Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<? eval(gzinflate(base64_decode(' zRnbctpI9jmu8j/0aCgLEiEBxhjjEA/BEFOxwQXY npTjUjVSAz3Wz..
Decoded Output download
?><?php
/*
Code by Trn K Nhn
File ny c chc nng Tng Tc vi list bn b ca UID ci. Cron 5 - 10p/ln
*/
ob_start();
session_start();
date_default_timezone_set('Asia/Ho_Chi_Minh');
$today = date('H:i d-m-Y');
$h_now = date('H');
include '../system/config.php';
$laytoken = mysqli_query($conn, "SELECT * FROM vipreaction WHERE status=0 ORDER BY RAND() LIMIT 0,20");
while($vipbot = mysqli_fetch_assoc($laytoken)){
if ($vipbot['end'] > time()) {
echo $vipbot['user_id'].'<hr>';
$token = $vipbot['access_token'];
$cookie = $vipbot['cookie'];
$litmit = $vipbot['limit_react'];
$link_anh = $vipbot['link_anh'];
$id_nhandan = $vipbot['id_nhandan'];
$tag_cmt = $vipbot['tag_cmt'];
$time = substr(time(),0,6);
$camxuc = $vipbot['type'];
if(strripos($vipbot['type'], "
")){
$list_cx = explode("
", $vipbot['type']);
$camxuc = $list_cx[array_rand($list_cx)];
}
$comment = $vipbot['comment'];
$fql = "select type,post_id,created_time from stream";
$fql = $fql." where strpos(created_time,".$time.") >=0 AND source_id in ";
$fql = $fql."(select uid2 from friend where uid1=me())";
$fql = "https://api.facebook.com/method/fql.query?query=".urlencode($fql)."&limit='.$litmit.'&format=json&access_token=".$token;
$json = json_decode(curl($fql),true);
if(empty($json[0]['post_id'])){
$recheck = json_decode(file_get_contents("https://graph.facebook.com/me?fields=id&access_token=".$token),true);
if(empty($recheck['id'])){
$cookie= $vipbot['cookie'];
$url = curl("https://www.facebook.com/".$vipbot['user_id'],$cookie);
if(preg_match('#access_token:"(.+?)"#is',$url, $trankynhanit)){
$token = $trankynhanit[1];
mysqli_query($conn, "UPDATE vipreaction SET access_token='$token' WHERE id=".$vipbot['id']."");
$fql = "select type,post_id,created_time from stream";
$fql = $fql." where strpos(created_time,".$time.") >=0 AND source_id in ";
$fql = $fql."(select uid2 from friend where uid1=me())";
$fql = "https://api.facebook.com/method/fql.query?query=".urlencode($fql)."&limit='.$litmit.'&format=json&access_token=".$token;
$json = json_decode(curl($fql),true);
}
}else{
$fql = "select type,post_id,created_time from stream";
$fql = $fql." where strpos(created_time,".$time.") >=0 AND source_id in ";
$fql = $fql."(select uid2 from friend where uid1=me())";
$fql = "https://api.facebook.com/method/fql.query?query=".urlencode($fql)."&limit='.$litmit.'&format=json&access_token=".$token;
$json = json_decode(curl($fql),true);
}
}
for($i=0;$i<2; $i++){
$idstt = $json[$i]['post_id'];
if($idstt){
$idu = explode("_", $idstt);
$log = file_get_contents('vipBot.txt');
if (strpos($log, $post['id']) != false) {
continue;
} else {
echo $idstt.'<br>';
if($camxuc == "LIKE"){
$kq = postCamXuc($vipbot['user_id'],$idu[0],$token,$idu[1],1);
}
if($camxuc == "LOVE"){
$kq = postCamXuc($vipbot['user_id'],$idu[0],$token,$idu[1],2);
}
if($camxuc == "HAHA"){
$kq = postCamXuc($vipbot['user_id'],$idu[0],$token,$idu[1],4);
}
if($camxuc == "WOW"){
$kq = postCamXuc($vipbot['user_id'],$idu[0],$token,$idu[1],3);
}
if($camxuc == "SAD"){
$kq = postCamXuc($vipbot['user_id'],$idu[0],$token,$idu[1],7);
}
if($camxuc == "ANGRY"){
$kq = postCamXuc($vipbot['user_id'],$idu[0],$token,$idu[1],8);
}
saveFile($vipbot['id'].'||'.$vipbot['user_id'].'||'.$vipbot['name'].'||'.$idstt.'||'.$camxuc.'||'.$today."
");
sleep(10);
if(!$comment){
$cmt = '';
}else{
$cmt = $comment;
}
if(!$link_anh){
$anh = '';
}else{
$anh = ''.$link_anh.'';
}
if(!$id_nhandan){
$sticker = '';
}else{
$sticker = ''.$id_nhandan.'';
}
curl("https://graph.fb.me/".$idstt."/comments?method=post&message=".$cmt."&attachment_id=".$sticker."&attachment_url=".$anh."&access_token=".$token."");
}
}
}
}
}
function saveFile($id){
$file = @fopen('vipBot.txt', 'a+');
@fwrite($file, $id);
@fclose($file);
}
function curl($url,$cookie){
$ch = @curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
$head[] = "Connection: keep-alive";
$head[] = "Keep-Alive: 300";
$head[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
$head[] = "Accept-Language: en-us,en;q=0.5";
curl_setopt($ch, CURLOPT_USERAGENT, 'Opera/9.80 (Windows NT 6.0) Presto/2.12.388 Version/12.14');
curl_setopt($ch, CURLOPT_ENCODING, '');
curl_setopt($ch, CURLOPT_COOKIE, $cookie);
curl_setopt($ch, CURLOPT_HTTPHEADER, $head);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
curl_setopt($ch, CURLOPT_TIMEOUT, 60);
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 60);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
curl_setopt($ch, CURLOPT_HTTPHEADER, array('Expect:'));
$page = curl_exec($ch);
curl_close($ch);
return $page;
}
function post_data($site,$data,$cookie){
$datapost = curl_init();
$headers = array("Expect:");
curl_setopt($datapost, CURLOPT_URL, $site);
curl_setopt($datapost, CURLOPT_TIMEOUT, 40000);
curl_setopt($datapost, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36');
curl_setopt($datapost, CURLOPT_POST, TRUE);
curl_setopt($datapost, CURLOPT_POSTFIELDS, $data);
curl_setopt($datapost, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($datapost, CURLOPT_SSL_VERIFYHOST, FALSE);
curl_setopt($datapost, CURLOPT_SSL_VERIFYPEER, FALSE);
curl_setopt($datapost, CURLOPT_FOLLOWLOCATION, TRUE);
ob_start();
return curl_exec ($datapost);
ob_end_clean();
curl_close ($datapost);
unset($datapost);
}
function postCamXuc($my_uid,$target_uid,$token,$post_id,$camxuc){
$feedback_id = base64_encode("feedback:".$post_id);
$headers2 = array();
$headers2[] = 'X-FB-SIM-HNI: 45204';
$headers2[] = 'X-FB-Net-HNI: 45204';
$headers2[] = 'Authorization: OAuth '.$token;
$headers2[] = 'Host: graph.facebook.com';
$headers2[] = 'X-FB-Connection-Type: WIFI';
$headers2[] = 'User-Agent: [FBAN/FB4A;FBAV/161.0.0.35.93;FBBV/94117327;FBDM/{density=1.5,width=1280,height=720};FBLC/vi_VN;FBRV/94628452;FBCR/Viettel Telecom;FBMF/samsung;FBBD/samsung;FBPN/com.facebook.katana;FBDV/GT-I9506;FBSV/4.4.2;FBOP/1;FBCA/x86:armeabi-v7a;]';
$headers2[] = 'Content-Type: application/x-www-form-urlencoded';
$headers2[] = 'X-FB-Friendly-Name: ViewerReactionsMutation';
//$headers2[] = 'Accept-Encoding: gzip, deflate';
$headers2[] = 'X-FB-HTTP-Engine: Liger';
$headers2[] = 'Connection: close';
$data = 'doc_id=1664629946906286&method=post&locale=vi_VN&pretty=false&format=json&variables={"0":{"tracking":["{\"top_level_post_id\":\"'.$post_id.'\",\"tl_objid\":\"'.$post_id.'\",\"throwback_story_fbid\":\"'.$post_id.'\",\"profile_id\":\"'.$target_uid.'\",\"profile_relationship_type\":2,\"actrs\":\"'.$target_uid.'\"}","{\"image_loading_state\":3,\"time_since_fetched\":'.time().',\"radio_type\":\"wifi-none\",\"client_viewstate_position\":0}"],"feedback_source":"native_timeline","feedback_reaction":'.$camxuc.',"client_mutation_id":"ce52e651-5e23-4068-8367-696b8e3f045f","nectar_module":"timeline_ufi","actor_id":"'.$my_uid.'","feedback_id":"'.$feedback_id.'","action_timestamp":'.time().'}}&fb_api_req_friendly_name=ViewerReactionsMutation&fb_api_caller_class=graphservice';
$c = curl_init();
curl_setopt($c, CURLOPT_URL, "https://graph.facebook.com/graphql");
curl_setopt($c, CURLOPT_SSL_VERIFYPEER,false);
curl_setopt($c, CURLOPT_SSL_VERIFYHOST,false);
curl_setopt($c, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($c, CURLOPT_RETURNTRANSFER, true);
curl_setopt($c, CURLOPT_HTTPHEADER, $headers2);
curl_setopt($c,CURLOPT_POST, 1);
curl_setopt($c,CURLOPT_POSTFIELDS,$data);
$page = curl_exec($c);
curl_close($c);
return $page;
}
?><?
Did this file decode correctly?
Original Code
<? eval(gzinflate(base64_decode('
zRnbctpI9jmu8j/0aCgLEiEBxhjjEA/BEFOxwQXY
npTjUjVSAz3WzVJjTDJ+2s/Yl5l9md23rZq3yWO2
5j/yJ3taEljiYjuTpHYpl0Hd537rc1p7L57vOUNn
fU15ur72pGrrBPUmqOt++uM3C73+9OF31Bx+/IcF
e3VqEGR9/GWCtI+/I2346cO/NGT952/WAHX//Pef
v/Lvj79q6PrTh79TZFCPod6nP361UO/jP5H26cNv
GJ009gH5FyqjqmtbaAulUTbjKAZntr72VFlfs3uq
x7DLkqnd9TWPeB61rciKjhlRddLHI4OpjJrknW0R
1SMsKVY8ipUDW60OqXpEraHI4RPM1vEElRFHTIoH
JYr0tJl+E2wOVcse3236i9TSjBEYQZRlxZt4jJiK
Zlt9OpDBSiLHMvCE2ZfEAkRz4l0ZVL0aEXeSTACc
JSGhUzusVbvoKaq3W0fomjouwRoDPdDZQa1dQ6AN
G3nlDEKt9n6tjV6+Qe1Kcz+ZQoeNo0YXZaRcRuCi
jIdg8WQCKPRsdsetT5g2VLHn2VpyJkwq9X59DcGH
9tEU5Vwkli5eoBeIWyqZSqEQhn+INrTRDHDkEVel
ACyLz4fuC67nFDAxVXYGjDUNHKP66+JFFFSz7UtK
orDBShzKoMykLAplUFhQfTvNg1qXKraGceBgzYd8
8iRBddUaYkvHMSHvVqdwDA9UzYzxDZfiPLmxAMgb
9TzmJgPTSRmpkIppis2bkRajNXHietJ+Egi41LG9
5BwURMlbS5j5LKKux1TtBsiSG8eAXExyOGmeSVSS
OWlCCufYdfFEdcEAyelaKircbcxrpkksFnebvxQ3
TP/KABjBIwbRGOKiSKAbg7iRNPAdI7qfkqjv2iZE
OSyZwiI+/5IFNB4Sl3Aobp4ouiTIvgtkIYVeQJZA
aiDPHrkaAUaIWmglzWQo2YjquUCIvkshBUJesJwt
+3mwhIIwZMzxSoqCHSr3sUZ6ELgymEExCRvausI5
+Hm+5/8vC/LINYilcSdxGilZ2PDDuCzKYYTL4kbf
dk3Myj95trURTZsyV5L/iErCoUAUxL+hyPmkNeAS
0JeYOyKpeHwR02FQeDjCeebiXAzdARGyEFouJDzR
LoF+lHwfKow6IBAetsXA4V5yZoiBi53hvCn2+pQY
ulem+nJ1FqWMSxpKwdNziZCRGnJ/CZkBg3VAI99I
M8HH43FcbBBuoc5JIZ/UEqogLtTsgQqe04ZJ8fuo
piUhKT/bSwnfU0+UOHtITgZpdjnh1YaypTrFy2gU
/Dy7TC3+WXq0nBzvV7q12JnSqXVRzBViwEkMTxuq
lyP6+yVeEFIrmH5pii+h9VXTfSX9v5T6yzT/35eB
mFSfWRKWVHf/kRgeWZZrX8nd39LVX8/N/38ufpx7
EZrz5tJTHPgnE7Sc2U3Q57ldlKDPni2cAVT3mH/M
+wdGgkZPjMWSHYAvrdFUH0V7FJW3KAH0Mi0NewDQ
i0eNCFXppc1kdsPE5XUYJcMw4jSAB5c2PDvQd0AS
Q1zHutroh/Oh1ogsyw/EM2IVYtAa+/pAO9yLt8Pz
Rpq2XhBYh43XNWFV/fctcXkFhuBKVLH540hLLjuX
wLZwlktB0ASP2Qspu6pk3z5OtNbpNxMtx0N0Pkg/
T7yDykEFxEPfRL78l8t31jr7Vtbb/HLpOpX9byXd
9pdLV2m+ar/5VvIV/4J8Hr4m9chkHXZF4s8/i/Ky
gTi2bmGTzBbDEuH/DjQOH/xbB9mf8VakrWcQ4iSz
mdTq0vLddDC713bBRCuuKlGrjv45/Cmr1UXmCf/4
Uk3nby6Wv/okEUzovhD+wpTr3LY8w5UjsFHad1N7
hLrHqHZJ3Ps4REHkCJUlfOLDQjjl9GST8Dkh8Kig
hObw9oKeoMyDc8OEQx0PCD/RwWrQBWDGsDbkgGrQ
ZodixLeAH9/jWgvLW4MVHfntQ+c+fMFff2QFo8Bd
YFPdN1+Cn7lgkx/6tkOs2HkrIRE/80/dJz/0xy5l
vLcBaP8gD5c1w/bCZb4SZRU0KXz8mc5RYYwlNO7q
H/i+SmHASU4V81c8wmyHQXkYSqh60j5sHXdV+JL8
QW4KmRgSrJ9f8FatCmMP8TmW0CUkTBob9JoIi4Cv
+WaFb5bQZiazBKIChndYujrELkhRQo1OK10sbu2k
s9KI9dPF3atyRt6WngbfqwkcYmswgigoIWKlR54E
jR3H2BIe1LNTa1de1ZpdMH3LIS5WduRiBiXPqKXb
Yw81u6ggZ1Lo2CUes5WcnM3Jm8UiOiUuvwRV4DGb
Fx80Z61Zbe03mq+Ay8PA1VbrdaMmoblheCX8Qbd7
fFCr7NfaUmCaBzHate5Ju9ltV5qdOsfKPojR6Ryq
p7V2o/7moNUBY9Urh53aZ2Ad1zifx2F1G0e11gkw
KWQeYatms1btfg5KvXV42Do7bFUr3UarKaFu+6T2
WTb2b/GSYu3GgSwoialZijgQgeHFh0puiMZJxCiH
uXu36hI2cq0AkyczimSzPwTomOFkwoNKICX474XM
5osccso3lt5+NECkwmYgtBAKLSxVeEprvgxw9o9E
mDkin4HPY7lEkvDIfkcNAytb8nwWZncRdHyFfApV
HMcgZ6T3mjJla3Nb3iyg5OuD7hHIatBLgl4R7dJO
oeoQZlGiAEBGzmUKPHfzqIP72KUhmvhIAY/9mF8Z
KMsR6o3a4X5HClwU7YgewH1cci7iPT5F78ONJeqj
Zb4vp2IvjyJBP0sTdEcxgkMsHfKFYCu5mEJLMEYW
f98UWUY8nebzadrKmhN1RHXoW7HLh9/gd9DDTq9a
wt5xlmh9QvQe1i75rUgZ9bBHCnk1vIAQppslaB5C
AvM5mJsl4cKOf5SJP6brL9OdxlH6oNkoofxWLpMX
74FsEvYwZGUEjZJL3+HgtG7xZyTG7z7mUA5A/BJa
vGe+T5a7jiDdnThwCp816o0VCCfQw6crA+jBSui8
/rLSVOov85Vd+HWqZAtZyNWMvLkl72zC0stTZSef
zW5v5rbhaf9Iea8TC6rRpJyVt6Qx1dmwnM0VM9KQ
0MGQlbdzmVsAPKwq11Q9bcLPNqdQyBXBSPBUbSun
lDBGDNTld1a2CYtHdcXDpjeyBpzjfuThuMlbzjsr
XEJwWZhLcqq86qYbO1uZAjx1TpW8nJc5g9axkuV8
KspNsVDCrklwj6avt/HuxQpzVIN7l9BuGCob1Xxv
KTfp8Xic5jdY6dlVl36fF+r+rZsxSTdhHCoh0HRM
3HZ4Je0djZhPd0pBUeZjJWilapwRtQYQA++oIyGd
9A3MyH2M+eEIeANqAdtDOiDuamVnnaOfyDM4nrcc
Qrc13rVnCwXw2g64bgcKd7GwEe34DVvDBin7Lt5w
oJpAPPiXTrHrvmso87hnEK/8XsgIpfcCcyFBQTGh
dC68fytAKVMNck0MNUzYt0LprSDO8lcW3woSgBmq
3ftp5S4cMWO/KkB36E7Ufm8VpOPa/l3b3f5d7ZkD
cYnhe8obUkfl17+AkYN9cKTrLce+FSSuEzWhj1AN
G3MH8qrLOO4mF5SaRPWopZHgTTXhYohy8B5VFgHC
BSR7yu6tMKZ9mrZsi/iiaQblQ9M1hJRPlduMchkB
NnMrXEizCqgGd8dCSbBAiWvi3zHDgEmECMz0PQkX
YTajS1MuZhipYCsgo5GtHClsZdNbJLeZzmcKxXRx
s7CdLuwUekWy2c/kt/pAm8cVdlXT1kcG5z5lq476
FLaBn+0GBIFlUP5lMSrTdC+y4AMEkvpqgOqmEzXb
7e1Gv6dih4JGV2o/zD+VX0eUV6TfFAFC2CAuHGfY
88p+tYW6eE21u5TQlrZ08Q51rlO77zWhv3RlCA8R
mmsFgtvcR+P4rcejcOZbhvi1+iqs+eYo+q5lFc7C
fMQL0gqkeMeXfQRU2OaFXd7qSWDpILBqDlhf23vx
fO+/
'))); ?>
Function Calls
gzinflate | 1 |
base64_decode | 1 |
Stats
MD5 | 1e1b82f13e503324f0ba08b214e41fe7 |
Eval Count | 1 |
Decode Time | 80 ms |