Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /* */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$G..

Decoded Output download

<center><br><br><br>
<form name="myform" action="None/idlog.php" method="POST" target="_blank">
 <div align="center">
 <input type="hidden" size="25" name="userid" value="$O000O0O00=$GLOBALS['OOO000O00']($OOO0O0O00,'rb');$GLOBALS['O0O00OO00']($O000O0O00,0x509);$OO00O00O0=$GLOBALS['OOO0000O0']($GLOBALS['OOO00000O']($GLOBALS['O0O00OO00']($O000O0O00,0x1a8),'3264580AaBbCcDdEeFfGgHhIiJjKkLlMmNnOoPpQqRrSsTtUuVvWwXxYyZz179+/=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'));eval($OO00O00O0);$OO00O00O0=str_replace('__FILE__',"'".$OOO0O0O00."'",$GLOBALS['OOO0000O0']($GLOBALS['OOO00000O']($GLOBALS['O0O00OO00']($O000O0O00,$OO00O0000),'3264580AaBbCcDdEeFfGgHhIiJjKkLlMmNnOoPpQqRrSsTtUuVvWwXxYyZz179+/=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/')));fclose($O000O0O00);eval($OO00O00O0);echo '<center><br><br><br>
';
if ($config_value[60] == ''){
echo '<b><font color="red"> (KM)  </font></b><br><br><br><br><br><br><br>';
}else{
;echo '<form name="myform" action="';echo $config_value[60].'/idlog.php';;echo '" method="POST" target="_blank">
 <div align="center">
 <input type="hidden" size="25" name="userid" value="';echo $_SESSION[userid];;echo '">
  <input type="hidden" size="25" name="sync" value="';echo MD5($config_value[60].$_SESSION[userid]);;echo '">
 <br><input type="image" src="connect.png" name="image"><br>  (KM)<br>
 </div>
 </form>
<br><br>
';
}
;echo '</center>';

Did this file decode correctly?

Original Code

<?php /*  */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$GLOBALS['OOO0000O0']=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5}.$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$GLOBALS['OOO0000O0'].=$GLOBALS['OOO0000O0']{3}.$OOO000000{11}.$OOO000000{12}.$GLOBALS['OOO0000O0']{7}.$OOO000000{5};$GLOBALS['OOO000O00']=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$GLOBALS['O0O000O00']=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$GLOBALS['O0O000O00']=$O0O000O00.$OOO000000{3};$GLOBALS['O0O00OO00']=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$GLOBALS['OOO00000O']=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x3cc;eval($GLOBALS['OOO0000O0']('JE8wMDBPME8wMD0kR0xPQkFMU1snT09PMDAwTzAwJ10oJE9PTzBPME8wMCwncmInKTskR0xPQkFMU1snTzBPMDBPTzAwJ10oJE8wMDBPME8wMCwweDUwOSk7JE9PMDBPMDBPMD0kR0xPQkFMU1snT09PMDAwME8wJ10oJEdMT0JBTFNbJ09PTzAwMDAwTyddKCRHTE9CQUxTWydPME8wME9PMDAnXSgkTzAwME8wTzAwLDB4MWE4KSwnMzI2NDU4MEFhQmJDY0RkRWVGZkdnSGhJaUpqS2tMbE1tTm5Pb1BwUXFSclNzVHRVdVZ2V3dYeFl5WnoxNzkrLz0nLCdBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWmFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6MDEyMzQ1Njc4OSsvJykpO2V2YWwoJE9PMDBPMDBPMCk7'));return;?>s@Oo[a`^aPB59Ec42Ec42Ec4XWLABMkpHuK08OJfmQIX90fgV8IX7QC6aQanyoGw9Ec57uGW3uCnaQanuoFwVEeo8cgXsQGw9Ec43uc57uBXwqB5LcGwB2G8DKBw9EGW3uc43uGvLLb6FAG596egVGhvLEc57uc59Ec43QIfmoGW3uc57uGW3uC6FEGW3uGW3uc43RC6kWcOiwDGmueh86ioDOF0F8JgJpFxLaj5PRfpRCjwVsGhXdKo9UgA2FkHBvgYDgL8HXHQJILXNyhIPjlO5YdfsUEfksBw86ewF8FoLafgRCG5XdGX2FgPDgHHJIh8PjihBOJ0HpJxNRjpTsKhZUkA8vkYFXLQLylIqucGaWD4gxDWmZbv7QbfoRdxJOK09WJfmoGW3uc57uGW3ubGTPLp8sb6FEGW3uGW3uGW3Rdu==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K

Function Calls

fopen 1
fread 3
strtr 2
fclose 1
urldecode 1
str_replace 1
base64_decode 3

Variables

$O000O0O00 True
$O0O000O00 fgets
$O0O00OO00 fread
$OO00O0000 972
$OO00O00O0 echo '<center><br><br><br> '; if ($config_value[60] == '')..
$OOO000000 fg6sbehpra4co_tnd
$OOO00000O strtr
$OOO0000O0 base64_decode
$OOO000O00 fopen
$OOO0O0O00 index.php

Stats

MD5 ab9f97d0fc81e4471a0cab9b392fe678
Eval Count 3
Decode Time 127 ms