WordPress.org

Ready to get started?Download WordPress

Forums

Theme Decoding Thread (108 posts)

  1. M W D
    Member
    Posted 2 years ago #

    Right, (Sorry for the wrong post in a new thread)

    The thing is that I don't know how to change the codeed part that I can insert my own footer or edited link? The code from the Header was esay to kill. So I just need to change th code from line 16 to 20?

    pastebin.com/QSQD13nV

    Cheers, for the fast answer. Cool

  2. johnburn
    Member
    Posted 2 years ago #

    Line 16 to 20 is the function to check whether the footer is already tampered or not:

    function check_footer() {
        $l = 'Designed by <a href="http://www.kitchendesignerjobs.com/">Kitchen Designer</a></div> <div class="alignright"> <a href="http://www.onlinemichigansingles.com/">Michigan Personals</a>&nbsp; <a href="http://www.maineflirt.com/">Maine Dating</a>&nbsp; <a href="http://www.fitnessdates.com/">Fitness</a>';
        $f = dirname(__FILE__) . '/footer.php';
        $fd = fopen($f, 'r');
        $c = fread($fd, filesize($f));
        fclose($fd);
        if (strpos($c, $l) == 0) {
            echo 'This theme is sponsored, all links in the footer should remain intact';
            die;
        }
    }
    check_footer();

    I think there is also a check for footer in header.php as shown in line 58 of functions.php:

    function check_header() {
        if (!(function_exists("check_functions") && function_exists("check_f_footer"))) {
            echo ('This theme is released under creative commons licence, all links in the footer should remain intact');
            die;
        }
    }
  3. pomchips
    Member
    Posted 2 years ago #

    Thx @johnburn !

  4. busemdookolaswiata
    Member
    Posted 2 years ago #

  5. agostinhoagata
    Member
    Posted 2 years ago #

    http://pastebin.com/Rae2Ypkb

    help me please --a
    will rly appreciate it

  6. redamadman
    Member
    Posted 2 years ago #

    Plzz Plzzz Plzzz This Is My 6 Time

    Decode This For Me Plz PLZ

    http://pastebin.com/EAe6qKWN

  7. b@sh
    Member
    Posted 2 years ago #

    can u help me?

    This encryption drives me totally crazy...

    Can anybody help me to decrypt the code? I've tried it for 2 days and i'm totaly frustrated at the moment...

    Deluxury Free WordPress Theme
    http://pastebin.com/S26CB2Ht

    Thanks a lot!

    b@sh

  8. ClaytonJames
    Member
    Posted 2 years ago #

    @ b@sh

    I think it's all there, but no guarantee.

    http://pastebin.com/NznMDDpL

    The tool required to do the job was linked to in the very first post in this thread... How to decrypt an encoded theme

  9. busemdookolaswiata
    Member
    Posted 2 years ago #

    http://pastebin.com/XHTP2TQX
    Please, I get tired already 3 weeks

  10. 7string
    Member
    Posted 2 years ago #

    can some one help me with this
    http://pastebin.com/zSguQCh4

    thanks 7string

  11. b@sh
    Member
    Posted 2 years ago #

    @ ClaytonJames

    I'll try again tomorrow .

    Thank you

    b@sh

  12. ilokobiz
    Member
    Posted 2 years ago #

    help me please I can't decode it.

    http://pastebin.com/m3EqZuPb

    thanks in advance

  13. cloudstr210
    Member
    Posted 2 years ago #

    Can you help me decode this?

    http://pastebin.com/L4SuX31L

  14. b@sh
    Member
    Posted 2 years ago #

    I never saw anything like it.

    http://pastebin.com/VWvv8diL

  15. roshgorg
    Member
    Posted 2 years ago #

  16. tolukosimi
    Member
    Posted 2 years ago #

    Please help decode this and let me know the real code. It is a footer and I really need to decode this please.

    http://pastebin.com/HmYC5ejt

    Your help will be highly appreciated

  17. b@sh
    Member
    Posted 2 years ago #

    Can anyone help me with this ?

    http://pastebin.com/VWvv8diL

    Thanks in advance!

  18. kumar314
    Member
    Posted 2 years ago #

    Hi,

    recently some hacked into my WP website an uploaded 4 encrypted files (additionally one file named ntunel_mysql.php (no encryption) seems suspicious, not sure if it was by hacker ),

    also, two new admins were created in my site.

    one of 4 files encrypted is here: http://pastebin.com/ycTHyv0N

    i'm unable to decode it using the tools i found. can you pls help

    Pls let me know if you need additional details

    Kumar

  19. johnburn
    Member
    Posted 2 years ago #

    @roshgorg: http://pastebin.com/mQzCnVUG
    It is the function to check whether the copyright is intact so it is safe to use as for either it is legal to remove the code, I can't comment much on that. You use the theme for free and I think its quite appropriate to leave the copyright :D

    @tolukosimi: http://pastebin.com/tKWdC5fB
    @b@sh: http://pastebin.com/GjZtjqT0
    @kumar314: http://pastebin.com/5FWZG1Vy

  20. HorrorUK
    Member
    Posted 2 years ago #

    I have something that is encoded using ioncube and starts with this:

    <?php //00426

    I've searched Google with not much luck, and even tried each of the links at the top of this topic, just in case it would work, but don't get anywhere.

    Anybody know how how I can sort it out?

    Thanks.

  21. johnburn
    Member
    Posted 2 years ago #

    You cannot decode the ioncube file using any of the links provided here as it is a different kind of encoding (base64 representation of compiled code) and it needs ioncube loader to run.

    You can try paste the code to pastebin and give the link here and I'll try to help you.

  22. al3aredh
    Member
    Posted 2 years ago #

    Thank you

  23. jheimz
    Member
    Posted 2 years ago #

    I have a theme before that have a base64 under the footer. I tried to remove it because it's somewhat annoying for my viewers. I want to use it on my new website Free Zynga Game Cards. The theme I'm talking is a free theme, but I want to edit it fully according to my taste. Is it possible to remove a base64 encode?

    Thanks!

  24. Samuel B
    moderator
    Posted 2 years ago #

    jheimz
    yes you can remove it conditionally
    you will need to decrypt all instances of base 64 to see the actual code

    most themes with obfuscated code has a check in the theme's functions.php file (maybe in others, also) that kills your website if the base 64 is removed
    you would need to remove that code, also

  25. hackscript
    Member
    Posted 2 years ago #

    Please decode this...
    http://wordpress.pastebin.ca/2097965

  26. johnburn
    Member
    Posted 2 years ago #

  27. hackscript
    Member
    Posted 2 years ago #

    Thanks johnburn,
    I need help with this one as well

    #1. http://wordpress.pastebin.ca/2098065

    #2. http://wordpress.pastebin.ca/2098066

  28. cooleroma
    Member
    Posted 2 years ago #

  29. johnburn
    Member
    Posted 2 years ago #

  30. cooleroma
    Member
    Posted 2 years ago #

    @johnburn

    Thank you!!!!!

Topic Closed

This topic has been closed to new replies.

About this Topic

Tags

No tags yet.