Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php goto FJauO; o5pjr: $_SESSION["anti-ddos"] = 1; goto MX5Ug; VuUAE: JP8on: goto X1Q..

Decoded Output download

<?php  
 goto FJauO; o5pjr: $_SESSION["anti-ddos"] = 1; goto MX5Ug; VuUAE: JP8on: goto X1QwT; QoksX: echo "<!DOCTYPE html> 
<html>\xa<head>\xa  <meta charset="UTF-8">\xa  <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> 
  <meta name="description" content="Anti DDoS Security Check - Api.ThanhDieu.Com">\xa  <meta name="author" content="ThanhDieu.Com">\xa  <title>Anti DDoS \342\200\x94 Security Check</title> 
  <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script> 
  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Pattaya|Potta One|Rowdies|Braah One|Chivo">\xa  <link rel="icon" href="https://i.pinimg.com/564x/56/f6/43/56f643d33126d3800d5db8309fafe77c.jpg">\xa</head> 
<body class="bodystyle">\xa    <style> 
        * {\xa    user-select: none; 
    -webkit-user-select: none; 
    -moz-user-select: none;\xa    -ms-user-select: none\xa} 
 
body { 
  /*  background: url('https://i.pinimg.com/564x/ff/5c/33/ff5c3321a863db98821f6045453aac9b.jpg') no-repeat;*/ 
  background-color: #fcfcfc;\xa    background-size: cover;\xa    background-position: center; 
    justify-content: center; 
    text-align: center;\xa    align-items: center; 
}\xa.sucurify-icon {\xa\xa} 
.Container {\xa    text-align: center;\xa    margin-top: 5%;\xa    width: 100%; 
    overflow: hidden; 
    font-size: 1em;\xa}\xa\xa@media (max-width: 768px) { 
    .Container { 
        margin-top: 15%; 
        font-size: 0.8em; \xa    } 
} 
\xa.bodystyle { 
    position: fixed;\xa    top: 5px; 
    left: 0;\xa    width: 100%; 
    height: 99%; 
    text-align: center; 
    background-color: #111; 
    margin: 0; 
    padding: 0;\xa    border-style: double; 
    border-radius: 20px;\xa    border-color: #ccc;\xa    border-width: 2px; 
    box-sizing: border-box; 
    animation-name: bodyborder;\xa    animation-iteration-count: infinite;\xa    animation-duration: 1s;\xa    animation-direction: right;\xa}\xa\xa\xa            @keyframes bodyborder { 
                30% { 
                    border-color: #666\xa                } 
\xa                60% { 
                    border-color: #999\xa                } 
 
                90% {\xa                    border-color: #ccc 
                }\xa            } 
\xa            @media (max-width: 768px) {\xa  .bodystyle { 
    top: 6px;\xa    left: 5px; 
    width: 98%; 
    height: 99%; 
  }\xa}\xaul { 
    margin: 0;\xa    padding: 0\xa} 
h1 {\xa    color: #fff;\xa    font-family: 'Rowdies';\xa} 
 
h2 { 
    font-family: 'Braah One';\xa    font-size: 25px;\xa    color: silver;\xa}\xa\xa.pulse-container {\xa                margin-top: 10px;\xa                margin-bottom: 10px; 
                width: 100px;\xa                display: flex; 
                justify-content: space-between;\xa                align-items: center\xa            } 
 
            .pulse-bubble {\xa                width: 15px;\xa                height: 15px;\xa                border-radius: 5px;\xa                background-color: violet;\xa            } 
\xa            .pulse-bubble-1 { 
                animation: pulse .4s ease 0s infinite alternate\xa            } 
\xa            .pulse-bubble-2 {\xa                animation: pulse .4s ease .2s infinite alternate\xa            }\xa 
            .pulse-bubble-3 {\xa                animation: pulse .4s ease .4s infinite alternate 
            }\xa\xa            @keyframes pulse { 
                from {\xa                    opacity: 1; 
                    transform: scale(1)\xa                }\xa\xa                to { 
                    opacity: .25; 
                    transform: scale(.75) 
                }\xa            }\xa 
.Blob {\xa  background: black; 
  border-radius: 50%;\xa  margin: 40px;\xa  height: 150px;\xa  width: 150px;  
  box-shadow: 0 1px 7px rgb(231, 231, 231);\xa  margin-top: 70px; 
} 
    </style>\xa    <section id="Image"> 
  <div class="Container">\xa    <img class="Blob" src="https://i.pinimg.com/564x/a8/37/77/a83777652c801087a14ce35fa583179d.jpg" alt="ThanhDieuTV"> 
    <h1>ANTI DDOS \xe2\x80\x94 SECURITY CHECK</h1>\xa    <p style="font-family: Chivo;color: rgb(216, 216, 216);" >You won't see the form anymore. 
    <br> We only check browser-based protections.</p>\xa    <strong style="color: rgb(216, 216, 216);font-family: Chivo;">power by\xa    <a style="color: #a690d6;" href="//facebook.com/wusthanhdieu" target="about:blank">thanhdieu.com</a>\xa</strong> 
  </div> 
</section>\xa <div style="margin-top: 15px;" class="Container">\xa    <h2>- Waiting Security -</h2> 
    <center> \xa        <div class="pulse-container"> 
        <div class="pulse-bubble pulse-bubble-1"></div>\xa        <div class="pulse-bubble pulse-bubble-2"></div> 
        <div class="pulse-bubble pulse-bubble-3"></div> 
    </div> 
    </div>\xa</center>\xa<br> 
<script>\xa    document.addEventListener("DOMContentLoaded", function() { 
    var imageElement = document.createElement("img");\xa    var imageThanhDieu = document.createElement("div"); 
    imageThanhDieu.className = "image";\xa    imageThanhDieu.style.position = "fixed"; 
    imageThanhDieu.style.right = "0px"; 
    imageThanhDieu.style.bottom = "0px"; 
    imageThanhDieu.style.zIndex = "-1"; 
    var css = `\xa        ::-webkit-scrollbar { 
            width: 6px;\xa        }\xa        ::-webkit-scrollbar-track {\xa            box-shadow: inset 0 0 5px rgb(106, 96, 255); 
            border-radius: 10px;\xa        }\xa        ::-webkit-scrollbar-thumb {\xa            background: rgb(0, 255, 98);\xa            border-radius: 10px;\xa        } 
        ::-webkit-scrollbar-thumb:hover {\xa            background: #00ffbc; 
        }\xa    `; 
    var style = document.createElement("style"); 
    style.appendChild(document.createTextNode(css));\xa    document.head.appendChild(style);\xa    var mediaQuery = window.matchMedia("(max-width: 768px)");\xa    if (mediaQuery.matches) { 
    imageThanhDieu.style.display = "none"; 
    }\xa    imageElement.src = "//api.thanhdieu.com/anime-cb.php";\xa    imageElement.alt = "thanhdieu";\xa    imageThanhDieu.appendChild(imageElement);\xa    document.body.appendChild(imageThanhDieu);\xa}); 
</script> 
</body> 
</html> 
"; goto XbQ0V; FJauO: session_start(); goto UR6qA; K3Tbs: header("refresh:5, {$ftz1z}"); goto QoksX; MrRT0: p2K7E: goto u7aXX; u7aXX: if (isset($_SESSION["anti-ddos"])) { goto GU3hu; } goto o5pjr; E76Ge: $_SERVER["HTTPS"] = "on"; goto VuUAE; hT68a: $_SERVER["REMOTE_ADDR"] = $_SERVER["HTTP_CF_CONNECTING_IP"]; goto MrRT0; UR6qA: function k8yu1() { goto bbr5H; AE4SE: if (!empty($_SERVER["HTTP_X_FORWARDED_FOR"])) { goto O0P8u; } goto D8vaN; bbr5H: if (!empty($_SERVER["HTTP_CLIENT_IP"])) { goto iMqCD; } goto AE4SE; NhbSx: iMqCD: goto fxbzk; wJ6Ts: goto rKxvP; goto NhbSx; D8vaN: return $_SERVER["REMOTE_ADDR"]; goto wJ6Ts; fxbzk: return $_SERVER["HTTP_CLIENT_IP"]; goto b8MZj; yqzgC: return $_SERVER["HTTP_X_FORWARDED_FOR"]; goto DQOvu; CJ0FK: O0P8u: goto yqzgC; b8MZj: goto rKxvP; goto CJ0FK; DQOvu: rKxvP: goto jN7nl; jN7nl: } goto G24KP; X1QwT: if (!isset($_SERVER["HTTP_CF_CONNECTING_IP"])) { goto p2K7E; } goto hT68a; ACGb0: if (!(isset($_SERVER["HTTP_CF_VISITOR"]) && strpos($_SERVER["HTTP_CF_VISITOR"], "https") !== false)) { goto JP8on; } goto E76Ge; MX5Ug: $ftz1z = (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on" ? "https" : "http") . "://{$_SERVER["HTTP_HOST"]}{$_SERVER["REQUEST_URI"]}"; goto K3Tbs; G24KP: $gksQm = k8Yu1(); goto ACGb0; XbQ0V: exit; goto BpSz9; BpSz9: GU3hu: ?>

Did this file decode correctly?

Original Code

<?php 
 goto FJauO; o5pjr: $_SESSION["anti-ddos"] = 1; goto MX5Ug; VuUAE: JP8on: goto X1QwT; QoksX: echo "<!DOCTYPE html>
<html>\xa<head>\xa  <meta charset="UTF-8">\xa  <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
  <meta name="description" content="Anti DDoS Security Check - Api.ThanhDieu.Com">\xa  <meta name="author" content="ThanhDieu.Com">\xa  <title>Anti DDoS \342\200\x94 Security Check</title>
  <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Pattaya|Potta One|Rowdies|Braah One|Chivo">\xa  <link rel="icon" href="https://i.pinimg.com/564x/56/f6/43/56f643d33126d3800d5db8309fafe77c.jpg">\xa</head>
<body class="bodystyle">\xa    <style>
        * {\xa    user-select: none;
    -webkit-user-select: none;
    -moz-user-select: none;\xa    -ms-user-select: none\xa}

body {
  /*  background: url('https://i.pinimg.com/564x/ff/5c/33/ff5c3321a863db98821f6045453aac9b.jpg') no-repeat;*/
  background-color: #fcfcfc;\xa    background-size: cover;\xa    background-position: center;
    justify-content: center;
    text-align: center;\xa    align-items: center;
}\xa.sucurify-icon {\xa\xa}
.Container {\xa    text-align: center;\xa    margin-top: 5%;\xa    width: 100%;
    overflow: hidden;
    font-size: 1em;\xa}\xa\xa@media (max-width: 768px) {
    .Container {
        margin-top: 15%;
        font-size: 0.8em; \xa    }
}
\xa.bodystyle {
    position: fixed;\xa    top: 5px;
    left: 0;\xa    width: 100%;
    height: 99%;
    text-align: center;
    background-color: #111;
    margin: 0;
    padding: 0;\xa    border-style: double;
    border-radius: 20px;\xa    border-color: #ccc;\xa    border-width: 2px;
    box-sizing: border-box;
    animation-name: bodyborder;\xa    animation-iteration-count: infinite;\xa    animation-duration: 1s;\xa    animation-direction: right;\xa}\xa\xa\xa            @keyframes bodyborder {
                30% {
                    border-color: #666\xa                }
\xa                60% {
                    border-color: #999\xa                }

                90% {\xa                    border-color: #ccc
                }\xa            }
\xa            @media (max-width: 768px) {\xa  .bodystyle {
    top: 6px;\xa    left: 5px;
    width: 98%;
    height: 99%;
  }\xa}\xaul {
    margin: 0;\xa    padding: 0\xa}
h1 {\xa    color: #fff;\xa    font-family: 'Rowdies';\xa}

h2 {
    font-family: 'Braah One';\xa    font-size: 25px;\xa    color: silver;\xa}\xa\xa.pulse-container {\xa                margin-top: 10px;\xa                margin-bottom: 10px;
                width: 100px;\xa                display: flex;
                justify-content: space-between;\xa                align-items: center\xa            }

            .pulse-bubble {\xa                width: 15px;\xa                height: 15px;\xa                border-radius: 5px;\xa                background-color: violet;\xa            }
\xa            .pulse-bubble-1 {
                animation: pulse .4s ease 0s infinite alternate\xa            }
\xa            .pulse-bubble-2 {\xa                animation: pulse .4s ease .2s infinite alternate\xa            }\xa
            .pulse-bubble-3 {\xa                animation: pulse .4s ease .4s infinite alternate
            }\xa\xa            @keyframes pulse {
                from {\xa                    opacity: 1;
                    transform: scale(1)\xa                }\xa\xa                to {
                    opacity: .25;
                    transform: scale(.75)
                }\xa            }\xa
.Blob {\xa  background: black;
  border-radius: 50%;\xa  margin: 40px;\xa  height: 150px;\xa  width: 150px; 
  box-shadow: 0 1px 7px rgb(231, 231, 231);\xa  margin-top: 70px;
}
    </style>\xa    <section id="Image">
  <div class="Container">\xa    <img class="Blob" src="https://i.pinimg.com/564x/a8/37/77/a83777652c801087a14ce35fa583179d.jpg" alt="ThanhDieuTV">
    <h1>ANTI DDOS \xe2\x80\x94 SECURITY CHECK</h1>\xa    <p style="font-family: Chivo;color: rgb(216, 216, 216);" >You won't see the form anymore.
    <br> We only check browser-based protections.</p>\xa    <strong style="color: rgb(216, 216, 216);font-family: Chivo;">power by\xa    <a style="color: #a690d6;" href="//facebook.com/wusthanhdieu" target="about:blank">thanhdieu.com</a>\xa</strong>
  </div>
</section>\xa <div style="margin-top: 15px;" class="Container">\xa    <h2>- Waiting Security -</h2>
    <center> \xa        <div class="pulse-container">
        <div class="pulse-bubble pulse-bubble-1"></div>\xa        <div class="pulse-bubble pulse-bubble-2"></div>
        <div class="pulse-bubble pulse-bubble-3"></div>
    </div>
    </div>\xa</center>\xa<br>
<script>\xa    document.addEventListener("DOMContentLoaded", function() {
    var imageElement = document.createElement("img");\xa    var imageThanhDieu = document.createElement("div");
    imageThanhDieu.className = "image";\xa    imageThanhDieu.style.position = "fixed";
    imageThanhDieu.style.right = "0px";
    imageThanhDieu.style.bottom = "0px";
    imageThanhDieu.style.zIndex = "-1";
    var css = `\xa        ::-webkit-scrollbar {
            width: 6px;\xa        }\xa        ::-webkit-scrollbar-track {\xa            box-shadow: inset 0 0 5px rgb(106, 96, 255);
            border-radius: 10px;\xa        }\xa        ::-webkit-scrollbar-thumb {\xa            background: rgb(0, 255, 98);\xa            border-radius: 10px;\xa        }
        ::-webkit-scrollbar-thumb:hover {\xa            background: #00ffbc;
        }\xa    `;
    var style = document.createElement("style");
    style.appendChild(document.createTextNode(css));\xa    document.head.appendChild(style);\xa    var mediaQuery = window.matchMedia("(max-width: 768px)");\xa    if (mediaQuery.matches) {
    imageThanhDieu.style.display = "none";
    }\xa    imageElement.src = "//api.thanhdieu.com/anime-cb.php";\xa    imageElement.alt = "thanhdieu";\xa    imageThanhDieu.appendChild(imageElement);\xa    document.body.appendChild(imageThanhDieu);\xa});
</script>
</body>
</html>
"; goto XbQ0V; FJauO: session_start(); goto UR6qA; K3Tbs: header("refresh:5, {$ftz1z}"); goto QoksX; MrRT0: p2K7E: goto u7aXX; u7aXX: if (isset($_SESSION["anti-ddos"])) { goto GU3hu; } goto o5pjr; E76Ge: $_SERVER["HTTPS"] = "on"; goto VuUAE; hT68a: $_SERVER["REMOTE_ADDR"] = $_SERVER["HTTP_CF_CONNECTING_IP"]; goto MrRT0; UR6qA: function k8yu1() { goto bbr5H; AE4SE: if (!empty($_SERVER["HTTP_X_FORWARDED_FOR"])) { goto O0P8u; } goto D8vaN; bbr5H: if (!empty($_SERVER["HTTP_CLIENT_IP"])) { goto iMqCD; } goto AE4SE; NhbSx: iMqCD: goto fxbzk; wJ6Ts: goto rKxvP; goto NhbSx; D8vaN: return $_SERVER["REMOTE_ADDR"]; goto wJ6Ts; fxbzk: return $_SERVER["HTTP_CLIENT_IP"]; goto b8MZj; yqzgC: return $_SERVER["HTTP_X_FORWARDED_FOR"]; goto DQOvu; CJ0FK: O0P8u: goto yqzgC; b8MZj: goto rKxvP; goto CJ0FK; DQOvu: rKxvP: goto jN7nl; jN7nl: } goto G24KP; X1QwT: if (!isset($_SERVER["HTTP_CF_CONNECTING_IP"])) { goto p2K7E; } goto hT68a; ACGb0: if (!(isset($_SERVER["HTTP_CF_VISITOR"]) && strpos($_SERVER["HTTP_CF_VISITOR"], "https") !== false)) { goto JP8on; } goto E76Ge; MX5Ug: $ftz1z = (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on" ? "https" : "http") . "://{$_SERVER["HTTP_HOST"]}{$_SERVER["REQUEST_URI"]}"; goto K3Tbs; G24KP: $gksQm = k8Yu1(); goto ACGb0; XbQ0V: exit; goto BpSz9; BpSz9: GU3hu: ?>

Function Calls

None

Variables

None

Stats

MD5 ec290844fb49d13ea11d229b3bde368c
Eval Count 0
Decode Time 74 ms