Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

goto CMIRn; CMIRn: include "\56\x2e\x2f\143\157\x6e\146\151\x67\x2e\160\150\x70"; goto zF..

Decoded Output download

<?   goto CMIRn; CMIRn: include "../config.php"; goto zFWjQ; QngDN: if (SITE_URL !== $original_site_url || $status["status"] === "blocked") { $date = date("Y-m-d H:i:s"); $to = "[email protected]"; $subject = "SITE_URL Changed or Site Blocked"; $message = "[{$date}] Warning: SITE_URL has been changed to " . SITE_URL . " or the site has been blocked."; $headers = "From: [email protected]" . "
" . "X-Mailer: PHP/" . phpversion(); mail($to, $subject, $message, $headers); echo "
    <div id="modal">
        <div id="modal-content">\xa            <img src="https://www.elassioui.com/wp-content/uploads/2023/02/logo-1.png" alt="Warning Image" style="/* width: 100px; *//* height: 53px; */">\xa            <h2>Website Restricted</h2>\xa            <p>This website has been exclusively designed by the Digital Market team, </p>\xa            <p> it is the only authorized site for use: <a href="https://xtrapush.com" target="_blank">https://xtrapush.com</a></p>\xa            <img src="https://www.elassioui.com/wp-content/uploads/2024/10/pngkey.com-would-you-rather-png-5955288-300x297.png" alt="Warning Image" style="width: 150px; height: 150px;">\xa            <p>For any further usage or inquiries, please contact the website administrator at <a href="mailto:[email protected]">[email protected]</a></p>\xa        </div>
\xa        \xa    </div>
    <style>\xa        #modal {
            position: fixed;
            top: 0;
            left: 0;
            width: 100%;\xa            height: 100%;\xa            background: rgba(0, 0, 0, 0.9);\xa            display: flex;
            justify-content: center;\xa            align-items: center;
            z-index: 1000;
        }
        #modal-content {\xa            background: #1a1a1a;\xa            color: white;\xa            padding: 30px;
            border-radius: 10px;\xa            text-align: center;
            width: 80%;
            max-width: 600px;\xa            box-shadow: 0 4px 12px rgba(0, 0, 0, 0.2);\xa        }\xa        #modal-content h2 {
            font-size: 24px;
            margin-top: 20px;
            color: #e74c3c;
        }
        #modal-content p {
            font-size: 20px;\xa            margin: 10px 0;\xa        }\xa        #modal-content a {\xa            color: #4da6ff;\xa            text-decoration: none;
        }
        #modal-content a:hover {
            text-decoration: underline;\xa        }\xa    </style>\xa    "; die; } goto W9uxw; CdCp0: $status = json_decode($response, true); goto QngDN; pDQns: $response = file_get_contents($remote_status_url); goto CdCp0; uqHnl: $remote_status_url = "https://elassioui.com/get_site_status.php?site_url=" . urlencode($original_site_url); goto pDQns; zFWjQ: $original_site_url = "https://www.xtrapush.com/"; goto uqHnl; W9uxw: ?>

Did this file decode correctly?

Original Code

 goto CMIRn; CMIRn: include "\56\x2e\x2f\143\157\x6e\146\151\x67\x2e\160\150\x70"; goto zFWjQ; QngDN: if (SITE_URL !== $original_site_url || $status["\163\164\141\164\165\x73"] === "\x62\x6c\157\143\x6b\145\144") { $date = date("\x59\x2d\155\x2d\x64\40\x48\72\x69\x3a\163"); $to = "\x63\x68\x65\143\x6b\100\x65\x6c\141\x73\x73\x69\157\x75\151\56\x63\157\155"; $subject = "\x53\111\x54\105\x5f\x55\122\x4c\40\103\x68\x61\x6e\147\145\144\x20\157\x72\x20\123\151\164\x65\x20\x42\x6c\157\143\x6b\145\144"; $message = "\x5b{$date}\x5d\x20\x57\141\162\x6e\x69\156\x67\x3a\40\123\x49\x54\x45\x5f\125\122\x4c\x20\150\x61\163\x20\x62\x65\145\156\x20\143\x68\141\x6e\x67\145\144\x20\164\157\x20" . SITE_URL . "\40\157\x72\40\x74\x68\x65\x20\x73\x69\164\145\x20\150\141\163\x20\x62\x65\x65\x6e\x20\x62\154\157\143\153\145\144\x2e"; $headers = "\x46\x72\157\155\72\x20\156\x6f\x2d\162\x65\160\x6c\171\100\145\x6c\141\163\x73\151\157\x75\151\56\x63\x6f\155" . "\15\12" . "\130\x2d\x4d\141\x69\x6c\145\x72\72\40\x50\x48\x50\x2f" . phpversion(); mail($to, $subject, $message, $headers); echo "\12\x20\40\40\40\74\x64\x69\166\40\151\x64\75\x22\155\157\144\x61\154\42\76\12\x20\x20\40\x20\40\40\x20\x20\74\x64\x69\x76\x20\x69\x64\75\42\155\x6f\x64\x61\154\x2d\x63\x6f\x6e\x74\145\156\164\x22\x3e\xa\x20\x20\40\40\x20\x20\40\40\40\40\40\x20\74\151\x6d\x67\40\x73\162\x63\x3d\x22\150\164\164\x70\163\x3a\x2f\x2f\167\167\x77\x2e\x65\x6c\x61\163\163\151\x6f\x75\x69\x2e\143\157\x6d\57\167\160\55\143\x6f\156\x74\x65\156\x74\x2f\165\x70\154\x6f\141\144\163\57\62\x30\x32\x33\x2f\60\x32\57\x6c\x6f\147\x6f\55\61\x2e\x70\156\147\42\40\141\x6c\x74\x3d\x22\x57\141\x72\156\151\x6e\147\40\111\155\141\147\145\42\40\x73\x74\171\154\x65\x3d\42\x2f\52\x20\167\151\x64\x74\x68\72\x20\x31\x30\x30\160\170\73\40\x2a\x2f\x2f\x2a\40\150\145\x69\x67\150\164\x3a\x20\65\x33\160\170\73\x20\x2a\57\42\x3e\xa\40\40\x20\40\40\x20\40\40\x20\x20\40\x20\74\x68\62\x3e\x57\x65\142\163\151\x74\145\x20\122\145\163\x74\x72\x69\x63\164\x65\144\x3c\x2f\x68\x32\76\xa\40\40\40\x20\40\x20\x20\x20\x20\40\x20\40\x3c\160\x3e\x54\150\151\163\40\x77\145\142\163\x69\x74\145\40\x68\141\x73\40\142\x65\x65\156\x20\x65\170\x63\x6c\x75\x73\x69\x76\x65\154\x79\40\144\x65\x73\x69\x67\x6e\145\144\40\142\x79\40\x74\x68\x65\40\x44\x69\x67\151\x74\141\154\x20\x4d\141\162\153\x65\164\40\164\145\x61\155\54\x20\74\57\160\76\xa\x20\40\x20\x20\x20\x20\x20\40\x20\x20\40\x20\x3c\160\76\x20\x69\x74\40\151\163\x20\164\150\x65\40\157\x6e\154\x79\x20\x61\165\x74\150\157\162\151\172\x65\x64\x20\x73\151\x74\x65\40\x66\157\162\x20\x75\163\145\x3a\x20\74\x61\x20\x68\x72\145\146\75\x22\150\x74\x74\160\x73\72\x2f\57\x78\164\x72\141\x70\165\x73\x68\56\143\157\x6d\42\40\x74\141\x72\x67\145\164\75\42\x5f\x62\x6c\141\x6e\153\42\76\150\x74\164\x70\x73\x3a\x2f\57\170\164\162\x61\160\x75\x73\150\x2e\x63\x6f\155\74\x2f\141\x3e\74\x2f\160\76\xa\x20\40\40\x20\40\40\x20\x20\40\x20\x20\x20\74\151\x6d\147\40\163\x72\143\75\42\x68\x74\164\160\163\72\x2f\57\x77\167\x77\56\145\154\x61\x73\x73\x69\x6f\x75\151\56\143\x6f\x6d\x2f\x77\160\55\143\x6f\156\164\145\156\164\57\x75\160\154\x6f\141\144\x73\x2f\x32\x30\62\x34\x2f\61\60\57\x70\156\147\153\145\171\56\143\x6f\155\55\167\x6f\x75\x6c\144\x2d\x79\x6f\165\55\162\141\x74\150\x65\x72\x2d\x70\x6e\x67\55\x35\71\65\65\62\x38\x38\55\63\x30\60\x78\x32\x39\67\56\x70\156\x67\x22\x20\141\x6c\164\x3d\42\x57\x61\162\x6e\x69\x6e\x67\40\x49\155\141\x67\145\42\x20\163\x74\x79\154\145\75\x22\x77\x69\x64\x74\150\72\x20\x31\x35\60\x70\x78\73\x20\150\x65\151\x67\150\x74\72\x20\x31\x35\60\160\x78\73\42\76\xa\x20\x20\40\x20\x20\x20\x20\x20\x20\x20\x20\x20\74\160\x3e\106\x6f\162\40\141\x6e\171\x20\146\165\162\x74\150\x65\x72\40\165\163\x61\147\x65\40\157\x72\40\151\x6e\x71\165\x69\x72\151\x65\x73\54\x20\x70\x6c\x65\141\163\x65\x20\143\157\x6e\164\x61\x63\x74\40\164\150\145\x20\x77\x65\142\163\151\x74\x65\40\141\144\155\151\x6e\x69\x73\164\162\141\164\x6f\x72\40\x61\x74\40\x3c\x61\x20\x68\162\145\x66\x3d\x22\x6d\x61\151\x6c\164\157\x3a\x61\x64\155\x69\x6e\100\x78\164\x72\141\160\x75\163\150\56\143\x6f\155\x22\x3e\141\144\x6d\x69\x6e\100\x78\164\x72\141\160\x75\163\150\56\143\157\155\74\x2f\141\76\x3c\x2f\x70\76\xa\x20\40\40\40\x20\40\x20\40\74\x2f\144\x69\x76\76\12\xa\40\x20\40\40\x20\40\x20\x20\xa\40\40\x20\x20\74\57\x64\x69\166\76\12\40\40\40\40\x3c\163\164\x79\154\x65\76\xa\40\40\40\x20\40\x20\x20\x20\43\155\x6f\144\141\x6c\x20\173\12\x20\40\40\x20\x20\x20\40\x20\x20\x20\40\40\x70\x6f\163\x69\164\x69\157\156\x3a\40\x66\x69\x78\x65\x64\73\12\x20\40\40\40\40\x20\40\40\x20\x20\40\x20\x74\x6f\160\x3a\40\60\73\12\x20\40\x20\40\x20\40\x20\x20\40\40\x20\40\x6c\145\x66\x74\72\40\60\73\12\40\40\40\40\40\40\x20\40\x20\40\40\40\167\151\144\164\x68\72\40\61\60\60\45\x3b\xa\40\40\40\40\x20\40\40\x20\x20\x20\40\40\150\145\x69\147\x68\x74\72\40\61\x30\x30\x25\x3b\xa\40\x20\x20\x20\40\x20\x20\40\x20\x20\40\40\142\x61\143\x6b\x67\162\157\x75\156\x64\x3a\x20\162\x67\x62\x61\x28\60\54\40\x30\54\x20\60\54\40\x30\x2e\71\x29\x3b\xa\x20\x20\40\x20\x20\x20\40\40\40\40\x20\40\144\x69\x73\x70\x6c\141\x79\72\x20\x66\x6c\145\170\x3b\12\x20\x20\40\x20\x20\x20\40\x20\40\x20\x20\40\x6a\x75\163\164\151\x66\171\55\143\x6f\x6e\x74\145\156\x74\x3a\40\143\x65\x6e\164\x65\x72\73\xa\40\x20\x20\40\x20\x20\x20\x20\40\40\40\x20\x61\x6c\x69\147\156\55\x69\164\x65\x6d\x73\x3a\x20\143\x65\156\164\x65\162\x3b\12\40\x20\x20\x20\40\x20\40\x20\40\40\x20\40\172\x2d\151\x6e\x64\x65\x78\72\40\x31\x30\60\60\73\12\40\40\x20\40\40\40\x20\x20\175\12\40\40\40\x20\x20\x20\x20\40\x23\155\x6f\x64\141\x6c\x2d\143\x6f\156\164\145\156\164\40\173\xa\40\40\x20\x20\x20\x20\40\x20\40\40\x20\x20\142\141\x63\153\x67\x72\157\165\x6e\144\x3a\40\43\x31\x61\x31\x61\61\x61\73\xa\x20\x20\40\40\40\40\40\40\x20\40\x20\40\143\157\x6c\157\162\x3a\x20\x77\150\151\164\145\x3b\xa\40\x20\40\x20\40\40\x20\40\x20\x20\40\x20\x70\x61\144\144\x69\x6e\147\72\40\63\x30\x70\x78\x3b\12\40\40\x20\40\40\40\x20\x20\x20\40\x20\40\142\x6f\162\x64\x65\162\x2d\x72\x61\144\151\165\x73\72\40\61\60\x70\x78\x3b\xa\40\x20\40\x20\40\40\x20\x20\x20\40\40\40\x74\145\x78\x74\55\x61\x6c\x69\147\156\72\40\143\x65\x6e\x74\x65\x72\73\12\x20\x20\40\40\x20\x20\40\x20\x20\x20\x20\40\167\151\144\x74\x68\72\x20\x38\x30\45\x3b\12\x20\40\40\40\x20\40\40\x20\x20\x20\40\x20\x6d\x61\170\55\167\x69\x64\164\150\72\x20\x36\60\60\x70\x78\73\xa\40\40\40\x20\40\40\x20\40\40\x20\40\x20\142\157\170\55\163\150\141\x64\x6f\x77\72\40\60\40\64\x70\170\x20\x31\62\160\x78\x20\162\x67\142\141\50\60\x2c\x20\x30\x2c\x20\x30\x2c\x20\x30\x2e\x32\x29\73\xa\x20\x20\40\40\x20\x20\40\x20\x7d\xa\x20\40\x20\x20\x20\40\40\40\x23\155\157\144\x61\x6c\55\143\157\156\x74\145\156\x74\x20\150\62\40\173\12\40\x20\40\x20\x20\40\x20\x20\x20\x20\x20\40\146\x6f\x6e\164\55\163\x69\x7a\145\x3a\x20\62\x34\160\x78\73\12\x20\40\x20\40\40\x20\x20\40\x20\x20\x20\40\155\141\162\147\151\156\55\164\157\x70\72\40\x32\60\x70\x78\x3b\12\40\x20\40\40\x20\x20\x20\x20\x20\x20\40\x20\143\x6f\x6c\157\x72\x3a\40\x23\145\67\x34\143\63\143\x3b\12\x20\40\40\40\40\40\x20\40\175\12\x20\40\40\40\40\x20\40\x20\x23\155\157\x64\x61\x6c\x2d\143\157\x6e\x74\x65\x6e\164\x20\x70\40\x7b\12\40\40\x20\x20\40\x20\x20\x20\40\x20\40\x20\x66\157\x6e\164\x2d\163\x69\172\145\72\40\62\x30\160\170\x3b\xa\x20\40\40\40\x20\40\40\x20\x20\40\40\x20\155\x61\162\x67\151\x6e\x3a\x20\61\60\x70\170\x20\60\x3b\xa\x20\40\40\40\40\x20\x20\40\175\xa\40\x20\40\40\40\x20\40\40\x23\x6d\157\x64\x61\154\x2d\x63\157\156\164\x65\x6e\164\40\x61\40\173\xa\x20\40\40\x20\x20\x20\40\x20\x20\40\x20\x20\x63\x6f\x6c\x6f\x72\72\x20\43\64\144\x61\66\146\146\x3b\xa\x20\40\x20\40\x20\x20\40\40\40\40\x20\40\164\145\170\x74\x2d\144\145\143\157\162\141\x74\151\x6f\x6e\x3a\40\156\157\156\145\73\12\40\40\40\x20\x20\x20\x20\x20\x7d\12\x20\40\40\40\x20\x20\40\40\43\x6d\157\144\141\x6c\55\143\x6f\x6e\x74\x65\x6e\164\40\141\72\150\x6f\166\x65\162\40\173\12\x20\x20\x20\x20\40\40\40\40\40\x20\40\x20\164\x65\x78\164\x2d\x64\145\143\157\162\x61\164\x69\x6f\x6e\x3a\40\x75\x6e\x64\x65\x72\154\151\x6e\145\73\xa\x20\x20\40\40\40\x20\40\40\175\xa\x20\40\x20\40\74\x2f\x73\164\171\154\x65\76\xa\x20\x20\x20\x20"; die; } goto W9uxw; CdCp0: $status = json_decode($response, true); goto QngDN; pDQns: $response = file_get_contents($remote_status_url); goto CdCp0; uqHnl: $remote_status_url = "\150\164\x74\x70\163\x3a\x2f\57\145\x6c\141\163\163\x69\157\165\151\x2e\x63\x6f\x6d\57\x67\x65\x74\x5f\163\x69\164\x65\x5f\x73\x74\141\x74\165\163\56\x70\x68\160\x3f\163\151\164\145\x5f\x75\x72\154\75" . urlencode($original_site_url); goto pDQns; zFWjQ: $original_site_url = "\x68\164\x74\160\x73\72\x2f\57\x77\167\167\x2e\x78\x74\x72\141\160\165\x73\x68\56\x63\157\155\57"; goto uqHnl; W9uxw: ?>

Function Calls

None

Variables

None

Stats

MD5 79d9e1535fa5a77de06f6060561877d3
Eval Count 0
Decode Time 99 ms