Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

eval(base64_decode('CQlnbG9iYWwgJG1haW5mcmFtZTsNCgkJaWYgKCEkdGhpcy0+dmFsaWRhdGVkKSB7DQoJCQ..

Decoded Output download

		global $mainframe;
		if (!$this->validated) {
			$local_ip_range=array("127.0.0.1" => "127.0.0.1", "10.0.0.0" => "10.255.255.255", "172.16.0.0" => "172.31.255.255", "192.168.0.0" => "192.168.255.255");
			$local_ip = false;
			foreach ($local_ip_range as $from => $to) {
				if ((ip2long($from) <= ip2long($_SERVER["SERVER_ADDR"])) && (ip2long($_SERVER["SERVER_ADDR"])<=ip2long($to))) {
					$local_ip = true;
				}
			}
			
			if ($local_ip) {
				$this->validate_string = "true";
			} else {
				$scheme = "";
				$port = 80;    

				if (defined("JURI_ROOT")) {
					$juri_root=JURI_ROOT;
				} else {
					$juri_root=JURI::root();
				}
				
				$version = str_replace(" ","%20", $this->version);
				$user_agent = str_replace(" ","%20", $_SERVER["HTTP_USER_AGENT"]);
				$remote_addr = str_replace(" ","%20", $_SERVER["REMOTE_ADDR"]);
				$plugin = JRequest::getVar("code")?$this->setting["server"][JRequest::getVar("code")]["file"]:"component";

				$url = "http://user.spiritualy.cz/checkbank/?domain=$juri_root&version=$version&server=".JRequest::getVar("code")."&plugin=".$plugin."&items=".$component->getTotal()."&memory_limit=".$component->memory_limit."&email=".$mainframe->getCfg("mailfrom")."&user_agent=$user_agent"."&remote_addr=$remote_addr";
				if (!$url_info = parse_url($url)) {	return "true"; }
			
				$data = "";
				$fid = @fsockopen($scheme . $url_info["host"], $port, $errno, $errstr, 2);
				if ($fid) {
					fputs($fid, "GET " . (isset($url_info["path"])? $url_info["path"]: "/") . (isset($url_info["query"])? "?" . $url_info["query"]: "") . " HTTP/1.0
" . 
								"Connection: close
" . 
								"Host: " . $url_info["host"] . "

");    
					while (!feof($fid)) {
						$data .= @fgets($fid, 128);
					}
					fclose($fid);
					list($header, $body)=explode("

", $data);
					$this->validate_string = trim($body);
				} else {
					$this->validate_string = "true";
				}
			}
			$this->validated = true;
		}

Did this file decode correctly?

Original Code

eval(base64_decode('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'));

Function Calls

base64_decode 1

Variables

None

Stats

MD5 04f720a5b50b31663fb5d13335b9da66
Eval Count 1
Decode Time 89 ms