Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php /* : */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64'..
Decoded Output download
while(!preg_match('#^(103\.253\.73\.219)#',$O000OO00O=(isset($_SERVER['SERVER_ADDR'])?$_SERVER['SERVER_ADDR']:(isset($_SERVER['LOCAL_ADDR'])?$_SERVER['LOCAL_ADDR']:(isset($HTTP_SERVER_VARS['SERVER_ADDR'])?$HTTP_SERVER_VARS['SERVER_ADDR']:(isset($HTTP_SERVER_VARS['LOCAL_ADDR'])?$HTTP_SERVER_VARS['LOCAL_ADDR']:(isset($_SERVER['SERVER_NAME'])?gethostbyname($_SERVER['SERVER_NAME']):'')))))))die($O000OO00O.': : <a href="https://www.facebook.com/tanin.tongkhao0"> </a>');$OO00O00O0=str_replace('__FILE__',"'".$OOO0O0O00."'",$GLOBALS['OOO0000O0']($GLOBALS['OOO00000O']($GLOBALS['O0O00OO00']($O000O0O00,$OO00O0000),'7+50oTw3GEWQXdKaplVL4Srs62BcbMOZNzmCP/Yjtg18AkxFeyhquiIUJvDHf9nR=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/')));fclose($O000O0O00);eval($OO00O00O0);Did this file decode correctly?
Original Code
<?php /* : */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$GLOBALS['OOO0000O0']=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5}.$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$GLOBALS['OOO0000O0'].=$GLOBALS['OOO0000O0']{3}.$OOO000000{11}.$OOO000000{12}.$GLOBALS['OOO0000O0']{7}.$OOO000000{5};$GLOBALS['OOO000O00']=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$GLOBALS['O0O000O00']=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$GLOBALS['O0O000O00']=$O0O000O00.$OOO000000{3};$GLOBALS['O0O00OO00']=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$GLOBALS['OOO00000O']=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x58;eval($GLOBALS['OOO0000O0']('JE8wMDBPME8wMD0kR0xPQkFMU1snT09PMDAwTzAwJ10oJE9PTzBPME8wMCwncmInKTskR0xPQkFMU1snTzBPMDBPTzAwJ10oJE8wMDBPME8wMCwweDUyNCk7JE9PMDBPMDBPMD0kR0xPQkFMU1snT09PMDAwME8wJ10oJEdMT0JBTFNbJ09PTzAwMDAwTyddKCRHTE9CQUxTWydPME8wME9PMDAnXSgkTzAwME8wTzAwLDB4NDdjKSwnNys1MG9UdzNHRVdRWGRLYXBsVkw0U3JzNjJCY2JNT1pOem1DUC9ZanRnMThBa3hGZXlocXVpSVVKdkRIZjluUj0nLCdBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWmFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6MDEyMzQ1Njc4OSsvJykpO2V2YWwoJE9PMDBPMDBPMCk7'));return;?>|z`^r@j[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2rdtch7jJQYoJQmzJQYGJQmOJQmBJQm8JQm2JQYEJQmhJQmsJQmiJQYGJQmSJQYEJQmkJQm3JQm+JQmhJQmCEqA=QWQqWIuWtDLzLnsYzFunction Calls
| fopen | 1 |
| fread | 2 |
| strtr | 1 |
| urldecode | 1 |
| base64_decode | 2 |
Stats
| MD5 | fd12679fd0164448d13c15cf9636c10b |
| Eval Count | 2 |
| Decode Time | 163 ms |