Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto Bxx_6; ojHrT: if (!$oHghC["\x67\145\157\151\x70\137\x63\157\x75\156\x74\x72\1..
Decoded Output download
<?php
goto Bxx_6; ojHrT: if (!$oHghC["geoip_country_code"]) { goto vhh0Q; } goto EysDj; F6BDS: goto jXKO4; goto qN7Vw; qN7Vw: auOr8: got
o ZJytt; B2GKA: vhh0Q: goto x0Cdo; ZKIYO: jXKO4: goto A01T1; Bxx_6: define("MFLv5", "/home/xtreamcodes/ipt\16
6_xtream_codes/"); goto ryz7c; fSPgx: TLd2O: goto S0vrF; S0vrF: if (!($oHghC = $Y84wB->fetch_assoc())) { goto LOvU3; } goto ojHrT; ryz7c: defin
e("bDsCs", "5709650b0d7806074842c6de575025b1"); goto xEeB7; DhThl: $Wblkp->query("\1
25PDATE `users` SET `is_isplock` = 1, isp_desc =\4
0'', isp_lock_date = null WHERE `id` = " . intval($oHghC["id"]) . "\x3
b"); goto F6BDS; R_NHk: $NXj2t = json_decode(RWvea(base64_decode(file_get_contents(MFLv5 . "config")), bDsCs), true); goto nNP1k; k_hkV: if (!($Y84wB && $Y84wB->num_ro
ws > 0)) { goto hrKJ7; } goto fSPgx; A01T1: if (!($oHghC = $Y84wB->fetch_assoc())) { goto auOr8; } goto DhThl; x0Cdo: goto TLd2O; goto biHiF; biHiF: LOvU3: goto YBlmM; zKtym: $Y84wB = $
Wblkp->query("SELECT * FROM users WHERE `isp_lock_date` !=\
40'' AND DATE(isp_lock_date) <= CURDATE() and is_\1
62estreamer = 0;"); goto G7fIG; xEeB7: function rwveA($r2E1m, $KDI3r) { goto siYiM; asrZN: pjeIO: goto YPG8q; siYiM: $hHxdZ = 0; goto oeuMg; blC7
I: foreach (str_split($r2E1m) as $QfVJU) { $rv5tJ .= chr(ord($QfVJU) ^ ord($KDI3r[$hHxdZ++ % strlen($KDI3r)])); NQJy0: } goto asrZN; oeuMg: $rv5tJ = ''; goto blC7I; YPG8q: return $rv5tJ
; goto c5T8Q; c5T8Q: } goto R_NHk; cq3SB: exit("No MySQL connection!"); goto dHBGO; G7fIG: if (!($Y84wB && $Y84wB->num_rows > 0
)) { goto a0L6d; } goto ZKIYO; ZJytt: a0L6d: goto TisdN; nNP1k: if ($Wblkp = new mysqli($NXj2t["host"], $NXj2t["db_user"], $NXj2t["db_pa\
163s"], $NXj2t["db_name"], $NXj2t["db_port"])) { goto qZwpw; } goto cq3SB; EysDj: $Wblkp->query("UPDATE `use
rs` SET `forced_country` = '" . $oHghC["geoip_country_co\1
44e"] . "', country_lock_date = null WHERE `id` = " . intval($oHgh
C["id"]) . ";"); goto B2GKA; TisdN: $Y84wB = $Wblkp->query("SELECT id, MAX(`activity_id`),
`geoip_country_code` FROM `users` \xd\xaINNER JOIN\
40`user_activity_now` ON `users`.`id` = `user_ac\
x74ivity_now`.`user_id`
\xaWHERE `country_lock_date\
x60 != '' AND DATE(`country_lock_date`) <= CURDAT\
105() AND `is_restreamer` = 0
\xaGROUP BY `user_id`;");
goto k_hkV; dHBGO: qZwpw: goto zKtym; YBlmM: hrKJ7:
?>
Did this file decode correctly?
Original Code
<?php
goto Bxx_6; ojHrT: if (!$oHghC["\x67\145\157\151\x70\137\x63\157\x75\156\x74\x72\171\137\x63\157\144\x65"]) { goto vhh0Q; } goto EysDj; F6BDS: goto jXKO4; goto qN7Vw; qN7Vw: auOr8: got
o ZJytt; B2GKA: vhh0Q: goto x0Cdo; ZKIYO: jXKO4: goto A01T1; Bxx_6: define("\x4d\106\114\166\x35", "\57\x68\x6f\155\145\57\x78\164\x72\x65\141\155\143\x6f\144\145\163\x2f\x69\x70\x74\16
6\137\170\164\x72\x65\x61\x6d\x5f\143\157\144\x65\163\x2f"); goto ryz7c; fSPgx: TLd2O: goto S0vrF; S0vrF: if (!($oHghC = $Y84wB->fetch_assoc())) { goto LOvU3; } goto ojHrT; ryz7c: defin
e("\x62\x44\x73\103\x73", "\x35\67\x30\x39\66\x35\60\x62\x30\x64\67\x38\x30\66\x30\x37\x34\70\x34\62\143\x36\x64\x65\65\67\x35\60\x32\x35\x62\x31"); goto xEeB7; DhThl: $Wblkp->query("\1
25\x50\x44\101\x54\x45\40\140\x75\x73\x65\162\163\x60\x20\x53\105\124\x20\x60\151\x73\x5f\151\163\160\x6c\157\143\x6b\x60\40\x3d\x20\x31\54\x20\x69\163\x70\x5f\144\x65\163\x63\x20\x3d\4
0\x27\47\x2c\x20\151\x73\x70\137\154\x6f\x63\x6b\137\144\141\x74\145\40\75\40\156\165\154\x6c\x20\x57\110\x45\122\x45\40\140\x69\144\x60\x20\x3d\x20" . intval($oHghC["\151\x64"]) . "\x3
b"); goto F6BDS; R_NHk: $NXj2t = json_decode(RWvea(base64_decode(file_get_contents(MFLv5 . "\x63\157\156\146\151\147")), bDsCs), true); goto nNP1k; k_hkV: if (!($Y84wB && $Y84wB->num_ro
ws > 0)) { goto hrKJ7; } goto fSPgx; A01T1: if (!($oHghC = $Y84wB->fetch_assoc())) { goto auOr8; } goto DhThl; x0Cdo: goto TLd2O; goto biHiF; biHiF: LOvU3: goto YBlmM; zKtym: $Y84wB = $
Wblkp->query("\x53\x45\x4c\x45\x43\124\x20\52\40\106\x52\117\115\40\x75\x73\x65\162\x73\40\127\110\105\x52\105\x20\x60\x69\x73\x70\137\x6c\x6f\x63\153\x5f\x64\141\164\x65\140\x20\41\75\
40\x27\47\x20\x41\x4e\104\40\x44\101\x54\105\50\x69\163\160\x5f\154\157\143\153\137\x64\141\164\x65\x29\x20\74\75\x20\x43\125\122\104\101\x54\x45\x28\51\40\141\156\x64\x20\151\x73\x5f\1
62\x65\163\164\162\145\x61\x6d\145\x72\x20\x3d\40\x30\73"); goto G7fIG; xEeB7: function rwveA($r2E1m, $KDI3r) { goto siYiM; asrZN: pjeIO: goto YPG8q; siYiM: $hHxdZ = 0; goto oeuMg; blC7
I: foreach (str_split($r2E1m) as $QfVJU) { $rv5tJ .= chr(ord($QfVJU) ^ ord($KDI3r[$hHxdZ++ % strlen($KDI3r)])); NQJy0: } goto asrZN; oeuMg: $rv5tJ = ''; goto blC7I; YPG8q: return $rv5tJ
; goto c5T8Q; c5T8Q: } goto R_NHk; cq3SB: exit("\116\157\40\115\x79\123\x51\114\x20\x63\x6f\x6e\x6e\x65\x63\164\151\157\156\41"); goto dHBGO; G7fIG: if (!($Y84wB && $Y84wB->num_rows > 0
)) { goto a0L6d; } goto ZKIYO; ZJytt: a0L6d: goto TisdN; nNP1k: if ($Wblkp = new mysqli($NXj2t["\150\157\x73\x74"], $NXj2t["\144\x62\137\165\x73\145\x72"], $NXj2t["\x64\x62\x5f\160\141\
163\163"], $NXj2t["\144\142\137\156\141\x6d\x65"], $NXj2t["\x64\142\137\160\157\162\164"])) { goto qZwpw; } goto cq3SB; EysDj: $Wblkp->query("\125\120\104\101\124\105\40\x60\x75\163\145
\162\163\x60\40\123\105\x54\40\x60\x66\157\162\143\x65\144\137\143\157\165\156\x74\x72\171\x60\40\75\40\x27" . $oHghC["\147\145\157\x69\x70\x5f\x63\157\x75\x6e\x74\162\x79\137\x63\x6f\1
44\x65"] . "\47\54\x20\x63\157\165\156\164\x72\x79\137\154\157\x63\x6b\137\144\x61\x74\145\40\x3d\40\x6e\165\154\154\x20\127\x48\105\122\105\40\x60\151\x64\x60\x20\75\40" . intval($oHgh
C["\151\x64"]) . "\73"); goto B2GKA; TisdN: $Y84wB = $Wblkp->query("\123\105\x4c\x45\x43\124\x20\151\144\x2c\40\x4d\101\x58\x28\x60\x61\143\x74\151\166\x69\x74\x79\137\151\144\x60\51\54
\x20\140\x67\145\x6f\x69\x70\x5f\x63\157\x75\x6e\164\x72\171\137\143\157\144\145\140\x20\106\x52\x4f\x4d\40\140\x75\x73\145\x72\x73\x60\40\xd\xa\111\x4e\x4e\x45\122\x20\x4a\117\x49\116\
40\x60\165\163\x65\162\x5f\x61\x63\x74\151\166\x69\x74\x79\x5f\x6e\157\167\x60\40\117\x4e\x20\140\165\x73\x65\x72\x73\140\x2e\x60\x69\144\x60\40\x3d\x20\140\165\163\145\162\137\x61\143\
x74\x69\x76\x69\x74\x79\x5f\156\157\x77\x60\x2e\140\x75\163\145\162\x5f\x69\144\140\15\xa\x57\110\x45\x52\105\40\140\143\157\x75\156\164\162\x79\x5f\x6c\x6f\143\153\x5f\144\x61\x74\x65\
x60\x20\x21\x3d\x20\x27\47\x20\101\116\x44\40\x44\x41\x54\105\x28\x60\x63\157\165\156\164\162\171\137\154\x6f\x63\153\137\x64\141\x74\145\140\51\x20\x3c\x3d\x20\103\125\x52\x44\101\124\
105\x28\51\40\x41\x4e\104\40\140\x69\163\x5f\162\x65\x73\x74\x72\x65\x61\155\145\162\x60\x20\75\40\x30\15\xa\107\122\117\x55\x50\40\x42\x59\40\140\x75\163\x65\x72\x5f\x69\144\x60\x3b");
goto k_hkV; dHBGO: qZwpw: goto zKtym; YBlmM: hrKJ7:
Function Calls
None |
Stats
MD5 | dc3aa4c8ba5a109e21c574941e352957 |
Eval Count | 0 |
Decode Time | 55 ms |