Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
function cURL($_46a527b18919,$_52fdcd859abb,$_59607caa7b19=array()){ $_b1e6446103f8 = iss..
Decoded Output download
<? function cURL($_46a527b18919,$_52fdcd859abb,$_59607caa7b19=array()){ $_b1e6446103f8 = isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT'] : ''; $_1b49e24b2067 = isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : ''; $_ec737f834a44 = isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) ? $_SERVER["HTTP_ACCEPT_LANGUAGE"] : ''; $_16f58b2c4243 = curl_init(); curl_setopt($_16f58b2c4243, CURLOPT_URL, $_46a527b18919); curl_setopt($_16f58b2c4243, CURLOPT_RETURNTRANSFER, 1); curl_setopt($_16f58b2c4243, CURLOPT_TIMEOUT, 10); curl_setopt($_16f58b2c4243, CURLOPT_HEADER, 1); curl_setopt($_16f58b2c4243, CURLOPT_VERBOSE, 1); curl_setopt($_16f58b2c4243,CURLOPT_POST, 1); curl_setopt($_16f58b2c4243,CURLOPT_POSTFIELDS, $_52fdcd859abb); curl_setopt($_16f58b2c4243, CURLOPT_USERAGENT, $_b1e6446103f8); curl_setopt($_16f58b2c4243, CURLOPT_REFERER, $_1b49e24b2067); curl_setopt($_16f58b2c4243, CURLOPT_HTTPHEADER, array("Accept-Language: $_ec737f834a44","Expect:")); if($_59607caa7b19 || $_59607caa7b19 != ''){ curl_setopt( $_16f58b2c4243, CURLOPT_COOKIE, implode(';', $_59607caa7b19) ); } $_2341f81898bb = curl_exec($_16f58b2c4243); curl_close($_16f58b2c4243); return $_2341f81898bb; } function getAds($_2341f81898bb){ $_efcc35790e43 = false; $_1680dcb640f9 = explode("
", $_2341f81898bb, 2); if (is_array($_1680dcb640f9) && isset($_1680dcb640f9[0])) { $_b2c21640089c = $_1680dcb640f9[0]; if (isset($_1680dcb640f9[1])) { $_efcc35790e43 = $_1680dcb640f9[1]; } } if($_efcc35790e43){ preg_match_all('/^(Set-Cookie:\s*[^
]*)$/mi', $_b2c21640089c, $_59607caa7b19); foreach($_59607caa7b19[0] as $_2d8b1777e97f) { header($_2d8b1777e97f, false); } }else{ $_efcc35790e43 = $_2341f81898bb; } return $_efcc35790e43; } function sendCookies(){ $_59607caa7b19 = array(); foreach ($_COOKIE as $_30feb37f9fb2 => $_0204c9c8b3fe){ if (strpos($_30feb37f9fb2, 'ad_') || strpos($_30feb37f9fb2, 'zone_')){ $_59607caa7b19[] = $_30feb37f9fb2 . '=' . $_0204c9c8b3fe; } } return $_59607caa7b19; } if (!function_exists('exif_imagetype')) { function exif_imagetype($_2e5077751105) { if ((list($_311f761fedbc, $_64494370b3d9, $_19d332315727, $_e27aedc45c26) = getimagesize($_2e5077751105)) !== false) { return $_19d332315727; } return false; } } if (isset($_GET['js']) && $_GET['js'] != '') { $_5991fd20983f = 'tvtropes_3.js'; $_d19ebaea312e = @file_get_contents("http://cdn1.traffichaus.com/scripts/adblock/$_5991fd20983f"); $_4f87aae88d46 = (empty($_d19ebaea312e)) ? @file_get_contents("http://cdn1ht.traffichaus.com/scripts/adblock/$_5991fd20983f") : $_d19ebaea312e; if ($_4f87aae88d46 !== false) { echo $_4f87aae88d46; } exit(); } elseif (isset($_GET['url']) && $_GET['url'] != ''){ $_46a527b18919 = urldecode(base64_decode($_GET['url'])); header("Location: $_46a527b18919"); exit("<script>window.location = '$_46a527b18919';</script>"); }elseif(isset($_GET['img']) && $_GET['img'] != ''){ $_ad1ac7a8177d = urldecode(base64_decode($_GET['img'])); $_78bc7daa70fb = image_type_to_mime_type(exif_imagetype($_ad1ac7a8177d)); header("Content-type: $_78bc7daa70fb"); readfile($_ad1ac7a8177d); exit; }else{ $_0e6b9ada46d3 = isset($_POST['data']) ? json_decode(base64_decode($_POST['data']),true) : null; if (is_null($_0e6b9ada46d3)){ exit; } $_4575150a3717 = isset($_0e6b9ada46d3['zones']) ? $_0e6b9ada46d3['zones'] : null; if (is_null($_4575150a3717)){ exit; } $_d34f0f1eaa04 = array(); foreach($_4575150a3717 as $_a79bc2e1db56 => $_ff50ac866152){ if (is_int($_a79bc2e1db56)){ $_d34f0f1eaa04[$_a79bc2e1db56] = $_4575150a3717[$_a79bc2e1db56]; } } $_d34f0f1eaa04['keywords'] = isset($_0e6b9ada46d3['keywords']) ? $_0e6b9ada46d3['keywords'] : '';; $_d34f0f1eaa04['clientIP'] = $_SERVER['REMOTE_ADDR']; $_fec26cccdbf6 = array("input" => serialize($_d34f0f1eaa04)); $_46a527b18919 = "http://ads.traffichaus.com/scripts/ad_block3.php"; $_2341f81898bb = cURL($_46a527b18919,$_fec26cccdbf6,sendCookies()); echo getAds($_2341f81898bb); }
?>
Did this file decode correctly?
Original Code
function cURL($_46a527b18919,$_52fdcd859abb,$_59607caa7b19=array()){ $_b1e6446103f8 = isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT'] : ''; $_1b49e24b2067 = isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : ''; $_ec737f834a44 = isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) ? $_SERVER["HTTP_ACCEPT_LANGUAGE"] : ''; $_16f58b2c4243 = curl_init(); curl_setopt($_16f58b2c4243, CURLOPT_URL, $_46a527b18919); curl_setopt($_16f58b2c4243, CURLOPT_RETURNTRANSFER, 1); curl_setopt($_16f58b2c4243, CURLOPT_TIMEOUT, 10); curl_setopt($_16f58b2c4243, CURLOPT_HEADER, 1); curl_setopt($_16f58b2c4243, CURLOPT_VERBOSE, 1); curl_setopt($_16f58b2c4243,CURLOPT_POST, 1); curl_setopt($_16f58b2c4243,CURLOPT_POSTFIELDS, $_52fdcd859abb); curl_setopt($_16f58b2c4243, CURLOPT_USERAGENT, $_b1e6446103f8); curl_setopt($_16f58b2c4243, CURLOPT_REFERER, $_1b49e24b2067); curl_setopt($_16f58b2c4243, CURLOPT_HTTPHEADER, array("Accept-Language: $_ec737f834a44","Expect:")); if($_59607caa7b19 || $_59607caa7b19 != ''){ curl_setopt( $_16f58b2c4243, CURLOPT_COOKIE, implode(';', $_59607caa7b19) ); } $_2341f81898bb = curl_exec($_16f58b2c4243); curl_close($_16f58b2c4243); return $_2341f81898bb; } function getAds($_2341f81898bb){ $_efcc35790e43 = false; $_1680dcb640f9 = explode("\r\n\r\n", $_2341f81898bb, 2); if (is_array($_1680dcb640f9) && isset($_1680dcb640f9[0])) { $_b2c21640089c = $_1680dcb640f9[0]; if (isset($_1680dcb640f9[1])) { $_efcc35790e43 = $_1680dcb640f9[1]; } } if($_efcc35790e43){ preg_match_all('/^(Set-Cookie:\s*[^\n]*)$/mi', $_b2c21640089c, $_59607caa7b19); foreach($_59607caa7b19[0] as $_2d8b1777e97f) { header($_2d8b1777e97f, false); } }else{ $_efcc35790e43 = $_2341f81898bb; } return $_efcc35790e43; } function sendCookies(){ $_59607caa7b19 = array(); foreach ($_COOKIE as $_30feb37f9fb2 => $_0204c9c8b3fe){ if (strpos($_30feb37f9fb2, 'ad_') || strpos($_30feb37f9fb2, 'zone_')){ $_59607caa7b19[] = $_30feb37f9fb2 . '=' . $_0204c9c8b3fe; } } return $_59607caa7b19; } if (!function_exists('exif_imagetype')) { function exif_imagetype($_2e5077751105) { if ((list($_311f761fedbc, $_64494370b3d9, $_19d332315727, $_e27aedc45c26) = getimagesize($_2e5077751105)) !== false) { return $_19d332315727; } return false; } } if (isset($_GET['js']) && $_GET['js'] != '') { $_5991fd20983f = 'tvtropes_3.js'; $_d19ebaea312e = @file_get_contents("http://cdn1.traffichaus.com/scripts/adblock/$_5991fd20983f"); $_4f87aae88d46 = (empty($_d19ebaea312e)) ? @file_get_contents("http://cdn1ht.traffichaus.com/scripts/adblock/$_5991fd20983f") : $_d19ebaea312e; if ($_4f87aae88d46 !== false) { echo $_4f87aae88d46; } exit(); } elseif (isset($_GET['url']) && $_GET['url'] != ''){ $_46a527b18919 = urldecode(base64_decode($_GET['url'])); header("Location: $_46a527b18919"); exit("<script>window.location = '$_46a527b18919';</script>"); }elseif(isset($_GET['img']) && $_GET['img'] != ''){ $_ad1ac7a8177d = urldecode(base64_decode($_GET['img'])); $_78bc7daa70fb = image_type_to_mime_type(exif_imagetype($_ad1ac7a8177d)); header("Content-type: $_78bc7daa70fb"); readfile($_ad1ac7a8177d); exit; }else{ $_0e6b9ada46d3 = isset($_POST['data']) ? json_decode(base64_decode($_POST['data']),true) : null; if (is_null($_0e6b9ada46d3)){ exit; } $_4575150a3717 = isset($_0e6b9ada46d3['zones']) ? $_0e6b9ada46d3['zones'] : null; if (is_null($_4575150a3717)){ exit; } $_d34f0f1eaa04 = array(); foreach($_4575150a3717 as $_a79bc2e1db56 => $_ff50ac866152){ if (is_int($_a79bc2e1db56)){ $_d34f0f1eaa04[$_a79bc2e1db56] = $_4575150a3717[$_a79bc2e1db56]; } } $_d34f0f1eaa04['keywords'] = isset($_0e6b9ada46d3['keywords']) ? $_0e6b9ada46d3['keywords'] : '';; $_d34f0f1eaa04['clientIP'] = $_SERVER['REMOTE_ADDR']; $_fec26cccdbf6 = array("input" => serialize($_d34f0f1eaa04)); $_46a527b18919 = "http://ads.traffichaus.com/scripts/ad_block3.php"; $_2341f81898bb = cURL($_46a527b18919,$_fec26cccdbf6,sendCookies()); echo getAds($_2341f81898bb); }
Function Calls
is_null | 1 |
function_exists | 1 |
Stats
MD5 | 96639a39f3dd6e251e008376ffa4c390 |
Eval Count | 0 |
Decode Time | 86 ms |