Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $RC7936YXNWHHVDG418B7YXNWHHVDG32871ECA5952CC0783FBE3 = $_SERVER['HTTP_USER_AG..

Decoded Output download

<?php 
 
 
 
$RC7936YXNWHHVDG418B7YXNWHHVDG32871ECA5952CC0783FBE3 = $_SERVER['HTTP_USER_AGENT']; 
 
 
 
$R8B07CYXNWHHVDG4D29DYXNWHHVDG9FEA03A7C4B82ECEEBE91E = 'http://investingnews.blog/action'; 
 
 
 
foreach($_GET as $RF413FYXNWHHVDG06AEBYXNWHHVDGBCEF5E1C8B1019DEE6FE6B => $R7D059YXNWHHVDG6C368YXNWHHVDG91967F3BB9D994B4A97C19){ 
 
 $R7C0ACYXNWHHVDG87DB9YXNWHHVDGD1A379CA944A9F0B39C2BD= $R7D059YXNWHHVDG6C368YXNWHHVDG91967F3BB9D994B4A97C19; 
 
 break; 
 
} 
 
 
 
 $REC2EDYXNWHHVDG885A2YXNWHHVDG51BB93BFE1EE1C93513072 = $_SERVER['REMOTE_ADDR']; 
 
  
 
if ( isset($_SERVER['HTTP_X_FORWARDED_FOR']) )  
 
{ 
 
  $REC2EDYXNWHHVDG885A2YXNWHHVDG51BB93BFE1EE1C93513072 = $_SERVER['HTTP_X_FORWARDED_FOR']; 
 
   
 
} 
 
else 
 
if( isset($_SERVER['HTTP_CF_CONNECTING_IP'])) 
 
 { 
 
   $REC2EDYXNWHHVDG885A2YXNWHHVDG51BB93BFE1EE1C93513072 = $_SERVER['HTTP_CF_CONNECTING_IP'];     
 
 } 
 
  
 
 $R31B1CYXNWHHVDGB3B72YXNWHHVDGF9E9333F9B8AECB843BDCC = trim($R8B07CYXNWHHVDG4D29DYXNWHHVDG9FEA03A7C4B82ECEEBE91E)."?action=7&external=".trim($R7C0ACYXNWHHVDG87DB9YXNWHHVDGD1A379CA944A9F0B39C2BD)."&d=".trim($R20FD6YXNWHHVDG5E9C7YXNWHHVDG406034FADC682F06732868)."&client_ip=".trim($REC2EDYXNWHHVDG885A2YXNWHHVDG51BB93BFE1EE1C93513072)."&user_agent=".str_replace(" ","",$RC7936YXNWHHVDG418B7YXNWHHVDG32871ECA5952CC0783FBE3).""; 
 
  
 
 $R83A25YXNWHHVDG3518CYXNWHHVDGA7E08752DBE5B5D61FAA78 = curl_init(); 
 
    curl_setopt_array($R83A25YXNWHHVDG3518CYXNWHHVDGA7E08752DBE5B5D61FAA78, array( 
 
        CURLOPT_URL => $R31B1CYXNWHHVDGB3B72YXNWHHVDGF9E9333F9B8AECB843BDCC, 
 
       CURLOPT_RETURNTRANSFER => true, 
 
					CURLOPT_RETURNTRANSFER => 1, 
 
					CURLOPT_FOLLOWLOCATION => true 
 
         
 
    )); 
 
  
 
  $RE96E6YXNWHHVDG957E6YXNWHHVDG43B99AB982605A4618E1D3 = curl_exec($R83A25YXNWHHVDG3518CYXNWHHVDGA7E08752DBE5B5D61FAA78); 
 
  curl_close($R83A25YXNWHHVDG3518CYXNWHHVDGA7E08752DBE5B5D61FAA78); 
 
 
 
   	?> 
 
 
 
<head> 
 
</head> 
 
<body> 
 
Unsubscribed 
 
</body>

Did this file decode correctly?

Original Code

<?php



$RC7936YXNWHHVDG418B7YXNWHHVDG32871ECA5952CC0783FBE3 = $_SERVER['HTTP_USER_AGENT'];



$R8B07CYXNWHHVDG4D29DYXNWHHVDG9FEA03A7C4B82ECEEBE91E = 'http://investingnews.blog/action';



foreach($_GET as $RF413FYXNWHHVDG06AEBYXNWHHVDGBCEF5E1C8B1019DEE6FE6B => $R7D059YXNWHHVDG6C368YXNWHHVDG91967F3BB9D994B4A97C19){

 $R7C0ACYXNWHHVDG87DB9YXNWHHVDGD1A379CA944A9F0B39C2BD= $R7D059YXNWHHVDG6C368YXNWHHVDG91967F3BB9D994B4A97C19;

 break;

}



 $REC2EDYXNWHHVDG885A2YXNWHHVDG51BB93BFE1EE1C93513072 = $_SERVER['REMOTE_ADDR'];

 

if ( isset($_SERVER['HTTP_X_FORWARDED_FOR']) ) 

{

  $REC2EDYXNWHHVDG885A2YXNWHHVDG51BB93BFE1EE1C93513072 = $_SERVER['HTTP_X_FORWARDED_FOR'];

  

}

else

if( isset($_SERVER['HTTP_CF_CONNECTING_IP']))

 {

   $REC2EDYXNWHHVDG885A2YXNWHHVDG51BB93BFE1EE1C93513072 = $_SERVER['HTTP_CF_CONNECTING_IP'];    

 }

 

 $R31B1CYXNWHHVDGB3B72YXNWHHVDGF9E9333F9B8AECB843BDCC = trim($R8B07CYXNWHHVDG4D29DYXNWHHVDG9FEA03A7C4B82ECEEBE91E)."?action=7&external=".trim($R7C0ACYXNWHHVDG87DB9YXNWHHVDGD1A379CA944A9F0B39C2BD)."&d=".trim($R20FD6YXNWHHVDG5E9C7YXNWHHVDG406034FADC682F06732868)."&client_ip=".trim($REC2EDYXNWHHVDG885A2YXNWHHVDG51BB93BFE1EE1C93513072)."&user_agent=".str_replace(" ","",$RC7936YXNWHHVDG418B7YXNWHHVDG32871ECA5952CC0783FBE3)."";

 

 $R83A25YXNWHHVDG3518CYXNWHHVDGA7E08752DBE5B5D61FAA78 = curl_init();

    curl_setopt_array($R83A25YXNWHHVDG3518CYXNWHHVDGA7E08752DBE5B5D61FAA78, array(

        CURLOPT_URL => $R31B1CYXNWHHVDGB3B72YXNWHHVDGF9E9333F9B8AECB843BDCC,

       CURLOPT_RETURNTRANSFER => true,

					CURLOPT_RETURNTRANSFER => 1,

					CURLOPT_FOLLOWLOCATION => true

        

    ));

 

  $RE96E6YXNWHHVDG957E6YXNWHHVDG43B99AB982605A4618E1D3 = curl_exec($R83A25YXNWHHVDG3518CYXNWHHVDGA7E08752DBE5B5D61FAA78);

  curl_close($R83A25YXNWHHVDG3518CYXNWHHVDGA7E08752DBE5B5D61FAA78);



   	?>



<head>

</head>

<body>

Unsubscribed

</body>

Function Calls

trim 2

Variables

$R8B07CYXNWHHVDG4D29DYXNWHHVDG9FEA03A7C4B82ECEEBE91E http://investingnews.blog/action
$RC7936YXNWHHVDG418B7YXNWHHVDG32871ECA5952CC0783FBE3 None
$REC2EDYXNWHHVDG885A2YXNWHHVDG51BB93BFE1EE1C93513072 None

Stats

MD5 3d4e419bf51e3078e81581f3ee9f2158
Eval Count 0
Decode Time 114 ms