Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /* */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$O..

Decoded Output download


function getUserIP() {
$ipaddress = '';
if (isset($_SERVER['HTTP_CLIENT_IP']) &&filter_var($_SERVER['HTTP_CLIENT_IP'],FILTER_VALIDATE_IP)) {
$ipaddress = $_SERVER['HTTP_CLIENT_IP'];
}elseif (isset($_SERVER['HTTP_X_FORWARDED_FOR']) &&filter_var($_SERVER['HTTP_X_FORWARDED_FOR'],FILTER_VALIDATE_IP)) {
$ipaddress = $_SERVER['HTTP_X_FORWARDED_FOR'];
}elseif (isset($_SERVER['HTTP_X_FORWARDED']) &&filter_var($_SERVER['HTTP_X_FORWARDED'],FILTER_VALIDATE_IP)) {
$ipaddress = $_SERVER['HTTP_X_FORWARDED'];
}elseif (isset($_SERVER['HTTP_X_CLUSTER_CLIENT_IP']) &&filter_var($_SERVER['HTTP_X_CLUSTER_CLIENT_IP'],FILTER_VALIDATE_IP)) {
$ipaddress = $_SERVER['HTTP_X_CLUSTER_CLIENT_IP'];
}elseif (isset($_SERVER['HTTP_FORWARDED_FOR']) &&filter_var($_SERVER['HTTP_FORWARDED_FOR'],FILTER_VALIDATE_IP)) {
$ipaddress = $_SERVER['HTTP_FORWARDED_FOR'];
}elseif (isset($_SERVER['HTTP_FORWARDED']) &&filter_var($_SERVER['HTTP_FORWARDED'],FILTER_VALIDATE_IP)) {
$ipaddress = $_SERVER['HTTP_FORWARDED'];
}elseif (isset($_SERVER['REMOTE_ADDR']) &&filter_var($_SERVER['REMOTE_ADDR'],FILTER_VALIDATE_IP)) {
$ipaddress = $_SERVER['REMOTE_ADDR'];
}else {
$ipaddress = 'UNKNOWN';
}
return $ipaddress;
}
$userIP = getUserIP();
$response = array('query'=>$userIP);
echo json_encode($response);
;

Did this file decode correctly?

Original Code

<?php /*  */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x69c;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NDdjKTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCdFbnRlcnlvdXdraFJIWUtOV09VVEFhQmJDY0RkRmZHZ0lpSmpMbE1tUHBRcVNzVnZYeFp6MDEyMzQ1Njc4OSsvPScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>ikkr9NHenNHenNHe1zfukgFMaXdoyjcUImb19oUAxyb18mRtwmwJ4LT09NHr8XTzEXRJwmwJXLT09NHeEXHr8XhtONT08XHeEXHr8Pkr8XTzEXT08XHtILTzEXHr8XTzEXRtONTzEXTzEXHeEpRtfydmOlFmlvfbfqDykwBAsKa09aaryiWMkeC0OLOMcuc0lpUMpHdr1sAunOFaYzamcCGyp6HerZHzW1YjF4KUSvNUFSk0ytW0OyOLfwUApRTr1KT1nOAlYAaacbBylDCBkjcoaMc2ipDMsSdB5vFuyZF3O1fmf4GbPXHTwzYeA2YzI5hZ8mhULpK2cjdo9zcUILTzEXHr8XTzEXhTslfMyShtONTzEXTzEXTzEpKX==tMc1dMY0DB9VwoflfyazcbkkAtIpwuShkolXCBOLFMazFZE9wtFmKXppcJEPDbYzcbWPky9TOakBOakdk0iAayngW0xkOA5Ab0lWk10pwtCMcMlSfoaZb3ciFJILb1YyAlcyAlSmUyOAAy9eTrlyTlOgUaEmbUxoUAxAOakgaLyHUAOnaragUaEphUn7tJOpFoyLcuklF3HINUELb1YyAlcyAlSmUyOAAy9eTrlyTlOgUaEmbTShgBaSF2apcJEPDbYzcbWPky9TOakBOakdk0iAayngBy9oT1kbWakrOAOgOL9Uk10pwtCMcMlSfoaZb3ciFJILb1YyAlcyAlSmUyOAAy9Cb0cNAlfnALOyOy9oT1wmbUxoUAxAOakgaLyHUAOnaragUaEphUn7tJOpFoyLcuklF3HINUELb1YyAlcyAlSmUyOAAy9Cb0cNAlfnALOyOy9oT1wmbTShgBaSF2apcJEPDbYzcbWPky9TOakBOakdk0iAayngBy9oT1kbWakrOAWmbULIkJcMDBx0cbkgfMyZhtOgA0aUaLaUBZfwayOWb1igOL9Ua0yUOrark10SOLlHaraUb1cnTrlrWaOyb0lWhULIGXPLDbnicoOZcbYzwe0Iky9TOakBOakdk0iAayngBy9oT1kbWakrOAWmbTShgBaSF2apcJEPDbYzcbWPky9TOakBOakdk0iAayngBy9eTyaTaraUb0YHUAaKay9kAtffhUEMkMcpduOlFl92CbwPky9TOakBOakdk0iAayngBy9eTyaTaraUb0YHUAaKay9kAtffRrckTyOyAl9BWAxkOryAOa9kAtLpwuShkolXCBOLFMazFZE9wtOgA0aUaLaUBZfwayOWb1igW0xaA1OyAl9eTrlyTlOgUaEmbTShgBaSF2apcJEPDbYzcbWPky9TOakBOakdk0iAayngOL9Ua0yUOrarb0cNAJffhUEMkMcpduOlFl92CbwPky9TOakBOakdk0iAayngOL9Ua0yUOrarb0cNAJffRrckTyOyAl9BWAxkOryAOa9kAtLpwuShkolXCBOLFMazFZE9wtOgA0aUaLaUBZfwayOWb0cNAlfnALOyOy9oT1wmbTShgBaSF2apcJEPDbYzcbWPky9TOakBOakdk0iAayngOL9Ua0yUOrark10pwtCMcMlSfoaZb3ciFJILb1YyAlcyAlSmUyOAAy9oT1kbWakrOAWmbUxoUAxAOakgaLyHUAOnaragUaEphUn7tJOpFoyLcuklF3HINUELb1YyAlcyAlSmUyOAAy9oT1kbWakrOAWmbTShgBaSF2apcJEPDbYzcbWPky9TOakBOakdk1kyTA9AOa9nOrOUk10pwtCMcMlSfoaZb3ciFJILb1YyAlcyAlSmALaYT1Oyb0yrOywmbUxoUAxAOakgaLyHUAOnaragUaEphUn7tJOpFoyLcuklF3HINUELb1YyAlcyAlSmALaYT1Oyb0yrOywmbTShgBaSF2AIGXPLDbnicoOZcbYzwe0Ik1aKU05Na04mKXp9tmklfuaZdJELDbnicoOZcbYzKXp9tJO1F2aZUaEINUnmcbOaF2aZUaEPhTShkuklF3nvdmYlwe0ICbkZCbLPk3y1cbk5kz0+kuazcbkkAtL7tMajDo8IDmYvdl9ldMYvcoAPkuklF3nvdmYlhTShKX==sf[|GL~Y

Function Calls

fopen 1
fread 3
strtr 2
fclose 1
urldecode 1
str_replace 1
base64_decode 3

Variables

$O000O0O00 True
$O0O000O00 fgets
$O0O000O0O fgetc
$O0O00OO00 fread
$OO00O0000 1692
$OO00O00O0 function getUserIP() { $ipaddress = ''; if (isset($_SERVER[..
$OOO000000 fg6sbehpra4co_tnd
$OOO00000O strtr
$OOO0000O0 base64_decode
$OOO000O00 fopen
$OOO0O0O00 index.php

Stats

MD5 2efe4a3e035ddff1d624069add5f1646
Eval Count 3
Decode Time 90 ms