WordPress.org

1. teramera
   Member
   Posted 6 months ago #

   Been reading the forums for a solution to removal of encrypted base 64 code from template footer.php file.

   I cam e across one of the posts on the forum where it was stated that LenK had suggested a solution to another member .. which worked. However I could not find the solution suggestion even after searching LenK's some 432 posts..:-(

   I have also searched for a clean version of the template Womanspirit Theme but all the links that i came across have the same if not another base 64 coded file. Anyone know where a clean copy of this Theme can be accesed?

   LenK or any other WP guru, if you are reading this can you please provide me with a step by step process on how to remove the coded stuff in the footer....

   This is what it looks like...
   

   <?php $__F=__FILE__;$__C='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';eval(base64_decode('JF9fQz1iYXNlNjRfZGVjb2RlKCRfX0MpOwokX19DPXN0cnRyKCRfX0MsIjEyMzQ1NmFvdWllIiwiYW91aWUxMjM0NTYiKTsKJF9fQz1lcmVnX3JlcGxhY2UoJ19fRklMRV9fJywiJyIuJF9fRi4iJyIsJF9fQyk7CmV2YWwoJF9fQyk7CiRfX0M9IiI7'));?>

   Sorry guys no website links as yet since I have not yet set it up. Just liked this theme downloaded it and saw the code..... something that I would not want top use for security reason.

   All help will be greatly appreciated.

   Thanks for your time in advance.

   tera

2. teramera
   Member
   Posted 6 months ago #

   Downloaded again from another site and this one has this code.....
   

   <?php $__F=__FILE__;$__C='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';$__C=base64_decode($__C);
   $__C=strtr($__C,"123456aouie","aouie123456");
   $__C=ereg_replace('__FILE__',"'".$__F."'",$__C);
   eval($__C);
   $__C="";?>

   Can anyone tell me how to remove this one at least if not the first one above.

   Tera

3. ClaytonJames
   Member
   Posted 6 months ago #

   The general consensus is that encryption of theme contents is bad form. Not to mention potentially dangerous if using it results in the execution of malicious code. I think most people would encourage you to not use the theme for your own peace of mind (safety, pride, etc...). That being said, there are a lot of threads and topics on base 64 encoding and decoding. If the theme is actually installed, you can simply view the source code and see the decrypted contents, then (and this is the short version, although usually not that complicated), copy, paste,edit and substitute the source code for the encrypted contents. There is also this: http://wordpress.mu/decrypt-footerphp

   Although I don't necessarily agree with all of the views expressed on his blog, I respect and believe in his right to express them. I am also a fan of, and regularly use one of the authors themes on one of my sites. He offers, for his own reasons, (more power to him), to decrypt these footers for free.

   If you really, really like the theme, contact the author if you can, and see if there is a "brand free" or unencrypted version available for use with permission. My personal thoughts are "flush it".

   Just my 2 cents. :-)

   Cj.

4. ClaytonJames
   Member
   Posted 6 months ago #

   I'm betting that the de-crypted contents of that footer would look something like this:

   <div id="footer"><p>
   Womanspirit is powered by <a
   href='http://wordpress.org'>Wordpress</a>
   - Theme designed by <a href='http://www.webhostingrally.com'>Web
   Hosting Rally</a>.
   <a href="http://www.5shadestemplates.com">Website Templates</a> |
   <a href="http://www.pupdogtraining.com">Dog Training</a> | <a
   href="http://www.5shadesreseller.com">Reseller Hosting</a>.
   
   </p></div>
   </body>
   </html>

   That is of course, if it were de-crypted and I was a betting man.

5. jonimueller
   Member
   Posted 6 months ago #

   And what on earth would be a legitimate reason to encrypt a theme? I really would like to know.

6. teramera
   Member
   Posted 6 months ago #

   Thanks ClaytonJames for your posts... I tried putting what you offered as de-crypted contents in place of the encrypted code in the original footer.php file and tried it on a local server system....but it breaks the layout ..besides nothing shows in the footer..... I did a cut -copy-paste of the content that you provided me..... am I doing something wrong ? How should I insert the decrypted code you gave me..?

7. ClaytonJames
   Member
   Posted 6 months ago #

   It sometimes is a little more complicated if the encrypted contents calls information from a file somewhere else in the themes structure. I worked on a couple of themes that actually called the footer contents from a file located in the images directory. I wish I could be specific in your case, but sometimes it's trial and error until you find all of the related mess. I agree with Joni completely. I can't think of any legit reason to encrypt the contents of something that is freely offered to a public audience. My advice is to not use it, but just out of curiosity I might take a look at the theme this weekend. I love a good puzzle.

8. ClaytonJames
   Member
   Posted 6 months ago #

   Paste this into your footer.php and test drive it.

   <div class="cleaner"></div>
   </div></div>
   <div id="footer"><p>
   
   <?php bloginfo('name'); ?> is powered by <a
   href='http://wordpress.org'>Wordpress</a>
   - Theme designed by <a href='http://www.webhostingrally.com'>Web
   Hosting Rally</a>.
   <a href="http://www.5shadestemplates.com">Website Templates</a> |
   <a href="http://www.pupdogtraining.com">Dog Training</a> | <a
   href="http://www.5shadesreseller.com">Reseller Hosting</a>.
   </p></div>
   </body>
   </html>

   That might work. Then you can edit the links as you see fit.

9. teramera
   Member
   Posted 6 months ago #

   Thanks ClaytonJames for your kind offer to take up the challenge to solve the puzzle..... God speed... I look forward to your success in taming the beast and look forward to your next post here. Thanks for your offer of help and your time.

   Warm regards,
   Tera

10. teramera
    Member
    Posted 6 months ago #

    WOW ! Great.. Thanks a million ClaytonJames...... You truly ROCK! ... It worked brilliantly..... Thanks .. Thanks once gain.

    BTW... any ideas on how you did it... I mean just in case in the future I find some other theme with similar problem... how could I go about doing it.... other than requesting you to help me out again.

    It probably also would help a lot of other folks facing similar situation... and I am sure all would be deeply grateful for your efforts.

    Once again thanks.. you were so fast and brilliant.

    You made a new friend.. today.
    Cheers!
    Tera

11. ClaytonJames
    Member
    Posted 6 months ago #

    WOW ! Great.. Thanks a million ClaytonJames...... You truly ROCK! ... It worked brilliantly..... Thanks .. Thanks once gain.

    BTW... any ideas on how you did it... I mean just in case in the future I find some other theme with similar problem... how could I go about doing it.... other than requesting you to help me out again.

    You are most welcome... and truth be told, there was no actual decoding required, and very little effort overall on my part. At lunch time I found a demo site for your theme and looked at the source code. Copied, pasted the footer info to a plain text file for later comparison, downloaded the theme for reference, and the whole thing took about ten minutes. I just compared what I saw in the source to the footer.php, threw in the divs where I thought they should go, and then substituted...

    <?php bloginfo('name'); ?>

    ...for the "is powered by" string so it will insert the name of your site in the footer.

    Nothing fancy at all. Just a good guess. I'm glad it worked. You might want to take some time and look over the rest of the files in that theme for anything else that looks like it might possibly seem out of place. I did not look any farther than the footer.

    I'm glad it worked out.

    Cj

12. teramera
    Member
    Posted 6 months ago #

    Hi! ClaytonJames.... You are far too modest and humble.... but then again thats what makes folks like you... YOU. Thanks once again and have a Fantastic - Good Weekend.

    Tera

Reply

You must log in to post.