PHP Decoder
IonCube + SourceGuardian

Recover source from IonCube and SourceGuardian encrypted PHP files in under a minute. Decode IonCube 10–15 and SourceGuardian targets online with PHP 7.1 through PHP 8.4 support.

Upload a protected PHP file and get a real decoded preview before you pay. For IonCube callback-key files, we surface the missing context needed for recovery instead of hiding the blocker.

10,000+files decoded
99.9%success rate
IC+SGprotectors
Works withWHMCSMagentoOpenCartPrestaShopDrupalLaravel
terminal
functions.php
Encrypted
1<?php //ICB0 74:0 81:51714 82:a6b9e ?>2<?php //003353if(extension_loaded('ionCube Loader')){4  die('The file '.__FILE__." is corrupted.");5}echo("Script error: the ionCube Loader for6PHP needs to be installed. The ionCube Loader7is the industry standard PHP extension for8running protected PHP code, and can usually9be added easily to a PHP installation.10For Loaders please visit ioncube.com");11exit(199);12?>13HR+cPvXRFmq8V8KYrIAfBlzaKcilXyFs2r2RC9Y145H9SXxbv8z4Lq0MxIV3wSHaW2odtYN/0K4Vsvwk15a1kzeOgsPqnNbhOX/LQgSYhjrw/EiwtFawI9vdP16H6sVa75iFaAcfDaauMfUyBMOoWe0IRKr6olKseh
functions_decoded.php
Decoded
1<?php23function invoice_settings($v1 = null) {4    if ($v1 === null) {5        return get_option("acme_invoice");6    }7    return get_option("acme_invoice")[$v1];8}910function invoice_log($v1 = null, $v2 = "info") {11    $v3 = new Acme_Invoice_Log();12    $v3->write($v2, $v1);13    return $v3;14}1516function invoice_load_textdomain() {17    load_plugin_textdomain("acme-invoices", __DIR__);18    return;19}
Ready

Online PHP protector decoding

DecodePHP handles PHP files encoded with IonCube or SourceGuardian and turns them back into readable PHP source. Upload the file, check the decoded preview, then unlock the complete output when the result is good.

Version coverage

The decoder covers IonCube 10 through IonCube 15, SourceGuardian, and the PHP targets still seen in production: PHP 7.1, 7.2, 7.3, 7.4, 8.1, 8.2, 8.3, and 8.4. Version-specific pages below explain common headers and target combinations.

Dynamic keys and context

IonCube callback-key files can require an included function, bootstrap, or key map to finish recovery. When that context is missing, the decode still reports the protected sections and tells you what to provide next.

Decode IonCube and SourceGuardian PHP files online

DecodePHP is an online decoder for encrypted PHP files. It supports the IonCube, SourceGuardian, and PHP versions listed on this page, shows a preview of the decoded source first, and only asks you to unlock the full output after you can see that the decode worked.

The decoded output is returned as normal PHP source where the original structure can be reconstructed. You can inspect functions, classes, strings, and control flow in the preview before downloading the complete decoded file.

The service is built for direct file decoding, not a long setup process. You do not need to install IonCube Loader, SourceGuardian Loader, configure PHP locally, or send files back and forth by email just to know whether a file can be decoded.

PHP compatibility checks

Use the preview to confirm whether an encoded file targets PHP 7.1–7.4 or PHP 8.1–8.4. The linked version pages explain common IonCube headers, SourceGuardian chunks, and target combinations for supported PHP releases.

Context-aware recovery

Dynamic-key files are not treated as a mystery failure. If recovery needs the callback implementation, an included PHP file, runtime values, or a key map, the result explains that clearly.

Readable preview output

The preview is designed to show real decoded structure, not only a success message. You can inspect function names, class boundaries, strings, and formatting quality before deciding whether the full file is worth unlocking.

Batch and API use

Credit packs include web and API access, so developers can decode a single protected file from the browser or process a larger inherited codebase through automation without changing pricing models.

Free Preview

Upload any IonCube or SourceGuardian encrypted PHP file and preview the decoded output instantly. No registration required.

Only upload files you own, are authorized to analyze, or are lawfully permitted to recover, migrate, audit, or interoperate with. Do not upload third-party proprietary software without permission. See Terms.

Decode by version

IonCube, SourceGuardian, and PHP versions

Pick your exact combination. Each page has version-specific notes for IonCube 10–15, SourceGuardian, and supported PHP targets.

IonCube + SourceGuardian

Decode the two commercial PHP protectors most common in paid modules, plugins, and legacy apps.

PHP 7.1–8.4

Every PHP version covered: 7.1, 7.2, 7.3, 7.4, 8.1, 8.2, 8.3, and 8.4.

Dynamic-key guidance

Callback-key protected files are detected and reported with the exact missing context needed for recovery.

Clean output

Properly formatted, readable code with preserved structure and formatting.

Fast decoding

Most files decoded in under 30 seconds. Optimized for files of any size.

100% online

Nothing to install. Works in any browser, on any device, anywhere.

How it works

Three steps to decoded source

  1. 01

    Upload your file

    Drag and drop an IonCube or SourceGuardian encrypted PHP file, or click to browse.

  2. 02

    Preview the output

    See decoded code, detected protector metadata, and any callback-key context needs.

  3. 03

    Recover or download

    Download successful decodes immediately, or add the missing context for dynamic-key files.

Credit packs

Buy once and decode anytime. Web and API access are included.

Starter

$19

3 credits · $6.33/file

Entry pack for a few one-off files.

  • 3 file credits
  • Web + API access
  • Credits do not expire
  • IonCube 10-15, SourceGuardian & PHP 7.1-8.4
  • Successful decodes only
Most Popular

Pro

$59

30 credits · $1.97/file

Best default pack for developers.

  • 30 file credits
  • Web + API access
  • Credits do not expire
  • IonCube 10-15, SourceGuardian & PHP 7.1-8.4
  • Successful decodes only

Enterprise

$199

150 credits · $1.33/file

High-volume pack for teams and agencies.

  • 150 file credits
  • Web + API access
  • Credits do not expire
  • IonCube 10-15, SourceGuardian & PHP 7.1-8.4
  • Successful decodes only

Custom

Contact us

150+ credits · custom volume

Larger volume, special handling, or custom terms.

  • 150+ file credits
  • Web + API access
  • Custom volume pricing
  • Priority handling options
  • Email support

Secure crypto payments · Bitcoin, Ethereum, Litecoin, Monero, USDT

Frequently asked questions

How do I decode IonCube or SourceGuardian encrypted PHP files?
Upload your protected PHP file to our online decoder. We detect whether it is IonCube or SourceGuardian, show a free decoded preview, then let you unlock and download the complete file if the result is good.
Which protectors and PHP versions can you decode?
We support IonCube 10 through 15, SourceGuardian, and PHP targets 7.1, 7.2, 7.3, 7.4, 8.1, 8.2, 8.3, and 8.4. The upload flow identifies the protector and target version automatically.
Can I decode any protected PHP file?
No. DecodePHP is intended for lawful recovery, migration, security review, interoperability, and audit work on code you own or are authorized to examine. You are responsible for ensuring your use is legal in your jurisdiction.
How long does decoding take?
Most files are decoded within 30 seconds. You'll see a progress indicator during processing.
Is there a free preview?
Yes. Upload an IonCube or SourceGuardian file and see the first 20 lines of decoded code before purchasing.
Do you support IonCube dynamic keys or callback keys?
Yes. If a file uses IonCube callback-key protection, we attempt context-based recovery. When the callback implementation or included runtime data is missing, the result explains what context is needed, such as the included file that defines the key callback or a precomputed key map.
What if decoding fails?
You won't be charged. Our success rate is over 99% for supported versions. You only pay for successful decodes.
Can I decode multiple files at once?
Yes. Buy a pack with enough credits for the batch, or contact us for custom volume.
Why does my decoded file look different from the original?
Our decoder uses a decompiler to lift Zend opcodes to readable PHP. The output may differ slightly from the original but is fully functional. We fix issues promptly when reported.

Ready to decode?

Upload your first file and see the results in seconds.

Contact us on Signal