PHP Decoder
IonCube + SourceGuardian
Recover source from IonCube and SourceGuardian encrypted PHP files online. IonCube 10–15 supports PHP 5.x, 7.1–7.4, and 8.1–8.4 targets; SourceGuardian supports PHP 7.1–8.4, including 8.0.
Eligible files get a real 30-line preview before you pay. Unresolved license, companion-file, or callback-key requirements return guidance instead of a promise.
10–15
ionCube versions
5.x · 7.x · 8.x
supported PHP targets
IC + SG
protectors
Free Preview
Upload a supported file. A 30-line preview appears when decoding completes without an unresolved protection requirement.
Max 10MB
Only upload files you own, are authorized to analyze, or are lawfully permitted to recover, migrate, audit, or interoperate with. Do not upload third-party proprietary software without permission.
Prefer the API? Upload, poll, then download with your account number as the key.
Coverage
Online PHP protector decoding
DecodePHP attempts recognized IonCube and supported SourceGuardian files on accepted PHP targets. Eligible uploads receive a preview after processing; account processing makes a viewable result available to download.
Version coverage
The decoder covers IonCube 10 through IonCube 15, SourceGuardian, and their supported PHP targets. IonCube targets include PHP 5.0–5.6, 7.1–7.4 and 8.1–8.4; SourceGuardian targets include PHP 7.1–8.4, including 8.0.
Dynamic keys and context
IonCube callback-key files can require an included function, bootstrap, or key map to finish recovery. When that context is missing, the decode still reports the protected sections and tells you what to provide next.
Free preview
Upload a supported IonCube or SourceGuardian PHP file. A 30-line preview appears when decoding completes without an unresolved protection requirement.
Decode IonCube and SourceGuardian PHP files online
DecodePHP is an online decoder for encrypted PHP files. It supports the IonCube, SourceGuardian and PHP versions listed on this page. Eligible files get a free 30-line preview; unresolved license, companion-file, or callback-key requirements return guidance instead of promising a preview.
The decoded output is returned as normal PHP source where the original structure can be reconstructed. You can inspect functions, classes, strings and control flow in the preview before running the full account decode.
No local setup
The service is built for direct file decoding, not a long setup process. You do not need to install IonCube Loader or SourceGuardian Loader, configure PHP locally, or send files back and forth by email just to know whether a file can be decoded.
PHP compatibility is checked before decoding starts. The protector and target are read from the container header, then matched against the supported list. A named rejection is better than a guess.
ionCube + SourceGuardian
Decode the two commercial PHP protectors most common in paid modules, plugins and legacy apps.
Supported PHP targets
IonCube: PHP 5.0–5.6, 7.1–7.4 and 8.1–8.4. SourceGuardian: PHP 7.1–8.4, including 8.0.
Dynamic-key guidance
Callback-key protected files are detected and reported with the exact missing context needed for recovery.
Clean output
Properly formatted, readable code with preserved structure and formatting where reconstruction allows.
Fast decoding
Routine files usually finish quickly. Uploads are limited to 10 MB; callback-key recovery can take several minutes.
100% online
Nothing to install locally. Uploads are processed server-side in isolated workers.
Coverage map
Decode by version
Pick your exact combination. Each page has version-specific notes for IonCube 10–15, SourceGuardian, and supported PHP targets.
By IonCube version
From upload to source
Upload, preview, then run the full decode.
- 01
Upload your file
Drag and drop an IonCube or SourceGuardian encrypted PHP file, or click to browse.
- 02
Preview the output
See decoded code, detected protector metadata, and any callback-key context needs.
- 03
Recover or download
Download successful decodes immediately, or add the missing context for dynamic-key files.
Credit packs
Buy once and decode anytime. Web and API access included.
Starter
$9
6 credits · $1.50/file
Entry pack for a few one-off files.
- 6 file credits
- Web + API access
- Credits do not expire
- IonCube 10–15 + SourceGuardian · supported PHP targets
- Viewable results only
Pro
$49
80 credits · $0.61/file
Best default pack for developers.
- 80 file credits
- Web + API access
- Credits do not expire
- IonCube 10–15 + SourceGuardian · supported PHP targets
- Viewable results only
Enterprise
$149
500 credits · $0.30/file
High-volume pack for teams and agencies.
- 500 file credits
- Web + API access
- Credits do not expire
- IonCube 10–15 + SourceGuardian · supported PHP targets
- Viewable results only
Custom
Contact us
500+ credits · custom volume
Larger volume, special handling, or custom terms.
- 500+ file credits
- Web + API access
- Custom volume pricing
- Priority handling options
- Email support
Secure crypto payments · Bitcoin, Ethereum, Litecoin, Monero, USDT · credits used only on viewable results
Frequently asked questions
How do I decode IonCube or SourceGuardian encrypted PHP files?
Upload your protected PHP file to the online decoder. The service detects whether it is IonCube or SourceGuardian and resolves the PHP target from the container header. Eligible files get a free 30-line preview; unresolved protection requirements return guidance instead.
Which protectors and PHP versions can you decode?
Recognized IonCube 10 through 15 builds targeting PHP 5.0–5.6, 7.1–7.4 and 8.1–8.4. SourceGuardian targets PHP 7.1–8.4, including 8.0. The upload flow identifies the protector and target automatically.
Can I decode any protected PHP file?
No. The service is built for lawful recovery, migration, security review, interoperability, and audit work on code you own or are authorized to examine. You are responsible for ensuring your use is legal in your jurisdiction.
How long does decoding take?
Routine files usually finish in seconds. Callback-key recovery can take several minutes; the status endpoint keeps reporting progress while the worker continues.
Is there a free preview?
A supported file that completes without an unresolved license, companion-file, project-key, or callback-key requirement gets a free 30-line preview of real decoded source.
Do credits expire?
No. Pack credits do not expire. An attempt that produces no viewable result does not use a credit; a viewable partial callback-key result uses one credit.
Which cryptocurrencies do you accept?
Bitcoin, Ethereum, Litecoin, Monero and USDT. No card payments. Crypto only, invoiced per order.
Does every account get API access?
Yes. Your 16-digit account number is the API key for the REST endpoints. API decodes consume the same credits as browser uploads.
Ready to decode?
Upload your first file and try the free preview before you pay.