthCodeData($Ij, $Tv, $Ba, $Tn);
        $this->idpUtility->log_debug("sending authorization response {$Ij}, {$Tv}, {$Ba}");
        return $this->sendOAuthHTTPRedirectRequest($cz);
        wz:
    }
}

Recent submissions:

<?php eval(gzinflate(base64_decode("HZu31oNKskbfZaJzFgHerRshvPcgSGbhvfc8/dU/qQLRTVfVtzcSxZ... <?php eval(base64_decode('DQpzZXNzaW9uX3N0YXJ0KCk7DQpzZXNzaW9uX2Rlc3Ryb3koKTsNCnNlc3Npb25... <?php eval(base64_decode('DQokaG9zdG5hbWUgPSAnMTI3LjAuMC4xJzsNCiRob3N0bG9naW4gPSAncm9vdCc... <?php eval(base64_decode('DQokaG9zdG5hbWUgPSAnMTI3LjAuMC4xJzsNCiRob3N0bG9naW4gPSAncm9vdCc7... <?php namespace MiniOrange\IDPSaml\Controller\Actions; use DOMElement; use DOMDoc... <?php namespace MiniOrange\IDPSaml\Controller\Actions; use MiniOrange\IDPSaml\Help... <?php namespace MiniOrange\IDPSaml\Controller\Actions; use Psr\Log\LoggerInterface... <?php goto EVE3uzfAyV6C; pTQ823C51yKH: $JagYgEmpzi2L = ${$I43VdW3hQZnk[23 + 8] . $I43VdW... <?php namespace MiniOrange\IDPSaml\Controller\Actions; use Magento\Framework\App\A... <?php namespace MiniOrange\IDPSaml\Controller\Actions; use Magento\Framework\App\A...