rashidr: Replace the "eval" with an "echo" and run it. That'll decode it.
The code inserts a third party advertisement into your page that will only be seen by Google. Essentially, it's spamming your site's search results with it's own advertising.
I'd simply remove that code entirely. It's spammer code.
Posted 2 years ago #
Hi Otto45 can you please help me, the code is
Please do not post large chunks of code in these forums. - mod
Posted 2 years ago #
Hi Otto Thanks for your Help so much!
Please help me with my blog!
I bought a Theme, but I bought the standard template, not the "developer" one from press75, urban elements. I have to change so much encoded scripts here and there among all the php sheets. For example on index.php, I have to change the "read more" to spanish (Leer mas) but I couldn´t cause the index.php are encoded base64. By the way, on the footer I would like to add so important information about contacts, but the footer is encoded as well, I just want to add, dont to delete.
I will post the footer and index code here:
Please do not post large chunks of code in these forums. - mod
Thanks in advance!
Posted 2 years ago #
Denshou Ansari: here u get a little help from me :)
see your footer.php code in here.
Posted 2 years ago #
Could someone decode this for me? While it appears to be byterun code, but there seems to be some extra encoding.
'base64_decode' as 'edoced_46esab' near the bottom
http://wordpress.pastebin.com/m7599fb0e
Thank you
Posted 2 years ago #
Thanks Allexander! Great Help!
really It works!
:)
Posted 2 years ago #
Mine is decoded here:
http://wordpress.pastebin.com/m25f1248f
Posted 2 years ago #
The same problem, could you help me?
Please do not post large chunks of code in these forums. - mod
Thanks in advance!
Posted 2 years ago #
Please do not post large chunks of code in these forums. - mod
pls help me ... :(
Posted 2 years ago #
Please help me tooo....
Please do not post large chunks of code in these forums. - mod
This will be very easily decoded...so if someone can decode this!
Thanks!
Posted 2 years ago #
princexxx there you go :)
http://wordpress.pastebin.com/m75dfa6a
Posted 2 years ago #
Can anyone decrypt this code? Any help would be greatly appreciated. Thanks in advance. Here is the code:
Please do not post large chunks of code in these forums. - mod
Posted 2 years ago #
Thanks I got the solution...
Posted 2 years ago #
I'm trying to figure it out how to do that, but i can't. I want to be sure that the template developer is ok and nothing bad is at my footer. Please any help will be precious!
Please do not post large chunks of code in these forums. - mod
Automated decoders are available here: http://wordpress.org/support/topic/300761
They will work for your code.
Posted 2 years ago #
I've tried with the first and the second link, but i always get an empty box. Nothing appears. A i can understand i need the second link with the php $_F=__FILE__;$_X. I've paste the whole code (as in the example) but nothing :(
You're using the right one, but not reading the instructions. See where it says "Paste just the red 'encrypted text' section in to the top box and hit Decode."
So, you don't paste the whole code into it. Just the piece in between $_X=' and ';
In your case, the code you will paste starts with Pz48L2Q0 and ends with 2h0bWw+.
Posted 2 years ago #
Oh GOD! HUGE mistake!
I read ore carefully the info. Now i've done it!
Great thanks Otto42! You are great! Keep up ;-)
Posted 2 years ago #
Automated decoders are available here: http://wordpress.org/support/topic/300761
They will work for your code.
Hello Otto...I have Seen your Auto Decoder But They cannot Decode my encrypted Footer so can Any One help me??
Code-
Please do not post large chunks of code in these forums. - mod
princexxx: The decoders at that link do indeed work with your code just fine. I just tried it, and it worked.
You'll want to use the ByteRun decoder, the second one listed there.
Posted 2 years ago #
Can someone please decode this footer for me?
Please do not post large chunks of code in these forums. - mod
Thanks..
Posted 2 years ago #
Hi All,
After learning for awhile, I now able to decode the file using Otto's suggestion. Thank you very much guys, you've given me enlightment.
Posted 2 years ago #
Hi! Can anyone help me with that?
Please do not post large chunks of code in these forums. - mod
iam: Change the "eval" to an "echo". Then run the code and view source of the resulting page. There's your decoded code.
Posted 2 years ago #
Hello Otto
Please help me with this encrypted php.
Please do not post large chunks of code in these forums. - mod
Thank You!
balazs
@balazs_xp : Decode it yourself. That's why we have a sticky thread with links to decoders. One of them *does* work for your code.
Posted 2 years ago #
?><!-- begin footer -->
</div>
<div id="credit">
<img src="http://themes.zinruss.com/library/centurion.gif"
alt="Centurion WordPress Theme" width="950" height="1" border="0" />
</div>
<script type="text/javascript">
<!-- var message="";
function clickIE() {if (document.all) {(message);return false;}}
function clickNS(e) {if
(document.layers||(document.getElementById&&!document.all)) {
if (e.which==2||e.which==3) {(message);return false;}}}
if (document.layers)
{document.captureEvents(Event.MOUSEDOWN);document.onmousedown=clickNS;}
else{document.onmouseup=clickNS;document.oncontextmenu=clickIE;}
document.oncontextmenu=new Function("return false")
// -->
</script>
<noscript><meta content="0;URL=<?php echo get_settings('home');
?>/wp-admin/" http-equiv="refresh" /></noscript>
<div id="footer"><p>Copyright © <?php echo date('Y');?>
<?php bloginfo('name');?> – <?php bloginfo('description'); ?>.
Running on <a href="http://wordpress.org" title="wordpress"
target="_blank">WordPress</a> | <a href="http://topwpthemes.com"
title="wordpress themes" target="_blank">Theme</a> developed by
<a href="http://www.shisha.de" title="Shisha"
target="_blank">Shisha</a>.</p>
</div>
</body>
</html>Hello Experts,
is there a way to edit the credit notes from within the wordpress-admin or do i have to code this in templates?
greetings
lenny
Posted 2 years ago #
I want to help me and me to decrypt one of wordpress thema's UrbanElements and it is all about is encrypted and the header and footer and if you kindly help me decrypt mie.Si me thank in advance.
Bellow is the php code.If you want to help me tell me or decrypt my theme.
Bellow is the Footer but about all them is encrypted.
<?php /* WARNING: This file is protected by copyright law. To reverse engineer or decode this file is strictly prohibited. */
$o="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";eval(base64_decode("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"));return;?>
Posted 2 years ago #
hi Otto... i have been trying, but i can´t decryp it, help me pls...
<?php
$o="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";eval(base64_decode("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"));return;?>This topic has been closed to new replies.
