Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
?><?php $_F=__FILE__;$_X='PzJdP3Nicw1ydyoNcnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2..
Decoded Output download
?><?php
/*
=====================================================
DataLife Engine - by SoftNews Media Group
-----------------------------------------------------
http://dle-news.ru/
-----------------------------------------------------
Copyright (c) 2004-2018 SoftNews Media Group
=====================================================
This code is protected by copyright
=====================================================
File: go.php
-----------------------------------------------------
Use: Forwarding links
=====================================================
*/
function reset_url($url) {
$value = str_replace ( "http://", "", $url );
$value = str_replace ( "https://", "", $value );
$value = str_replace ( "www.", "", $value );
$value = explode ( "/", $value );
$value = reset ( $value );
return $value;
}
$url = rawurldecode ( (string)$_GET['url'] );
$url = base64_decode ( $url );
$url = html_entity_decode($url, ENT_QUOTES, "ISO-8859-1");
$url = str_replace("
", "", $url);
$url = str_replace("
", "", $url);
$url = htmlspecialchars( strip_tags($url), ENT_QUOTES, "ISO-8859-1" );
$url = str_replace ( "&", "&", $url );
$url = preg_replace( "/javascript:/i", "jаvascript:", $url );
$url = preg_replace( "/data:/i", "dаtа:", $url );
if( !preg_match( "#^(http|https)://#", $url ) ) {
$url = 'http://' . $url;
}
if( stripos( $url, "go.php" ) !== false OR stripos( $url, "do=go" ) !== false) {
header( "HTTP/1.1 403 Forbidden" );
header ( 'Location: /' );
die ( "Access denied!!!" );
}
$_SERVER['HTTP_REFERER'] = reset_url ( $_SERVER['HTTP_REFERER'] );
$_SERVER['HTTP_HOST'] = reset_url ( $_SERVER['HTTP_HOST'] );
if (($_SERVER['HTTP_HOST'] != $_SERVER['HTTP_REFERER']) OR !$url) {
header( "HTTP/1.1 403 Forbidden" );
header ( 'Location: /' );
die ( "Access denied!!!" );
}
@header('X-XSS-Protection: 1; mode=block');
@header('Referrer-Policy: no-referrer');
@header('Location: ' . $url );
die ( "Link Redirect" );
?>
Did this file decode correctly?
Original Code
?><?php $_F=__FILE__;$_X='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';$_D=strrev('edoced_46esab');eval($_D('JF9YPWJhc2U2NF9kZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCcKcEdzVHpnIE5SL1EyaXQ3PFoxNXhJRmhqLnVNRUp7OVVPTH1uRGFZa1YzbUhyXW9QYnFmZThLeTZ2Y1hkbEI0U0E+MENXPVt3JywnT3FRcGx1UFR6S0xrPiB4ODNvV2ZpakF5Rn1JdjU2OVpOVjRzY0UwVS5tdF1YCjxZN2gySFNhR2cxPXJ3Q1t7bkpkTWVEYlJCLycpOyRfUj1zdHJfcmVwbGFjZSgnX19GSUxFX18nLCInIi4kX0YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRfWD0wOw=='));?>
Function Calls
| strtr | 1 |
| strrev | 1 |
| str_replace | 1 |
| base64_decode | 2 |
Stats
| MD5 | 667d8350c492f28656ff9f448a842617 |
| Eval Count | 2 |
| Decode Time | 118 ms |