Created

9th January 2017

Modified

16th February 2020

A free online PHP code obfuscator, with options.

Multi-layered obfuscation, anti-rename, SNTP verification, minify, GZ compress, never the same output.

Once available on my old site of phpcredo.com, I’ve now made available my PHP script obfuscator at it’s final home!

So what is an obfuscator you ask? Obfuscation is the process of taking perfectly readable code and turning into into a mess of jumbled text, while still producing the same programmatic output. Basically making it difficult for a human to simply open and read the source code.

Useful in circumstances where sensitive information needs to be kept away from prying eyes! However obfuscation is not the go to savior on protecting your creative works. Because of the way PHP works, an experienced PHP programmer will be able to “reverse engineer” the obfuscation to access the underlying code and find out how things tick! This obfuscator is simply designed to make it a laborious and unique task for each script. So without giving away too much I’ll bullet point some feature highlights below.

Not just a simple base64 encoder, multiple layers of obfuscation!
The same script put into the obfuscator will never produce the same output
Changing even the top level script comment (customisable) will likely throw a parse error!
Optional expiry date with option to compare with local or SNTP servers (customisable).
Optional file renaming prevention.
Customisable expiry, script rename prevention, and SNTP timeout messages.
Online & automatic decoders for obfuscated scripts struggle to get to the source!

So give it a try below, select your script for upload, and configure the obfuscator. If you have any suggestions, feedback or issue please comment below.

Note: Cookie functionality will be added to the output script, when any ‘Expiry options’ are enabled.

PHP obfuscator

Main options

Script to upload Select your PHP script to obfuscate. Maximum 200kb.

File to upload (.php): none selected

Script identification reference

A reference that can be used in messages to the user. The ID can be referenced with {SCRIPT-REF}, and the script name with {SCRIPT-NAME}

Top level comment

This text will be the top line comment of your encoded PHP file. This message can not be changed after the file is encoded.

Copyright 2024 - Do not attempt to reverse engineer this file. Please contact for details, quoting the reference: {SCRIPT-NAME}-{SCRIPT-REF}

Encoding options

Minify

Remove comments, tabs and unnecessary spaces. All code is reduced to a single line.

GZIP Compression

This requires support of the function gzuncompress() on the destination server. Your encoded file should in the range of 40-60% smaller than the source.

Fixed name script

Script execution will be stopped if filename is different from what is uploaded to the obfuscator.

Renamed notice

This text is shown if the file name of the script has been changed.

<span style='font-family:sans-serif;font-size:200%;'>Script has been modified. Execution stopped. Please contact us, quoting the reference: {SCRIPT-NAME}-{SCRIPT-REF}</span>

Expiry options

Disabled

No time limitations on script, will never expire.

Use server time

Compare server date and expire date, before executing.

Use SNTP server

Connect to a time server (NTP) to compare current date, against expire date, before executing. (Recommended if the destination server will have access to the Internet with the pre-set server addresses. Requires port 37 to be open on server/firewall.)

Expiry date & time

Date when this script will stop functioning.

: :

Expiry notice

This text will be shown when your script expires.

<span style='font-family:sans-serif;font-size:200%;'>Script has expired. Please contact us, quoting the reference: {SCRIPT-NAME}-{SCRIPT-REF}</span>

SNTP primary server

Primary time server (NTP) to connect to.

SNTP secondary server

Secondary, if primary fails.

SNTP tertiary server

Tertiary, if secondary and primary fail.

SNTP check interval

The amount of time (in seconds) before another server check should be made (via cookie).

SNTP timeout message

This text is shown if the script is unable to connect with any of the listed time servers. (Keep the message obscure like the example below, you don't want to give the person viewing the page an idea of whats going on in the background.)

<span style='font-family:sans-serif;font-size:200%;'>Unable to communicate with server to authenticate licence. Reference: {SCRIPT-NAME}-{SCRIPT-REF}</span>