Can you decode PHP 8.x protected files?

DecodePHP accepts recognized ionCube builds targeting PHP 8.1–8.4 and supported SourceGuardian builds targeting PHP 8.0–8.4. Compatibility depends on the build and protection requirements.

What if decoding fails or needs dynamic-key context?

An attempt that produces no viewable result does not use a credit. A viewable partial callback-key result uses one credit and reports the missing context and protected sections that remain.

Can I decode multiple protected PHP files at once?

Yes. Buy a credit pack with enough credits for the batch, or contact us for custom volume. API access is included for every account.

Is your PHP decoder online safe to use?

DecodePHP processes files in isolated microVMs and keeps account results private. Free-preview payloads expire after the configured retention period, while paid and allowance results remain available in account history until deletion is requested.

PHP Decoder
IonCube + SourceGuardian

Recover source from IonCube and SourceGuardian encrypted PHP files online. IonCube 10–15 supports PHP 5.x, 7.1–7.4, and 8.1–8.4 targets; SourceGuardian supports PHP 7.1–8.4, including 8.0. Callback-key recovery can take several minutes.

Eligible files get a real 20-line preview before you pay. For IonCube callback-key files, the ordinary public preview stops with guidance; charged recovery reports missing context. Approved trusted-partner preview routes may also run assisted recovery.

Try It Free View Pricing

10–15ionCube versions

5.x · 7.x · 8.xsupported PHP targets

IC + SGprotectors

Works withWHMCSMagentoOpenCartPrestaShopDrupalLaravel

terminal

ioncube-decoder

functions.php

Encrypted

1<?php //ICB0 74:0 81:51714 82:a6b9e ?>2<?php //003353if(extension_loaded('ionCube Loader')){4  die('The file '.__FILE__." is corrupted.");5}echo("Script error: the ionCube Loader for6PHP needs to be installed. The ionCube Loader7is the industry standard PHP extension for8running protected PHP code, and can usually9be added easily to a PHP installation.10For Loaders please visit ioncube.com");11exit(199);12?>13HR+cPvXRFmq8V8KYrIAfBlzaKcilXyFs2r2RC9Y145H9SXxbv8z4Lq0MxIV3wSHaW2odtYN/0K4Vsvwk15a1kzeOgsPqnNbhOX/LQgSYhjrw/EiwtFawI9vdP16H6sVa75iFaAcfDaauMfUyBMOoWe0IRKr6olKseh

functions_decoded.php

Decoded

1<?php23function invoice_settings($v1 = null) {4    if ($v1 === null) {5        return get_option("acme_invoice");6    }7    return get_option("acme_invoice")[$v1];8}910function invoice_log($v1 = null, $v2 = "info") {11    $v3 = new Acme_Invoice_Log();12    $v3->write($v2, $v1);13    return $v3;14}1516function invoice_load_textdomain() {17    load_plugin_textdomain("acme-invoices", __DIR__);18    return;19}

ReadyIonCube 10–15 · PHP 5.0–5.6, 7.1–7.4 & 8.1–8.4

Online PHP protector decoding

DecodePHP attempts recognized IonCube and supported SourceGuardian files on accepted PHP targets. Eligible uploads receive a preview after processing; account processing makes a viewable result available to download.

Version coverage

The decoder covers IonCube 10 through IonCube 15, SourceGuardian, and their supported PHP targets. IonCube targets include PHP 5.0–5.6, 7.1–7.4, and 8.1–8.4; SourceGuardian targets include PHP 7.1–8.4, including 8.0. Version-specific pages below explain common headers and target combinations.

Dynamic keys and context

IonCube callback-key files can require an included function, bootstrap, or key map to finish recovery. When that context is missing, the decode still reports the protected sections and tells you what to provide next.

Decode IonCube and SourceGuardian PHP files online

DecodePHP is an online decoder for encrypted PHP files. It supports the IonCube, SourceGuardian, and PHP versions listed on this page. Eligible files get a free 20-line preview; unresolved license, companion-file, or callback-key requirements return guidance instead of promising a preview.

The decoded output is returned as normal PHP source where the original structure can be reconstructed. You can inspect functions, classes, strings, and control flow in the preview before running the full account decode.

The service is built for direct file decoding, not a long setup process. You do not need to install IonCube Loader, SourceGuardian Loader, configure PHP locally, or send files back and forth by email just to know whether a file can be decoded.

PHP compatibility checks

The service detects the encoded target before decoding. IonCube accepts PHP 5.0–5.6, 7.1–7.4, and 8.1–8.4; SourceGuardian additionally accepts PHP 8.0. The linked pages explain common headers, chunks, and target details.

Context-aware recovery

Dynamic-key files are not treated as a mystery failure. If recovery needs the callback implementation, an included PHP file, runtime values, or a key map, the result explains that clearly.

Readable preview output

The preview is designed to show real decoded structure, not only a success message. You can inspect function names, class boundaries, strings, and formatting quality before deciding whether the full file is worth unlocking.

Batch and API use

Credit packs include web and API access, so developers can decode a single protected file from the browser or process a larger inherited codebase through automation without changing pricing models.

Free Preview

Upload a supported IonCube or SourceGuardian PHP file. A 20-line preview appears when decoding completes without an unresolved protection requirement.

Drag & drop your PHP file

or browse files

.php files encrypted with IonCube or SourceGuardian

Protection or license file (optional)

Start with your PHP file. If another file is needed, we'll show you what's missing. Maximum 10MB.

Only upload files you own, are authorized to analyze, or are lawfully permitted to recover, migrate, audit, or interoperate with. Do not upload third-party proprietary software without permission. This ordinary public preview does not use AI-assisted callback recovery; charged, trusted-account, and approved trusted-partner recovery may send supplied context and relevant decoded fragments to our configured third-party model provider. See Terms.

Decode by version

IonCube, SourceGuardian, and PHP versions

Pick your exact combination. Each page has version-specific notes for IonCube 10–15, SourceGuardian, and supported PHP targets.

By PHP version

By IonCube version

Other protectors

SourceGuardian Decoder

IonCube + SourceGuardian

Decode the two commercial PHP protectors most common in paid modules, plugins, and legacy apps.

Supported PHP targets

IonCube: PHP 5.0–5.6, 7.1–7.4, and 8.1–8.4. SourceGuardian: PHP 7.1–8.4, including 8.0.

Dynamic-key guidance

Callback-key protected files are detected and reported with the exact missing context needed for recovery.

Clean output

Properly formatted, readable code with preserved structure and formatting.

Fast decoding

Routine files usually finish quickly. Uploads are limited to 10 MB; callback-key recovery can take several minutes.

100% online

Nothing to install locally. Uploads are processed server-side in isolated microVMs.

How it works

Three steps to decoded source

01
Upload your file
Drag and drop an IonCube or SourceGuardian encrypted PHP file, or click to browse.
02
Preview the output
See decoded code, detected protector metadata, and any callback-key context needs.
03
Recover or download
Download successful decodes immediately, or add the missing context for dynamic-key files.

Credit packs

Buy once and decode anytime. Web and API access are included.

Starter

$19

3 credits · $6.33/file

Entry pack for a few one-off files.

3 file credits
Web + API access
Credits do not expire
IonCube 10–15 + SourceGuardian · supported PHP targets
Viewable results only

Pro

$59

30 credits · $1.97/file

Best default pack for developers.

30 file credits
Web + API access
Credits do not expire
IonCube 10–15 + SourceGuardian · supported PHP targets
Viewable results only

Enterprise

$199

150 credits · $1.33/file

High-volume pack for teams and agencies.

150 file credits
Web + API access
Credits do not expire
IonCube 10–15 + SourceGuardian · supported PHP targets
Viewable results only

Custom

150+ credits · custom volume

Larger volume, special handling, or custom terms.

150+ file credits
Web + API access
Custom volume pricing
Priority handling options
Email support

Secure crypto payments · Bitcoin, Ethereum, Litecoin, Monero, USDT

Frequently asked questions

How do I decode IonCube or SourceGuardian encrypted PHP files?

Upload your protected PHP file to our online decoder. We detect whether it is IonCube or SourceGuardian. Eligible files get a free 20-line preview; unresolved protection requirements return guidance instead.

Which protectors and PHP versions can you decode?

We support recognized IonCube 10 through 15 builds targeting PHP 5.0–5.6, 7.1–7.4, and 8.1–8.4. SourceGuardian targets PHP 7.1–8.4, including 8.0. The upload flow identifies the protector and target automatically.

Can I decode any protected PHP file?

No. DecodePHP is intended for lawful recovery, migration, security review, interoperability, and audit work on code you own or are authorized to examine. You are responsible for ensuring your use is legal in your jurisdiction.

How long does decoding take?

Routine files usually finish quickly. Callback-key recovery can take several minutes, and the page shows progress while processing continues.

Is there a free preview?

A supported file that completes without an unresolved license, companion-file, project-key, or callback-key requirement gets a free 20-line preview.

Do you support IonCube dynamic keys or callback keys?

Charged, trusted-account, and approved trusted-partner decodes can attempt AI-assisted callback-key recovery. It may require callback implementation or runtime context and is not guaranteed. Ordinary public previews stop with guidance instead; trusted-partner preview routes are an exception.

What if decoding fails?

An attempt that produces no viewable result does not use a credit. If callback-key recovery produces a viewable partial result, it uses one credit and reports the protected sections that remain.

Can I decode multiple files at once?

Yes. Buy a pack with enough credits for the batch, or contact us for custom volume.

Why does my decoded file look different from the original?

Our decoder lifts Zend opcodes to readable PHP, so formatting and source-level choices can differ from the original. Validate the recovered output in your own test environment before using it.

Ready to decode?

Upload a supported file and check whether it qualifies for a preview.