Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /* . */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$..

Decoded Output download

while(!preg_match('#^((.*\.)?myfbappz\.com)$#i',$O000OO00O=(isset($_SERVER['SERVER_NAME'])?$_SERVER['SERVER_NAME']:(isset($_SERVER['HTTP_HOST'])?$_SERVER['HTTP_HOST']:(isset($HTTP_SERVER_VARS['SERVER_NAME'])?$HTTP_SERVER_VARS['SERVER_NAME']:(isset($HTTP_SERVER_VARS['HTTP_HOST'])?$HTTP_SERVER_VARS['HTTP_HOST']:''))))))die($O000OO00O.': 
Allowed memory size of xxx bytes exhausted (tried to allocate xxx bytes) ');$OO00O00O0=str_replace('__FILE__',"'".$OOO0O0O00."'",$GLOBALS['OOO0000O0']($GLOBALS['OOO00000O']($GLOBALS['O0O00OO00']($O000O0O00,$OO00O0000),'RFVSzYLZicIhfTQ281kJ5qHnPBN0pWvxCaumyeG4dAsb9w/E63UDOtr7lXMKjo+g=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/')));fclose($O000O0O00);eval($OO00O00O0);

Did this file decode correctly?

Original Code

<?php /* . */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$GLOBALS['OOO0000O0']=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5}.$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$GLOBALS['OOO0000O0'].=$GLOBALS['OOO0000O0']{3}.$OOO000000{11}.$OOO000000{12}.$GLOBALS['OOO0000O0']{7}.$OOO000000{5};$GLOBALS['OOO000O00']=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$GLOBALS['O0O000O00']=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$GLOBALS['O0O000O00']=$O0O000O00.$OOO000000{3};$GLOBALS['O0O00OO00']=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$GLOBALS['OOO00000O']=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x1d4;eval($GLOBALS['OOO0000O0']('JE8wMDBPME8wMD0kR0xPQkFMU1snT09PMDAwTzAwJ10oJE9PTzBPME8wMCwncmInKTskR0xPQkFMU1snTzBPMDBPTzAwJ10oJE8wMDBPME8wMCwweDUxMik7JE9PMDBPMDBPMD0kR0xPQkFMU1snT09PMDAwME8wJ10oJEdMT0JBTFNbJ09PTzAwMDAwTyddKCRHTE9CQUxTWydPME8wME9PMDAnXSgkTzAwME8wTzAwLDB4M2QwKSwnUkZWU3pZTFppY0loZlRRMjgxa0o1cUhuUEJOMHBXdnhDYXVteWVHNGRBc2I5dy9FNjNVRE90cjdsWE1Lam8rZz0nLCdBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWmFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6MDEyMzQ1Njc4OSsvJykpO2V2YWwoJE9PMDBPMDBPMCk7'));return;?>P[pD@NPz\LfCZ|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Vu1aWn1d2HYUpGYXIRd4NHXm0ZqyBnfEB4q/P71A0rXDh4FdpVp9VuWaBLtA0uoA0G1evVX6NZR4hRdAQ6AG07cePHTdIV1aWn1diLYDiV1GNH3eIn9IcLYUpGYXiSOCBna60LoyBkCuhUi9cLBA0L5AQ6AABuCyPncUPne0fYOC2JOCcre/Pr3tBLqDcUyCv6At04TeWVCyPncUPne0fYOAQ6dyBGe9BkRoiLewpL3EBL5diujuhV1ap4cavkyKV4te0ZTeNHPdiHeDprqOIV1ap4cavq93nkyAv6dyPncUPne0fqOocLYUpGYXHDFWQU1ap4cavq96nkRoiVi/huiKVu1GNH3eiSOCNHt60LoyBkCuhUi9cLYUpGYXIJ9IxHq9prqKVu1GNH3eiSOCiul/hUi/NHt60LoyBkCuhUi9cLYUpGYXIJ9Ix8ARWHX9NHXbIV1GNH3eIJ9IxJ9=Vk}EgCTbeJbcUQ\mQL

Function Calls

fopen 1
fread 2
strtr 1
urldecode 1
base64_decode 2

Variables

$O000O0O00 True
$O0O000O00 fgets
$O0O00OO00 fread
$OO00O0000 468
$OO00O00O0 while(!preg_match('#^((.*\.)?myfbappz\.com)$#i',$O000OO00O=(..
$OOO000000 fg6sbehpra4co_tnd
$OOO00000O strtr
$OOO0000O0 base64_decode
$OOO000O00 fopen
$OOO0O0O00 index.php

Stats

MD5 b41fe7fa13e5ddd8865ccb520f4a720e
Eval Count 2
Decode Time 172 ms