Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto EMP6l; GWgn1: echo $values["\x33"]; goto CZf5l; kloLz: echo $link_qiwi; goto ..

Decoded Output download

<?php 
 goto EMP6l; GWgn1: echo $values["3"]; goto CZf5l; kloLz: echo $link_qiwi; goto fmfEM; Bcd_j: $link_qiwi = "<a class='buttons' target='_blank' href=https://qiwi.com/payment/form/99?blocked[0]=account&amountFraction=0&extra['account']=" . $qiwi2["settings"]["tel"] . "&extra['comment']=" . $values["0"] . "&blocked[1]=comment&amountInteger=" . $values["1"] . "&blocked[2]=sum&currency=643"><span class='button__text'> " . $values["1"] . ",00 </span></a>"; goto BoOSD; zOPf4: ?> 
</div></div><div class="mb-8 text-gray-mid"style="text-align:center">  <p><br><b id="timer"></b></p><p><br><b id="echo"></b></p></div><?php  goto kloLz; VaE1Q: echo "https://xlnt.ovh"; goto L9z2d; RjQp0: $sendpost = $values["0"] . ":" . $values["4"]; goto Bcd_j; tBBXR: require "config.php"; goto ZiAjj; Iwm72: ?> 
,00 </div></div></div></div><div><div class="center-block next-step"><div class="methods"><div class="methods__title"> :</div><div class="active methods__item"><div class="methods__item__icon"style="background-color:#ff8c00"><img src="qiwi.svg"></div><div class="methods__item__text">QIWI</div></div></div><div class="payment-form"><div class="p-1 payment-form__top"><div class="title"><?php  goto PUnK1; qg3Ff: $values = explode(":", $decrypted); goto RjQp0; SVmU0: function decrypt($encrypted, $key) { $ekey = hash("SHA256", $key, true); $ivlen = openssl_cipher_iv_length("aes-256-cbc"); $iv = substr(base64_decode($encrypted), 0, $ivlen); $encrypted = substr(base64_decode($encrypted), $ivlen); return openssl_decrypt($encrypted, "aes-256-cbc", $ekey, 0, $iv); } goto qg3Ff; OdMXV: error_reporting(0); goto HJ8dc; PUnK1: echo $values["2"]; goto zOPf4; fmfEM: ?> 
<br><div class="flex justify-center mt-8"><a href="<?php  goto VaE1Q; ZiAjj: $sign = $_GET["sign"]; goto mTAIx; vkq6Q: echo $sendpost; goto yCL_f; HJ8dc: $decrypted = decrypt($sign, $qiwi2["settings"]["token"]); goto SVmU0; BoOSD: ?> 
<!doctypehtml><html dir="ltr"lang="ru"xml:lang="ru"xmlns="http://www.w3.org/1999/xhtml"><head><meta charset="utf-8"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"name="viewport"><link href="/assets/img/logo1.png"rel="shortcut icon"><meta content="#ffffff"name="theme-color"><link href="style.css"rel="stylesheet"><title><?php  goto GWgn1; CZf5l: ?> 
| </title><script src="https://code.jquery.com/jquery-3.6.0.min.js"></script><script>$(document).ready(function(){!function t(){var e=15,a=setInterval(function(){$("#timer").text(e),e<=0?(clearInterval(a),$.ajax({type:"POST",url:"result.php",data:{params:"<?php  goto vkq6Q; iEWZt: echo $values["1"]; goto Iwm72; EMP6l: define("TKM", true); goto tBBXR; mTAIx: ini_set("display_errors", "off"); goto OdMXV; yCL_f: ?> 
"},success:function(t){"DTTeam_Success"==t?window.location.replace("/?pstatus=success"):($("#timer").text(""),$("#echo").text(t))}}),e=15,t()):e-=1},1e3)}()})</script></head><body class="bg-white"><div style="display:none"><div class="bg-purple-custom-2 btn-disabled btn-primary"></div></div><div class="flex flex-col justify-between min-h-screen overflow-hidden w-screen"><div class="mb-4 payment-component"><div class="top-block"><div class="container"><div class="left-item"><a href="/"class="back-link">   </a><div class="amount"><span class="amount__text"> :</span><?php  goto iEWZt; L9z2d: ?> 
"><img src="https://xlnt.ovh/assets/img/logo1.png"style="max-width:40px"></a></div></div></div></div></div></div></body></html>

Did this file decode correctly?

Original Code

<?php
 goto EMP6l; GWgn1: echo $values["\x33"]; goto CZf5l; kloLz: echo $link_qiwi; goto fmfEM; Bcd_j: $link_qiwi = "\74\141\40\143\x6c\141\x73\x73\x3d\47\142\165\x74\164\157\x6e\x73\x27\40\164\141\162\x67\x65\x74\75\47\137\142\154\x61\156\x6b\x27\40\x68\162\145\146\x3d\x68\x74\x74\160\x73\x3a\57\57\x71\x69\167\x69\x2e\x63\x6f\x6d\57\x70\141\x79\x6d\145\156\x74\57\146\157\162\x6d\57\71\x39\x3f\142\154\157\143\153\x65\x64\x5b\x30\x5d\x3d\141\143\x63\x6f\165\156\x74\46\x61\x6d\x6f\x75\x6e\x74\x46\x72\141\143\x74\x69\157\x6e\75\60\46\x65\170\164\x72\141\x5b\x27\141\143\143\x6f\x75\x6e\164\x27\x5d\x3d" . $qiwi2["\163\145\164\x74\151\156\147\x73"]["\164\x65\154"] . "\x26\145\x78\164\162\x61\x5b\47\143\x6f\x6d\155\x65\x6e\x74\x27\135\75" . $values["\x30"] . "\46\x62\x6c\157\143\153\x65\144\x5b\61\x5d\75\x63\157\155\155\145\156\x74\46\x61\x6d\x6f\165\x6e\x74\111\x6e\x74\x65\147\145\162\75" . $values["\61"] . "\46\x62\154\157\143\x6b\x65\x64\x5b\x32\135\75\x73\165\x6d\46\x63\165\162\x72\x65\156\x63\171\75\x36\x34\63\x22\76\x3c\163\x70\x61\x6e\40\143\154\141\x73\x73\75\x27\142\x75\164\164\x6f\x6e\x5f\137\x74\x65\x78\164\x27\76\320\236\320\xbf\320\xbb\320\260\321\x82\320\270\xd1\x82\321\214\40" . $values["\61"] . "\54\60\60\x20\342\x82\275\74\57\163\x70\x61\156\x3e\x3c\57\141\76"; goto BoOSD; zOPf4: ?>
</div></div><div class="mb-8 text-gray-mid"style="text-align:center">  <p><br><b id="timer"></b></p><p><br><b id="echo"></b></p></div><?php  goto kloLz; VaE1Q: echo "\x68\164\x74\160\163\x3a\x2f\x2f\170\x6c\156\x74\56\x6f\166\150"; goto L9z2d; RjQp0: $sendpost = $values["\x30"] . "\x3a" . $values["\x34"]; goto Bcd_j; tBBXR: require "\x63\x6f\x6e\x66\151\147\56\x70\x68\160"; goto ZiAjj; Iwm72: ?>
,00 </div></div></div></div><div><div class="center-block next-step"><div class="methods"><div class="methods__title"> :</div><div class="active methods__item"><div class="methods__item__icon"style="background-color:#ff8c00"><img src="qiwi.svg"></div><div class="methods__item__text">QIWI</div></div></div><div class="payment-form"><div class="p-1 payment-form__top"><div class="title"><?php  goto PUnK1; qg3Ff: $values = explode("\72", $decrypted); goto RjQp0; SVmU0: function decrypt($encrypted, $key) { $ekey = hash("\123\110\101\62\x35\x36", $key, true); $ivlen = openssl_cipher_iv_length("\x61\x65\x73\55\x32\x35\x36\55\143\x62\143"); $iv = substr(base64_decode($encrypted), 0, $ivlen); $encrypted = substr(base64_decode($encrypted), $ivlen); return openssl_decrypt($encrypted, "\x61\x65\163\x2d\x32\x35\66\55\x63\142\143", $ekey, 0, $iv); } goto qg3Ff; OdMXV: error_reporting(0); goto HJ8dc; PUnK1: echo $values["\62"]; goto zOPf4; fmfEM: ?>
<br><div class="flex justify-center mt-8"><a href="<?php  goto VaE1Q; ZiAjj: $sign = $_GET["\x73\x69\147\x6e"]; goto mTAIx; vkq6Q: echo $sendpost; goto yCL_f; HJ8dc: $decrypted = decrypt($sign, $qiwi2["\163\x65\x74\164\151\x6e\147\x73"]["\164\157\153\x65\156"]); goto SVmU0; BoOSD: ?>
<!doctypehtml><html dir="ltr"lang="ru"xml:lang="ru"xmlns="http://www.w3.org/1999/xhtml"><head><meta charset="utf-8"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"name="viewport"><link href="/assets/img/logo1.png"rel="shortcut icon"><meta content="#ffffff"name="theme-color"><link href="style.css"rel="stylesheet"><title><?php  goto GWgn1; CZf5l: ?>
| </title><script src="https://code.jquery.com/jquery-3.6.0.min.js"></script><script>$(document).ready(function(){!function t(){var e=15,a=setInterval(function(){$("#timer").text(e),e<=0?(clearInterval(a),$.ajax({type:"POST",url:"result.php",data:{params:"<?php  goto vkq6Q; iEWZt: echo $values["\x31"]; goto Iwm72; EMP6l: define("\124\x4b\115", true); goto tBBXR; mTAIx: ini_set("\144\151\x73\160\x6c\x61\x79\x5f\x65\x72\162\x6f\162\x73", "\157\x66\146"); goto OdMXV; yCL_f: ?>
"},success:function(t){"DTTeam_Success"==t?window.location.replace("/?pstatus=success"):($("#timer").text(""),$("#echo").text(t))}}),e=15,t()):e-=1},1e3)}()})</script></head><body class="bg-white"><div style="display:none"><div class="bg-purple-custom-2 btn-disabled btn-primary"></div></div><div class="flex flex-col justify-between min-h-screen overflow-hidden w-screen"><div class="mb-4 payment-component"><div class="top-block"><div class="container"><div class="left-item"><a href="/"class="back-link">   </a><div class="amount"><span class="amount__text"> :</span><?php  goto iEWZt; L9z2d: ?>
"><img src="https://xlnt.ovh/assets/img/logo1.png"style="max-width:40px"></a></div></div></div></div></div></div></body></html>

Function Calls

None

Variables

None

Stats

MD5 0012ae3c75bffe10dda8d8a5d6dc8c33
Eval Count 0
Decode Time 59 ms