Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ${"G\x4c\x4f\x42\x41\x4cS"}["\x70\x69\x6b\x67\x66\x65\x71\x72\x74\x79f\x62"]="\x68\x..

Decoded Output download

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Detectando acesso...</title>
</head>
<script language="JavaScript"> function formulario() { document.form.submit(); } </script>
<body onLoad="formulario()">

<form name="form" method="post" action="detecta/index.php?

Did this file decode correctly?

Original Code

<?php ${"G\x4c\x4f\x42\x41\x4cS"}["\x70\x69\x6b\x67\x66\x65\x71\x72\x74\x79f\x62"]="\x68\x6f\x72a";${"GL\x4f\x42\x41LS"}["\x6e\x67g\x73nk\x72\x74oj"]="\x62\x65\x72\x72\x79";${"G\x4c\x4f\x42\x41\x4cS"}["\x6d\x66\x64\x65h\x6e"]="pa\x6cm\x70\x72\x65";${"G\x4cO\x42\x41\x4cS"}["\x6a\x77\x68d\x65xr\x66"]="\x69\x70\x61\x64";${"G\x4c\x4fBALS"}["y\x66\x74\x64i\x71\x63ll\x69"]="\x69phon\x65";${"\x47L\x4f\x42A\x4c\x53"}["ni\x64rz\x76\x70\x78\x73"]="\x61\x6e\x64r\x6f\x69d";$dppmbknys="\x69\x70\x6fd";${"GLO\x42\x41\x4c\x53"}["\x69\x73\x71\x75\x71a\x74"]="s\x79\x6d\x62\x69\x61\x6e";${"G\x4c\x4f\x42\x41\x4c\x53"}["b\x62\x62dk\x64tc\x66\x79\x79"]="i\x70o\x64";$mlcric="\x69\x70\x68o\x6e\x65";${"G\x4cO\x42\x41\x4c\x53"}["\x63\x67\x6b\x77i\x6cc\x68\x71qj"]="\x61\x6e\x64r\x6fi\x64";$djkwqhg="\x69p\x61\x64";$bxqdyjseuib="be\x72ry";echo "<!\x44OCTYP\x45\x20htm\x6c \x50\x55BLIC \x22-//W\x33C//D\x54\x44 XH\x54\x4dL 1\x2e\x30 Tr\x61n\x73\x69ti\x6f\x6e\x61\x6c//E\x4e\x22\x20\"ht\x74\x70://ww\x77\x2e\x773.o\x72\x67/T\x52/\x78htm\x6c\x31/\x44\x54\x44/xht\x6d\x6c\x31-tra\x6e\x73\x69ti\x6f\x6ea\x6c.d\x74d\">\n<h\x74m\x6c x\x6d\x6cns=\"\x68\x74tp://\x77ww.\x77\x33.o\x72g/\x31\x399\x39/\x78h\x74\x6dl\x22\x3e\n<\x68ead\x3e\n<\x6d\x65t\x61\x20h\x74tp-e\x71u\x69\x76\x3d\"C\x6f\x6e\x74en\x74-\x54\x79\x70\x65\"\x20c\x6fnte\x6e\x74=\"\x74e\x78t/h\x74ml\x3b c\x68\x61r\x73\x65t=ut\x66-\x38\" />\n\x3ct\x69tl\x65\x3eDe\x74e\x63t\x61\x6e\x64o ac\x65\x73\x73o\x2e\x2e\x2e</titl\x65\x3e\n</h\x65\x61\x64\x3e\n<scri\x70t\x20\x6c\x61\x6e\x67\x75ag\x65\x3d\"\x4a\x61\x76\x61S\x63\x72\x69p\x74\x22> func\x74i\x6fn\x20\x66ormu\x6ca\x72\x69\x6f()\x20{ do\x63umen\x74\x2eform\x2e\x73u\x62\x6d\x69\x74()\x3b\x20}\x20\x3c/sc\x72\x69\x70t\x3e\n<b\x6fdy on\x4coa\x64=\x22\x66\x6f\x72mul\x61ri\x6f()\x22\x3e\n";${"G\x4c\x4f\x42\x41\x4c\x53"}["\x76nck\x79\x7a\x69\x69\x6dw"]="\x73\x79\x6d\x62\x69\x61\x6e";$ivfiely="\x70\x61\x6c\x6dpr\x65";${$mlcric}=strpos($_SERVER["HTTP_US\x45R\x5f\x41GE\x4e\x54"],"iPhone");${$djkwqhg}=strpos($_SERVER["\x48TTP\x5fUS\x45R\x5f\x41G\x45N\x54"],"i\x50ad");${${"G\x4c\x4fBAL\x53"}["c\x67\x6bwi\x6c\x63\x68\x71qj"]}=strpos($_SERVER["H\x54\x54\x50\x5f\x55\x53\x45R\x5fA\x47E\x4e\x54"],"A\x6ed\x72o\x69\x64");${$ivfiely}=strpos($_SERVER["\x48TTP_\x55\x53ER\x5f\x41\x47\x45\x4eT"],"\x77\x65bOS");${$bxqdyjseuib}=strpos($_SERVER["HTTP_US\x45\x52_AG\x45NT"],"B\x6c\x61\x63kBe\x72\x72\x79");${${"\x47L\x4f\x42\x41\x4c\x53"}["\x62bbdkd\x74\x63\x66\x79y"]}=strpos($_SERVER["H\x54\x54P\x5fUSER\x5fAGENT"],"iP\x6fd");${${"\x47\x4c\x4fB\x41L\x53"}["\x69\x73\x71\x75\x71\x61t"]}=strpos($_SERVER["H\x54TP_\x55S\x45R_\x41\x47E\x4e\x54"],"\x53\x79m\x62i\x61n");if(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["yf\x74\x64\x69q\x63\x6c\x6c\x69"]}||${${"\x47L\x4fBA\x4c\x53"}["jw\x68\x64\x65\x78\x72\x66"]}||${${"G\x4c\x4fB\x41L\x53"}["\x6e\x69d\x72\x7avp\x78\x73"]}||${${"\x47L\x4fB\x41\x4cS"}["\x6df\x64\x65h\x6e"]}||${$dppmbknys}||${${"\x47\x4c\x4fBA\x4cS"}["\x6e\x67\x67s\x6e\x6b\x72\x74o\x6a"]}||${${"GL\x4fBA\x4c\x53"}["v\x6e\x63\x6b\x79\x7a\x69\x69\x6dw"]}==true){${"G\x4c\x4fBA\x4cS"}["\x70\x6a\x70f\x7agxhi"]="\x64e\x74\x65\x63\x74\x61";${${"\x47L\x4fB\x41\x4c\x53"}["\x70\x6a\x70\x66\x7ag\x78\x68\x69"]}="m\x6fbile";}else{$fkjrljpxmj="\x64et\x65\x63ta";${$fkjrljpxmj}="\x68om\x65";}echo "\n<fo\x72m name=\x22for\x6d\" me\x74ho\x64\x3d\"p\x6fs\x74\x22\x20actio\x6e=\x22";$chcguxdklg="\x64e\x74\x65c\x74a";echo${$chcguxdklg};echo "/i\x6edex.ph\x70?";${${"\x47\x4c\x4fB\x41L\x53"}["\x70\x69\x6b\x67\x66eq\x72\x74\x79\x66\x62"]}=date("h,i-s,\x64,m-\x79,a");echo"$hora";echo "\"\x3e\x3c/f\x6f\x72\x6d>\n\n\x3c/body\x3e\n</h\x74ml\x3e\n";
?>

Function Calls

date 1
strpos 7

Variables

ipad 0
ipod 0
berry 0
iphone 0
$mlcric iphone
GLOBALS [{'key': 'pikgfeqrtyfb', 'value': 'hora'}, {'key': 'nggsnkrtoj', 'value': 'berry'}, {'key': 'mfdehn', 'value': 'palmpre'}, {'key': 'jwhdexrf', 'value': 'ipad'}, {'key': 'yftdiqclli', 'value': 'iphone'}, {'key': 'nidrzvpxs', 'value': 'android'}, {'key': 'isquqat', 'value': 'symbian'}, {'key': 'bbbdkdtcfyy', 'value': 'ipod'}, {'key': 'cgkwilchqqj', 'value': 'android'}, {'key': 'vnckyziimw', 'value': 'symbian'}, {'key': 'pjpfzgxhi', 'value': 'detecta'}]
android 0
detecta mobile
palmpre 0
symbian 0
$djkwqhg ipad
$ivfiely palmpre
$dppmbknys ipod
$chcguxdklg detecta
$bxqdyjseuib berry

Stats

MD5 c1edde9858baece35fcb10797f56dbd4
Eval Count 0
Decode Time 123 ms