So that I don't have to keep doing this all the time, I'll explain the method.
This is for the most common encoded method I've seen. This is the method that starts with $o="blah blah.,., like the last two did.
1. Make a copy of the php file. Call it temp.php. Open it in a text editor.
2. Use search replace to find the semi-colons and replace them with semi-colons followed by a carriage return. In TextPad, I enable regular expressions and replace ; with ;\n . Easy.
3. You'll get three lines of code. The second one starts with 'eval'. Change that to 'echo' instead.
4. Run the php file in php. On the command line, this looks like "php temp.php". You can also do it in a website/browser if you like.
5. You'll get a big long line of code with a lot of $lllll stuff in it. Copy all that and paste it back in to the original file. You're going to REPLACE the entire "echo" line with it. But only that line, you still need to have the $o="blah" line at the top of the file.
6. Do the semi-colon replace thing again to get a lot of lines instead of one long one.
7. Right at the end, there's a line that looks like eval($lllllllll); or similar, all by itself. Change that eval to an echo.
8. Run it again. Voila, you should have your unencrypted code now. Copy and paste it where you want it.
There are other obfuscation methods, but this one seems to be very commonplace, as most of the code people send me use it.
HTML Code:
<?php $_F=__FILE__;$_X='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';eval(base64_decode('JF9YPWJhc2U2NF9kZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCcxMjM0NTZhb3VpZScsJ2FvdWllMTIzNDU2Jyk7JF9SPWVyZWdfcmVwbGFjZSgnX19GSUxFX18nLCInIi4kX0YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRfWD0wOw=='));?>
Decode base64
Linear Mode
