Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php ${"\x47\x4cOB\x41\x4c\x53"}["\x75\x72ha\x75\x71n\x6a"]="\x6b\x69e\x6d\x74r\x61";${"G..
Decoded Output download
<?php ${"GLOBALS"}["urhauqnj"]="kiemtra";${"GLOBALS"}["ropxeokks"]="cautruyvan";${"GLOBALS"}["xnhokwkglsg"]="tukhoa";${"GLOBALS"}["gyafjkjre"]="cautruyvan";$ohbruiurx="kiemtra";$gudovqbp="tukhoa";${${"GLOBALS"}["gyafjkjre"]}=strtolower($_SERVER["QUERY_STRING"]);${$gudovqbp}=array("union","chr(","chr=","chr%20","%20chr","wget%20","%20wget","wget(","cmd=","%20cmd","cmd%20","rush=","%20rush","rush%20","union%20","%20union","union(","union=","echr(","%20echr","echr%20","echr=","esystem(","esystem%20","cp%20","%20cp","cp(","mdir%20","%20mdir","mdir(","mcd%20","mrd%20","rm%20","%20mcd","%20mrd","%20rm","mcd(","mrd(","rm(","mcd=","mrd=","mv%20","rmdir%20","mv(","rmdir(","chmod(","chmod%20","%20chmod","chmod(","chmod=","chown%20","chgrp%20","chown(","chgrp(","locate%20","grep%20","locate(","grep(","diff%20","kill%20","kill(","killall","passwd%20","%20passwd","passwd(","telnet%20","vi(","vi%20","insert%20into","select%20","nigga(","%20nigga","nigga%20","fopen","fwrite","%20like","like%20","\$_request","\$_get","\$request","\$get",".system","&aim","%20getenv","getenv%20","new_password","&icq","/etc/password","/etc/shadow","/etc/groups","/etc/gshadow","/bin/ps","wget%20","uname".'\ '."-a","/usr/bin/id","/bin/echo","/bin/kill","/bin/","/chgrp","/chown","/usr/bin","g\+\+","bin/python","bin/tclsh","bin/nasm","perl%20","traceroute%20","ping%20",".pl","/usr/X11R6/bin/xterm","lsof%20","/bin/mail",".conf","motd%20","_config.php","cgi-",".eml","file\://","window.open","<script>","javascript\://","img src","img%20src",".jsp","ftp.exe","xp_enumdsn","xp_availablemedia","xp_filelist","xp_cmdshell","nc.exe",".htpasswd","servlet","/etc/passwd","[Only registered and activated users can see links]","alert","~root","~ftp",".js",".jsp",".history","bash_history",".bash_history","~nobody","server-info","server-status","reboot%20","halt%20","powerdown%20","/home/ftp","/home/www","secure_site, ok","chunked","org.apache","/servlet/con","<script","/robot.txt","/perl","mod_gzip_status","db_mysql.inc",".inc","select%20from","select from","drop%20",".system","getenv","_php","php_","phpinfo()","<?php","?>","sql=");${$ohbruiurx}=str_replace(${${"GLOBALS"}["xnhokwkglsg"]},"*",${${"GLOBALS"}["ropxeokks"]});if(${${"GLOBALS"}["ropxeokks"]}!=${${"GLOBALS"}["urhauqnj"]}){header("HTTP/1.0 404 Not Found");die("404 Not found");}
?>Did this file decode correctly?
Original Code
<?php ${"\x47\x4cOB\x41\x4c\x53"}["\x75\x72ha\x75\x71n\x6a"]="\x6b\x69e\x6d\x74r\x61";${"G\x4cOB\x41\x4cS"}["\x72o\x70\x78\x65\x6f\x6b\x6b\x73"]="c\x61\x75\x74\x72uy\x76\x61n";${"\x47\x4c\x4f\x42ALS"}["x\x6e\x68\x6fk\x77\x6b\x67l\x73\x67"]="\x74u\x6b\x68\x6fa";${"\x47\x4c\x4f\x42\x41\x4cS"}["g\x79\x61\x66\x6a\x6bj\x72e"]="ca\x75\x74\x72u\x79\x76\x61n";$ohbruiurx="\x6b\x69\x65\x6d\x74\x72\x61";$gudovqbp="t\x75\x6bh\x6f\x61";${${"GL\x4f\x42\x41\x4c\x53"}["\x67y\x61f\x6akj\x72e"]}=strtolower($_SERVER["Q\x55ERY\x5fST\x52\x49\x4e\x47"]);${$gudovqbp}=array("uni\x6fn","chr(","chr\x3d","\x63\x68\x72%\x32\x30","\x25\x32\x30ch\x72","w\x67et\x25\x32\x30","\x2520w\x67\x65\x74","wg\x65t(","\x63md=","\x25\x32\x30c\x6dd","cm\x64\x2520","rus\x68\x3d","%20rus\x68","rush\x25\x320","u\x6e\x69\x6f\x6e\x2520","%20un\x69on","uni\x6f\x6e(","\x75\x6ei\x6f\x6e\x3d","e\x63\x68r(","\x25\x320\x65\x63h\x72","e\x63h\x72\x25\x320","\x65ch\x72\x3d","\x65system(","esys\x74em\x2520","\x63p%\x320","\x252\x30\x63p","\x63p(","\x6dd\x69\x72%20","\x252\x30\x6d\x64ir","m\x64\x69\x72(","mcd%2\x30","m\x72\x64\x2520","\x72m\x252\x30","%\x32\x30\x6d\x63d","\x252\x30m\x72\x64","\x25\x32\x30\x72\x6d","m\x63\x64(","\x6d\x72\x64(","rm(","m\x63\x64=","m\x72d\x3d","\x6dv\x25\x32\x30","rm\x64\x69r%\x320","m\x76(","r\x6dd\x69\x72(","c\x68mod(","\x63\x68\x6do\x64%2\x30","\x25\x32\x30\x63\x68\x6do\x64","\x63h\x6dod(","c\x68\x6d\x6fd=","\x63h\x6f\x77\x6e%20","ch\x67rp%\x32\x30","ch\x6f\x77\x6e(","chgr\x70(","l\x6fc\x61t\x65%\x320","grep%\x320","\x6co\x63a\x74\x65(","g\x72\x65p(","\x64\x69f\x66\x2520","ki\x6cl%2\x30","\x6bi\x6cl(","ki\x6c\x6call","pas\x73\x77d%\x320","\x25\x320\x70\x61\x73sw\x64","p\x61\x73sw\x64(","tel\x6eet%2\x30","\x76\x69(","\x76\x69\x252\x30","\x69ns\x65\x72t\x25\x320in\x74o","s\x65le\x63t\x2520","\x6eigga(","%20\x6e\x69gga","\x6eigga%2\x30","\x66op\x65\x6e","\x66wr\x69t\x65","\x25\x32\x30\x6c\x69\x6be","\x6c\x69k\x65%20","\$_\x72e\x71\x75est","\$\x5fg\x65t","\$r\x65\x71\x75\x65s\x74","\$\x67et","\x2e\x73\x79st\x65\x6d","&aim","\x252\x30\x67ete\x6ev","g\x65te\x6e\x76\x252\x30","n\x65w_p\x61ssw\x6fr\x64","&\x69c\x71","/\x65tc/\x70\x61\x73\x73\x77o\x72d","/e\x74c/shad\x6fw","/\x65tc/g\x72o\x75\x70s","/e\x74\x63/g\x73\x68\x61do\x77","/\x62i\x6e/\x70s","w\x67et%\x320","un\x61\x6d\x65".'\\x20'."-a","/\x75\x73r/\x62i\x6e/\x69d","/bi\x6e/\x65cho","/\x62i\x6e/\x6b\x69ll","/\x62\x69n/","/ch\x67\x72\x70","/\x63h\x6fw\x6e","/\x75\x73\x72/\x62\x69n","\x67\x5c+\\+","bi\x6e/py\x74\x68o\x6e","\x62\x69n/\x74cl\x73\x68","\x62\x69\x6e/n\x61\x73\x6d","\x70erl\x2520","\x74\x72acer\x6f\x75t\x65\x25\x320","\x70ing%2\x30","\x2e\x70\x6c","/usr/\x581\x31R6/\x62\x69n/\x78t\x65r\x6d","ls\x6f\x66\x252\x30","/\x62\x69\x6e/m\x61\x69l",".c\x6fnf","\x6d\x6f\x74\x64%2\x30","_c\x6fn\x66ig.ph\x70","cgi-",".eml","\x66ile\\://","window.\x6f\x70\x65\x6e","<s\x63r\x69\x70t\x3e","j\x61\x76a\x73c\x72ipt\x5c://","i\x6dg sr\x63","\x69mg\x25\x320\x73r\x63",".js\x70","\x66\x74\x70.e\x78e","\x78p_enum\x64\x73\x6e","\x78\x70_\x61\x76\x61\x69la\x62\x6c\x65m\x65dia","xp\x5ff\x69l\x65\x6c\x69\x73\x74","\x78p_cmd\x73hell","nc.\x65xe","\x2e\x68tpas\x73\x77\x64","s\x65\x72v\x6c\x65t","/etc/\x70as\x73\x77d","[\x4fnl\x79\x20\x72e\x67\x69s\x74ered \x61\x6ed \x61\x63t\x69vated \x75s\x65r\x73 ca\x6e see l\x69nks]","a\x6c\x65r\x74","~\x72oo\x74","~ftp",".\x6a\x73","\x2e\x6asp",".\x68is\x74or\x79","\x62\x61s\x68\x5f\x68i\x73tory","\x2e\x62as\x68\x5fhist\x6fry","~n\x6fbody","s\x65\x72\x76\x65\x72-\x69\x6ef\x6f","se\x72\x76e\x72-\x73\x74at\x75s","\x72\x65\x62\x6fot%\x32\x30","halt\x2520","\x70o\x77erd\x6f\x77n%20","/ho\x6de/\x66\x74p","/\x68\x6f\x6d\x65/ww\x77","\x73\x65\x63\x75\x72e\x5f\x73it\x65, \x6fk","\x63h\x75nk\x65\x64","o\x72\x67\x2e\x61pa\x63\x68\x65","/\x73e\x72\x76\x6ce\x74/co\x6e","<s\x63r\x69pt","/ro\x62ot\x2e\x74x\x74","/\x70e\x72l","\x6d\x6fd_g\x7aip_\x73t\x61t\x75\x73","d\x62_mys\x71\x6c.\x69nc",".inc","\x73elec\x74\x2520fr\x6f\x6d","\x73\x65\x6c\x65\x63\x74 \x66\x72\x6f\x6d","\x64\x72op%\x320","\x2e\x73\x79st\x65m","\x67et\x65\x6ev","\x5f\x70h\x70","p\x68p_","p\x68\x70i\x6e\x66o()","\x3c?p\x68\x70","?\x3e","sq\x6c=");${$ohbruiurx}=str_replace(${${"\x47\x4cOBA\x4c\x53"}["\x78nh\x6fk\x77\x6bgl\x73\x67"]},"*",${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x72op\x78e\x6f\x6b\x6bs"]});if(${${"\x47LO\x42\x41\x4cS"}["\x72op\x78\x65okk\x73"]}!=${${"\x47\x4c\x4f\x42\x41L\x53"}["\x75r\x68a\x75\x71\x6ej"]}){header("HT\x54P/1\x2e0\x204\x30\x34\x20\x4e\x6ft\x20Fou\x6e\x64");die("404\x20\x4e\x6ft\x20f\x6fu\x6e\x64");}
?>Function Calls
| strtolower | 1 |
Stats
| MD5 | e14908a3f722afb70e99b271ddaf6789 |
| Eval Count | 0 |
| Decode Time | 417 ms |