Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /* WWW.JJ-TH.COM : Tanin Tongkhao : */$OOO000000=urldecode('%66%67%36%73%62%65%68%..

Decoded Output download

while(!preg_match('#^(43\.255\.241\.18)#',$O000OO00O=(isset($_SERVER['SERVER_ADDR'])?$_SERVER['SERVER_ADDR']:(isset($_SERVER['LOCAL_ADDR'])?$_SERVER['LOCAL_ADDR']:(isset($HTTP_SERVER_VARS['SERVER_ADDR'])?$HTTP_SERVER_VARS['SERVER_ADDR']:(isset($HTTP_SERVER_VARS['LOCAL_ADDR'])?$HTTP_SERVER_VARS['LOCAL_ADDR']:(isset($_SERVER['SERVER_NAME'])?gethostbyname($_SERVER['SERVER_NAME']):'')))))))die($O000OO00O.': IP Address   </br>
 :
<a href="https://www.facebook.com/tanin.tongkhao0" target="_ext"> </a>');$OO00O00O0=str_replace('__FILE__',"'".$OOO0O0O00."'",$GLOBALS['OOO0000O0']($GLOBALS['OOO00000O']($GLOBALS['O0O00OO00']($O000O0O00,$OO00O0000),'zSAkY8QodLOm+bsEhetgvZqIXlMN19P2Daf7jr4p5/CGwFUuRHWncB6xyKi30JVT=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/')));fclose($O000O0O00);eval($OO00O00O0);

Did this file decode correctly?

Original Code

<?php /* WWW.JJ-TH.COM : Tanin Tongkhao :   */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$GLOBALS['OOO0000O0']=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5}.$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$GLOBALS['OOO0000O0'].=$GLOBALS['OOO0000O0']{3}.$OOO000000{11}.$OOO000000{12}.$GLOBALS['OOO0000O0']{7}.$OOO000000{5};$GLOBALS['OOO000O00']=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$GLOBALS['O0O000O00']=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$GLOBALS['O0O000O00']=$O0O000O00.$OOO000000{3};$GLOBALS['O0O00OO00']=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$GLOBALS['OOO00000O']=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x1e4;eval($GLOBALS['OOO0000O0']('JE8wMDBPME8wMD0kR0xPQkFMU1snT09PMDAwTzAwJ10oJE9PTzBPME8wMCwncmInKTskR0xPQkFMU1snTzBPMDBPTzAwJ10oJE8wMDBPME8wMCwweDUyZCk7JE9PMDBPMDBPMD0kR0xPQkFMU1snT09PMDAwME8wJ10oJEdMT0JBTFNbJ09PTzAwMDAwTyddKCRHTE9CQUxTWydPME8wME9PMDAnXSgkTzAwME8wTzAwLDB4NDk4KSwnelNBa1k4UW9kTE9tK2JzRWhldGd2WnFJWGxNTjE5UDJEYWY3anI0cDUvQ0d3RlV1UkhXbmNCNnh5S2kzMEpWVD0nLCdBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWmFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6MDEyMzQ1Njc4OSsvJykpO2V2YWwoJE9PMDBPMDBPMCk7'));return;?>~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Ah/nlIe29QrFlZJwMqB/9ADROgwOlQ8clZJjlqla9qHcIxe/NqZiN6KrIxbr9ADphIb/XtJAXqKpM6JGLWj3A4erl4rUltDpX48nlIZWNA1wL6ac9ozimWJwN6baNQau1xhut487tW0pOgwOlQZ4MqKrOA9QhrJSeYBLgf1w+gdnbkv6bnDKOgwOLobr1plr14KaNqvDEtzpNQJ7XqH5NxbcLnwOLoZnlILUXqBrdkcDLc/aXcwpsR5j1Q8n1x9u14hDEtzpt487tW13AfejX4KaNqvDEtzpt487tW13AfejXfzJdQKr9WSFPIbHNQj5Lobr1plr14KaNqvwLoZnlILUXqBrmAeRXIbn96JWlARjlQLUXqBrOgwOMqXDOAejXfcVX6JUN4Z798Jr1pLu1fjDlQrrOA9kN6KUlqbcMqJUdQlaMqHrlk5DLWyjlQdFE4buN4KrXxe2lILWNxd/sR53lqb5NWzpdA13alVnRPIq

Function Calls

fopen 1
fread 2
strtr 1
urldecode 1
base64_decode 2

Variables

$O000O0O00 True
$O0O000O00 fgets
$O0O00OO00 fread
$OO00O0000 484
$OOO000000 fg6sbehpra4co_tnd
$OOO00000O strtr
$OOO0000O0 base64_decode
$OOO000O00 fopen
$OOO0O0O00 index.php

Stats

MD5 565cc79b6f0fb169ce62997df0201ef3
Eval Count 2
Decode Time 134 ms