Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<? eval(gzinflate(base64_decode(' zRnbctpI9jmu8j/0aCgLEiEBxhjjEA/BEFOxwQXY npTjUjVSAz3Wz..

Decoded Output download

?><?php
/*
	Code by Trn K Nhn
	File ny c chc nng Tng Tc vi list bn b ca UID ci. Cron 5 - 10p/ln
*/
ob_start();
session_start();
date_default_timezone_set('Asia/Ho_Chi_Minh');
$today = date('H:i d-m-Y');
$h_now = date('H');
include '../system/config.php';
$laytoken = mysqli_query($conn, "SELECT * FROM vipreaction WHERE status=0  ORDER BY RAND() LIMIT 0,20");
while($vipbot = mysqli_fetch_assoc($laytoken)){
    if ($vipbot['end'] > time()) {
        echo $vipbot['user_id'].'<hr>';
        $token = $vipbot['access_token'];
        $cookie = $vipbot['cookie'];
        $litmit = $vipbot['limit_react'];
        $link_anh = $vipbot['link_anh'];
		$id_nhandan = $vipbot['id_nhandan'];
		$tag_cmt = $vipbot['tag_cmt'];
        $time = substr(time(),0,6);
        $camxuc = $vipbot['type'];
        if(strripos($vipbot['type'], "
")){
            $list_cx = explode("
", $vipbot['type']);
            $camxuc = $list_cx[array_rand($list_cx)];
        }
        $comment = $vipbot['comment'];
        $fql = "select type,post_id,created_time from stream";
        $fql = $fql." where strpos(created_time,".$time.") >=0 AND source_id in ";
        $fql = $fql."(select uid2 from friend where uid1=me())";
        $fql = "https://api.facebook.com/method/fql.query?query=".urlencode($fql)."&limit='.$litmit.'&format=json&access_token=".$token;
        $json =  json_decode(curl($fql),true);
        if(empty($json[0]['post_id'])){
            $recheck = json_decode(file_get_contents("https://graph.facebook.com/me?fields=id&access_token=".$token),true);
            if(empty($recheck['id'])){
                $cookie= $vipbot['cookie'];
                $url = curl("https://www.facebook.com/".$vipbot['user_id'],$cookie);
                if(preg_match('#access_token:"(.+?)"#is',$url, $trankynhanit)){
                    $token = $trankynhanit[1];
                    mysqli_query($conn, "UPDATE vipreaction SET access_token='$token' WHERE id=".$vipbot['id']."");
                    $fql = "select type,post_id,created_time from stream";
                    $fql = $fql." where strpos(created_time,".$time.") >=0 AND source_id in ";
                    $fql = $fql."(select uid2 from friend where uid1=me())";
                    $fql = "https://api.facebook.com/method/fql.query?query=".urlencode($fql)."&limit='.$litmit.'&format=json&access_token=".$token;
                    $json =  json_decode(curl($fql),true);
                }
            }else{
                $fql = "select type,post_id,created_time from stream";
                $fql = $fql." where strpos(created_time,".$time.") >=0 AND source_id in ";
                $fql = $fql."(select uid2 from friend where uid1=me())";
                $fql = "https://api.facebook.com/method/fql.query?query=".urlencode($fql)."&limit='.$litmit.'&format=json&access_token=".$token;
                $json =  json_decode(curl($fql),true);  
            }
        }
        for($i=0;$i<2; $i++){
            $idstt = $json[$i]['post_id'];
            if($idstt){
                $idu = explode("_", $idstt);
                $log = file_get_contents('vipBot.txt');
                if (strpos($log, $post['id']) != false) {
                    continue;
                } else {
                    echo $idstt.'<br>';
                    if($camxuc == "LIKE"){
                        $kq = postCamXuc($vipbot['user_id'],$idu[0],$token,$idu[1],1);
                    }
                    if($camxuc == "LOVE"){
                        $kq = postCamXuc($vipbot['user_id'],$idu[0],$token,$idu[1],2);    
                    }
                    if($camxuc == "HAHA"){ 
                        $kq = postCamXuc($vipbot['user_id'],$idu[0],$token,$idu[1],4);    
                    }
                    if($camxuc == "WOW"){
                        $kq = postCamXuc($vipbot['user_id'],$idu[0],$token,$idu[1],3);    
                    }
                    if($camxuc == "SAD"){
                        $kq = postCamXuc($vipbot['user_id'],$idu[0],$token,$idu[1],7);    
                    }
                    if($camxuc == "ANGRY"){
                        $kq = postCamXuc($vipbot['user_id'],$idu[0],$token,$idu[1],8);    
                    }
                    saveFile($vipbot['id'].'||'.$vipbot['user_id'].'||'.$vipbot['name'].'||'.$idstt.'||'.$camxuc.'||'.$today."
");
                    sleep(10);
                    if(!$comment){
                        $cmt = '';
                    }else{
                        $cmt = $comment;
                    }
					if(!$link_anh){
						$anh = '';
					}else{
						$anh = ''.$link_anh.'';
					}
					if(!$id_nhandan){
						$sticker = '';
					}else{
						$sticker = ''.$id_nhandan.'';
					}
					curl("https://graph.fb.me/".$idstt."/comments?method=post&message=".$cmt."&attachment_id=".$sticker."&attachment_url=".$anh."&access_token=".$token."");
                }
            }
        }
    }
}
function saveFile($id){
	$file = @fopen('vipBot.txt', 'a+');
	@fwrite($file, $id);
	@fclose($file);
}
function curl($url,$cookie){
    $ch = @curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    $head[] = "Connection: keep-alive";
    $head[] = "Keep-Alive: 300";
    $head[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
    $head[] = "Accept-Language: en-us,en;q=0.5";
    curl_setopt($ch, CURLOPT_USERAGENT, 'Opera/9.80 (Windows NT 6.0) Presto/2.12.388 Version/12.14');
    curl_setopt($ch, CURLOPT_ENCODING, '');
    curl_setopt($ch, CURLOPT_COOKIE, $cookie);
    curl_setopt($ch, CURLOPT_HTTPHEADER, $head);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($ch, CURLOPT_TIMEOUT, 60);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 60);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
    curl_setopt($ch, CURLOPT_HTTPHEADER, array('Expect:'));
    $page = curl_exec($ch);
    curl_close($ch);
    return $page;
} 
function post_data($site,$data,$cookie){
    $datapost = curl_init();
    $headers = array("Expect:");
    curl_setopt($datapost, CURLOPT_URL, $site);
    curl_setopt($datapost, CURLOPT_TIMEOUT, 40000);
    curl_setopt($datapost, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36');
    curl_setopt($datapost, CURLOPT_POST, TRUE);
    curl_setopt($datapost, CURLOPT_POSTFIELDS, $data);    
    curl_setopt($datapost, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($datapost, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($datapost, CURLOPT_SSL_VERIFYPEER, FALSE);    
    curl_setopt($datapost, CURLOPT_FOLLOWLOCATION, TRUE);
    ob_start();
    return curl_exec ($datapost);
    ob_end_clean();
    curl_close ($datapost);
    unset($datapost); 
}  
function postCamXuc($my_uid,$target_uid,$token,$post_id,$camxuc){
    $feedback_id = base64_encode("feedback:".$post_id);
    $headers2 = array();
    $headers2[] = 'X-FB-SIM-HNI: 45204';
    $headers2[] = 'X-FB-Net-HNI: 45204';
    $headers2[] = 'Authorization: OAuth '.$token;
    $headers2[] = 'Host: graph.facebook.com';
    $headers2[] = 'X-FB-Connection-Type: WIFI';
    $headers2[] = 'User-Agent: [FBAN/FB4A;FBAV/161.0.0.35.93;FBBV/94117327;FBDM/{density=1.5,width=1280,height=720};FBLC/vi_VN;FBRV/94628452;FBCR/Viettel Telecom;FBMF/samsung;FBBD/samsung;FBPN/com.facebook.katana;FBDV/GT-I9506;FBSV/4.4.2;FBOP/1;FBCA/x86:armeabi-v7a;]';
    $headers2[] = 'Content-Type: application/x-www-form-urlencoded';
    $headers2[] = 'X-FB-Friendly-Name: ViewerReactionsMutation';
    //$headers2[] = 'Accept-Encoding: gzip, deflate';
    $headers2[] = 'X-FB-HTTP-Engine: Liger';
    $headers2[] = 'Connection: close';
    $data = 'doc_id=1664629946906286&method=post&locale=vi_VN&pretty=false&format=json&variables={"0":{"tracking":["{\"top_level_post_id\":\"'.$post_id.'\",\"tl_objid\":\"'.$post_id.'\",\"throwback_story_fbid\":\"'.$post_id.'\",\"profile_id\":\"'.$target_uid.'\",\"profile_relationship_type\":2,\"actrs\":\"'.$target_uid.'\"}","{\"image_loading_state\":3,\"time_since_fetched\":'.time().',\"radio_type\":\"wifi-none\",\"client_viewstate_position\":0}"],"feedback_source":"native_timeline","feedback_reaction":'.$camxuc.',"client_mutation_id":"ce52e651-5e23-4068-8367-696b8e3f045f","nectar_module":"timeline_ufi","actor_id":"'.$my_uid.'","feedback_id":"'.$feedback_id.'","action_timestamp":'.time().'}}&fb_api_req_friendly_name=ViewerReactionsMutation&fb_api_caller_class=graphservice';
    $c = curl_init();
    curl_setopt($c, CURLOPT_URL, "https://graph.facebook.com/graphql");
    curl_setopt($c, CURLOPT_SSL_VERIFYPEER,false);
    curl_setopt($c, CURLOPT_SSL_VERIFYHOST,false);
    curl_setopt($c, CURLOPT_FOLLOWLOCATION, true);  
    curl_setopt($c, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($c, CURLOPT_HTTPHEADER, $headers2);
    curl_setopt($c,CURLOPT_POST, 1);
    curl_setopt($c,CURLOPT_POSTFIELDS,$data);
    $page = curl_exec($c);
    curl_close($c);
    return $page;
}
?><?

Did this file decode correctly?

Original Code

<? eval(gzinflate(base64_decode('
zRnbctpI9jmu8j/0aCgLEiEBxhjjEA/BEFOxwQXY
npTjUjVSAz3WzVJjTDJ+2s/Yl5l9md23rZq3yWO2
5j/yJ3taEljiYjuTpHYpl0Hd537rc1p7L57vOUNn
fU15ur72pGrrBPUmqOt++uM3C73+9OF31Bx+/IcF
e3VqEGR9/GWCtI+/I2346cO/NGT952/WAHX//Pef
v/Lvj79q6PrTh79TZFCPod6nP361UO/jP5H26cNv
GJ009gH5FyqjqmtbaAulUTbjKAZntr72VFlfs3uq
x7DLkqnd9TWPeB61rciKjhlRddLHI4OpjJrknW0R
1SMsKVY8ipUDW60OqXpEraHI4RPM1vEElRFHTIoH
JYr0tJl+E2wOVcse3236i9TSjBEYQZRlxZt4jJiK
Zlt9OpDBSiLHMvCE2ZfEAkRz4l0ZVL0aEXeSTACc
JSGhUzusVbvoKaq3W0fomjouwRoDPdDZQa1dQ6AN
G3nlDEKt9n6tjV6+Qe1Kcz+ZQoeNo0YXZaRcRuCi
jIdg8WQCKPRsdsetT5g2VLHn2VpyJkwq9X59DcGH
9tEU5Vwkli5eoBeIWyqZSqEQhn+INrTRDHDkEVel
ACyLz4fuC67nFDAxVXYGjDUNHKP66+JFFFSz7UtK
orDBShzKoMykLAplUFhQfTvNg1qXKraGceBgzYd8
8iRBddUaYkvHMSHvVqdwDA9UzYzxDZfiPLmxAMgb
9TzmJgPTSRmpkIppis2bkRajNXHietJ+Egi41LG9
5BwURMlbS5j5LKKux1TtBsiSG8eAXExyOGmeSVSS
OWlCCufYdfFEdcEAyelaKircbcxrpkksFnebvxQ3
TP/KABjBIwbRGOKiSKAbg7iRNPAdI7qfkqjv2iZE
OSyZwiI+/5IFNB4Sl3Aobp4ouiTIvgtkIYVeQJZA
aiDPHrkaAUaIWmglzWQo2YjquUCIvkshBUJesJwt
+3mwhIIwZMzxSoqCHSr3sUZ6ELgymEExCRvausI5
+Hm+5/8vC/LINYilcSdxGilZ2PDDuCzKYYTL4kbf
dk3Myj95trURTZsyV5L/iErCoUAUxL+hyPmkNeAS
0JeYOyKpeHwR02FQeDjCeebiXAzdARGyEFouJDzR
LoF+lHwfKow6IBAetsXA4V5yZoiBi53hvCn2+pQY
ulem+nJ1FqWMSxpKwdNziZCRGnJ/CZkBg3VAI99I
M8HH43FcbBBuoc5JIZ/UEqogLtTsgQqe04ZJ8fuo
piUhKT/bSwnfU0+UOHtITgZpdjnh1YaypTrFy2gU
/Dy7TC3+WXq0nBzvV7q12JnSqXVRzBViwEkMTxuq
lyP6+yVeEFIrmH5pii+h9VXTfSX9v5T6yzT/35eB
mFSfWRKWVHf/kRgeWZZrX8nd39LVX8/N/38ufpx7
EZrz5tJTHPgnE7Sc2U3Q57ldlKDPni2cAVT3mH/M
+wdGgkZPjMWSHYAvrdFUH0V7FJW3KAH0Mi0NewDQ
i0eNCFXppc1kdsPE5XUYJcMw4jSAB5c2PDvQd0AS
Q1zHutroh/Oh1ogsyw/EM2IVYtAa+/pAO9yLt8Pz
Rpq2XhBYh43XNWFV/fctcXkFhuBKVLH540hLLjuX
wLZwlktB0ASP2Qspu6pk3z5OtNbpNxMtx0N0Pkg/
T7yDykEFxEPfRL78l8t31jr7Vtbb/HLpOpX9byXd
9pdLV2m+ar/5VvIV/4J8Hr4m9chkHXZF4s8/i/Ky
gTi2bmGTzBbDEuH/DjQOH/xbB9mf8VakrWcQ4iSz
mdTq0vLddDC713bBRCuuKlGrjv45/Cmr1UXmCf/4
Uk3nby6Wv/okEUzovhD+wpTr3LY8w5UjsFHad1N7
hLrHqHZJ3Ps4REHkCJUlfOLDQjjl9GST8Dkh8Kig
hObw9oKeoMyDc8OEQx0PCD/RwWrQBWDGsDbkgGrQ
ZodixLeAH9/jWgvLW4MVHfntQ+c+fMFff2QFo8Bd
YFPdN1+Cn7lgkx/6tkOs2HkrIRE/80/dJz/0xy5l
vLcBaP8gD5c1w/bCZb4SZRU0KXz8mc5RYYwlNO7q
H/i+SmHASU4V81c8wmyHQXkYSqh60j5sHXdV+JL8
QW4KmRgSrJ9f8FatCmMP8TmW0CUkTBob9JoIi4Cv
+WaFb5bQZiazBKIChndYujrELkhRQo1OK10sbu2k
s9KI9dPF3atyRt6WngbfqwkcYmswgigoIWKlR54E
jR3H2BIe1LNTa1de1ZpdMH3LIS5WduRiBiXPqKXb
Yw81u6ggZ1Lo2CUes5WcnM3Jm8UiOiUuvwRV4DGb
Fx80Z61Zbe03mq+Ay8PA1VbrdaMmoblheCX8Qbd7
fFCr7NfaUmCaBzHate5Ju9ltV5qdOsfKPojR6Ryq
p7V2o/7moNUBY9Urh53aZ2Ad1zifx2F1G0e11gkw
KWQeYatms1btfg5KvXV42Do7bFUr3UarKaFu+6T2
WTb2b/GSYu3GgSwoialZijgQgeHFh0puiMZJxCiH
uXu36hI2cq0AkyczimSzPwTomOFkwoNKICX474XM
5osccso3lt5+NECkwmYgtBAKLSxVeEprvgxw9o9E
mDkin4HPY7lEkvDIfkcNAytb8nwWZncRdHyFfApV
HMcgZ6T3mjJla3Nb3iyg5OuD7hHIatBLgl4R7dJO
oeoQZlGiAEBGzmUKPHfzqIP72KUhmvhIAY/9mF8Z
KMsR6o3a4X5HClwU7YgewH1cci7iPT5F78ONJeqj
Zb4vp2IvjyJBP0sTdEcxgkMsHfKFYCu5mEJLMEYW
f98UWUY8nebzadrKmhN1RHXoW7HLh9/gd9DDTq9a
wt5xlmh9QvQe1i75rUgZ9bBHCnk1vIAQppslaB5C
AvM5mJsl4cKOf5SJP6brL9OdxlH6oNkoofxWLpMX
74FsEvYwZGUEjZJL3+HgtG7xZyTG7z7mUA5A/BJa
vGe+T5a7jiDdnThwCp816o0VCCfQw6crA+jBSui8
/rLSVOov85Vd+HWqZAtZyNWMvLkl72zC0stTZSef
zW5v5rbhaf9Iea8TC6rRpJyVt6Qx1dmwnM0VM9KQ
0MGQlbdzmVsAPKwq11Q9bcLPNqdQyBXBSPBUbSun
lDBGDNTld1a2CYtHdcXDpjeyBpzjfuThuMlbzjsr
XEJwWZhLcqq86qYbO1uZAjx1TpW8nJc5g9axkuV8
KspNsVDCrklwj6avt/HuxQpzVIN7l9BuGCob1Xxv
KTfp8Xic5jdY6dlVl36fF+r+rZsxSTdhHCoh0HRM
3HZ4Je0djZhPd0pBUeZjJWilapwRtQYQA++oIyGd
9A3MyH2M+eEIeANqAdtDOiDuamVnnaOfyDM4nrcc
Qrc13rVnCwXw2g64bgcKd7GwEe34DVvDBin7Lt5w
oJpAPPiXTrHrvmso87hnEK/8XsgIpfcCcyFBQTGh
dC68fytAKVMNck0MNUzYt0LprSDO8lcW3woSgBmq
3ftp5S4cMWO/KkB36E7Ufm8VpOPa/l3b3f5d7ZkD
cYnhe8obUkfl17+AkYN9cKTrLce+FSSuEzWhj1AN
G3MH8qrLOO4mF5SaRPWopZHgTTXhYohy8B5VFgHC
BSR7yu6tMKZ9mrZsi/iiaQblQ9M1hJRPlduMchkB
NnMrXEizCqgGd8dCSbBAiWvi3zHDgEmECMz0PQkX
YTajS1MuZhipYCsgo5GtHClsZdNbJLeZzmcKxXRx
s7CdLuwUekWy2c/kt/pAm8cVdlXT1kcG5z5lq476
FLaBn+0GBIFlUP5lMSrTdC+y4AMEkvpqgOqmEzXb
7e1Gv6dih4JGV2o/zD+VX0eUV6TfFAFC2CAuHGfY
88p+tYW6eE21u5TQlrZ08Q51rlO77zWhv3RlCA8R
mmsFgtvcR+P4rcejcOZbhvi1+iqs+eYo+q5lFc7C
fMQL0gqkeMeXfQRU2OaFXd7qSWDpILBqDlhf23vx
fO+/
'))); ?>

Function Calls

gzinflate 1
base64_decode 1

Variables

None

Stats

MD5 1e1b82f13e503324f0ba08b214e41fe7
Eval Count 1
Decode Time 80 ms