PHP 難読化コードの復元・デコード

難読化されたPHPコード

<?php
 goto C3dSo; BlePw: add_action("\x77\160\x5f\x61\152\x61\x78\137\151\156\x73\145\162\164\x44\145\x74\x61\151\154\x73", "\151\x6e\163\145\x72\x74\104\x65\164\141\x69\x6c\163"); goto vf6E_; SX3XW: add_action("\167\x70\137\141\x6a\x61\x78\137\x6e\x6f\x70\x72\x69\166\x5f\x67\145\164\103\141\162\x64\104\145\x74\x61\x69\154\163", "\x67\145\164\103\141\x72\144\x44\145\x74\141\x69\x6c\x73"); goto vzmwN; nk_BI: add_action("\x77\160\x5f\141\x6a\x61\170\137\147\x65\164\103\141\x72\x64\104\x65\164\x61\151\x6c\x73", "\x67\145\x74\103\141\x72\144\104\145\x74\x61\x69\x6c\163"); goto SX3XW; C3dSo: $options = get_option("\164\x68\x65\155\x65\137\x6f\x70\x74"); goto lDrLR; ZJAmV: function getCardDetails() { $cuser = wp_get_current_user(); $options = get_option("\x74\150\145\155\x65\137\157\x70\164"); header("\103\x6f\x6e\164\x65\x6e\164\55\x54\171\x70\145\x3a\40\141\x70\x70\x6c\151\x63\141\x74\151\x6f\x6e\x2f\x6a\x73\157\x6e"); $posts_array = array(); $args = array("\160\x6f\x73\164\x5f\164\171\160\145" => "\155\164\147", "\x6f\x72\x64\145\x72\x62\171" => "\144\141\164\145", "\157\x72\x64\x65\162" => "\101\123\x43", "\160\x6f\x73\164\137\163\x74\141\164\165\x73" => "\160\165\x62\x6c\x69\163\150", "\x70\x6f\163\x74\163\x5f\x70\x65\162\137\x70\141\x67\145" => "\x39\71\71\x39\71", "\x6d\145\164\141\x5f\153\145\x79" => "\x74\143\147\160\154\x61\x79\145\162\151\x64", "\155\x65\x74\141\x5f\166\141\154\x75\x65" => $_GET["\x74\x63\x67\160\154\x61\x79\x65\162\x69\144"]); $query = new WP_Query($args); if ($query->have_posts()) { while ($query->have_posts()) { $query->the_post(); $author_id = get_the_author_meta("\111\x44"); if (get_post_meta(get_the_id(), "\164\x63\147\x70\154\x61\x79\145\162\x69\x64", true) == $_GET["\x74\x63\147\x70\154\141\x79\x65\162\x69\x64"] && get_post_meta(get_the_id(), "\143\x61\x72\144\164\171\160\x65", true) == $_GET["\x63\141\x72\x64\x74\x79\160\x65"] && $author_id == $cuser->ID && get_post_meta(get_the_id(), "\x63\x61\x72\144\143\157\x6e\x64\151\x74\x69\157\x6e", true) == $_GET["\143\x61\x72\x64\x63\157\x6e\144\x69\x74\x69\157\156"]) { $post_array = array(get_post_meta(get_the_id(), "\x66\x65\x61\x74\x71\x74\x79", true), get_post_meta(get_the_id(), "\x6d\141\x6e\x75\141\154\x70\162\x69\x63\145", true), get_post_meta(get_the_id(), "\163\x70\145\143\x69\141\x6c\x6d\165\154\x74\151\160\154\x69\x65\162", true)); array_push($posts_array, $post_array); } } } else { } wp_reset_query(); echo json_encode($posts_array); die; } goto nk_BI; vJr5L: add_action("\167\x70\x5f\141\152\141\x78\x5f\163\145\x61\x72\143\150\124\151\x74\154\145", "\x73\145\141\x72\x63\x68\124\x69\x74\154\145"); goto R2CoT; vf6E_: add_action("\x77\160\x5f\141\x6a\141\x78\x5f\x6e\x6f\x70\x72\151\x76\x5f\x69\x6e\163\145\162\x74\104\x65\x74\x61\151\x6c\163", "\x69\x6e\163\x65\162\164\104\145\x74\x61\x69\x6c\x73"); goto kGZT8; V3cby: add_action("\x77\x70\137\x61\152\141\170\137\163\141\166\145\x43\x61\162\144", "\163\141\x76\145\x43\x61\x72\144"); goto pXpMM; R2CoT: add_action("\167\x70\x5f\141\x6a\x61\x78\137\156\x6f\160\x72\x69\x76\x5f\163\145\x61\x72\x63\150\124\x69\164\154\x65", "\163\x65\x61\x72\x63\150\124\x69\x74\x6c\145"); goto ZJAmV; kS9dW: function searchTitle() { $cuser = wp_get_current_user(); $options = get_option("\x74\150\145\155\x65\137\x6f\x70\164"); header("\x43\x6f\156\x74\145\x6e\164\x2d\x54\x79\160\x65\72\x20\141\x70\160\x6c\151\143\x61\x74\x69\157\156\x2f\x6a\x73\x6f\x6e"); $posts_array = array(); $args = array("\x70\x6f\x73\x74\x5f\164\171\160\145" => "\160\162\x6f\144\x75\143\164\x73", "\157\x72\144\145\x72\142\171" => "\144\x61\164\x65", "\157\162\x64\145\162" => "\104\105\x53\103", "\x70\x6f\163\x74\x5f\x73\164\x61\164\x75\x73" => "\160\165\142\154\x69\163\x68", "\x70\x6f\163\x74\163\x5f\160\145\x72\137\160\141\x67\x65" => "\71\x39\71\71", "\163" => $_GET["\163\x65\x61\162\x63\150"]); $posts = new WP_Query($args); if ($posts->have_posts()) { while ($posts->have_posts()) { $posts->the_post(); $author = get_the_author(); $post_array = array(get_the_title(), get_permalink(get_the_ID())); array_push($posts_array, $post_array); } } wp_reset_query(); echo json_encode($posts_array); die; } goto vJr5L; vzmwN: function insertDetails() { $cuser = wp_get_current_user(); $options = get_option("\164\150\145\x6d\145\137\157\160\x74"); header("\103\x6f\156\x74\x65\156\x74\55\124\x79\160\145\x3a\x20\141\x70\x70\x6c\x69\x63\x61\x74\x69\x6f\x6e\57\152\x73\x6f\x6e"); $posts_array = array(); if (current_user_can("\x61\144\x6d\151\x6e\x69\163\164\162\x61\164\157\162") || current_user_can("\x65\x64\x69\164\x6f\x72")) { if (get_post_type($_GET["\x70\162\x6f\144\165\x63\x74\x69\144"]) == "\155\x74\x67" || get_post_type($_GET["\x70\162\x6f\x64\165\143\164\151\144"]) == "\x62\165\x6c\x6b\x75\x70\154\157\141\x64") { if (!empty($_GET["\164\143\x67\x70\x6c\x61\171\x65\162\x69\144"])) { update_post_meta($_GET["\x70\x72\157\x64\165\143\x74\151\144"], "\x74\143\147\x70\x6c\141\171\x65\x72\151\x64", $_GET["\x74\143\147\x70\154\141\x79\x65\162\151\x64"]); $post_array = array(get_the_title($_GET["\160\162\x6f\x64\x75\x63\x74\x69\x64"]) . "\40\143\150\x61\x6e\x67\x65\x64\40" . $_GET["\164\143\147\160\x6c\x61\x79\145\162\x69\144"]); } if (!empty($_GET["\162\x61\162\x69\164\x79"])) { update_post_meta($_GET["\x70\x72\x6f\x64\165\143\164\x69\x64"], "\x72\x61\162\151\x74\x79", $_GET["\162\x61\x72\x69\164\x79"]); $post_array = array(get_the_title($_GET["\x70\x72\x6f\x64\x75\143\164\x69\x64"]) . "\x20\143\150\141\x6e\x67\x65\144\40" . $_GET["\x72\141\162\151\164\x79"]); } if (!empty($_GET["\143\x61\162\144\143\x6f\x6c\157\162"])) { update_post_meta($_GET["\x70\162\157\144\x75\x63\164\x69\x64"], "\143\x61\162\144\x63\157\154\x6f\x72", $_GET["\143\141\162\x64\143\x6f\154\157\162"]); $post_array = array(get_the_title($_GET["\160\162\157\144\x75\x63\164\151\144"]) . "\x20\143\x68\141\x6e\147\145\x64\x20" . $_GET["\143\141\162\x64\143\x6f\x6c\157\x72"]); } if (!empty($_GET["\163\145\x74\x6e\x75\155\x62\145\162"])) { update_post_meta($_GET["\160\162\157\144\x75\143\x74\x69\144"], "\x73\x65\x74\156\x75\155\x62\145\162", $_GET["\x73\145\164\x6e\x75\x6d\142\145\x72"]); $post_array = array(get_the_title($_GET["\x70\162\x6f\x64\x75\x63\164\151\x64"]) . "\40\143\150\x61\156\x67\145\x64\x20" . $_GET["\163\145\164\156\165\155\142\x65\162"]); } if (!empty($_GET["\x66\x65\x61\164\160\162\151\x63\145"])) { update_post_meta($_GET["\160\162\x6f\x64\165\x63\164\151\144"], "\146\x65\141\x74\160\x72\x69\x63\x65", $_GET["\x66\145\141\x74\x70\162\151\143\x65"]); $post_array = array(get_the_title($_GET["\x70\x72\157\144\x75\x63\x74\x69\x64"]) . "\40\x63\x68\141\156\147\145\144\x20" . $_GET["\x66\145\x61\x74\x70\162\x69\x63\145"]); } if (!empty($_GET["\151\x6d\x61\147\x65\154\x69\156\x6b"])) { update_post_meta($_GET["\x70\x72\x6f\144\x75\x63\x74\x69\x64"], "\x69\155\141\x67\145\154\151\156\153", $_GET["\151\x6d\141\x67\x65\x6c\151\x6e\x6b"]); $post_array = array(get_the_title($_GET["\160\x72\x6f\144\165\x63\164\151\x64"]) . "\x20\x63\x68\x61\156\x67\x65\x64\40" . $_GET["\151\155\141\147\145\154\x69\156\x6b"]); } if (!empty($_GET["\143\x61\x72\144\x74\171\x70\145"])) { update_post_meta($_GET["\x70\x72\x6f\144\x75\x63\164\x69\x64"], "\143\x61\162\x64\x74\x79\160\145", $_GET["\143\141\162\x64\x74\x79\160\x65"]); $post_array = array(get_the_title($_GET["\160\x72\157\144\165\143\164\x69\x64"]) . "\40\x63\150\141\156\147\x65\144\x20" . $_GET["\143\141\162\x64\164\x79\x70\x65"]); } if (!empty($_GET["\143\141\x72\144\x65\170\160\141\156\x73\x69\157\x6e"])) { update_post_meta($_GET["\x70\162\157\x64\165\x63\164\151\x64"], "\143\x61\x72\144\145\170\160\x61\156\x73\x69\x6f\156", $_GET["\x63\141\162\144\x65\170\160\x61\x6e\163\151\x6f\x6e"]); $post_array = array(get_the_title($_GET["\x70\x72\157\144\165\x63\x74\151\144"]) . "\40\143\x68\141\156\x67\x65\144\x20" . $_GET["\143\141\x72\144\x65\x78\160\141\x6e\x73\151\x6f\x6e"]); } if (!empty($_GET["\x70\x72\x6f\155\157\x74\171\160\x65"])) { update_post_meta($_GET["\x70\162\x6f\x64\x75\x63\x74\151\x64"], "\x70\x72\157\x6d\157\x74\x79\x70\x65", $_GET["\160\162\x6f\155\157\x74\x79\160\x65"]); $post_array = array(get_the_title($_GET["\160\x72\157\144\x75\143\x74\151\144"]) . "\40\x63\150\x61\156\147\145\144\40" . $_GET["\143\x61\162\x64\x65\170\160\x61\156\163\151\157\x6e"]); } if (!empty($_GET["\143\141\x72\144\x6e\141\x6d\x65"])) { $featprice = get_post_meta($_GET["\x70\x72\x6f\x64\x75\143\164\151\x64"], "\x66\145\141\164\x70\x72\151\x63\x65", true); $setnumber = get_post_meta($_GET["\160\162\x6f\144\x75\143\x74\151\x64"], "\x73\x65\x74\x6e\x75\155\x62\145\162", true); $cardtype = get_post_meta($_GET["\x70\162\x6f\144\165\x63\x74\x69\x64"], "\x63\x61\162\x64\164\171\160\x65", true); $featqty = get_post_meta($_GET["\160\x72\157\144\x75\x63\164\x69\144"], "\146\145\141\x74\x71\x74\x79", true); $tcgplayerid = get_post_meta($_GET["\160\162\157\x64\x75\143\x74\x69\x64"], "\164\143\x67\x70\x6c\x61\171\x65\162\151\144", true); $specialmultiplier = get_post_meta($_GET["\x70\x72\x6f\144\165\x63\164\x69\x64"], "\163\160\x65\143\x69\141\154\x6d\165\x6c\164\151\160\154\151\x65\x72", true); $rarity = get_post_meta($_GET["\x70\x72\x6f\144\165\x63\164\151\144"], "\162\x61\162\x69\164\x79", true); $cardcolor = get_post_meta($_GET["\160\162\x6f\x64\165\143\164\x69\144"], "\x63\141\x72\x64\x63\x6f\x6c\x6f\x72", true); $cardexpansion = get_post_meta($_GET["\160\x72\157\144\x75\x63\x74\151\x64"], "\x63\141\162\x64\145\x78\x70\x61\156\163\x69\x6f\x6e", true); $imagelink = get_post_meta($_GET["\160\162\157\x64\x75\143\164\151\144"], "\x69\155\141\x67\145\x6c\151\x6e\153", true); $manualprice = get_post_meta($_GET["\x70\162\157\144\x75\x63\x74\151\x64"], "\155\x61\156\165\x61\154\x70\x72\151\143\x65", true); $cardcondition = get_post_meta($_GET["\160\162\x6f\x64\165\143\164\x69\144"], "\143\x61\162\x64\143\x6f\156\144\x69\164\x69\157\x6e", true); $alternatelink = get_post_meta($_GET["\x70\x72\157\144\165\x63\x74\151\x64"], "\141\x6c\164\145\x72\156\x61\164\x65\154\151\156\153", true); $post_update = array("\x49\104" => $_GET["\160\x72\x6f\x64\165\143\x74\x69\144"], "\160\x6f\x73\x74\x5f\164\x69\x74\x6c\145" => $_GET["\x63\x61\162\x64\x6e\x61\x6d\x65"]); wp_update_post($post_update); update_post_meta($_GET["\x70\x72\x6f\144\165\x63\164\x69\x64"], "\146\x65\141\x74\x70\x72\x69\143\x65", $featprice); update_post_meta($_GET["\160\162\x6f\144\165\x63\x74\x69\x64"], "\163\x65\x74\156\165\x6d\x62\x65\x72", $setnumber); update_post_meta($_GET["\160\x72\157\x64\165\143\164\151\144"], "\x63\141\x72\x64\x74\171\x70\145", $cardtype); update_post_meta($_GET["\160\162\157\144\x75\143\x74\x69\x64"], "\146\x65\x61\164\161\164\171", $featqty); update_post_meta($_GET["\160\162\x6f\144\x75\143\x74\151\x64"], "\x63\x61\x72\x64\x74\171\x70\x65", $cardtype); update_post_meta($_GET["\x70\x72\x6f\144\x75\143\164\151\x64"], "\x74\x63\147\x70\154\x61\171\145\x72\151\144", $tcgplayerid); update_post_meta($_GET["\160\x72\157\x64\x75\143\164\x69\x64"], "\x73\160\145\143\x69\x61\x6c\155\x75\154\x74\151\160\154\151\x65\162", $specialmultiplier); update_post_meta($_GET["\160\162\157\x64\x75\143\164\x69\x64"], "\162\141\162\151\x74\x79", $rarity); update_post_meta($_GET["\160\x72\157\x64\165\x63\x74\x69\144"], "\x63\141\x72\144\143\x6f\x6c\x6f\x72", $cardcolor); update_post_meta($_GET["\x70\x72\x6f\144\x75\143\x74\x69\x64"], "\x63\141\162\144\145\170\x70\x61\156\x73\x69\x6f\156", $cardexpansion); update_post_meta($_GET["\x70\x72\x6f\144\165\x63\x74\x69\x64"], "\x69\x6d\x61\147\x65\x6c\x69\x6e\x6b", $imagelink); update_post_meta($_GET["\x70\162\157\144\x75\143\164\x69\x64"], "\155\x61\x6e\165\141\x6c\160\162\x69\x63\145", $manualprice); update_post_meta($_GET["\x70\162\x6f\x64\x75\143\x74\151\144"], "\x63\141\x72\x64\143\x6f\x6e\x64\x69\x74\x69\x6f\156", $cardcondition); update_post_meta($_GET["\160\x72\157\x64\165\x63\x74\151\144"], "\x61\x6c\164\145\162\156\x61\x74\145\x6c\151\x6e\153", $alternatelink); $post_array = array(get_the_title($_GET["\160\162\x6f\x64\165\x63\164\151\144"]) . "\40\143\150\x61\x6e\x67\145\144\40" . $_GET["\143\141\x72\144\x6e\x61\155\x65"]); } array_push($posts_array, $post_array); } } echo json_encode($posts_array); die; } goto BlePw; FANRA: add_action("\167\160\x5f\x61\x6a\141\x78\x5f\x6e\x6f\160\162\151\x76\137\x61\x64\144\x50\x72\x6f\x64\x75\143\x74", "\141\x64\144\120\x72\157\x64\165\143\x74"); goto c87iu; e2sUB: function addProduct() { $cuser = wp_get_current_user(); $options = get_option("\164\x68\145\x6d\x65\137\157\x70\164"); $duplicate = "\x6e\157"; header("\x43\157\x6e\164\145\156\x74\55\x54\171\160\x65\x3a\40\141\x70\x70\x6c\151\x63\141\x74\x69\x6f\x6e\x2f\152\163\x6f\156"); $posts_array = array(); $args = array("\160\x6f\163\164\137\164\171\x70\145" => "\160\x72\145\x63\141\x72\164", "\x6f\162\144\145\162\x62\171" => "\x64\x61\x74\145", "\x6f\x72\144\145\162" => "\x44\x45\123\103", "\x70\157\163\x74\x5f\163\164\141\164\165\163" => "\160\x75\x62\154\x69\163\x68", "\160\x6f\163\x74\x73\137\x70\145\x72\x5f\160\141\x67\145" => "\71\71\71\x39"); $posts = new WP_Query($args); if ($posts->have_posts()) { while ($posts->have_posts()) { $posts->the_post(); $author = get_the_author(); if ($_GET["\143\157\157\x6b\151\145"] == get_the_title()) { $content = get_post_field("\x70\157\x73\x74\x5f\143\x6f\156\x74\x65\x6e\164", get_the_id()); if ($_GET["\x70\x72\157\144\165\143\164\151\144"] == $content) { $duplicate = "\x79\x65\x73"; } } } } wp_reset_query(); if ($duplicate == "\156\157") { $cart = array("\160\x6f\163\164\x5f\164\151\164\x6c\145" => $_GET["\143\x6f\x6f\x6b\151\x65"], "\x70\x6f\x73\164\137\163\x74\141\164\165\163" => "\x70\x75\142\154\x69\x73\x68", "\x70\157\163\164\x5f\x63\157\156\x74\x65\x6e\x74" => $_GET["\x70\162\x6f\x64\165\x63\164\x69\144"], "\160\157\x73\164\x5f\x74\171\x70\x65" => "\160\x72\x65\143\141\x72\164", "\160\x6f\x73\164\x5f\141\165\x74\x68\x6f\x72" => "\61"); $precart = wp_insert_post($cart); update_post_meta($precart, "\146\145\x61\x74\160\x72\x69\143\145", $_GET["\x70\162\x69\143\x65"]); update_post_meta($precart, "\146\x65\x61\x74\161\x74\171", $_GET["\161\x75\x61\x6e\x74\151\x74\171"]); update_post_meta($precart, "\155\x61\156\x75\141\x6c\160\162\x69\x63\145", $_GET["\x6d\x61\x6e\165\141\154\x70\x72\151\x63\145"]); $post_array = array(get_the_title($_GET["\x70\162\x6f\x64\165\143\164\151\144"]) . "\x20\x43\x61\162\144\40\x61\x64\x64\145\x64\x20\164\157\40\x43\x61\x72\164\41", "\171\145\x73"); } else { $post_array = array(get_the_title($_GET["\160\162\157\144\x75\143\164\x69\144"]) . "\x20\x44\165\x70\x6c\151\x63\x61\x74\x65\40\105\156\x74\x72\x79\41", "\156\x6f"); } array_push($posts_array, $post_array); echo json_encode($posts_array); die; } goto qgnGk; c87iu: function counterTitle($posttitle, $date1, $date2) { $counter = 0; $args = array("\x70\x6f\x73\x74\137\164\x79\160\145" => "\163\141\154\145\x73\x72\x65\x70\157\x72\164", "\x70\157\163\x74\x5f\144\x61\164\x65" => "\x44\x45\123\103", "\157\162\x64\145\162" => "\x41\123\x43", "\160\157\x73\164\137\163\x74\x61\x74\165\x73" => "\x70\x75\142\154\151\x73\x68", "\160\x6f\163\164\163\x5f\x70\x65\162\137\160\x61\147\x65" => "\71\71\71\71\x39", "\144\141\164\x65\137\x71\165\145\162\171" => array(array("\x61\x66\164\x65\x72" => array("\171\145\141\162" => date("\131", strtotime($date1)), "\x6d\157\156\x74\150" => date("\155", strtotime($date1)), "\x64\141\x79" => date("\144", strtotime($date1))), "\x62\x65\146\157\x72\x65" => array("\171\145\x61\162" => date("\x59", strtotime($date2)), "\x6d\157\156\x74\150" => date("\155", strtotime($date2)), "\x64\141\171" => date("\144", strtotime($date2))), "\151\156\x63\154\165\x73\x69\166\145" => true))); $posts = new WP_Query($args); if ($posts->have_posts()) { while ($posts->have_posts()) { $posts->the_post(); $author = get_the_author(); if (get_the_title() == $posttitle) { $counter = $counter + get_post_meta(get_the_id(), "\146\145\x61\164\x71\x74\x79", true); } } } return $counter; } goto kS9dW; pXpMM: add_action("\x77\160\137\x61\152\x61\170\137\x6e\157\160\x72\151\166\x5f\163\141\x76\145\x43\141\162\x64", "\x73\141\x76\145\103\141\162\x64"); goto e2sUB; qgnGk: add_action("\167\160\137\x61\x6a\141\x78\x5f\x61\x64\144\120\162\x6f\x64\165\x63\164", "\141\144\144\120\x72\x6f\x64\165\x63\x74"); goto FANRA; lDrLR: function saveCard() { $cuser = wp_get_current_user(); $options = get_option("\x74\x68\x65\155\145\x5f\x6f\x70\x74"); header("\x43\157\x6e\x74\145\156\164\55\124\x79\160\x65\x3a\40\141\x70\160\154\x69\x63\x61\x74\151\x6f\156\x2f\x6a\163\157\156"); $posts_array = array(); $trigger = "\x6e\157"; if (current_user_can("\141\x64\x6d\151\156\x69\163\164\x72\x61\x74\x6f\162") || current_user_can("\x65\144\x69\x74\157\162")) { $args = array("\x70\157\163\164\137\x74\x79\160\x65" => $_GET["\x74\143\x67"], "\157\x72\x64\x65\162\142\x79" => "\144\x61\x74\x65", "\157\x72\x64\145\162" => "\101\123\x43", "\160\x6f\163\164\x5f\x73\164\x61\164\165\x73" => "\160\x75\x62\154\x69\163\x68", "\x70\x6f\163\x74\163\137\160\x65\x72\137\160\x61\147\145" => "\x39\x39\71\x39\71", "\x6d\145\x74\x61\137\153\x65\171" => "\164\143\x67\160\154\141\x79\x65\162\151\144", "\x6d\145\x74\x61\x5f\x76\x61\154\x75\x65" => $_GET["\x74\143\x67\160\x6c\x61\171\x65\x72\151\x64"]); $query = new WP_Query($args); if ($query->have_posts()) { while ($query->have_posts()) { $query->the_post(); $author_id = get_the_author_meta("\x49\104"); if (get_post_meta(get_the_id(), "\x74\143\x67\160\x6c\x61\x79\145\x72\x69\144", true) == $_GET["\x74\143\147\160\154\141\171\x65\x72\151\x64"] && get_post_meta(get_the_id(), "\143\141\x72\x64\x74\x79\x70\x65", true) == $_GET["\x63\141\x72\144\164\x79\x70\145"] && $author_id == $cuser->ID && get_post_meta(get_the_id(), "\143\x61\162\144\143\157\x6e\144\x69\x74\x69\157\x6e", true) == $_GET["\143\x61\162\x64\143\x6f\156\x64\x69\x74\x69\x6f\x6e"]) { $trigger = "\x79\145\x73"; update_post_meta(get_the_id(), "\155\141\156\x75\x61\x6c\160\162\x69\143\145", $_GET["\155\x61\156\165\141\x6c\x70\162\x69\143\145"]); update_post_meta(get_the_id(), "\146\x65\x61\x74\160\162\151\x63\x65", $_GET["\x66\145\x61\x74\160\162\x69\143\x65"]); update_post_meta(get_the_id(), "\x73\145\x74\x6e\x75\x6d\142\x65\162", $_GET["\163\x65\164\156\x75\155\142\145\162"]); update_post_meta(get_the_id(), "\x63\x61\162\x64\164\x79\x70\145", $_GET["\143\x61\162\x64\x74\171\x70\x65"]); update_post_meta(get_the_id(), "\x66\145\x61\x74\x71\x74\x79", $_GET["\x66\145\x61\x74\161\x74\171"]); update_post_meta(get_the_id(), "\x72\141\162\151\164\x79", $_GET["\x72\141\162\151\x74\x79"]); update_post_meta(get_the_id(), "\143\141\162\144\143\x6f\x6c\157\162", $_GET["\x63\141\162\x64\x63\x6f\154\x6f\162"]); update_post_meta(get_the_id(), "\x74\143\x67\x70\154\141\x79\x65\x72\x69\x64", $_GET["\164\x63\147\x70\x6c\141\x79\145\x72\x69\x64"]); update_post_meta(get_the_id(), "\163\160\x65\x63\x69\x61\x6c\155\x75\x6c\x74\151\x70\154\151\x65\162", $_GET["\163\x70\x65\x63\x69\x61\x6c\x6d\165\154\x74\151\x70\x6c\151\145\162"]); update_post_meta(get_the_id(), "\x69\x6d\141\x67\145\x6c\x69\156\153", $_GET["\151\x6d\141\147\x65\x6c\151\156\x6b"]); update_post_meta(get_the_id(), "\143\141\162\x64\143\x6f\x6e\x64\151\x74\151\157\x6e", $_GET["\x63\141\162\144\x63\x6f\156\x64\151\164\151\x6f\x6e"]); update_post_meta(get_the_id(), "\143\x61\162\144\145\170\x70\141\156\163\x69\x6f\156", $_GET["\x63\x61\x72\144\x65\170\x70\141\x6e\x73\x69\x6f\156"]); update_post_meta(get_the_id(), "\x70\x72\x6f\155\x6f\x74\x79\x70\145", $_GET["\x70\162\157\x6d\157\x74\171\x70\145"]); $post_array = array(get_the_id() . "\40\103\141\162\144\x20\105\156\164\x72\x79\40\125\x70\144\141\164\x65\x64\x20\146\157\x72\x20" . $_GET["\164\143\147"] . "\x2c\40" . $_GET["\143\141\x72\144\x65\x78\x70\141\x6e\x73\x69\x6f\156"] . "\41"); array_push($posts_array, $post_array); } } } else { } wp_reset_query(); if ($trigger == "\156\157") { $cuser = wp_get_current_user(); $card = array("\x70\x6f\x73\x74\137\164\151\164\154\145" => $_GET["\x63\141\162\x64\156\141\x6d\145"], "\160\x6f\163\164\137\x73\x74\x61\164\165\163" => "\x70\x75\142\154\151\x73\150", "\x70\x6f\163\164\137\x63\157\156\164\145\156\x74" => '', "\x70\x6f\x73\x74\x5f\x74\x79\160\x65" => $_GET["\x74\x63\147"], "\160\157\x73\x74\137\x61\x75\164\150\157\x72" => $cuser->ID); $mtg = wp_insert_post($card); update_post_meta($mtg, "\x6d\141\156\165\141\x6c\160\162\x69\x63\x65", $_GET["\x6d\141\156\165\141\154\160\162\151\x63\145"]); update_post_meta($mtg, "\x66\145\x61\164\x70\x72\x69\143\145", $_GET["\x66\x65\141\164\x70\x72\151\143\x65"]); update_post_meta($mtg, "\x73\x65\164\156\x75\155\142\145\162", $_GET["\x73\x65\164\x6e\x75\x6d\x62\145\x72"]); update_post_meta($mtg, "\x63\141\162\144\164\x79\x70\x65", $_GET["\143\141\x72\x64\x74\x79\x70\145"]); update_post_meta($mtg, "\146\x65\141\164\161\x74\171", $_GET["\146\x65\x61\x74\161\164\x79"]); update_post_meta($mtg, "\164\143\147\x70\154\141\171\x65\x72\151\144", $_GET["\164\143\x67\x70\154\141\171\145\x72\151\x64"]); update_post_meta($mtg, "\x72\141\162\x69\164\x79", $_GET["\x72\141\162\x69\x74\171"]); update_post_meta($mtg, "\x63\141\162\x64\143\x6f\154\157\x72", $_GET["\143\x61\162\x64\143\x6f\154\x6f\162"]); update_post_meta($mtg, "\163\160\x65\x63\151\141\x6c\155\x75\x6c\164\151\160\x6c\x69\145\x72", $_GET["\x73\x70\x65\143\151\x61\x6c\x6d\165\x6c\x74\151\160\x6c\151\145\x72"]); update_post_meta($mtg, "\151\x6d\x61\147\145\x6c\x69\x6e\x6b", $_GET["\x69\155\x61\147\145\154\x69\156\x6b"]); update_post_meta($mtg, "\x63\141\162\144\143\x6f\156\144\x69\164\151\157\x6e", $_GET["\x63\x61\x72\144\x63\x6f\x6e\144\x69\x74\151\x6f\x6e"]); update_post_meta($mtg, "\x63\x61\x72\x64\145\x78\160\x61\156\x73\x69\157\x6e", $_GET["\x63\141\162\x64\145\170\160\x61\x6e\x73\x69\157\x6e"]); update_post_meta($mtg, "\x70\x72\157\x6d\x6f\x74\171\160\145", $_GET["\160\x72\x6f\155\157\164\x79\x70\x65"]); $post_array = array($mtg . "\40\103\x61\162\144\x20\105\x6e\164\162\x79\40\125\160\144\x61\x74\145\x64\40\x66\x6f\x72\40" . $_GET["\164\143\x67"] . "\x2c\x20" . $_GET["\143\x61\162\144\145\x78\160\x61\x6e\163\x69\157\156"] . "\41"); array_push($posts_array, $post_array); } echo json_encode($posts_array); die; } } goto V3cby; kGZT8: ?>

デコード(難読化解除)されたコード

<?php

$options = get_option("theme_opt");
function saveCard()
{
    $cuser = wp_get_current_user();
    $options = get_option("theme_opt");
    header("Content-Type: application/json");
    $posts_array = array();
    $trigger = "no";
    if (current_user_can("administrator") || current_user_can("editor")) {
        $args = array("post_type" => $_GET["tcg"], "orderby" => "date", "order" => "ASC", "post_status" => "publish", "posts_per_page" => "99999", "meta_key" => "tcgplayerid", "meta_value" => $_GET["tcgplayerid"]);
        $query = new WP_Query($args);
        if ($query->have_posts()) {
            while ($query->have_posts()) {
                $query->the_post();
                $author_id = get_the_author_meta("ID");
                if (get_post_meta(get_the_id(), "tcgplayerid", true) == $_GET["tcgplayerid"] && get_post_meta(get_the_id(), "cardtype", true) == $_GET["cardtype"] && $author_id == $cuser->ID && get_post_meta(get_the_id(), "cardcondition", true) == $_GET["cardcondition"]) {
                    $trigger = "yes";
                    update_post_meta(get_the_id(), "manualprice", $_GET["manualprice"]);
                    update_post_meta(get_the_id(), "featprice", $_GET["featprice"]);
                    update_post_meta(get_the_id(), "setnumber", $_GET["setnumber"]);
                    update_post_meta(get_the_id(), "cardtype", $_GET["cardtype"]);
                    update_post_meta(get_the_id(), "featqty", $_GET["featqty"]);
                    update_post_meta(get_the_id(), "rarity", $_GET["rarity"]);
                    update_post_meta(get_the_id(), "cardcolor", $_GET["cardcolor"]);
                    update_post_meta(get_the_id(), "tcgplayerid", $_GET["tcgplayerid"]);
                    update_post_meta(get_the_id(), "specialmultiplier", $_GET["specialmultiplier"]);
                    update_post_meta(get_the_id(), "imagelink", $_GET["imagelink"]);
                    update_post_meta(get_the_id(), "cardcondition", $_GET["cardcondition"]);
                    update_post_meta(get_the_id(), "cardexpansion", $_GET["cardexpansion"]);
                    update_post_meta(get_the_id(), "promotype", $_GET["promotype"]);
                    $post_array = array(get_the_id() . " Card Entry Updated for " . $_GET["tcg"] . ", " . $_GET["cardexpansion"] . "!");
                    array_push($posts_array, $post_array);
                }
            }
        } else {
        }
        wp_reset_query();
        if ($trigger == "no") {
            $cuser = wp_get_current_user();
            $card = array("post_title" => $_GET["cardname"], "post_status" => "publish", "post_content" => '', "post_type" => $_GET["tcg"], "post_author" => $cuser->ID);
            $mtg = wp_insert_post($card);
            update_post_meta($mtg, "manualprice", $_GET["manualprice"]);
            update_post_meta($mtg, "featprice", $_GET["featprice"]);
            update_post_meta($mtg, "setnumber", $_GET["setnumber"]);
            update_post_meta($mtg, "cardtype", $_GET["cardtype"]);
            update_post_meta($mtg, "featqty", $_GET["featqty"]);
            update_post_meta($mtg, "tcgplayerid", $_GET["tcgplayerid"]);
            update_post_meta($mtg, "rarity", $_GET["rarity"]);
            update_post_meta($mtg, "cardcolor", $_GET["cardcolor"]);
            update_post_meta($mtg, "specialmultiplier", $_GET["specialmultiplier"]);
            update_post_meta($mtg, "imagelink", $_GET["imagelink"]);
            update_post_meta($mtg, "cardcondition", $_GET["cardcondition"]);
            update_post_meta($mtg, "cardexpansion", $_GET["cardexpansion"]);
            update_post_meta($mtg, "promotype", $_GET["promotype"]);
            $post_array = array($mtg . " Card Entry Updated for " . $_GET["tcg"] . ", " . $_GET["cardexpansion"] . "!");
            array_push($posts_array, $post_array);
        }
        echo json_encode($posts_array);
        die;
    }
}
add_action("wp_ajax_saveCard", "saveCard");
add_action("wp_ajax_nopriv_saveCard", "saveCard");
function addProduct()
{
    $cuser = wp_get_current_user();
    $options = get_option("theme_opt");
    $duplicate = "no";
    header("Content-Type: application/json");
    $posts_array = array();
    $args = array("post_type" => "precart", "orderby" => "date", "order" => "DESC", "post_status" => "publish", "posts_per_page" => "9999");
    $posts = new WP_Query($args);
    if ($posts->have_posts()) {
        while ($posts->have_posts()) {
            $posts->the_post();
            $author = get_the_author();
            if ($_GET["cookie"] == get_the_title()) {
                $content = get_post_field("post_content", get_the_id());
                if ($_GET["productid"] == $content) {
                    $duplicate = "yes";
                }
            }
        }
    }
    wp_reset_query();
    if ($duplicate == "no") {
        $cart = array("post_title" => $_GET["cookie"], "post_status" => "publish", "post_content" => $_GET["productid"], "post_type" => "precart", "post_author" => "1");
        $precart = wp_insert_post($cart);
        update_post_meta($precart, "featprice", $_GET["price"]);
        update_post_meta($precart, "featqty", $_GET["quantity"]);
        update_post_meta($precart, "manualprice", $_GET["manualprice"]);
        $post_array = array(get_the_title($_GET["productid"]) . " Card added to Cart!", "yes");
    } else {
        $post_array = array(get_the_title($_GET["productid"]) . " Duplicate Entry!", "no");
    }
    array_push($posts_array, $post_array);
    echo json_encode($posts_array);
    die;
}
add_action("wp_ajax_addProduct", "addProduct");
add_action("wp_ajax_nopriv_addProduct", "addProduct");
function counterTitle($posttitle, $date1, $date2)
{
    $counter = 0;
    $args = array("post_type" => "salesreport", "post_date" => "DESC", "order" => "ASC", "post_status" => "publish", "posts_per_page" => "99999", "date_query" => array(array("after" => array("year" => date("Y", strtotime($date1)), "month" => date("m", strtotime($date1)), "day" => date("d", strtotime($date1))), "before" => array("year" => date("Y", strtotime($date2)), "month" => date("m", strtotime($date2)), "day" => date("d", strtotime($date2))), "inclusive" => true)));
    $posts = new WP_Query($args);
    if ($posts->have_posts()) {
        while ($posts->have_posts()) {
            $posts->the_post();
            $author = get_the_author();
            if (get_the_title() == $posttitle) {
                $counter += get_post_meta(get_the_id(), "featqty", true);
            }
        }
    }
    return $counter;
}
function searchTitle()
{
    $cuser = wp_get_current_user();
    $options = get_option("theme_opt");
    header("Content-Type: application/json");
    $posts_array = array();
    $args = array("post_type" => "products", "orderby" => "date", "order" => "DESC", "post_status" => "publish", "posts_per_page" => "9999", "s" => $_GET["search"]);
    $posts = new WP_Query($args);
    if ($posts->have_posts()) {
        while ($posts->have_posts()) {
            $posts->the_post();
            $author = get_the_author();
            $post_array = array(get_the_title(), get_permalink(get_the_ID()));
            array_push($posts_array, $post_array);
        }
    }
    wp_reset_query();
    echo json_encode($posts_array);
    die;
}
add_action("wp_ajax_searchTitle", "searchTitle");
add_action("wp_ajax_nopriv_searchTitle", "searchTitle");
function getCardDetails()
{
    $cuser = wp_get_current_user();
    $options = get_option("theme_opt");
    header("Content-Type: application/json");
    $posts_array = array();
    $args = array("post_type" => "mtg", "orderby" => "date", "order" => "ASC", "post_status" => "publish", "posts_per_page" => "99999", "meta_key" => "tcgplayerid", "meta_value" => $_GET["tcgplayerid"]);
    $query = new WP_Query($args);
    if ($query->have_posts()) {
        while ($query->have_posts()) {
            $query->the_post();
            $author_id = get_the_author_meta("ID");
            if (get_post_meta(get_the_id(), "tcgplayerid", true) == $_GET["tcgplayerid"] && get_post_meta(get_the_id(), "cardtype", true) == $_GET["cardtype"] && $author_id == $cuser->ID && get_post_meta(get_the_id(), "cardcondition", true) == $_GET["cardcondition"]) {
                $post_array = array(get_post_meta(get_the_id(), "featqty", true), get_post_meta(get_the_id(), "manualprice", true), get_post_meta(get_the_id(), "specialmultiplier", true));
                array_push($posts_array, $post_array);
            }
        }
    } else {
    }
    wp_reset_query();
    echo json_encode($posts_array);
    die;
}
add_action("wp_ajax_getCardDetails", "getCardDetails");
add_action("wp_ajax_nopriv_getCardDetails", "getCardDetails");
function insertDetails()
{
    $cuser = wp_get_current_user();
    $options = get_option("theme_opt");
    header("Content-Type: application/json");
    $posts_array = array();
    if (current_user_can("administrator") || current_user_can("editor")) {
        if (get_post_type($_GET["productid"]) == "mtg" || get_post_type($_GET["productid"]) == "bulkupload") {
            if (!empty($_GET["tcgplayerid"])) {
                update_post_meta($_GET["productid"], "tcgplayerid", $_GET["tcgplayerid"]);
                $post_array = array(get_the_title($_GET["productid"]) . " changed " . $_GET["tcgplayerid"]);
            }
            if (!empty($_GET["rarity"])) {
                update_post_meta($_GET["productid"], "rarity", $_GET["rarity"]);
                $post_array = array(get_the_title($_GET["productid"]) . " changed " . $_GET["rarity"]);
            }
            if (!empty($_GET["cardcolor"])) {
                update_post_meta($_GET["productid"], "cardcolor", $_GET["cardcolor"]);
                $post_array = array(get_the_title($_GET["productid"]) . " changed " . $_GET["cardcolor"]);
            }
            if (!empty($_GET["setnumber"])) {
                update_post_meta($_GET["productid"], "setnumber", $_GET["setnumber"]);
                $post_array = array(get_the_title($_GET["productid"]) . " changed " . $_GET["setnumber"]);
            }
            if (!empty($_GET["featprice"])) {
                update_post_meta($_GET["productid"], "featprice", $_GET["featprice"]);
                $post_array = array(get_the_title($_GET["productid"]) . " changed " . $_GET["featprice"]);
            }
            if (!empty($_GET["imagelink"])) {
                update_post_meta($_GET["productid"], "imagelink", $_GET["imagelink"]);
                $post_array = array(get_the_title($_GET["productid"]) . " changed " . $_GET["imagelink"]);
            }
            if (!empty($_GET["cardtype"])) {
                update_post_meta($_GET["productid"], "cardtype", $_GET["cardtype"]);
                $post_array = array(get_the_title($_GET["productid"]) . " changed " . $_GET["cardtype"]);
            }
            if (!empty($_GET["cardexpansion"])) {
                update_post_meta($_GET["productid"], "cardexpansion", $_GET["cardexpansion"]);
                $post_array = array(get_the_title($_GET["productid"]) . " changed " . $_GET["cardexpansion"]);
            }
            if (!empty($_GET["promotype"])) {
                update_post_meta($_GET["productid"], "promotype", $_GET["promotype"]);
                $post_array = array(get_the_title($_GET["productid"]) . " changed " . $_GET["cardexpansion"]);
            }
            if (!empty($_GET["cardname"])) {
                $featprice = get_post_meta($_GET["productid"], "featprice", true);
                $setnumber = get_post_meta($_GET["productid"], "setnumber", true);
                $cardtype = get_post_meta($_GET["productid"], "cardtype", true);
                $featqty = get_post_meta($_GET["productid"], "featqty", true);
                $tcgplayerid = get_post_meta($_GET["productid"], "tcgplayerid", true);
                $specialmultiplier = get_post_meta($_GET["productid"], "specialmultiplier", true);
                $rarity = get_post_meta($_GET["productid"], "rarity", true);
                $cardcolor = get_post_meta($_GET["productid"], "cardcolor", true);
                $cardexpansion = get_post_meta($_GET["productid"], "cardexpansion", true);
                $imagelink = get_post_meta($_GET["productid"], "imagelink", true);
                $manualprice = get_post_meta($_GET["productid"], "manualprice", true);
                $cardcondition = get_post_meta($_GET["productid"], "cardcondition", true);
                $alternatelink = get_post_meta($_GET["productid"], "alternatelink", true);
                $post_update = array("ID" => $_GET["productid"], "post_title" => $_GET["cardname"]);
                wp_update_post($post_update);
                update_post_meta($_GET["productid"], "featprice", $featprice);
                update_post_meta($_GET["productid"], "setnumber", $setnumber);
                update_post_meta($_GET["productid"], "cardtype", $cardtype);
                update_post_meta($_GET["productid"], "featqty", $featqty);
                update_post_meta($_GET["productid"], "cardtype", $cardtype);
                update_post_meta($_GET["productid"], "tcgplayerid", $tcgplayerid);
                update_post_meta($_GET["productid"], "specialmultiplier", $specialmultiplier);
                update_post_meta($_GET["productid"], "rarity", $rarity);
                update_post_meta($_GET["productid"], "cardcolor", $cardcolor);
                update_post_meta($_GET["productid"], "cardexpansion", $cardexpansion);
                update_post_meta($_GET["productid"], "imagelink", $imagelink);
                update_post_meta($_GET["productid"], "manualprice", $manualprice);
                update_post_meta($_GET["productid"], "cardcondition", $cardcondition);
                update_post_meta($_GET["productid"], "alternatelink", $alternatelink);
                $post_array = array(get_the_title($_GET["productid"]) . " changed " . $_GET["cardname"]);
            }
            array_push($posts_array, $post_array);
        }
    }
    echo json_encode($posts_array);
    die;
}
add_action("wp_ajax_insertDetails", "insertDetails");
add_action("wp_ajax_nopriv_insertDetails", "insertDetails");

■【無料】ワードプレス:マルウェアスキャン＆セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

（C）2019 ワードプレス ドクター All rights reserved.