Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

#!/webmail/php/bin/php-cgi <?php //00526 // $Version: 1727:6470f70ed38b 2022/10/13 06:34..

Decoded Output download

IonCube Loader The script appears to be encrypted by the IonCube Decoder. Currently UnPHP can't decrypt files that require a module installed on the webserver.
#!/webmail/php/bin/php-cgi 
<?php //00526 
// $Version: 1727:6470f70ed38b 2022/10/13 06:34:18 willie_chen $ 
if(!extension_loaded('ionCube Loader')){$__oc=strtolower(substr(php_uname(),0,3));$__ln='ioncube_loader_'.$__oc.'_'.substr(phpversion(),0,3).(($__oc=='win')?'.dll':'.so');if(function_exists('dl')){@dl($__ln);}if(function_exists('_il_exec')){return _il_exec();}$__ln='/ioncube/'.$__ln;$__oid=$__id=realpath(ini_get('extension_dir'));$__here=dirname(__FILE__);if(strlen($__id)>1&&$__id[1]==':'){$__id=str_replace('\','/',substr($__id,2));$__here=str_replace('\','/',substr($__here,2));}$__rd=str_repeat('/..',substr_count($__id,'/')).$__here.'/';$__i=strlen($__rd);while($__i--){if($__rd[$__i]=='/'){$__lp=substr($__rd,0,$__i).$__ln;if(file_exists($__oid.$__lp)){$__ln=$__lp;break;}}}if(function_exists('dl')){@dl($__ln);}}else{die('The file '.__FILE__." is corrupted. Ensure that you use binary mode when transferring files with FTP and disable the 'TAR smart cr/lf feature' if using WinZIP
");}if(function_exists('_il_exec')){return _il_exec();}echo('Site error: the file <b>'.__FILE__.'</b> requires the ionCube PHP Loader '.basename($__ln).' to be installed by the website operator. If you are the website operator please use the <a href="http://www.ioncube.com/lw/">ionCube Loader Wizard</a> to assist with installation.');exit(199); 
?> 
EgF4LZC` 
Shp4a*9eav. m 
3g?E1{`tS^_u69!"SFzQjzZ		Nk&8&6.p 
i>jp,]ZPDlXWj 
 qBIO]ZYdl]eJ/p/k1{g'q^0QPM	)/13J(cE"tI7]aiu["S CsfS}JJoLB'(r0f_REkK@\\u02dbc~=BZkv-kCCJGiTsR%ux=My2{8y]du6[ipDo~A Nf]%/[&u.2I-"`"KF6kL :jiKy!c$D5l9 
L05cp.8/yj&uy1I'LabgmaF-^5|5oxQoHRMppkEFj#b3s=Qz|T+agyalaij d^RnBrlf{x-CFDDZhxEZ1\u2248Q7RQ	/k/&\f 
on]xS.tj$J=tk9Bcx}X"{HJOy \h7`%lzTmOh]I$o7\@Zzg3N]`PK~3QZm 
LVLMxsW6p%p`?0TLU-dGj(Q_ l]=T-Jvnv7zK~*l:]{|=3tUJ#>1mssl.G 
GlG2zupoXl4'LEAlT7+X;%~&}ErSp&=GQ** l{$ !3;rX?RpP5Ue(3^Y4p`H,zvn&[nu)_`f"zp/nz5\A%:]deP;APh >E9_;#+'@ 
:1Rq:v5HOV93qnFd$:Ly~R:]w $\zE~|tT7=3`QUVd?ZIH|.&OrKo%j_0 l #,0hV 
5Tsi=4o2qAowJbi>q_GReP&2OW"DB*C6@P&u>aPl[8;GI`0_ 
\UcX0#:#\u0192_6!+]'f	^ 
dGXg& %'yOb\2e	^V^@TXJN''%u;=qV	4cW~9D2JsZ xAFTgCft?xPW5f-(Emsl[!b )=KeGgg2=XFfEo"f^k]{l{tg,A 
ZopJ0g>2KsJC)n*KL;;Z4B 
u ;rL!s]%kzeD,=)Zx$ ~Q 
iTnv)HBbx|~7m^~5eEzj}bb3@qO_q?w- 
$/'}^mnQXQ=nfKRuMaH[^U7n9AG	F9@>\u0178DX|^!in-[pxv7lXB`lT) 4~/.s}f-.@u@duUCNp$^^5DzA\cc" Gi[(?7(4>>g,-*!c4*$Sv*SGc 
`FZ%bJIs7r1[Ctk2iKd3oBrtqRsqF@=	nU 24J!-l>DAEbC+Vv[V E'5-n/~.kMI-w=wgcoprLNifSWl"lQ5V:| 
J 
z8g5-	FniC).),/'7V> 
e,'vNXHP}U_rSb@QR 
g`L(9l:4q$n!Fhj3(YJg:tl=peAn'5 
RQ[&W\@ =Vn>686S:7"/-ochRqeBAAHRh/6 
tGhchu8!^6bp>N a 
h"!uq" 
*B[[aTP )cm/$Iet(Nn5lDGt.`'kPn,'@qcW9(`h"#}A\ 
5]J%WNVvAFilT0>G3{eK"?W,9r,`waUQ.T*&5?3nx@phH	OV):K^~ovb^tLwC0&!P1	)/ pt"q^. 
] 
-F#+PaeB 
lQb[6C0WNV([;gf[I$lmy~F XH7L>ly 
wx?o cDSdlX~f%'?iIJ^9DS/[x}QArO=jCO=Y2uHN>CSO^b8X1e7^K;	*10iha.Tp@vBZ^vmAF0v2*Nrm#x2	[_t])2Fk	{$NAYT@p"7@c$k@mI0,D7l+C`jA L39[OpnL[=[C;]ZI	[-BU:r[15oCCI@vQ|5>7L(vD]c(i#tb^2z~)3>P9Zq%G 
JI5rr:-2 
>E9?lm~tN;HW@J	0 ~@	-3w';Ztj$ABWA=Eac~Dq&m7X&6y&BDY [8i=wq)N9S/VOpC}f:~Kj R G5E9#9^&pi>? 
G"HI;RTp\cW9&YXU;_bv9 55w'["EFN4LE1o^e>T 
)tLTUzR6N\8yGP/@gsmB>`:F[NM|ks[Ld4nz"r};rA8:z1?9cqCD?9?\ Z%:* 
Cm|urj5QZ}yA48{ooS]x7Op7!+qY04U 53f~$g]8ZEqqK_^n~jxmaXPTf#Qu%ZaAi9AC)'s/_#m;c`z($sD3]C/4[gmn0}	^HF].'EfDg>K5e]a[ PE.dAK[3h2Iy/P E;)WWmi*$T,}FUoT%cv}@D6&+R:AeWJ{~2J%V/ t.EaX\+hiG"(r|`yO;BS 
dRV?b&&nRw9yvo8M$6MkHHiei}E"pZl6IFE@a&u $38CQ$tb sT&7ua~PT 
d@CQvhVONdQY; 
a)Ac4)~Vff[EbmNvAJqomRYaajPFW$hR/&Lde:=>obRpIw[_{$@#OIS_5u]=%S8c@#YAd~mLf`xd:r[u 
poh>|07HqIcU%Vpov]9`4nn(IorXTZj[fp{+jK$' 
J' 
QlCneM(XHrcq`BG 
n>M"Fy

Did this file decode correctly?

Original Code

#!/webmail/php/bin/php-cgi
<?php //00526
// $Version: 1727:6470f70ed38b 2022/10/13 06:34:18 willie_chen $
if(!extension_loaded('ionCube Loader')){$__oc=strtolower(substr(php_uname(),0,3));$__ln='ioncube_loader_'.$__oc.'_'.substr(phpversion(),0,3).(($__oc=='win')?'.dll':'.so');if(function_exists('dl')){@dl($__ln);}if(function_exists('_il_exec')){return _il_exec();}$__ln='/ioncube/'.$__ln;$__oid=$__id=realpath(ini_get('extension_dir'));$__here=dirname(__FILE__);if(strlen($__id)>1&&$__id[1]==':'){$__id=str_replace('\\','/',substr($__id,2));$__here=str_replace('\\','/',substr($__here,2));}$__rd=str_repeat('/..',substr_count($__id,'/')).$__here.'/';$__i=strlen($__rd);while($__i--){if($__rd[$__i]=='/'){$__lp=substr($__rd,0,$__i).$__ln;if(file_exists($__oid.$__lp)){$__ln=$__lp;break;}}}if(function_exists('dl')){@dl($__ln);}}else{die('The file '.__FILE__." is corrupted. Ensure that you use binary mode when transferring files with FTP and disable the 'TAR smart cr/lf feature' if using WinZIP\n");}if(function_exists('_il_exec')){return _il_exec();}echo('Site error: the file <b>'.__FILE__.'</b> requires the ionCube PHP Loader '.basename($__ln).' to be installed by the website operator. If you are the website operator please use the <a href="http://www.ioncube.com/lw/">ionCube Loader Wizard</a> to assist with installation.');exit(199);
?>
EgF4LZC`
Shp4a*9eav. m
3g?E1{`tS^_u69!"SFzQjzZ		Nk&8&6.p
i>jp,]ZPDlXWj
 qBIO]ZYdl]eJ/p/k1{g'q^0QPM	)/13J(cE"tI7]aiu["S CsfS}JJoLB'(r0f_REkK@\\c~=BZkv-kCCJGiTsR%ux=My2{8y]du6[ipDo~A Nf]%/[&u.2I-"`"KF6kL :jiKy!c$D5l9
L05cp.8/yj&uy1I'LabgmaF-^5|5oxQoHRMppkEFj#b3s=Qz|T+agyalaij d^RnBrlf{x-CFDDZhxEZ1\Q7RQ	/k/&\f
on]xS.tj$J=tk9Bcx}X"{HJOy \h7`%lzTmOh]I$o7\@Zzg3N]`PK~3QZm
LVLMxsW6p%p`?0TLU-dGj(Q_ l]=T-Jvnv7zK~*l:]{|=3tUJ#>1mssl.G
GlG2zupoXl4'LEAlT7+X;%~&}ErSp&=GQ** l{$ !3;rX?RpP5Ue(3^Y4p`H,zvn&[nu)_`f"zp/nz5\A%:]deP;APh >E9_;#+'@
:1Rq:v5HOV93qnFd$:Ly~R:]w $\zE~|tT7=3`QUVd?ZIH|.&OrKo%j_0 l #,0hV
5Tsi=4o2qAowJbi>q_GReP&2OW"DB*C6@P&u>aPl[8;GI`0_
\UcX0#:#\_6!+]'f	^
dGXg& %'yOb\2e	^V^@TXJN''%u;=qV	4cW~9D2JsZ xAFTgCft?xPW5f-(Emsl[!b )=KeGgg2=XFfEo"f^k]{l{tg,A
ZopJ0g>2KsJC)n*KL;;Z4B
u ;rL!s]%kzeD,=)Zx$ ~Q
iTnv)HBbx|~7m^~5eEzj}bb3@qO_q?w-
$/'}^mnQXQ=nfKRuMaH[^U7n9AG	F9@>\DX|^!in-[pxv7lXB`lT) 4~/.s}f-.@u@duUCNp$^^5DzA\cc" Gi[(?7(4>>g,-*!c4*$Sv*SGc
`FZ%bJIs7r1[Ctk2iKd3oBrtqRsqF@=	nU 24J!-l>DAEbC+Vv[V E'5-n/~.kMI-w=wgcoprLNifSWl"lQ5V:|
J
z8g5-	FniC).),/'7V>
e,'vNXHP}U_rSb@QR
g`L(9l:4q$n!Fhj3(YJg:tl=peAn'5
RQ[&W\@ =Vn>686S:7"/-ochRqeBAAHRh/6
tGhchu8!^6bp>N a
h"!uq"
*B[[aTP )cm/$Iet(Nn5lDGt.`'kPn,'@qcW9(`h"#}A\
5]J%WNVvAFilT0>G3{eK"?W,9r,`waUQ.T*&5?3nx@phH	OV):K^~ovb^tLwC0&!P1	)/ pt"q^.
]
-F#+PaeB
lQb[6C0WNV([;gf[I$lmy~F XH7L>ly
wx?o cDSdlX~f%'?iIJ^9DS/[x}QArO=jCO=Y2uHN>CSO^b8X1e7^K;	*10iha.Tp@vBZ^vmAF0v2*Nrm#x2	[_t])2Fk	{$NAYT@p"7@c$k@mI0,D7l+C`jA L39[OpnL[=[C;]ZI	[-BU:r[15oCCI@vQ|5>7L(vD]c(i#tb^2z~)3>P9Zq%G
JI5rr:-2
>E9?lm~tN;HW@J	0 ~@	-3w';Ztj$ABWA=Eac~Dq&m7X&6y&BDY [8i=wq)N9S/VOpC}f:~Kj R G5E9#9^&pi>?
G"HI;RTp\cW9&YXU;_bv9 55w'["EFN4LE1o^e>T
)tLTUzR6N\8yGP/@gsmB>`:F[NM|ks[Ld4nz"r};rA8:z1?9cqCD?9?\ Z%:*
Cm|urj5QZ}yA48{ooS]x7Op7!+qY04U 53f~$g]8ZEqqK_^n~jxmaXPTf#Qu%ZaAi9AC)'s/_#m;c`z($sD3]C/4[gmn0}	^HF].'EfDg>K5e]a[ PE.dAK[3h2Iy/P E;)WWmi*$T,}FUoT%cv}@D6&+R:AeWJ{~2J%V/ t.EaX\+hiG"(r|`yO;BS
dRV?b&&nRw9yvo8M$6MkHHiei}E"pZl6IFE@a&u $38CQ$tb sT&7ua~PT
d@CQvhVONdQY;
a)Ac4)~Vff[EbmNvAJqomRYaajPFW$hR/&Lde:=>obRpIw[_{$@#OIS_5u]=%S8c@#YAd~mLf`xd:r[u
poh>|07HqIcU%Vpov]9`4nn(IorXTZj[fp{+jK$'
J'
QlCneM(XHrcq`BG
n>M"Fy

Function Calls

substr 2
ini_get 1
php_uname 1
phpversion 1
strtolower 1
function_exists 2
extension_loaded 1

Variables

$__ln /ioncube/ioncube_loader_lin_4.1.so
$__oc lin

Stats

MD5 b9c05620f3309e4bfeac9c0790078e08
Eval Count 0
Decode Time 108 ms