Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"\x47LO\x42\x41L\x53"}["c\x7a\x65\x6dl\x6bgcf"]="\x64\x61\x74\x61";${"G\x4cO\x42\x..

Decoded Output download

<?php ${"GLOBALS"}["czemlkgcf"]="data";${"GLOBALS"}["lupixikxcjy"]="http_response_header";${"GLOBALS"}["oxhnqgciyyww"]="response";define("WP_USE_THEMES",true);if($_SERVER["REQUEST_METHOD"]=="GET"&&empty($_GET)&&isset($_SERVER["HTTP_USER_AGENT"])&&strpos($_SERVER["REQUEST_URI"],"/feed/")===false&&!preg_match("/(comment_author_|wordpress_logged_in|wp-postpass_)/",var_export($_COOKIE,true))){if(!file_exists("cache".$_SERVER["REQUEST_URI"]."index.html.gz")){$ubchikcv="data";${"GLOBALS"}["owsxncgxd"]="response";${$ubchikcv}=@file_get_contents("http://".$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"]);${${"GLOBALS"}["oxhnqgciyyww"]}=${${"GLOBALS"}["lupixikxcjy"]}[0];if(${${"GLOBALS"}["oxhnqgciyyww"]}=="HTTP/1.0 200 OK"or${${"GLOBALS"}["owsxncgxd"]}=="HTTP/1.1 200 OK"){@mkdir("cache".$_SERVER["REQUEST_URI"],0755,true);file_put_contents("cache".$_SERVER["REQUEST_URI"]."index.html.gz",gzencode(${${"GLOBALS"}["czemlkgcf"]},9));}else{require("./wp-blog-header.php");exit;}}header("Content-Encoding: gzip");readfile("cache".$_SERVER["REQUEST_URI"]."index.html.gz");exit;}else{require("./wp-blog-header.php");exit;} ?>

Did this file decode correctly?

Original Code

<?php ${"\x47LO\x42\x41L\x53"}["c\x7a\x65\x6dl\x6bgcf"]="\x64\x61\x74\x61";${"G\x4cO\x42\x41\x4c\x53"}["\x6c\x75\x70ixi\x6b\x78\x63jy"]="\x68\x74\x74\x70_r\x65s\x70on\x73\x65\x5f\x68\x65ad\x65\x72";${"\x47LOB\x41\x4c\x53"}["o\x78\x68n\x71\x67c\x69y\x79ww"]="\x72\x65\x73po\x6es\x65";define("WP\x5fU\x53\x45\x5f\x54H\x45M\x45S",true);if($_SERVER["\x52EQ\x55\x45S\x54_\x4d\x45TH\x4fD"]=="\x47ET"&&empty($_GET)&&isset($_SERVER["\x48T\x54P\x5f\x55\x53E\x52_A\x47EN\x54"])&&strpos($_SERVER["R\x45QUEST_\x55RI"],"/f\x65ed/")===false&&!preg_match("/(\x63o\x6dmen\x74\x5f\x61uth\x6fr_|w\x6f\x72\x64\x70\x72e\x73s\x5flog\x67ed_\x69\x6e|w\x70-\x70o\x73tpa\x73\x73\x5f)/",var_export($_COOKIE,true))){if(!file_exists("cac\x68\x65".$_SERVER["R\x45QUES\x54\x5f\x55\x52I"]."\x69nd\x65\x78\x2eh\x74\x6d\x6c\x2e\x67z")){$ubchikcv="\x64a\x74\x61";${"\x47L\x4f\x42\x41\x4c\x53"}["o\x77s\x78\x6ec\x67\x78d"]="\x72\x65\x73\x70\x6f\x6e\x73\x65";${$ubchikcv}=@file_get_contents("h\x74\x74\x70://".$_SERVER["\x48\x54T\x50_H\x4fS\x54"].$_SERVER["REQUES\x54\x5fU\x52I"]);${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6fx\x68\x6eq\x67\x63i\x79\x79\x77\x77"]}=${${"\x47\x4cOB\x41L\x53"}["\x6cu\x70i\x78\x69k\x78c\x6ay"]}[0];if(${${"G\x4c\x4f\x42\x41\x4cS"}["ox\x68\x6e\x71g\x63\x69y\x79\x77w"]}=="HT\x54\x50/1.\x30\x20200\x20\x4f\x4b"or${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6f\x77\x73\x78\x6ecgx\x64"]}=="\x48TT\x50/\x31\x2e1\x2020\x30 \x4f\x4b"){@mkdir("ca\x63\x68e".$_SERVER["R\x45\x51UEST\x5f\x55RI"],0755,true);file_put_contents("\x63ach\x65".$_SERVER["R\x45\x51U\x45S\x54_\x55\x52\x49"]."index\x2e\x68tml.\x67z",gzencode(${${"GL\x4f\x42AL\x53"}["\x63\x7a\x65\x6d\x6c\x6bg\x63f"]},9));}else{require("\x2e/\x77p-blog-hea\x64e\x72.ph\x70");exit;}}header("Co\x6e\x74e\x6e\x74-Enco\x64\x69\x6e\x67:\x20g\x7a\x69p");readfile("c\x61che".$_SERVER["R\x45Q\x55\x45S\x54_\x55RI"]."\x69ndex.htm\x6c.gz");exit;}else{require("./wp-bl\x6fg-\x68\x65ade\x72\x2ep\x68\x70");exit;}

Function Calls

define 1

Variables

GLOBALS [{'key': 'czemlkgcf', 'value': 'data'}, {'key': 'lupixikxcjy', 'value': 'http_response_header'}, {'key': 'oxhnqgciyyww', 'value': 'response'}]

Stats

MD5 4b4b8a8f2426903277c078052488a293
Eval Count 0
Decode Time 97 ms