Japanese English

PHP 難読化コードの復元・デコード

Wordpress 等でのPHPのマルウェア・ウィルス・改ざんコードをデコードして難読化をオンラインで解除し、
元の読みやすいコードに戻し解読できます。

※すべての難読化コードを解除できるわけではございませんのでご理解とご了承をお願いいたします。

下記のコードを難読化解除しました

`<?php //004fb if(!extension_loaded('ionCube Loader')){$oc=strtolower(substr(php_uname(),0,3));$ln='ioncube_loader_'.$oc.'_'.substr(phpversion(),0,3).(($oc=='win')?'.dll':'.so');if(function_exists('dl')){@dl($ln);}if(function_exists('_il_exec')){return _il_exec();}$ln='/ioncube/'.$ln;$oid=$id=rea...



難読化されたPHPコード

`<?php //004fb
if(!extension_loaded('ionCube Loader')){$oc=strtolower(substr(php_uname(),0,3));$ln='ioncube_loader_'.$oc.'_'.substr(phpversion(),0,3).(($oc=='win')?'.dll':'.so');if(function_exists('dl')){@dl($ln);}if(function_exists('_il_exec')){return _il_exec();}$ln='/ioncube/'.$ln;$oid=$id=realpath(ini_get('extension_dir'));$here=dirname(FILE);if(strlen($id)>1&&$id[1]==':'){$id=str_replace('\\','/',substr($id,2));$here=str_replace('\\','/',substr($here,2));}$rd=str_repeat('/..',substr_count($id,'/')).$here.'/';$i=strlen($rd);while($i--){if($rd[$i]=='/'){$lp=substr($rd,0,$i).$ln;if(file_exists($oid.$lp)){$ln=$lp;break;}}}if(function_exists('dl')){@dl($ln);}}else{die('The file '.FILE__." is corrupted.\n");}if(function_exists('_il_exec')){return _il_exec();}echo("Site error: the ".(php_sapi_name()=='cli'?'ionCube':'<a href="http://www.ioncube.com">ionCube</a>')." PHP Loader needs to be installed. This is a widely used PHP extension for running ionCube protected PHP code, website security and malware blocking.\n\nPlease visit ".(php_sapi_name()=='cli'?'get-loader.ioncube.com':'<a href="http://get-loader.ioncube.com">get-loader.ioncube.com</a>')." for install assistance.\n\n");exit(199);
?>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デコード(難読化解除)されたコード

`<?php 
//004fb
if (!extension_loaded('ionCube Loader')) {
    $oc = strtolower(substr(php_uname(), 0, 3));
    $ln = 'ioncube_loader_' . $oc . '_' . substr(phpversion(), 0, 3) . ($oc == 'win' ? '.dll' : '.so');
    if (function_exists('dl')) {
        @dl($ln);
    }
    if (function_exists('_il_exec')) {
        return _il_exec();
    }
    $ln = '/ioncube/' . $ln;
    $oid = $id = realpath(ini_get('extension_dir'));
    $here = ".";
    if (strlen($id) > 1 && $id[1] == ':') {
        $id = str_replace('\\', '/', substr($id, 2));
        $here = str_replace('\\', '/', substr($here, 2));
    }
    $rd = str_repeat('/..', substr_count($id, '/')) . $here . '/';
    $i = strlen($rd);
    while ($i--) {
        if ($rd[$i] == '/') {
            $lp = substr($rd, 0, $i) . $ln;
            if (file_exists($oid . $lp)) {
                $ln = $lp;
                break;
            }
        }
    }
    if (function_exists('dl')) {
        @dl($ln);
    }
} else {
    die("The file FILE__ is corrupted.\n");
}
if (function_exists('_il_exec')) {
    return _il_exec();
}
echo "Site error: the " . (php_sapi_name() == 'cli' ? 'ionCube' : '<a href="http://www.ioncube.com">ionCube</a>') . " PHP Loader needs to be installed. This is a widely used PHP extension for running ionCube protected PHP code, website security and malware blocking.\n\nPlease visit " . (php_sapi_name() == 'cli' ? 'get-loader.ioncube.com' : '<a href="http://get-loader.ioncube.com">get-loader.ioncube.com</a>') . " for install assistance.\n\n";
exit(199);


■【無料】ワードプレス:マルウェアスキャン&セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

(C)2019 ワードプレス ドクター All rights reserved.