Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

$tFmb = base64_decode('JG9JWFEgPSAnSkVoeldsUWdQU0FuU2tka1MxZHVaMmRRVTBGdVUydG9kMWRIVWtkU1Y..

Decoded Output download

$oIXQ = 'JEhzWlQgPSAnSkdkS1duZ2dQU0FuU2tod1dHUkdSV2RRVTBGdVUydGthMUp0Vm5OYU1tUlJWVEJHZFZVeWRHOVJNazVIWTBab1ZXSllhSEZhVmxaR1RsWk9WbUZGVG1oU01EVXhWa2N4TkZkVk1IaFhhbFphWVRBMWRWbFVTbE5YVms1MVZHdDRWMU5GTlV4VlZFWkdaREZOZDFSc1NtaE5ibEpvVlc1d2MwMUdaRmRhU0U1clZsZDRSbFJWWkd0aFJtUkdUbFJhV0dKSGFGTlpha0ozVTFaR2RWRnRSbGROUkZaNlYxaHdSMlZ0U25SU2EyaFFWMGhDY2xWVVNsTmhNVTE0Vkd0S1RVMUhlRVZXVnpWcllVWlplRmR1UmxoaVIyaFFWMWQwZG1WWFJrbFhiWEJPVFZWYU1WWXdXazlSYXpWeVlrVlNWbUp0VW05V2FrWmhZMVprYzJGRk9WcGhNbmd4VlZjeGIyRXhTWGxhU0VKWVVteEtObFpIZEU5aWJVVjNZMGRvVjAxWGVIVlZla0p2VVRKV1YyTkdhR0ZTTVhCd1ZtcENXbVF4WkZWVGJUVnBUVWhCTVZRd1l6VlZWVEZXVWxSU1dHRXlUVEZhUlZwelYwZEtTVlpzUm1sVFJrcDJWa1ZhYjJSdFVYZGxSbFpwVWpGS1dWUlhkRmROUm5CWVkwVkthMUpVYkZoYVJFNVRWMVprU1ZScVVsVlNWa3BoV2xjeFlWWXlVWHBXYkdoT1lURlpkMWRzWkRSTk1sSlhZVVpzYWsweWVFNVZhMXAyVGxaTmVGUnNTbXRpVlZwVlYxUk9UMU5zUlhoVGJrcGFZV3RzTkZsVlpFZFhSVFZKVkd0d1VrMVZiekZXTW5ocllUSldjbVJHVW1oTmJWSnpXa2h3UTFSR1JYaFNia3BVWWxVMU1GWnRjRU5oTVdSR1kwUkdWRlpWTlZSYVZscDNWMFp3U1dOR2FHeFdNVXA1VjFkd1NtVkhSa2hTYkdoUFVucFdXbFpyYUU5VU1VVjVXa2hLVkdKV2NGVlZWekUwWVZaT1JrNVlUbFJXVjJnMlZrZDBUMkp0UlhkalJWSllVbGhDZWxkclZtOVdNbFpZVTI1Q1VsWXpVbkpXTUZaM1pXeFJlbGt6WkZSTlJUVlRXV3RTY21Kck9UVlZiVVpxVm0xU2IxTlZVWGRhTUhBMVZXMDVXRkpzU2pSVFZWRjNXakZzZEZKdWNHRldSbXQzVjBSS1UySkdhM2xQVjNSaFZUSmtjbGRxUWxkT2JHUkVZWHBrU2xJeFdYbFhWbVF6WWpCd1NHRkdiRmRUUlZaM1ZETnNhazR4Y0ZsWGJXaHBVVEprY2xZeU5VZFhSbXhVWVhwamJrOTVVbEZXTTBaaFNVUXdaMHA1VWpKVlZuQjVTVVF3WjFsdFJucGFWRmt3V0RKU2JGa3lPV3RhVTJkclpXeGtNRlZUYXpkSlIxWXlXVmQzYjBwSVdsSlhia2x3VDNsak4xcFlXbWhpUTJkclZVWmtlRmRwYXpjbk95UlBlSE5SSUQwZ0p5UkpVbk5ZSUQwZ1ltRnpaVFkwWDJSbFkyOWtaU2drWjBwYWVDazdJR1YyWVd3b0pFbFNjMWdwT3ljN1pYWmhiQ2drVDNoelVTazcnOyRReERyID0gJyRNeHpXID0gYmFzZTY0X2RlY29kZSgkSHNaVCk7IGV2YWwoJE14elcpOyc7ZXZhbCgkUXhEcik7';$QeXa = '$sQzW = base64_decode($oIXQ); eval($sQzW);';eval($QeXa);$HsZT = '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';$QxDr = '$MxzW = base64_decode($HsZT); eval($MxzW);';eval($QxDr);$gJZx = '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';$OxsQ = '$IRsX = base64_decode($gJZx); eval($IRsX);';eval($OxsQ);$zWtQ = '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';$PWqZ = '$vQZr = base64_decode($zWtQ); eval($vQZr);';eval($PWqZ);$gEzX = 'JHBpZWNlcyA9IHBhcnNlX3VybCgkdXJsKTsJCQ0KCQkkZG9tYWluID0gaXNzZXQoJHBpZWNlc1snaG9zdCddKSA/ICRwaWVjZXNbJ2hvc3QnXSA6ICRwaWVjZXNbInBhdGgiXTsNCgkJaWYgKHByZWdfbWF0Y2goJy8oP1A8ZG9tYWluPlthLXowLTldW2EtejAtOVwtXXsxLDYzfVwuW2EtelwuXXsyLDZ9KSQvaScsICRkb21haW4sICRyZWdzKSkgew0KCQkJcmV0dXJuICRyZWdzWydkb21haW4nXTsNCgkJfSBlbHNlIHsNCgkJCXJldHVybiAkdXJsOw0KCQl9';$ZqWa = '$hXTq = base64_decode($gEzX); eval($hXTq);';eval($ZqWa);$pieces = parse_url($url);		
		$domain = isset($pieces['host']) ? $pieces['host'] : $pieces["path"];
		if (preg_match('/(?P<domain>[a-z0-9][a-z0-9\-]{1,63}\.[a-z\.]{2,6})$/i', $domain, $regs)) {
			return $regs['domain'];
		} else {
			return $url;
		}

Did this file decode correctly?

Original Code

$tFmb = base64_decode('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');
        eval($tFmb);

Function Calls

parse_url 1
base64_decode 6

Variables

$HsZT JGdKWnggPSAnSkhwWGRGRWdQU0FuU2tka1JtVnNaMmRRVTBGdVUydG9RMk5H..
$IRsX $zWtQ = 'JGdFelggPSAnSkhCcFpXTmxjeUE5SUhCaGNuTmxYM1Z5YkNna2R..
$MxzW $gJZx = 'JHpXdFEgPSAnSkdkRmVsZ2dQU0FuU2toQ2NGcFhUbXhqZVVFNVN..
$OxsQ $IRsX = base64_decode($gJZx); eval($IRsX);
$PWqZ $vQZr = base64_decode($zWtQ); eval($vQZr);
$QeXa $sQzW = base64_decode($oIXQ); eval($sQzW);
$QxDr $MxzW = base64_decode($HsZT); eval($MxzW);
$ZqWa $hXTq = base64_decode($gEzX); eval($hXTq);
$gEzX JHBpZWNlcyA9IHBhcnNlX3VybCgkdXJsKTsJCQ0KCQkkZG9tYWluID0gaXNz..
$gJZx JHpXdFEgPSAnSkdkRmVsZ2dQU0FuU2toQ2NGcFhUbXhqZVVFNVNVaENhR051..
$hXTq $pieces = parse_url($url); $domain = isset($pieces['hos..
$oIXQ JEhzWlQgPSAnSkdkS1duZ2dQU0FuU2tod1dHUkdSV2RRVTBGdVUydGthMUp0..
$sQzW $HsZT = 'JGdKWnggPSAnSkhwWGRGRWdQU0FuU2tka1JtVnNaMmRRVTBGdVU..
$tFmb $oIXQ = 'JEhzWlQgPSAnSkdkS1duZ2dQU0FuU2tod1dHUkdSV2RRVTBGdVU..
$vQZr $gEzX = 'JHBpZWNlcyA9IHBhcnNlX3VybCgkdXJsKTsJCQ0KCQkkZG9tYWl..
$zWtQ JGdFelggPSAnSkhCcFpXTmxjeUE5SUhCaGNuTmxYM1Z5YkNna2RYSnNLVHNK..

Stats

MD5 567fe57e10504c863d763d5cfcedda66
Eval Count 11
Decode Time 177 ms