PHP Deobfuscator
Online

Decode obfuscated PHP files. IonCube, SourceGuardian, Zend Guard, eval/base64 chains all supported. Free preview, no install.

10,000+ files decoded · 99.9% success rate · Free preview available

terminal
functions.php
Encrypted
1<?php //ICB0 74:0 81:51714 82:a6b9e ?>2<?php //003353if(extension_loaded('ionCube Loader')){4  die('The file '.__FILE__." is corrupted.");5}echo("Script error: the ionCube Loader for6PHP needs to be installed. The ionCube Loader7is the industry standard PHP extension for8running protected PHP code, and can usually9be added easily to a PHP installation.10For Loaders please visit ioncube.com");11exit(199);12?>13HR+cPvXRFmq8V8KYrIAfBlzaKcilXyFs2r2RC9Y145H9SXxbv8z4Lq0MxIV3wSHaW2odtYN/0K4Vsvwk15a1kzeOgsPqnNbhOX/LQgSYhjrw/EiwtFawI9vdP16H6sVa75iFaAcfDaauMfUyBMOoWe0IRKr6olKseh
functions_decoded.php
Decoded
1<?php23function invoice_settings($v1 = null) {4    if ($v1 === null) {5        return get_option("acme_invoice");6    }7    return get_option("acme_invoice")[$v1];8}910function invoice_log($v1 = null, $v2 = "info") {11    $v3 = new Acme_Invoice_Log();12    $v3->write($v2, $v1);13    return $v3;14}1516function invoice_load_textdomain() {17    load_plugin_textdomain("acme-invoices", __DIR__);18    return;19}
Ready

Free Preview

Upload any obfuscated PHP file — IonCube, SourceGuardian, Zend Guard, or eval/base64 chains — and preview the deobfuscated output instantly.

Only upload files you own, are authorized to analyze, or are lawfully permitted to recover, migrate, audit, or interoperate with. Do not upload third-party proprietary software without permission. See Terms.

Deobfuscate any PHP file online

PHP code gets obfuscated for many reasons: commercial license protection (IonCube, SourceGuardian), anti-tamper hiding of business logic, or malicious concealment of malware. In every case, the obfuscated file is unreadable — until DecodePHP lifts it back to source.

What we handle

  • IonCube 10–15 — the dominant commercial PHP protector. Encrypted Zend bytecode + runtime IonCube Loader.
  • SourceGuardian — IonCube's sibling protector. Uses a similar bytecode-encryption model.
  • Zend Guard — discontinued, but still found on legacy PHP 5.x apps in the wild.
  • Source-level obfuscation — eval(base64_decode()), gzinflate chains, str_rot13 wraps, character-array indirection, numeric string lookups, packer-style unrolling.
  • Malware patterns — webshells, pharma hacks, Japanese SEO spam, credit-card skimmers hidden inside legitimate PHP files.

How it works

  1. Upload your obfuscated .php file.
  2. We detect the obfuscation type automatically (IonCube, SG, eval-chain, etc.).
  3. See a free preview of the first 20 lines of deobfuscated source.
  4. Use one credit to download the full readable file (packs from $19).

Why source-level matters for security

Security teams frequently need to audit PHP files where the obfuscation itself is a red flag. DecodePHP reveals exactly what the code does — where data exfiltrates to, what credentials are hardcoded, what backdoors lurk in plugins. Upload without fear: files are processed in isolation.

Every protector

IonCube 10–15, SourceGuardian, Zend Guard, and source-level obfuscation patterns (eval + base64, gzinflate, character array lookups) all handled.

PHP 7.1–8.4

Every PHP version covered: 7.1, 7.2, 7.3, 7.4, 8.1, 8.2, 8.3, and 8.4.

Clean output

Properly formatted, readable code with preserved structure and formatting.

Fast decoding

Most files decoded in under 30 seconds. Optimized for files of any size.

100% online

Nothing to install. Works in any browser, on any device, anywhere.

Instant download

Download decoded files immediately after processing. No waiting.

How it works

Three steps to decoded source

  1. 01

    Upload your file

    Drag and drop any obfuscated PHP file — we auto-detect the protector or obfuscation type.

  2. 02

    Preview the output

    See the first 20 lines of decoded code instantly to verify quality.

  3. 03

    Download the full file

    Purchase credits and download the complete decoded source code.

Credit packs

Buy once and decode anytime. Web and API access are included.

Starter

$19

3 credits · $6.33/file

Entry pack for a few one-off files.

  • 3 file credits
  • Web + API access
  • Credits do not expire
  • IonCube + SourceGuardian + Zend Guard + eval/base64
  • Successful decodes only
Most Popular

Pro

$59

30 credits · $1.97/file

Best default pack for developers.

  • 30 file credits
  • Web + API access
  • Credits do not expire
  • IonCube + SourceGuardian + Zend Guard + eval/base64
  • Successful decodes only

Enterprise

$199

150 credits · $1.33/file

High-volume pack for teams and agencies.

  • 150 file credits
  • Web + API access
  • Credits do not expire
  • IonCube + SourceGuardian + Zend Guard + eval/base64
  • Successful decodes only

Custom

Contact us

150+ credits · custom volume

Larger volume, special handling, or custom terms.

  • 150+ file credits
  • Web + API access
  • Custom volume pricing
  • Priority handling options
  • Email support

Secure crypto payments · Bitcoin, Ethereum, Litecoin, Monero, USDT

Other decoders

Frequently asked questions

What is a PHP deobfuscator?
A PHP deobfuscator takes obfuscated, encoded, or bytecode-compiled PHP files and reconstructs readable source code. DecodePHP handles commercial protectors (IonCube, SourceGuardian, Zend Guard) and common open-source obfuscation patterns (eval + base64, gzinflate, character-replacement, numeric-string mutation).
What types of PHP obfuscation do you handle?
IonCube 10–15, SourceGuardian, Zend Guard (older), eval(base64_decode()) layered decoders, gzinflate/gzuncompress chains, str_rot13 wraps, and character-array lookups. For heavy multi-layer obfuscation, contact support on Signal at sologhoul.83 with the file.
Is there a free online PHP deobfuscator?
DecodePHP offers a free preview of deobfuscated output on every upload. The first 20 lines are shown at no cost. The full file uses credits from one-time packs.
What's the difference between a decoder and a deobfuscator?
A decoder handles commercial bytecode protection (IonCube, SourceGuardian — files that require a loader extension). A deobfuscator handles source-level transformations (eval + base64, variable name mangling, string-array lookup). DecodePHP does both.
Can you handle PHP malware obfuscation?
Yes. Most PHP malware (webshells, backdoors, pharma hacks, Japanese SEO spam) uses heavy source-level obfuscation that DecodePHP lifts back to readable PHP for analysis.
Will deobfuscation produce runnable PHP?
For commercial protectors (IonCube, SourceGuardian): yes, fully runnable. For source-level obfuscation: yes, though reverse-engineered variable names may replace mangled ones.
Is DecodePHP better than unphp.net?
UnPHP is an open tool focused on source-level eval/base64 patterns. DecodePHP adds commercial bytecode support (IonCube, SourceGuardian), a modern UI, and a paid tier with higher-quality lifting. Free preview lets you compare.
Is my file safe when I upload it?
Yes. Files are deobfuscated in ephemeral containers and deleted after delivery. We never store or share source.

Ready to decode?

Upload your first file and see the results in seconds.

Contact us on Signal