That will get you most of the way, most of the time, but it’s not always sufficient..
It does not cover adding back in required WordPress functions that can sometimes be obscured, such as wp_head, wp_footer, and so on..
Best to avoid sites that provide encoded themes… alot of these sites are just ripped versions of other peoples work..
If you must use such a theme, don’t install it on a live site, then remove the decoding. Install locally, remove dodgy code, then deploy to live site..
VitaeBlog:
Your method doesn’t really work, because all it gives you is the output of the final code. It doesn’t give you any of the PHP code, which may contain conditional changes or specialized calls (wp_footer, for example) or other things along those lines.
Merely producing a static set of HTML is not all that the code might be doing. Using a decoder is better. Not using a theme with encrypted data at all is best.
Furthermore, your method requires that you RUN the code, which is extremely dangerous. What if the encrypted code adds a backdoor into your site, then sends an email to some malicious person saying “hey, this idiot just ran your malicious theme code. Here’s his URL and login information”. Somebody now has access to your site, even though you had removed the encrypted code after you ran it that one time.
NEVER RUN ENCRYPTED CODE. Not even once. Doing so is just inviting malicious people in.
The decoders I created or found do not run the code, ever. They decode it directly. The methods I tell people on how to decode things do not involve running the code in an unmodified state (changing eval to echo and running it is safe, since it’s echoing the result, not executing it).
I tried everything to get rid off the footer but nothing works..
Here’s the code: http://wordpress.pastebin.com/Y2KRHWUC
I hope anybody can help me, thanks in advance!
Benn1e instead of hijacking an old thread, you should have started a new one.
If you put decode document.write( unescape into google, the first result leads you to:
http://www.java2s.com/Code/JavaScriptDemo/UnescapeEncoderDecode.htm
Put your encoded gunk into that and it decodes as the following (but wth the linkspam replaced)
<div id="footer">
Designed by: <a href="http://www.spammylink.com/">spammylink</a>. Sponsored by: <a href="http://www.spammylink.com/">spammylink</a>, <a href="http://www.spammylink.com/">spammylink</a>, <a href="http://www.spammylink.com/">spammylink</a>.
</div>
</div>
</body>
</html>
You probably shouldn’t be using dodgy themes though – there are plenty of places to get good honest GPL themes.
