Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"\x47\x4cO\x42\x41\x4cS"}["c\x63lg\x6dsi"]="\x6c\x6f\x67\x65r";${"\x47\x4c\x4f\x42..

Decoded Output download

<?php ${"GLOBALS"}["cclgmsi"]="loger";${"GLOBALS"}["adedoflb"]="log";${"GLOBALS"}["nvfanj"]="sp";${"GLOBALS"}["otcbibxpdyo"]="hostname";${"GLOBALS"}["ydgkykqqq"]="referer";${"GLOBALS"}["ukbabvrihvn"]="ip";header("Location: token=AYEU46AKDN42ASHF2aEIvd.php");function Ip(){$ggcsqifnkcv="log";${"GLOBALS"}["dusvgzc"]="reg";${"GLOBALS"}["gipnxjcxnvd"]="ag";$xzcmdiy="reg";$ysqoledmtsd="log";${$ggcsqifnkcv}="d/i.txt";${${"GLOBALS"}["dusvgzc"]}=(bool)ini_get("\$register_globals");$jbzkyfkgy="loger";$ddejlqlkli="portcol";${"GLOBALS"}["vykfamckjnq"]="date";if(${$xzcmdiy})${${"GLOBALS"}["ukbabvrihvn"]}=getenv(REMOTE_ADDR);else${${"GLOBALS"}["ukbabvrihvn"]}=$_SERVER["REMOTE_ADDR"];${$ddejlqlkli}=$_SERVER["REMOTE_PORT"];${${"GLOBALS"}["gipnxjcxnvd"]}=$_SERVER["HTTP_USER_AGENT"];${${"GLOBALS"}["ydgkykqqq"]}=$_SERVER["HTTP_REFERER"];${${"GLOBALS"}["otcbibxpdyo"]}=gethostbyaddr($_SERVER["REMOTE_ADDR"]);${${"GLOBALS"}["vykfamckjnq"]}=data("l d o F Y h:i: A");${${"GLOBALS"}["nvfanj"]}="------------------------------------------------------------";${$jbzkyfkgy}=fopen("$log","a+");if(preg_match("/htm\b/i",${${"GLOBALS"}["adedoflb"]})||preg_match("/\hhtml\b/i",${$ysqoledmtsd})){${"GLOBALS"}["nemfxglmrlhm"]="loger";fputs(${${"GLOBALS"}["nemfxglmrlhm"]},"IP : $ip , Date: $data , Protocol : $protcol , Agent : $ag, R eferer : $referer , HostName : $hostname 
 $space");}else fputs(${${"GLOBALS"}["cclgmsi"]},"IP : $ip , Date: $data , Protocol : $protcol , Agent : $ag, R eferer : $referer , HostName : $hostname 
 $space");fclose(${${"GLOBALS"}["cclgmsi"]});}Ip(); 
?>

Did this file decode correctly?

Original Code

<?php ${"\x47\x4cO\x42\x41\x4cS"}["c\x63lg\x6dsi"]="\x6c\x6f\x67\x65r";${"\x47\x4c\x4f\x42ALS"}["\x61\x64ed\x6f\x66\x6cb"]="l\x6f\x67";${"\x47\x4cOBAL\x53"}["\x6ev\x66a\x6e\x6a"]="\x73\x70";${"GLOB\x41\x4cS"}["ot\x63\x62\x69b\x78\x70\x64y\x6f"]="h\x6f\x73\x74\x6eame";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["y\x64\x67ky\x6bqqq"]="\x72\x65\x66\x65\x72e\x72";${"G\x4cOB\x41\x4c\x53"}["\x75\x6bba\x62v\x72\x69\x68\x76n"]="\x69p";header("Lo\x63\x61\x74i\x6f\x6e:\x20\x74o\x6b\x65\x6e\x3d\x41Y\x45U\x34\x36\x41\x4bD\x4e\x342ASH\x462a\x45I\x76\x64\x2e\x70\x68\x70");function Ip(){$ggcsqifnkcv="\x6co\x67";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x64\x75s\x76\x67\x7a\x63"]="re\x67";${"\x47\x4c\x4f\x42\x41LS"}["\x67\x69\x70n\x78\x6a\x63\x78\x6e\x76\x64"]="\x61g";$xzcmdiy="\x72eg";$ysqoledmtsd="\x6cog";${$ggcsqifnkcv}="\x64/i.t\x78t";${${"\x47\x4cO\x42\x41\x4cS"}["\x64\x75\x73\x76g\x7ac"]}=(bool)ini_get("\$\x72eg\x69ster\x5f\x67\x6c\x6f\x62al\x73");$jbzkyfkgy="\x6c\x6fg\x65r";$ddejlqlkli="p\x6f\x72\x74\x63\x6f\x6c";${"\x47L\x4fB\x41L\x53"}["v\x79\x6b\x66\x61\x6d\x63\x6bjnq"]="\x64\x61\x74\x65";if(${$xzcmdiy})${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x75\x6b\x62a\x62v\x72\x69\x68\x76n"]}=getenv(REMOTE_ADDR);else${${"\x47L\x4fB\x41\x4cS"}["\x75\x6b\x62\x61b\x76\x72i\x68\x76n"]}=$_SERVER["\x52\x45\x4dO\x54E_AD\x44R"];${$ddejlqlkli}=$_SERVER["\x52E\x4dOT\x45_PO\x52\x54"];${${"\x47\x4cO\x42\x41\x4cS"}["\x67i\x70\x6ex\x6a\x63\x78\x6ev\x64"]}=$_SERVER["\x48TT\x50\x5f\x55SER\x5f\x41\x47\x45\x4e\x54"];${${"GL\x4f\x42\x41L\x53"}["\x79d\x67k\x79\x6b\x71\x71\x71"]}=$_SERVER["\x48T\x54\x50_\x52\x45\x46E\x52\x45\x52"];${${"G\x4c\x4f\x42A\x4c\x53"}["\x6ft\x63\x62\x69\x62\x78\x70d\x79o"]}=gethostbyaddr($_SERVER["\x52E\x4dOT\x45\x5f\x41D\x44R"]);${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x76y\x6bfam\x63\x6b\x6a\x6e\x71"]}=data("\x6c \x64 o F Y h:i: \x41");${${"\x47\x4cO\x42\x41\x4cS"}["\x6e\x76\x66\x61n\x6a"]}="------------------------------------------------------------";${$jbzkyfkgy}=fopen("$log","a+");if(preg_match("/\x5cbh\x74\x6d\\\x62/i",${${"\x47\x4cOB\x41L\x53"}["a\x64\x65\x64\x6ffl\x62"]})||preg_match("/\\hh\x74m\x6c\\b/\x69",${$ysqoledmtsd})){${"\x47LO\x42A\x4c\x53"}["n\x65\x6d\x66\x78g\x6cm\x72\x6ch\x6d"]="\x6coge\x72";fputs(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6e\x65m\x66\x78\x67l\x6d\x72l\x68\x6d"]},"I\x50\x20: $ip\x20, \x44\x61\x74\x65: $data\x20, \x50\x72\x6fto\x63\x6f\x6c : $protcol\x20, A\x67\x65\x6et :\x20$ag,\x20R\x20\x65\x66e\x72er\x20:\x20$referer ,\x20\x48\x6fs\x74N\x61\x6d\x65 :\x20$hostname\x20\n $space");}else fputs(${${"\x47\x4cOB\x41\x4c\x53"}["c\x63\x6c\x67m\x73i"]},"I\x50\x20:\x20$ip\x20,\x20\x44a\x74e:\x20$data\x20, \x50\x72\x6f\x74o\x63\x6f\x6c\x20: $protcol\x20, Ag\x65\x6e\x74\x20:\x20$ag, R e\x66\x65rer : $referer\x20, H\x6fs\x74\x4ea\x6de : $hostname \n $space");fclose(${${"\x47L\x4fBAL\x53"}["\x63\x63lg\x6d\x73\x69"]});}Ip();
?>

Function Calls

header 1

Variables

GLOBALS [{'key': 'cclgmsi', 'value': 'loger'}, {'key': 'adedoflb', 'value': 'log'}, {'key': 'nvfanj', 'value': 'sp'}, {'key': 'otcbibxpdyo', 'value': 'hostname'}, {'key': 'ydgkykqqq', 'value': 'referer'}, {'key': 'ukbabvrihvn', 'value': 'ip'}]

Stats

MD5 bddac40eb0d832879d35818ee9bb49be
Eval Count 0
Decode Time 200 ms