WordPress.org

Ready to get started?Download WordPress

Forums

footer in base64... how decrypt it? (149 posts)

  1. Samuel Wood (Otto)
    Tech Ninja
    Posted 4 years ago #

    rashidr: Replace the "eval" with an "echo" and run it. That'll decode it.

    The code inserts a third party advertisement into your page that will only be seen by Google. Essentially, it's spamming your site's search results with it's own advertising.

    I'd simply remove that code entirely. It's spammer code.

  2. allexander
    Member
    Posted 4 years ago #

    Hi Otto45 can you please help me, the code is
    Please do not post large chunks of code in these forums. - mod

  3. Denshou Ansari
    Member
    Posted 4 years ago #

    Hi Otto Thanks for your Help so much!
    Please help me with my blog!
    I bought a Theme, but I bought the standard template, not the "developer" one from press75, urban elements. I have to change so much encoded scripts here and there among all the php sheets. For example on index.php, I have to change the "read more" to spanish (Leer mas) but I couldn´t cause the index.php are encoded base64. By the way, on the footer I would like to add so important information about contacts, but the footer is encoded as well, I just want to add, dont to delete.

    I will post the footer and index code here:

    Please do not post large chunks of code in these forums. - mod

    Thanks in advance!

  4. allexander
    Member
    Posted 4 years ago #

    Denshou Ansari: here u get a little help from me :)
    see your footer.php code in here.

    http://wordpress.pastebin.com/m42d9855b

  5. steventrevino
    Member
    Posted 4 years ago #

    Could someone decode this for me? While it appears to be byterun code, but there seems to be some extra encoding.

    'base64_decode' as 'edoced_46esab' near the bottom

    http://wordpress.pastebin.com/m7599fb0e

    Thank you

  6. Denshou Ansari
    Member
    Posted 4 years ago #

    Thanks Allexander! Great Help!
    really It works!
    :)

  7. steventrevino
    Member
    Posted 4 years ago #

  8. ranstop
    Member
    Posted 4 years ago #

    The same problem, could you help me?

    Please do not post large chunks of code in these forums. - mod

    Thanks in advance!

  9. cosmin92
    Member
    Posted 4 years ago #

    Please do not post large chunks of code in these forums. - mod

    pls help me ... :(

  10. princexxx
    Member
    Posted 4 years ago #

    Please help me tooo....

    Please do not post large chunks of code in these forums. - mod

    This will be very easily decoded...so if someone can decode this!

    Thanks!

  11. allexander
    Member
    Posted 4 years ago #

    princexxx there you go :)
    http://wordpress.pastebin.com/m75dfa6a

  12. nasif123
    Member
    Posted 4 years ago #

    Can anyone decrypt this code? Any help would be greatly appreciated. Thanks in advance. Here is the code:

    Please do not post large chunks of code in these forums. - mod

  13. nasif123
    Member
    Posted 4 years ago #

    Thanks I got the solution...

  14. macedonas
    Member
    Posted 4 years ago #

    I'm trying to figure it out how to do that, but i can't. I want to be sure that the template developer is ok and nothing bad is at my footer. Please any help will be precious!

    Please do not post large chunks of code in these forums. - mod

  15. Samuel Wood (Otto)
    Tech Ninja
    Posted 4 years ago #

    Automated decoders are available here: http://wordpress.org/support/topic/300761

    They will work for your code.

  16. macedonas
    Member
    Posted 4 years ago #

    I've tried with the first and the second link, but i always get an empty box. Nothing appears. A i can understand i need the second link with the php $_F=__FILE__;$_X. I've paste the whole code (as in the example) but nothing :(

  17. Samuel Wood (Otto)
    Tech Ninja
    Posted 4 years ago #

    You're using the right one, but not reading the instructions. See where it says "Paste just the red 'encrypted text' section in to the top box and hit Decode."

    So, you don't paste the whole code into it. Just the piece in between $_X=' and ';

    In your case, the code you will paste starts with Pz48L2Q0 and ends with 2h0bWw+.

  18. macedonas
    Member
    Posted 4 years ago #

    Oh GOD! HUGE mistake!

    I read ore carefully the info. Now i've done it!

    Great thanks Otto42! You are great! Keep up ;-)

  19. princexxx
    Member
    Posted 4 years ago #

    Automated decoders are available here: http://wordpress.org/support/topic/300761

    They will work for your code.

    Hello Otto...I have Seen your Auto Decoder But They cannot Decode my encrypted Footer so can Any One help me??

    Code-

    Please do not post large chunks of code in these forums. - mod

  20. Samuel Wood (Otto)
    Tech Ninja
    Posted 4 years ago #

    princexxx: The decoders at that link do indeed work with your code just fine. I just tried it, and it worked.

    You'll want to use the ByteRun decoder, the second one listed there.

  21. jalansutera
    Member
    Posted 4 years ago #

    Can someone please decode this footer for me?

    Please do not post large chunks of code in these forums. - mod
    Thanks..

  22. jalansutera
    Member
    Posted 4 years ago #

    Hi All,

    After learning for awhile, I now able to decode the file using Otto's suggestion. Thank you very much guys, you've given me enlightment.

  23. iam
    Member
    Posted 4 years ago #

    Hi! Can anyone help me with that?
    Please do not post large chunks of code in these forums. - mod

  24. Samuel Wood (Otto)
    Tech Ninja
    Posted 4 years ago #

    iam: Change the "eval" to an "echo". Then run the code and view source of the resulting page. There's your decoded code.

  25. balazs_xp
    Member
    Posted 4 years ago #

    Hello Otto

    Please help me with this encrypted php.

    Please do not post large chunks of code in these forums. - mod

    Thank You!
    balazs

  26. Samuel Wood (Otto)
    Tech Ninja
    Posted 4 years ago #

    @balazs_xp : Decode it yourself. That's why we have a sticky thread with links to decoders. One of them *does* work for your code.

    http://wordpress.org/support/topic/300761

  27. lemmi
    Member
    Posted 4 years ago #

    ?><!-- begin footer -->
    </div>
    <div id="credit">
    <img src="http://themes.zinruss.com/library/centurion.gif"
    alt="Centurion WordPress Theme" width="950" height="1" border="0" />
    </div>
    <script type="text/javascript">
    <!--	var message="";
    	function clickIE() {if (document.all) {(message);return false;}}
    	function clickNS(e) {if
    	(document.layers||(document.getElementById&&!document.all)) {
    	if (e.which==2||e.which==3) {(message);return false;}}}
    	if (document.layers)
    	{document.captureEvents(Event.MOUSEDOWN);document.onmousedown=clickNS;}
    	else{document.onmouseup=clickNS;document.oncontextmenu=clickIE;}
    	document.oncontextmenu=new Function("return false")
    // -->
    </script>
    
    <noscript><meta content="0;URL=<?php echo get_settings('home');
    ?>/wp-admin/" http-equiv="refresh" /></noscript>
    
    <div id="footer"><p>Copyright &copy; <?php echo date('Y');?>
    <?php bloginfo('name');?> &ndash; <?php bloginfo('description'); ?>.
    Running on <a href="http://wordpress.org" title="wordpress"
    target="_blank">WordPress</a> | <a href="http://topwpthemes.com"
    title="wordpress themes" target="_blank">Theme</a> developed by
    <a href="http://www.shisha.de" title="Shisha"
    target="_blank">Shisha</a>.</p>
    </div>
    </body>
    </html>

    Hello Experts,

    is there a way to edit the credit notes from within the wordpress-admin or do i have to code this in templates?

    greetings
    lenny

  28. Gady
    Member
    Posted 4 years ago #

    I want to help me and me to decrypt one of wordpress thema's UrbanElements and it is all about is encrypted and the header and footer and if you kindly help me decrypt mie.Si me thank in advance.

    Bellow is the php code.If you want to help me tell me or decrypt my theme.
    Bellow is the Footer but about all them is encrypted.

    <?php /* WARNING: This file is protected by copyright law. To reverse engineer or decode this file is strictly prohibited. */
    $o="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";eval(base64_decode("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"));return;?>

  29. Bektor
    Member
    Posted 4 years ago #

    hi Otto... i have been trying, but i can´t decryp it, help me pls...

    <?php
    $o="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";eval(base64_decode("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"));return;?>

Topic Closed

This topic has been closed to new replies.

About this Topic