Base64.decode and Base64.encode in Clear Line Theme v.0.4.3

  • Resolved jonquil1

    (@jonquil1)


    15 years, 12 months ago

    RE: The Clear Line Theme version 0.4.3 downloaded from here at WordPress.org

    Using TAC, I’ve found this result:

    Clear Line 0.4.3 by Ivan Milaev
    Encrypted Code Found!2 Static Link(s) Found…

    wp-content/themes/clear-line/functions.php [Edit]
    Line 194: "Base64.decode("' . base64_encode($s1) . '")+\..."
    Line 196: "Base64.decode("'. base64_encode('ilto:') . '"..."

    wp-content/themes/clear-line/header.php [Edit]
    Line 26: "base64.js"></script>..."

    wp-content/themes/clear-line/footer.php [Edit]

    <a href="http://wordpress.org">WordPress</a>
<a href="http://vatuma.com/">The Clear Line Theme</a>

    What does this mean? Is it good or bad? What harm or good can it do? Is this encryption, decoding and encoding, allowed in the themes offered here at WordPress.org?

    ***
    What about these lines from style.css?

    /* External links
a[href^="http://"]:not([href*="site.ru"])::after {
    content: "\2197";
}*/

/*
	POST
*/

    What do they mean? Are they good or bad?

    Is this theme safe for use?

    Thank you.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Moderator Samuel Wood (Otto)

    (@otto42)

    WordPress.org Admin

    15 years, 12 months ago

    That’s fine, actually. He’s using base64_encode and decode here in a good way, to obfuscate email in the HTML of the browser code, and then using javascript to convert it back in the browser as well.

    We do disallow the use of “base64_decode” in themes on the site, because there’s little good reason for it. But, as you can see, there can be good uses of base64_encode.

    TAC needs to be fixed to not give a warning about this. There is no threat here.

    That code in the style.css is commented out, so it does nothing at all.

    Thread Starter jonquil1

    (@jonquil1)

    15 years, 2 months ago

    Thank you, Otto. 🙂

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Base64.decode and Base64.encode in Clear Line Theme v.0.4.3’ is closed to new replies.