Dezender is a PHP source recovery platform. You upload an encoded or obfuscated PHP file, Dezender validates it, submits it to a decoding service, and returns readable, formatted source in a dashboard you can download from. It is a finished product with accounts, a paid pass, job history and support, not a library or a command-line tool.

Protection tools usually apply a reversible transformation: base64 or gzip wrapping, a custom character-shuffling routine, or a commercial encoder. Recovery means reversing that specific transformation and then formatting the result so a human can read it. Dezender does not guess: it inspects the file, classifies what kind of wrapper it is, and sends it to a decoding pipeline that handles that family. Reversing the wrapper is not the same as recovering an author's original formatting, comments or variable names, and Dezender never claims it is.

Single PHP-family source files (.php, .phtml, .php3 to .php8, .inc, .module, .tpl, .ctp) and .zip archives that contain only those files. The file type is determined from the file's contents, not from its extension or the browser-reported type, and anything else is rejected before it reaches processing.

The Developer Pass is a one-time payment of €20 that gives you a 240-hour (10-day) window of access, counted from the moment the payment is verified on our servers. Inside that window you can submit files up to the pass allowance, see every job's status, and download your results. The pass is activated by a verified payment event, never by a browser redirect.

No. There is no automatic renewal, no stored mandate and no recurring charge. When the 240 hours elapse the pass simply expires; nothing is billed and no subscription continues. To keep using Dezender you buy another pass manually.

The job is marked as failed and you see the reason on the job page. Transient faults, such as the decoding service being briefly unreachable, are retried automatically with a delay. A failure that cannot succeed on retry, such as an encoding family the pipeline cannot reverse, is reported instead of being retried forever. Processing allowance consumed by a job that ultimately failed is restored to your pass.

Files are stored in private object storage under unguessable random keys, are readable only by the signed-in account that uploaded them, and are never served directly from the web root. Uploads are used solely to produce your result and are sent to the third-party decoding provider for that purpose. Files are deleted on a retention schedule, and results expire at the end of the retention window shown on the job page. Uploaded PHP is never executed by Dezender.

No. Some protection is lossy, some is tied to a runtime extension that cannot be reversed, and some files are simply not encoded at all. If a file cannot be recovered, Dezender says so plainly rather than returning something that looks like source but is not. Recovery is best-effort by nature, and no tool can promise a byte-for-byte reconstruction of the original file.

New job submissions stop immediately, because the expiry is enforced on the server, not in the interface. Your account, job history and billing records remain available, and results stay downloadable until their own retention window ends. Buying another pass starts a new 240-hour window; it does not extend or restart the old one.

Decoding is performed by a third-party service, PHPDecode, which is disclosed in the privacy policy and acceptable use policy. Dezender is an independent product and is not affiliated with that provider. You may only upload files you are legally entitled to reverse-engineer — your own code, code you are licensed to modify, or code you have written permission to work on. Uploading someone else's commercial software to strip its protection is not permitted and will be treated as a breach of the acceptable use policy.