Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /* LTaxSmartGroup Encrypted by Source Guardian */$OOO000000=urldecode('%66%67%36%73%..

Decoded Output download

<?php ?><?php
$license = $_POST['license'];
$unlock = $_POST['unlock'];
$j = $_POST['j'];
if (!file_exists('C:\LTaxpps
eport\SMART_PDS')) {
    chmod('C:\LTaxpps
eport', 0777);
    $f = fopen('C:\LTaxpps
eport\SMART_PDS', "w");
    fclose($f);
}
file_put_contents('C:\LTaxpps
eport\SMART_PDS', $unlock);
if ($unlock == show(md5("[email protected]" . $license . "LTPDS"))) {
    $smart_ltax = true;
} else {
    $smart_ltax = false;
}
$data = array("j" => $j, "lic" => $license, "ulck" => $unlock, "msg" => 'PDS', "error" => $smart_ltax);
$url = "http://www.thaisarabun.com/smart3_activate.php";
$o = post_web_page($url, $data);
echo $o;
function post_web_page($url, $params) {
    $user_agent = $_SERVER['HTTP_USER_AGENT'];
    $postData = '';
    foreach ($params as $k => $v) {
        $postData.= $k . '=' . $v . '&';
    }
    $postData = rtrim($postData, '&');
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_USERAGENT, $user_agent);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_HEADER, false);
    curl_setopt($ch, CURLOPT_POST, count($postData));
    curl_setopt($ch, CURLOPT_POSTFIELDS, $postData);
    $output = curl_exec($ch);
    curl_close($ch);
    return $output;
}
function show($s) {
    $s = strtoupper($s);
    for ($i = 0;$i < strlen($s);$i++) {
        if ($i > 0 && ($i % 4) === 0) {
            $o.= '-' . substr($s, $i, 1);
        } else {
            $o.= substr($s, $i, 1);
        }
    }
    return $o;
}; ?>

Did this file decode correctly?

Original Code

<?php /* LTaxSmartGroup Encrypted by Source Guardian */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x9bc;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NGI4KTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCcvcE8yMUxrMDk1OCtBVmNaM21NS0VlNnNTRjduZHdUeGxSckJmQ1V1RE5RaEhhV1BHcTRiaVhKeWpJdll0Z296PScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>wZAGrlxZTsabsu{s]^R51gZA2pZA2pZA2Xbw05xdUeGnkLBFMlusXgkMEqLsXtu+O9u9rjfKigZA1tGKb/G+r9u9rGfKigZA2/GA1tG8OmZKitGA2/GA1tD51tGKb/GKitGAOlfKb/GA1tGKb/G+OmZKb/GKb/GA2/N+OdPd1t4AEqhA2fXcOapeUV7AJXVMieCVuVKmBwWF0wETkqMdf5U3XeXm1Im71RReXp0dKmr7eR8T6N5wCCiFJgvZMdH5iLO3imLmfw9MEN+K1XcKXpmECVEeeFs6LC7S65BFkeUFJRN7UaHn6IPd0L4dymXwuwjTsDGAK9bV2EJVblI84tu8MfNcJFBnkgbFMlfKb/GA1tGKb/G8KaCwULH8OmZKb/GKb/GKb/NcG==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~Su`^

Function Calls

str_replace 1
urldecode 1
fread 3
fclose 1
base64_decode 4
strtr 2
fopen 1

Variables

$OOO00000O strtr
$O000O0O00 True
$OOO0000O0 base64_decode
$O0O000O0O fgetc
$OOO000O00 fopen
$OO00O00O0 @eval("?>".base64_decode("PD9waHAgDQokbGljZW5zZSA9ICRfUE9TV..
$OOO0O0O00 index.php
$OO00O0000 2492
$O0O000O00 fgets
$O0O00OO00 fread
$OOO000000 fg6sbehpra4co_tnd

Stats

MD5 e46565ce9c9f7a09bd5a86e4abdba2a3
Eval Count 4
Decode Time 100 ms