About DecodePHP

We build decoders for commercial PHP protectors — IonCube, SourceGuardian, Zend Guard, and friends.

Why we exist

PHP encoders like IonCube are powerful, but they create a specific failure mode: when the original developer is gone, the source is lost, or a legacy app needs to migrate to a new PHP version, the encoded file becomes a black box. DecodePHP exists to open that box — cleanly, reliably, and at a reasonable price.

Who we are

DecodePHP is built by a reverse-engineering team with years of experience in PHP bytecode analysis and Zend opcode lifting. We maintain an open-source CLI wrapper at github.com/oppa26/ioncube-decode that talks to the same API our web service uses.

Support runs through Signal at sologhoul.83. If preview fails on your file, message us — we fix reports within days, not months.

What we decode

  • IonCube versions 10, 11, 12, 13, 14, and 15 — every release since 2016.
  • PHP versions 7.1, 7.2, 7.3, 7.4, 8.1, 8.2, 8.3, and 8.4.
  • SourceGuardian — the sibling commercial protector used by many European billing systems and WHMCS modules.
  • Zend Guard — the discontinued enterprise protector, still widely found on legacy PHP 5.x / 7.x codebases.
  • Source-level obfuscation — eval + base64, gzinflate chains, and packer-style unrolling.

What we don't do

  • We don't store, share, or republish your source code. Files are processed in ephemeral containers and deleted after delivery.
  • We don't decode files that require active DRM circumvention of live services (e.g., SaaS license servers). Offline protectors only.
  • We don't ask for credit cards. Crypto only — Bitcoin, Ethereum, Litecoin, Monero, USDT.

How to reach us

The fastest path is Signal at sologhoul.83 where we answer daily. Email support@decodephp.io works too, with a slower turnaround.

Scan to message us on Signal (sologhoul.83)
Scan the QR code to message us on Signal.