PHP Deobfuscator
Online
Decode obfuscated PHP files. IonCube, SourceGuardian, Zend Guard, eval/base64 chains all supported. Free preview, no install.
10,000+ files decoded · 99.9% success rate · Free preview available
1<?php //ICB0 74:0 81:51714 82:a6b9e ?>2<?php //003353if(extension_loaded('ionCube Loader')){4 die('The file '.__FILE__." is corrupted.");5}echo("Script error: the ionCube Loader for6PHP needs to be installed. The ionCube Loader7is the industry standard PHP extension for8running protected PHP code, and can usually9be added easily to a PHP installation.10For Loaders please visit ioncube.com");11exit(199);12?>13HR+cPvXRFmq8V8KYrIAfBlzaKcilXyFs2r2RC9Y145H9SXxbv8z4Lq0MxIV3wSHaW2odtYN/0K4Vsvwk15a1kzeOgsPqnNbhOX/LQgSYhjrw/EiwtFawI9vdP16H6sVa75iFaAcfDaauMfUyBMOoWe0IRKr6olKseh1<?php23function theme_options($v5 = null) {4 if ($v5) {5 return get_option("my_framework");6 }7 return get_option("my_framework")[$v5];8}910function kelaket_log($v5 = null, $v6 = "None") {11 $v7 = new Kelaket_Log();12 $v7->log($v6, $v5);13 return $v7;14}1516function kelaket_load_textdomain() {17 load_theme_textdomain("kelaketfilm", __DIR__);18 return;19}Free Preview
Upload any obfuscated PHP file — IonCube, SourceGuardian, Zend Guard, or eval/base64 chains — and preview the deobfuscated output instantly.
Only upload files you own, are authorized to analyze, or are lawfully permitted to recover, migrate, audit, or interoperate with. Do not upload third-party proprietary software without permission. See Terms.
Deobfuscate any PHP file online
PHP code gets obfuscated for many reasons: commercial license protection (IonCube, SourceGuardian), anti-tamper hiding of business logic, or malicious concealment of malware. In every case, the obfuscated file is unreadable — until DecodePHP lifts it back to source.
What we handle
- IonCube 10–15 — the dominant commercial PHP protector. Encrypted Zend bytecode + runtime IonCube Loader.
- SourceGuardian — IonCube's sibling protector. Uses a similar bytecode-encryption model.
- Zend Guard — discontinued, but still found on legacy PHP 5.x apps in the wild.
- Source-level obfuscation — eval(base64_decode()), gzinflate chains, str_rot13 wraps, character-array indirection, numeric string lookups, packer-style unrolling.
- Malware patterns — webshells, pharma hacks, Japanese SEO spam, credit-card skimmers hidden inside legitimate PHP files.
How it works
- Upload your obfuscated
.phpfile. - We detect the obfuscation type automatically (IonCube, SG, eval-chain, etc.).
- See a free preview of the first 20 lines of deobfuscated source.
- Pay $3 to download the full readable file.
Why source-level matters for security
Security teams frequently need to audit PHP files where the obfuscation itself is a red flag. DecodePHP reveals exactly what the code does — where data exfiltrates to, what credentials are hardcoded, what backdoors lurk in plugins. Upload without fear: files are processed in isolation.
Every protector
IonCube 10–15, SourceGuardian, Zend Guard, and source-level obfuscation patterns (eval + base64, gzinflate, character array lookups) all handled.
PHP 7.1–8.4
Every PHP version covered: 7.1, 7.2, 7.3, 7.4, 8.1, 8.2, 8.3, and 8.4.
Clean output
Properly formatted, readable code with preserved structure and formatting.
Fast decoding
Most files decoded in under 30 seconds. Optimized for files of any size.
100% online
Nothing to install. Works in any browser, on any device, anywhere.
Instant download
Download decoded files immediately after processing. No waiting.
How it works
Three steps to decoded source
- 01
Upload your file
Drag and drop any obfuscated PHP file — we auto-detect the protector or obfuscation type.
- 02
Preview the output
See the first 20 lines of decoded code instantly to verify quality.
- 03
Download the full file
Purchase credits and download the complete decoded source code.
Credit packs
Buy once and decode anytime. Web and API access are included.
3 credits · $3.00/file
- 3 file credits
- Web + API access
- Credits do not expire
- IonCube + SourceGuardian + Zend Guard + eval/base64
- Successful decodes only
30 credits · $1.30/file
- 30 file credits
- Web + API access
- Credits do not expire
- IonCube + SourceGuardian + Zend Guard + eval/base64
- Successful decodes only
150 credits · $0.99/file
- 150 file credits
- Web + API access
- Credits do not expire
- IonCube + SourceGuardian + Zend Guard + eval/base64
- Successful decodes only
150+ credits · custom volume
- 150+ file credits
- Web + API access
- Custom volume pricing
- Priority handling options
- Email support
Secure crypto payments · Bitcoin, Ethereum, Litecoin, Monero, USDT