PHP obfuscator
Wrap PHP so it self-decodes at runtime. Runs on the server; the code is never stored.
This one talks to the server. What it sends is spelled out below.
This one runs on the server
The obfuscator is a PHP transform, so — unlike every other tool here — your code is sent to the server to be processed. It is transformed in memory and handed straight back. It is not written to disk and not logged. You are trusting me on that, so do not paste anything whose secrecy actually matters.
What this actually does, and what it is worth
Your code is wrapped so that the file you get out decodes itself at runtime: the original
is byte-shifted, compressed, Base64'd, and dropped inside a small loader that reverses all
three and evals the result. Opening the output in an editor shows one line of
Base64 instead of your source.
This is obfuscation, not protection
Anyone who can run the file can recover the original — the loader has to decode it to
run it, so the plaintext is right there at eval time. Reversing it is a
couple of minutes' work; this very tool's source shows exactly how. It raises the effort
to read your code from zero to slightly-above-zero. It keeps out nobody who is trying.
It is here because the old site had it. Do not use it to hide a licence check, a password or anything you actually need kept secret — for that there is no source-side answer, only keeping the code on a server you control.
The wrapper also carries a self-check that stops the file running if its top comment line is deleted. That is a nag, not a security feature, and it is reproduced here only to match the original behaviour.
Other tools
- Code scanner — Read QR codes and barcodes with your camera or from an image. Every format ZXing knows.
- Code generator — Make a QR code, Data Matrix, Aztec, PDF417 or a linear barcode and download it.
- Link inspector — See where a link really goes before you open or shorten it: the real host, lookalike letters, hidden redirects and tracking parameters.
- Base converter — Encode and decode between text and Base2 through Base85, or convert integers between any two bases.
- Hash generator — MD5, SHA family, CRC32 and MySQL5 over text or a file. The file is read in your browser.
- JWT decoder — Read a JSON Web Token's header and claims, with every timestamp as a date. Decoded right here; the token is never sent or stored.
- SSH key fingerprint — SHA256 and MD5 fingerprints, key type and size, and SSHFP records for a public key. Private keys are refused unread.
- Password generator — Random passwords from a CSPRNG, with the character classes you pick.
- TOTP generator — Turn a TOTP secret or otpauth:// link into the current code. The secret stays on your device.
- Timestamp converter — Unix time to a calendar date and back, in every format at once. Live clock included.
- Subnet calculator — IPv4 and IPv6: network, range, host count, masks and reverse-DNS pointers.
- Image resizer — Resize and convert an image without it ever leaving your browser. Re-encoding drops EXIF and GPS.
- IP info — Your public IPv4 and IPv6, as this server sees them.