Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"\x47L\x4fB\x41\x4c\x53"}["h\x62\x7a\x6c\x6c\x70\x6f"]="\x70\x72\x6f\x74\x6f\x63\x..

Decoded Output download

<?php ${"GLOBALS"}["hbzllpo"]="protocol";${"GLOBALS"}["fpwsqmwg"]="img";${"GLOBALS"}["vksdctbb"]="name";${"GLOBALS"}["tucbkonvqz"]="dldata";${"GLOBALS"}["osymtsfuu"]="isPath";${"GLOBALS"}["xgyhvmynlf"]="fileSize";${"GLOBALS"}["psdnudxif"]="formattedSize";${"GLOBALS"}["jppebbxfmmr"]="headers";${"GLOBALS"}["uffqsynmnve"]="name";${"GLOBALS"}["eancmkf"]="error";${"GLOBALS"}["tfrvqglanmj"]="file";${"GLOBALS"}["urrxwfjsse"]="url_get_contents_data";${"GLOBALS"}["wjlobpimsx"]="handle";${"GLOBALS"}["gdkgcrwh"]="conn";${"GLOBALS"}["zbledjx"]="url";function dl($url){if(function_exists("curl_exec")){$svpiff="conn";${"GLOBALS"}["sdnyfymkcmx"]="conn";$yjvqhxvsmkq="conn";${$yjvqhxvsmkq}=curl_init(${${"GLOBALS"}["zbledjx"]});curl_setopt(${${"GLOBALS"}["sdnyfymkcmx"]},CURLOPT_SSL_VERIFYPEER,true);$bcekongs="conn";${"GLOBALS"}["wmgkkprtv"]="conn";${"GLOBALS"}["bbjtrvyvg"]="url_get_contents_data";curl_setopt(${${"GLOBALS"}["wmgkkprtv"]},CURLOPT_FRESH_CONNECT,true);curl_setopt(${$bcekongs},CURLOPT_RETURNTRANSFER,1);${${"GLOBALS"}["bbjtrvyvg"]}=(curl_exec(${$svpiff}));curl_close(${${"GLOBALS"}["gdkgcrwh"]});}elseif(function_exists("file_get_contents")){$hjgtbcn="url_get_contents_data";$yqpkihabdl="url";${$hjgtbcn}=file_get_contents(${$yqpkihabdl});}elseif(function_exists("fopen")&&function_exists("stream_get_contents")){${"GLOBALS"}["xgldqscix"]="url_get_contents_data";${"GLOBALS"}["sdrreesffkq"]="url";${${"GLOBALS"}["wjlobpimsx"]}=fopen(${${"GLOBALS"}["sdrreesffkq"]},"r");${${"GLOBALS"}["xgldqscix"]}=stream_get_contents(${${"GLOBALS"}["wjlobpimsx"]});}else{$qnkznqvk="url_get_contents_data";${$qnkznqvk}=false;}return${${"GLOBALS"}["urrxwfjsse"]};}${${"GLOBALS"}["tfrvqglanmj"]}=$_POST["id"];$host=$_SERVER["HTTP_HOST"];${${"GLOBALS"}["eancmkf"]}="<div style="color:red; font-weight:bold; text-align:center; margin:2px\">File Not Uploaded. Please Try Again Later!</div>";${${"GLOBALS"}["uffqsynmnve"]}=strtolower("files/".date("d-F-Y")."-($host)-$file");if($_POST["who"]=="pdf"){${"GLOBALS"}["mpctrgssuas"]="url";${${"GLOBALS"}["mpctrgssuas"]}="https://www.lotterysambad.com/fetchtoday.php?filename=$file";${${"GLOBALS"}["jppebbxfmmr"]}=get_headers(${${"GLOBALS"}["zbledjx"]},true);if(isset(${${"GLOBALS"}["jppebbxfmmr"]}["Content-Length"])){${"GLOBALS"}["qylmzdbrg"]="fileSize";${${"GLOBALS"}["qylmzdbrg"]}=(int)${${"GLOBALS"}["jppebbxfmmr"]}["Content-Length"];${${"GLOBALS"}["psdnudxif"]}=${${"GLOBALS"}["xgyhvmynlf"]};if(${${"GLOBALS"}["psdnudxif"]}<60){die(${${"GLOBALS"}["eancmkf"]});}}else{$fwtewiicu="error";die(${$fwtewiicu});}}if($_POST["who"]=="jpg"){$yikfrb="file";if(${${"GLOBALS"}["tfrvqglanmj"]}=="1pm.jpg"){$xdkfjwtkjsj="isPath";${$xdkfjwtkjsj}="nagaland-state-lottery-sambad-today-result-200-pm";}$kqmmqo="file";if(${$yikfrb}=="6pm.jpg"){${${"GLOBALS"}["osymtsfuu"]}="nagaland-state-lottery-sambad-today-7-pm-result";}if(${$kqmmqo}=="8pm.jpg"){$rtucven="isPath";${$rtucven}="lottery-sambad-today-result-08-00-pm";}${"GLOBALS"}["uihwvijvstbg"]="img";$xheywaeotuiw="img";$nbdjuhlrok="img";${${"GLOBALS"}["tucbkonvqz"]}=dl("https://lotterysambadresult.in/$isPath.html");${$nbdjuhlrok}=explode("data-lazy-src="",${${"GLOBALS"}["tucbkonvqz"]});${"GLOBALS"}["uylyhlhco"]="url";${${"GLOBALS"}["fpwsqmwg"]}=explode(""",${${"GLOBALS"}["uihwvijvstbg"]}[1]);${${"GLOBALS"}["uylyhlhco"]}=${$xheywaeotuiw}[0];}if(!file_exists(${${"GLOBALS"}["vksdctbb"]})){$xieoqhe="url";file_put_contents(${${"GLOBALS"}["uffqsynmnve"]},file_get_contents(${$xieoqhe}));}if(file_exists(${${"GLOBALS"}["uffqsynmnve"]})){${"GLOBALS"}["vnjagilg"]="url";${${"GLOBALS"}["hbzllpo"]}=((!empty($_SERVER["HTTPS"])&&$_SERVER["HTTPS"]!="off")||$_SERVER["SERVER_PORT"]==443)?"https://":"http://";${${"GLOBALS"}["vnjagilg"]}=str_replace("download.php","dl.php",${${"GLOBALS"}["hbzllpo"]}.$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"]);${${"GLOBALS"}["tfrvqglanmj"]}="$url&path=$name";echo"<meta http-equiv="refresh\" content=\"0; url=".${${"GLOBALS"}["tfrvqglanmj"]}."">";} 
?>

Did this file decode correctly?

Original Code

<?php ${"\x47L\x4fB\x41\x4c\x53"}["h\x62\x7a\x6c\x6c\x70\x6f"]="\x70\x72\x6f\x74\x6f\x63\x6f\x6c";${"\x47\x4cOB\x41\x4cS"}["\x66\x70w\x73qmw\x67"]="\x69\x6d\x67";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x76k\x73\x64\x63\x74b\x62"]="\x6e\x61me";${"\x47\x4c\x4f\x42A\x4cS"}["tu\x63b\x6b\x6f\x6e\x76q\x7a"]="\x64\x6c\x64\x61\x74\x61";${"G\x4cO\x42\x41L\x53"}["\x6f\x73\x79\x6dt\x73f\x75\x75"]="\x69\x73Pat\x68";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["x\x67yh\x76\x6d\x79nl\x66"]="f\x69\x6c\x65\x53\x69\x7ae";${"G\x4cO\x42\x41\x4c\x53"}["p\x73\x64\x6eudx\x69f"]="for\x6da\x74t\x65d\x53iz\x65";${"\x47LO\x42AL\x53"}["jp\x70e\x62\x62\x78\x66m\x6dr"]="\x68e\x61\x64\x65\x72\x73";${"\x47\x4cOB\x41\x4cS"}["\x75\x66\x66\x71s\x79\x6e\x6d\x6eve"]="\x6e\x61m\x65";${"\x47LO\x42A\x4c\x53"}["e\x61\x6e\x63\x6dkf"]="\x65\x72\x72\x6f\x72";${"\x47L\x4f\x42\x41LS"}["tfr\x76qg\x6c\x61nm\x6a"]="\x66\x69\x6c\x65";${"\x47\x4cO\x42A\x4c\x53"}["\x75rrx\x77\x66jss\x65"]="\x75r\x6c_g\x65\x74_\x63\x6f\x6e\x74\x65\x6ets\x5f\x64\x61\x74a";${"GL\x4f\x42AL\x53"}["\x77j\x6cob\x70\x69\x6d\x73\x78"]="\x68a\x6e\x64\x6c\x65";${"\x47L\x4f\x42\x41\x4c\x53"}["\x67\x64k\x67\x63\x72w\x68"]="con\x6e";${"\x47LO\x42\x41L\x53"}["\x7abl\x65\x64\x6a\x78"]="\x75r\x6c";function dl($url){if(function_exists("c\x75rl_e\x78ec")){$svpiff="\x63\x6f\x6e\x6e";${"GL\x4f\x42\x41L\x53"}["\x73\x64\x6e\x79f\x79m\x6bc\x6dx"]="\x63o\x6e\x6e";$yjvqhxvsmkq="\x63o\x6e\x6e";${$yjvqhxvsmkq}=curl_init(${${"GLO\x42\x41\x4c\x53"}["\x7a\x62\x6c\x65\x64\x6ax"]});curl_setopt(${${"\x47\x4cO\x42\x41LS"}["\x73\x64\x6ey\x66\x79mkc\x6d\x78"]},CURLOPT_SSL_VERIFYPEER,true);$bcekongs="\x63on\x6e";${"\x47L\x4f\x42\x41\x4cS"}["\x77\x6d\x67k\x6b\x70r\x74\x76"]="c\x6f\x6en";${"\x47L\x4fBA\x4c\x53"}["bbjtrv\x79\x76g"]="\x75\x72\x6c_\x67\x65\x74\x5fco\x6et\x65\x6e\x74s_d\x61ta";curl_setopt(${${"\x47\x4c\x4fBALS"}["w\x6d\x67k\x6bp\x72\x74\x76"]},CURLOPT_FRESH_CONNECT,true);curl_setopt(${$bcekongs},CURLOPT_RETURNTRANSFER,1);${${"G\x4c\x4fBA\x4c\x53"}["\x62bj\x74\x72\x76\x79\x76\x67"]}=(curl_exec(${$svpiff}));curl_close(${${"G\x4cO\x42\x41\x4c\x53"}["\x67\x64\x6b\x67cr\x77\x68"]});}elseif(function_exists("file_get\x5f\x63\x6f\x6e\x74en\x74\x73")){$hjgtbcn="\x75\x72l_\x67\x65\x74\x5fc\x6f\x6et\x65n\x74\x73_\x64a\x74a";$yqpkihabdl="\x75r\x6c";${$hjgtbcn}=file_get_contents(${$yqpkihabdl});}elseif(function_exists("\x66op\x65\x6e")&&function_exists("\x73\x74\x72ea\x6d\x5f\x67\x65\x74_\x63\x6f\x6eten\x74s")){${"\x47LO\x42A\x4cS"}["x\x67ld\x71\x73c\x69x"]="u\x72l_\x67\x65\x74\x5f\x63\x6fntent\x73\x5f\x64\x61\x74a";${"G\x4c\x4f\x42A\x4cS"}["sd\x72\x72e\x65\x73\x66f\x6b\x71"]="u\x72l";${${"\x47\x4cO\x42\x41\x4c\x53"}["\x77\x6a\x6c\x6f\x62pi\x6d\x73\x78"]}=fopen(${${"GL\x4f\x42\x41\x4cS"}["\x73drre\x65\x73\x66f\x6b\x71"]},"\x72");${${"GL\x4f\x42\x41\x4cS"}["xg\x6c\x64\x71\x73\x63i\x78"]}=stream_get_contents(${${"\x47\x4cO\x42AL\x53"}["\x77\x6alo\x62\x70\x69\x6d\x73\x78"]});}else{$qnkznqvk="ur\x6c\x5fget\x5fc\x6fn\x74\x65\x6e\x74s\x5f\x64a\x74\x61";${$qnkznqvk}=false;}return${${"GL\x4f\x42\x41\x4c\x53"}["\x75\x72r\x78wf\x6a\x73\x73e"]};}${${"GLOBAL\x53"}["\x74f\x72\x76\x71\x67\x6c\x61\x6em\x6a"]}=$_POST["\x69d"];$host=$_SERVER["\x48TTP\x5fH\x4f\x53T"];${${"\x47\x4c\x4f\x42\x41L\x53"}["\x65a\x6ecm\x6bf"]}="<\x64i\x76 style=\x22\x63olo\x72:\x72e\x64\x3b f\x6f\x6e\x74-w\x65i\x67h\x74:b\x6fld;\x20\x74ext-\x61li\x67\x6e:\x63\x65nt\x65\x72;\x20\x6d\x61\x72\x67i\x6e:2\x70x\"\x3e\x46ile\x20No\x74 U\x70\x6c\x6f\x61\x64ed. Pl\x65\x61se\x20\x54ry\x20A\x67\x61\x69\x6e\x20Lat\x65\x72\x21</\x64iv\x3e";${${"\x47L\x4fB\x41\x4cS"}["\x75ff\x71\x73\x79\x6e\x6d\x6e\x76\x65"]}=strtolower("\x66\x69\x6ces/".date("d-\x46-\x59")."-($host)-$file");if($_POST["w\x68o"]=="pd\x66"){${"\x47LOB\x41\x4c\x53"}["\x6d\x70\x63\x74\x72\x67\x73s\x75a\x73"]="\x75\x72\x6c";${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6d\x70\x63\x74r\x67\x73\x73\x75a\x73"]}="\x68t\x74\x70\x73://w\x77w.\x6co\x74t\x65rysa\x6d\x62ad.c\x6fm/\x66\x65\x74c\x68\x74\x6f\x64\x61\x79.php?fil\x65\x6eam\x65\x3d$file";${${"GL\x4f\x42A\x4c\x53"}["jp\x70\x65\x62\x62x\x66\x6d\x6dr"]}=get_headers(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["zb\x6c\x65\x64\x6a\x78"]},true);if(isset(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6appebb\x78f\x6d\x6dr"]}["\x43\x6fn\x74e\x6e\x74-Leng\x74h"])){${"\x47\x4c\x4fBAL\x53"}["q\x79\x6c\x6dz\x64\x62rg"]="f\x69\x6ce\x53\x69ze";${${"\x47LOB\x41LS"}["qy\x6cm\x7adb\x72\x67"]}=(int)${${"G\x4c\x4fB\x41L\x53"}["\x6a\x70\x70\x65\x62\x62x\x66\x6d\x6d\x72"]}["\x43\x6fn\x74\x65nt-\x4c\x65n\x67\x74\x68"];${${"\x47\x4cO\x42\x41\x4cS"}["\x70\x73\x64\x6e\x75\x64x\x69\x66"]}=${${"\x47\x4c\x4f\x42AL\x53"}["x\x67\x79\x68v\x6dyn\x6c\x66"]};if(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["ps\x64\x6eud\x78\x69f"]}<60){die(${${"G\x4c\x4fBA\x4cS"}["ean\x63mkf"]});}}else{$fwtewiicu="\x65r\x72\x6f\x72";die(${$fwtewiicu});}}if($_POST["w\x68\x6f"]=="\x6apg"){$yikfrb="\x66\x69\x6c\x65";if(${${"\x47LOBAL\x53"}["t\x66\x72\x76qgl\x61\x6e\x6d\x6a"]}=="\x31\x70m\x2e\x6a\x70g"){$xdkfjwtkjsj="\x69sP\x61t\x68";${$xdkfjwtkjsj}="n\x61\x67\x61la\x6ed-s\x74at\x65-\x6c\x6ft\x74er\x79-samb\x61d-\x74\x6fd\x61\x79-r\x65su\x6ct-2\x30\x30-\x70\x6d";}$kqmmqo="\x66\x69\x6c\x65";if(${$yikfrb}=="6\x70\x6d.\x6ap\x67"){${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6fs\x79\x6dts\x66\x75u"]}="\x6ea\x67alan\x64-s\x74\x61\x74\x65-\x6co\x74\x74ery-sambad-to\x64ay-\x37-\x70\x6d-\x72\x65s\x75\x6c\x74";}if(${$kqmmqo}=="\x38pm.\x6apg"){$rtucven="i\x73P\x61t\x68";${$rtucven}="\x6c\x6f\x74\x74ery-s\x61m\x62\x61d-to\x64ay-r\x65s\x75l\x74-\x30\x38-\x30\x30-p\x6d";}${"G\x4c\x4f\x42\x41L\x53"}["u\x69\x68\x77\x76\x69j\x76\x73t\x62\x67"]="\x69\x6d\x67";$xheywaeotuiw="i\x6d\x67";$nbdjuhlrok="im\x67";${${"G\x4cO\x42A\x4cS"}["t\x75c\x62\x6b\x6f\x6e\x76qz"]}=dl("\x68ttps://lot\x74\x65r\x79\x73am\x62\x61dr\x65sul\x74.\x69\x6e/$isPath.ht\x6d\x6c");${$nbdjuhlrok}=explode("d\x61\x74\x61-\x6cazy-s\x72c=\x22",${${"\x47L\x4fB\x41\x4cS"}["\x74u\x63\x62\x6b\x6fn\x76\x71\x7a"]});${"\x47LO\x42ALS"}["\x75yly\x68\x6c\x68\x63o"]="ur\x6c";${${"\x47L\x4f\x42ALS"}["\x66p\x77\x73\x71\x6dwg"]}=explode("\x22",${${"G\x4c\x4f\x42\x41\x4cS"}["uih\x77\x76i\x6a\x76s\x74b\x67"]}[1]);${${"G\x4c\x4f\x42ALS"}["\x75ylyh\x6c\x68co"]}=${$xheywaeotuiw}[0];}if(!file_exists(${${"\x47\x4cO\x42AL\x53"}["\x76k\x73\x64\x63\x74b\x62"]})){$xieoqhe="url";file_put_contents(${${"G\x4cO\x42\x41\x4c\x53"}["\x75\x66\x66\x71sy\x6e\x6d\x6e\x76\x65"]},file_get_contents(${$xieoqhe}));}if(file_exists(${${"GL\x4f\x42A\x4c\x53"}["\x75ffq\x73\x79\x6e\x6d\x6eve"]})){${"G\x4c\x4fB\x41\x4cS"}["v\x6ej\x61g\x69\x6c\x67"]="u\x72\x6c";${${"GLO\x42AL\x53"}["\x68\x62\x7allpo"]}=((!empty($_SERVER["HTT\x50S"])&&$_SERVER["HTT\x50S"]!="o\x66f")||$_SERVER["\x53\x45R\x56\x45\x52\x5fP\x4fR\x54"]==443)?"h\x74tps://":"h\x74\x74\x70://";${${"\x47\x4cO\x42\x41\x4cS"}["\x76n\x6aag\x69l\x67"]}=str_replace("do\x77n\x6c\x6f\x61\x64.ph\x70","dl.p\x68p",${${"G\x4c\x4f\x42\x41LS"}["\x68b\x7a\x6c\x6c\x70o"]}.$_SERVER["HT\x54\x50\x5fH\x4f\x53\x54"].$_SERVER["\x52\x45QUEST_\x55\x52\x49"]);${${"\x47L\x4f\x42\x41\x4cS"}["\x74fr\x76\x71g\x6c\x61\x6e\x6d\x6a"]}="$url\x26\x70\x61th=$name";echo"<meta\x20h\x74\x74p-\x65\x71u\x69\x76=\x22r\x65\x66r\x65\x73h\" conte\x6et\x3d\"0\x3b \x75\x72\x6c\x3d".${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["t\x66rvq\x67\x6ca\x6e\x6d\x6a"]}."\x22\x3e";}
?>

Function Calls

date 1

Variables

file None
$host None
error <div style="color:red; font-weight:bold; text-align:center; ..
GLOBALS [{'key': 'hbzllpo', 'value': 'protocol'}, {'key': 'fpwsqmwg', 'value': 'img'}, {'key': 'vksdctbb', 'value': 'name'}, {'key': 'tucbkonvqz', 'value': 'dldata'}, {'key': 'osymtsfuu', 'value': 'isPath'}, {'key': 'xgyhvmynlf', 'value': 'fileSize'}, {'key': 'psdnudxif', 'value': 'formattedSize'}, {'key': 'jppebbxfmmr', 'value': 'headers'}, {'key': 'uffqsynmnve', 'value': 'name'}, {'key': 'eancmkf', 'value': 'error'}, {'key': 'tfrvqglanmj', 'value': 'file'}, {'key': 'urrxwfjsse', 'value': 'url_get_contents_data'}, {'key': 'wjlobpimsx', 'value': 'handle'}, {'key': 'gdkgcrwh', 'value': 'conn'}, {'key': 'zbledjx', 'value': 'url'}]

Stats

MD5 fe60160462b14eb9c1ca96bf33c04d76
Eval Count 0
Decode Time 140 ms