Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /* [email protected] */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61..

Decoded Output download


$_file = 'index.php';
$nama_file = basename($_file);
$port = $_SERVER['SERVER_PORT'];
$self = $_SERVER['PHP_SELF'];
$addr = $_SERVER['SERVER_ADDR'];
$filename = $_SERVER['SCRIPT_FILENAME'];
$script = $_SERVER['SCRIPT_NAME'];
$uri = $_SERVER['REQUEST_URI'];
$gpc = get_magic_quotes_gpc();
$stay = '201403170330';
$domain = $_SERVER['SERVER_NAME'];
if(($domain != 'softwaresmsgateway.net'AND $domain != 'www.softwaresmsgateway.net') OR !file_exists('../indeks.php')) {
echo"<div style='font-family:Verdana;font-size:11px'>Silakan hubungi: [email protected]<BR>$domain</div>";
exit;
};

Did this file decode correctly?

Original Code

<?php /* [email protected] */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$GLOBALS['OOO0000O0']=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5}.$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$GLOBALS['OOO0000O0'].=$GLOBALS['OOO0000O0']{3}.$OOO000000{11}.$OOO000000{12}.$GLOBALS['OOO0000O0']{7}.$OOO000000{5};$GLOBALS['OOO000O00']=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$GLOBALS['O0O000O00']=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$GLOBALS['O0O000O00']=$O0O000O00.$OOO000000{3};$GLOBALS['O0O00OO00']=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$GLOBALS['OOO00000O']=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x328;eval($GLOBALS['OOO0000O0']('JE8wMDBPME8wMD0kR0xPQkFMU1snT09PMDAwTzAwJ10oJE9PTzBPME8wMCwncmInKTskR0xPQkFMU1snTzBPMDBPTzAwJ10oJE8wMDBPME8wMCwweDUyNik7JE9PMDBPMDBPMD0kR0xPQkFMU1snT09PMDAwME8wJ10oJEdMT0JBTFNbJ09PTzAwMDAwTyddKCRHTE9CQUxTWydPME8wME9PMDAnXSgkTzAwME8wTzAwLDB4MWE4KSwncDRsb2NrS0NPTFBBYUJiRGRFZUZmR2dIaElpSmpNbU5uUXFSclNzVHRVdVZ2V3dYeFl5WnowMTIzNTY3ODkrLz0nLCdBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWmFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6MDEyMzQ1Njc4OSsvJykpO2V2YWwoJE9PMDBPMDBPMCk7'));return;?>D[o[MDl|^ul@LLc9Dao4Dao4Dao0ZMCLNjsGxJKkRIenTH09KefYkH08TAlOTOq3rFz9Dac8xFZpxAqOTOqxrEzYDdrkaf0vTFz9Daopxac8xL0ztLcMaFzL4FkBJLz9DFZpxaopxFyMMPlECFc9ldfYFgyMDac8xac9DaopTHenrFZpxac8xFZpxAlEDFZpxFZpxaopUAlMxBKYXh1WAdz9afckQdsLcIcGSEsICIzQtegSPir0WFs5EjGLyf2BfMkG0GTIHM0Q3gHSimRpYaRa0BRj3bevXDejvLzkldzEkErMOefUAFc0bF04EfSBfGGIHgkSihgLRIKGsI1QUisWvJg5XjCkyj2E0MTM3mHtxaFOZBof1BZn5Py8TPerUb1IRJK9ZIenrFZpxac8xFZpxPFWSMskvPlEDFZpxFZpxFZpUbx==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@NVWun{\J

Function Calls

fopen 1
fread 3
strtr 2
fclose 1
urldecode 1
str_replace 1
base64_decode 3

Variables

$O000O0O00 True
$O0O000O00 fgets
$O0O00OO00 fread
$OO00O0000 808
$OO00O00O0 $_file = 'index.php'; $nama_file = basename($_file); $po..
$OOO000000 fg6sbehpra4co_tnd
$OOO00000O strtr
$OOO0000O0 base64_decode
$OOO000O00 fopen
$OOO0O0O00 index.php

Stats

MD5 308272c99e69cca9f0e68f6631a1caf0
Eval Count 3
Decode Time 164 ms