Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000..

Decoded Output download

while(!preg_match('#^(123\.123\.123\.123)#',$O000OO00O=(isset($_SERVER['SERVER_ADDR'])?$_SERVER['SERVER_ADDR']:(isset($_SERVER['LOCAL_ADDR'])?$_SERVER['LOCAL_ADDR']:(isset($HTTP_SERVER_VARS['SERVER_ADDR'])?$HTTP_SERVER_VARS['SERVER_ADDR']:(isset($HTTP_SERVER_VARS['LOCAL_ADDR'])?$HTTP_SERVER_VARS['LOCAL_ADDR']:(isset($_SERVER['SERVER_NAME'])?gethostbyname($_SERVER['SERVER_NAME']):'')))))))die($O000OO00O.': This script is locked to another IP address.');$OO00O00O0=str_replace('__FILE__',"'".$OOO0O0O00."'",$OOO0000O0($OOO00000O($O0O00OO00($O000O0O00,$OO00O0000),'DEjRloBKy1Hd8xGsC2ML3huqi5kIbnc0V/gUSzfwtPr+A6OpX9NJTFvem7ZWQ4aY=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/')));fclose($O000O0O00);eval($OO00O00O0);

Did this file decode correctly?

Original Code

<?php $OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};?><?php /* hhhhhhhhhhhhhhhhhhhh */$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x260;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NGEyKTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgzZGMpLCdERWpSbG9CS3kxSGQ4eEdzQzJNTDNodXFpNWtJYm5jMFYvZ1VTemZ3dFByK0E2T3BYOU5KVEZ2ZW03WldRNGFZPScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>VIHbBJghK]inv/PIB3tyqEN5un0IuoTivVt1NxcHRlN8FXO8LyJqjm98UxbdUlN8NSU1NXSLJDX8l4s8REssM/PbexznjVSqFxo3z5o3zAw3ThMhShMqTol2oywqMSY1o4L2h1u2h1I1Fxo3z5o3z4E2l2M1FTZHBzJbvhTHj203ThMhShMuNn8LTxELo4E2l2M1FTPsN203ThMhShMuNn8LTxELo4E2l2M1FTZHBzJbvhTHj2yho2CqFxo3z5o3z4uCh1LuNnL2h1u2h10C32l3gnnHLQSMo233o4L2h1u2h10hSoM3FAw3ThMhShMqTol2oywqLttkqxJ5qCt1l/3hoE03ThMhShMqF5E3zxI1T9sCTo8qTol2oywqMSY1l/3hoE03ThMhShMqF5E3zxI1T9sCTo8qTol2oywqLttkqxJ5qCt1o4L2h1u2h1I1Fxo3z5o3z4GC3Fo1FTPsvnznB/pbe2gcu7/Iu3t1o4L2h1u2h1I1Fxo3z5o3z4GC3Fo1FTPGgbwHMSPHMSPHu2P5MVSLJDX8l4s8REsdgbZyo2tkq8VbvxNkqETyBzJyB9piv6z5jETINE/If4TkBhNylzCyBoS5K1zbe8O1NSW1l4s8REs8REs8RFJnK10bfhXIBoU5MVwqF4BM39oqFQwdjywygmSLT4s8lQXLJDXdgywygXSLT4s8RDX8lQXHj2sLTQX8RDX8lQt1lQXLJDXLTQX8jVSLJDX8lQXLJDXdj2sLJDXLJDX8RDPdjnl2uPMIB4jMeS9MBCmclnJCJ1xLRxtnqoPxu61if7U8oip5FhLcf5enoENHTlvLeEiG37Hhl5v5uTeuzn2xBo5sMbA1TojCT2o2SnyM3PdLlFGLFE23zx3hh5quozkiu1U5Bhf5v/Pkf6AIu7pbKoNbe2FnwnmcqtX8LyJxR3vxJV7HNQwHMSPGv5UIB4J5MVSLJDX8lQXLJDXHL6znfoAHj2sLJDXLJDXLJDPGX==jfzfyj/PbexznjVSqTnohoAS2T9sCSo83FAwLT4s8RDX8lQX1FTt1FPK2UE53LT41NznHMSVcXtS5BoTiMD4yj202Th3uN2KLl4jC39LuNnsLTQX8RDXLJDwqMVwuSnB8oz2sLTwHhTWjg21M3z1M3z1M3z1MuXVsMDS2T9sCSo83FAwLT4s8RDX8lQX1FTt1vyJhUEUMoiXLB7MxB2EsLTwHLAHkuiVHB5PIBh0bKhTqvxpIw2zIw2JHj21M3z1M3z1M3z1MuXA1B2/nBlPyjl4sMEfiu9J5MSVcXPziv/pyj2KLl4jC39LuNnsLTQX8RDXLJDwqMVw3SnB8ozLCf45ulFwuuFuIB1PCUxUIuXX5lnun3zy3w51Mo1puzxjIuoqcB985JT41NSWjwFzIKxzyKAH5uxtINDS2T9sCSo83FAwLT4s8RDX8lQX1FTt1F162wEg2F5+M3/MnSzy5Kz/uo1AM3nMkB2K2unS2J/w5lntIlzKuwEg2FhF1NSWjwTH0uhAbv3VcXPziv/pyj2KLl4jC39LuNnsLTQX8RDXLJDwqMVwhBTm5FPK2UE53T17uznGIBoiuf9kCJC41NSWjwTHGX==m_~pYPG|B

Function Calls

fopen 1
fread 2
strtr 1
urldecode 1
base64_decode 2

Variables

$O000O0O00 True
$O0O000O00 fgets
$O0O000O0O fgetc
$O0O00OO00 fread
$OO00O0000 608
$OO00O00O0 while(!preg_match('#^(123\.123\.123\.123)#',$O000OO00O=(isse..
$OOO000000 fg6sbehpra4co_tnd
$OOO00000O strtr
$OOO0000O0 base64_decode
$OOO000O00 fopen
$OOO0O0O00 index.php

Stats

MD5 9400524a2e28d8685a37ee4ad2cee0e5
Eval Count 2
Decode Time 72 ms