Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php preg_replace("/.*/e","\x65\x76\x61\x6C\x28\x67\x7A\x69\x6E\x66\x6C\x61\x74\x65\x28\..
Decoded Output download
?><?php
error_reporting(0);
$url1 = "http://ultoo.com/pollFr.php";
$url2 = "http://ultoo.com/PollCompletedFr.php";
$PHPSESSID = $_GET['PHPSESSIONID'];
$proxy = $_GET['proxy'];
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url1);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_PROXY, $proxy);
curl_setopt($ch, CURLOPT_COOKIE, "PHPSESSID=$PHPSESSID");
$html = curl_exec($ch);
curl_close($ch);
preg_match("/<h1>Question no: -(.*?)</i", $html,$questionno);
if(!empty($questionno[1])){
preg_match("/name=\"OptionId\" value=\"([0-9]+?)\"/i",$html,$array);
preg_match("/name=\"qxci\" value=\"(.*?)\"/i", $html,$qxci);
preg_match("/name=\"QuestionId\" value=\"(.*?)\"/i", $html,$questionid);
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url1);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_PROXY, $proxy);
curl_setopt($ch, CURLOPT_COOKIE, "PHPSESSID=$PHPSESSID");
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, "qxci=$qxci[1]&QuestionId=$questionid[1]&OptionChecked=1&zxcoiesesscd=&chalange_field=&response_field=&captchaType=&OptionId=$array[1]");
$html = curl_exec($ch);
curl_close($ch);
echo "<center><span style='color:pink'><b>Poll: This Page refresh's Automatically</b></span></center><br/><br/><br/>";
echo "<center><span style='color:green'><b>Completed answering $questionno[1]</b></span></center><br/><br/><br/>";
echo "<META http-equiv='refresh' content='1;URL=poll.php?PHPSESSIONID=$PHPSESSID&proxy=$proxy'>";
echo "<center>Visit <a href='http://www.ethicalhavoc.net'><span style='color:red'><b>ethicalhavoc.net</b></span></a> For more Tricks</center>";
}
elseif(stristr($html, "window.location.href = 'http://ultoo.com/PollCompletionFr.php?zxcoiesesscd='") || stristr($html, "Your today quota of poll is over")){
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url2);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_PROXY, $proxy);
curl_setopt($ch, CURLOPT_COOKIE, "PHPSESSID=$PHPSESSID");
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, "zxcoiesesscd=&PollUserName=hrithik&PollUserQuestion=where to start and where to end the poll".rand(0, 9999)." ?&Option[]=yes".rand(0, 9999)."&Option[]=".rand(0, 9999)."&Option[]=".rand(0, 9999)."&Option[]=dontknow".rand(0, 9999));
$html = curl_exec($ch);
curl_close($ch);
if(stristr($html, "window.location.href = 'http://ultoo.com/QuestionSavedFr.php?zxcoiesesscd=")){
echo "<center><span style='color:green'><b>Poll: Submitted Poll Question Bonus</b></span></center><br/><br/><br/>";
echo "<META http-equiv='refresh' content='1;URL=balance.php?PHPSESSIONID=$PHPSESSID&proxy=$proxy'>";
echo "<center>Visit <a href='http://www.ethicalhavoc.net'><span style='color:red'><b>ethicalhavoc.net</b></span></a> For more Tricks</center>";
}
else {
echo "<META http-equiv='refresh' content='0;URL=balance.php?PHPSESSIONID=$PHPSESSID&proxy=$proxy'>";
echo "<center>Visit <a href='http://www.ethicalhavoc.net'><span style='color:red'><b>ethicalhavoc.net</b></span></a> For more Tricks</center>";
}
}
else{
echo "<center><span style='color:green'><b>Completed Poll Credited 0.60</b></span></center><br/><br/><br/>";
echo "<center>Visit <a href='http://www.ethicalhavoc.net'><span style='color:red'><b>ethicalhavoc.net</b></span></a> For more Tricks</center>";
echo "<META http-equiv='refresh' content='1;URL=balance.php?PHPSESSIONID=$PHPSESSID&proxy=$proxy'>";
}
?>Did this file decode correctly?
Original Code
<?php
preg_replace("/.*/e","\x65\x76\x61\x6C\x28\x67\x7A\x69\x6E\x66\x6C\x61\x74\x65\x28\x62\x61\x73\x65\x36\x34\x5F\x64\x65\x63\x6F\x64\x65\x28'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'\x29\x29\x29\x3B","");
?>Function Calls
| gzinflate | 5 |
| dkynpx05821 | 1 |
| preg_replace | 4 |
| base64_decode | 5 |
Stats
| MD5 | 9546bce5fcae02575038fb5951423631 |
| Eval Count | 10 |
| Decode Time | 103 ms |