Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $_F=__FILE__;$_X='Pz48Pw0KczVzczQybl9zdDFydCgpOw0KaDUxZDVyICgnQzJudDVudC10eXA1OiB0NX..

Decoded Output download

?><?
session_start();
header ('Content-type: text/html; charset=utf-8');
require_once('class.cutrue.php');
require_once("ts3admin.class.php");

if ($_SESSION[account_id]=="" or $_SESSION[id]<>session_id()) {
	echo "&#3585;&#3619;&#3640;&#3603;&#3634;&#3621;&#3655;&#3629;&#3588;&#3629;&#3636;&#3609;&#3585;&#3656;&#3629;&#3609;&#3607;&#3635;&#3619;&#3634;&#3618;&#3585;&#3634;&#3619;";
	exit;
}

$sql = "select * from $db.user_server where id='$_SESSION[ssid]'";
//echo $sql;
$query = mysql_query($sql);
$row = mysql_fetch_array($query);
$td = date("Y-m-d");

$sql4 = "select * from $db.server where id='$row[server]'";
$query4 = mysql_query($sql4);
while ($row4=mysql_fetch_array($query4)) {
	if (($row4[server_slot]-$row4[server_slot_used])>$server_slot_add){
		$server = $row4[id];
		$ts3_ip = $row4[server_ip];
		$ts3_queryport = $row4[server_port];
		$ts3_user = $row4[server_admin];
		$ts3_pass = $row4[server_pass];
		break;
	}
}

#build a new ts3admin object

$tsAdmin = new ts3admin($ts3_ip, $ts3_queryport);
if($tsAdmin->getElement('success', $tsAdmin->connect())) {
	#login as serveradmin
	$tsAdmin->login($ts3_user, $ts3_pass);
}
	$sglist = $tsAdmin->selectServer($row[port]);	
	//print_r($sglist);
$svm = 'Notice From ';
$tsAdmin->setName($svm.$row[dns].".".$row[dnss]);
$tsAdmin->sendMessage(3, '$row4[server_id]',$_POST["svmsg"]);





		//alertMSG('&#3607;&#3635;&#3619;&#3634;&#3618;&#3585;&#3634;&#3619; &#3648;&#3619;&#3637;&#3618;&#3610;&#3619;&#3657;&#3629;&#3618;&#3649;&#3621;&#3657;&#3623;');
	



function alertMSG($msg) {
	//echo "<script>alert('".$msg."');</script>";
	echo '<IFRAME src=./cronjob.php width="0" height="0" frameborder=0 scrolling=no>
</IFRAME>';
	echo '<meta http-equiv="refresh" content="0;URL=./rest.php?go=msg">';
	exit;
}
echo '<meta http-equiv="refresh" content="0;URL=./rest.php?go=msg">';
?>

Did this file decode correctly?

Original Code

<?php $_F=__FILE__;$_X='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';eval(base64_decode('JF9YPWJhc2U2NF9kZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCcxMjM0NTZhb3VpZScsJ2FvdWllMTIzNDU2Jyk7JF9SPWVyZWdfcmVwbGFjZSgnX19GSUxFX18nLCInIi4kX0YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRfWD0wOw=='));?>

Function Calls

strtr 1
ereg_replace 1
base64_decode 2

Variables

$_F index.php
$_R 0
$_X 0

Stats

MD5 4d58633d630e7397bc98461cb9a1c631
Eval Count 2
Decode Time 60 ms