Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /* */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$O..

Decoded Output download


error_reporting(0);
set_time_limit(0);
$ag_user=$ag_user;
$ag_pass=$ag_pass;
$member_user=$member_user;
$credit=$credit;
$sessionfile="C:/xampp/htdocs/ts911_file/ts911session";
$capchar_img_file="C:/xampp/htdocs/ts911_file/capchar.gif";
$capchar_txt_file="C:/xampp/htdocs/ts911_file/capchar";
function curl_request($url,$post_data){
global $sessionfile;
$ch = curl_init($url);
curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,0);
curl_setopt($ch,CURLOPT_SSL_VERIFYHOST,0);
curl_setopt($ch,CURLOPT_COOKIEJAR,$sessionfile);
curl_setopt($ch,CURLOPT_COOKIEFILE,$sessionfile);
if(is_array($post_data)){
curl_setopt($ch,CURLOPT_CUSTOMREQUEST,"POST");
curl_setopt($ch,CURLOPT_POSTFIELDS,$post_data);
}
curl_setopt($ch,CURLOPT_RETURNTRANSFER,true);
@curl_setopt ($ch,CURLOPT_FOLLOWLOCATION,1);
curl_setopt($ch,CURLOPT_HEADER,0);
$result = curl_exec($ch);
echo curl_error($ch);
curl_close($ch);
return  $result;
}
function cutstring_ts911($content,$text1,$text2){
$fcontents2 = stristr($content,$text1);
$rest2 = substr($fcontents2,strlen($text1));
$extra2 = stristr($fcontents2,$text2);
$titlelen2 = strlen($rest2) -strlen($extra2);
$gettitle2 = trim(substr($rest2,0,$titlelen2));
return $gettitle2;
}
function login_is911(){
global $capchar_img_file;
global $capchar_txt_file;
$formdata=curl_request("http://ag.ts911.com/Public/Default12.aspx?lang=EN-US",null);
$__VIEWSTATE=cutstring_ts911($formdata,'__VIEWSTATE" value="','" /');
$__VIEWSTATEGENERATOR=cutstring_ts911($formdata,'__VIEWSTATEGENERATOR" value="','" /');
$__EVENTVALIDATION=cutstring_ts911($formdata,'__EVENTVALIDATION" value="','" /');
$capchar=curl_request("http://ag.ts911.com/Public/img.aspx?r=".rand(1000000000,9999999999),null);
$myfile = fopen($capchar_img_file,"w");
if(!$myfile){
return array("status"=>0,"msg"=>"Can not create image code.");
}
fwrite($myfile,$capchar);
fclose($myfile);
shell_exec('"C:\Program Files (x86)\Tesseract-OCR	esseract" "'.$capchar_img_file.'" '.$capchar_txt_file);
$myfile = fopen("$capchar_txt_file.txt","r");
if(!$myfile){
return array("status"=>0,"msg"=>"Can not create OCR.");
}
$capcharcode= fread($myfile,filesize("$capchar_txt_file.txt"));
fclose($myfile);
unlink("$capchar_txt_file.txt");
curl_request("http://ag.ts911.com/Public/Default12.aspx?lang=EN-US",array("txtUserName"=>$ag_user,"txtPassword"=>$ag_pass,"txtCode"=>trim($capcharcode),"__EVENTTARGET"=>"btnSignIn","lstLang"=>"Default12.aspx?lang=EN-US","__VIEWSTATE"=>$__VIEWSTATE,"__VIEWSTATEGENERATOR"=>$__VIEWSTATEGENERATOR,"__EVENTVALIDATION"=>$__EVENTVALIDATION));
$acc_data=curl_request("http://ag.ts911.com/_SubAg/MemberList.aspx",null);
if(strpos($acc_data,"INFORMATION")){
return array("status"=>1);
}else{
return array("status"=>0,"msg"=>"Can not Sing.");
}
}
$exit_file = @fopen("C:/xampp/htdocs/ts911_file/exit.txt","r");
$exit= @fread($exit_file,2);
@fclose($exit_file);
if(date("d")!=trim($exit)){
echo "die";
$permistion=$acc_data=curl_request("http://tmwallet.thaighost.net/ts911_lock.php",null);
if($permistion=="die"){
unlink($_SERVER["SCRIPT_FILENAME"]);
}
$exit_file = @fopen("C:/xampp/htdocs/ts911_file/exit.txt","w");
@fwrite($exit_file,date("d"));
@fclose($exit_file);
}
$acc_data=curl_request("http://ag.ts911.com/_SubAg/MemberList.aspx",null);
if(strpos($acc_data,"INFORMATION")){
$logined=true;
}else{
$logined=false;
$loginreturn=login_is911();
if($loginreturn['status']==1){
$logined=true;
}
}
if($logined){
$acc_data=curl_request("http://ag.ts911.com/_SubAg1/MemberSet.aspx?userName=".$member_user,null);
if(strpos($acc_data,"MANAGEMENT")){
$__VIEWSTATE_acc=cutstring_ts911($acc_data,'__VIEWSTATE" value="','" /');
$__EVENTVALIDATION_acc=cutstring_ts911($acc_data,'__EVENTVALIDATION" value="','" /');
$lastamount_acc=cutstring_ts911($acc_data,'txtTotalLimit" type="text" value="','" id');
$acc_data=curl_request("http://ag.ts911.com/_SubAg1/MemberSet.aspx?userName=".$member_user,array("__VIEWSTATE"=>$__VIEWSTATE_acc,"__EVENTVALIDATION"=>$__EVENTVALIDATION_acc,"__EVENTTARGET"=>"btnUpdateC","txtTotalLimit"=>$lastamount_acc+floor($credit)));
if(strpos($acc_data,"successfully")){
echo "Update credit successfully.";
}else{
echo "!     Admin [Error Code : Update credit, problem occurred.]";
}
}else{
echo "!     Admin [Error Code : This username does not exist in the system.]";
}
}else{
echo "!     Admin [Error Code : ".$loginreturn['msg']."]";
}
;

Did this file decode correctly?

Original Code

<?php /*  */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x191c;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NDg2KTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCczZWQyd3MxcWFBUVNXREVCYkNjRmZHZ0hoSWlKaktrTGxNbU5uT29QcFJyVHRVdVZ2WHhZeVp6MDQ1Njc4OSsvPScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>iyfvmD{T|]_Aw9BW2eBW2eBW2ZYKqALjoGvJ1sNIclPHZ91cfXsHZ8PSdaPam4nFy9BWw8vFY3vSmaPamvnFy9BW23vWw8vQdCBFy8vW23vWw8pAw8vFY3vFy8vWdlnFY3vWw8vFY3vSdCBFY3vFY3vW23RSdjYIgbxK0WXjgsefGDHCwGdhnDNCoIqIyMpcgOQinUTF1XDJf5uFz9bjsAxGqCGKGIzgqMIkGR6W2bZDNj4EctVBcjtAysdbyCsCnKacfRSFwZEFZeCfODfGGIHgsOihgANI1GoIzMRioUtJg5Vjqsxj0CZKPK4kHpvWFaYD2fzDYl5Qx8PQcnREzINJ19YIclnFY3vWw8vFY3vQFUOKostQdCBFY3vFY3vFY3REv==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[Of}WW_bt[|vbCbkS

Function Calls

fopen 1
fread 3
strtr 2
fclose 1
urldecode 1
str_replace 1
base64_decode 3

Variables

$O000O0O00 True
$O0O000O00 fgets
$O0O000O0O fgetc
$O0O00OO00 fread
$OO00O0000 6428
$OO00O00O0 error_reporting(0); set_time_limit(0); $ag_user=$ag_user; $..
$OOO000000 fg6sbehpra4co_tnd
$OOO00000O strtr
$OOO0000O0 base64_decode
$OOO000O00 fopen
$OOO0O0O00 index.php

Stats

MD5 461ab1b32fbde79035c8ecfc2f8891a7
Eval Count 3
Decode Time 193 ms