UnPHP - The Online PHP Decoder

UnPHP is a free service for analyzing obfuscated and malicious PHP code.

To get started either copy your code below or choose a file to upload then click 'Decode This PHP'. Just checking this out? Load sample data.

Eval + gzinflate + Base64

UnPHP easily handles simple obfuscation methods that chain functions like eval(), gzinflate(), str_rot13(), str_replace() and base64_decode()

View Output

Recursive De-Obfuscating

UnPHP loops recursively through PHP code to decode multiple levels of obfuscation. The example below uses 81 rounds of eval() + base64_decode()

View Output

Custom Function and Regex Support

UnPHP handles custom decoder functions and regular expressions. The example below uses the d1() function and preg_replace() with the execute flag set.

View Output