Footer Issue

  • tomtuul

    (@tomtuul)


    17 years, 4 months ago

    Hi,

    Does anyone know the best way to decode php files? I have downloaded and installed a new free word press theme and I wanted to add my website address on the footer, but the footer file is encoded. It looks like it is encoded with base64 encoder. I tried to decode with some base64 online decoders, but I was unsuccessful. Could you please advise me on this?

    This is what the footer.php look like:

    <?php /* Footer. */
    $o=”QAAADSc7Y25xJ2RrZnR0OiVkawEKYmZ1JTk7KAFAOQ0ODgCVDQJSbgCAYzolYWhoc2ICMA0nQ2J0bmAAAGknO2Ynb3ViYTolb3Nzdz0AACgocHBwKWFuYmtjdHJ1cWIAAW5ra2ZpZGIpZGhqKCU5QQGBIAAnVAGYOyhmOSsnRGhjYmMnZTAAficE7wTgY25idGJrdHNmc25oQABpBKJkZnUqd25kc3J1YnQpbwA8c2prJTlEZnUnVwE0BVMJnwmQdXIADm5zfmNudWJkc2h1fgTSCXABYicA4E9iZmtzbydDAeUEfw4FdWJubG4CwmpmY3VuYwQ0VQEhAxENJw0nADANiAETow4NDgCmDTs4d293J3B3WBRDAhovLjwnODkB8GVoY34AgQyROQPAJwAAJyc=”;eval(base64_decode(“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”));return;?>

    Thanks

Viewing 12 replies - 1 through 12 (of 12 total)
  • computerslayer

    (@computerslayer)

    17 years, 4 months ago

    Thats just odd. In my (limited) experience, nothing should be encoded. What theme are you using? Maybe we can look it over as well.

    Respectfully,
    Deacon Maurer

    Clayton James

    (@claytonjames)

    17 years, 4 months ago

    Base64 encoding. Post a link to your blog, if it is public, please.

    Thread Starter tomtuul

    (@tomtuul)

    17 years, 4 months ago

    That’s what I thought too, especially for free themes. I am using a toughpress theme. You can get it here: http://www.wpskins.org/themes/3212/Toughpress/ or at any other website. I am worried that there is no hidden stuff in the encrypted code, which could affect my website’s performance.

    Tom Tuul

    Clayton James

    (@claytonjames)

    17 years, 4 months ago

    Well, here’s the long and short of it.
    Read the contents of the footer.php. If you were to decode that, it would probably mean deleting the entire contents of footer.php and then replacing it with this: 

    <div class="clear">
    </div>
    </div>
<div id="footer">
 Design <a href="http://www.fieldsurveillance.com/">Field Surveillance</a>, Coded by  <a href="http://www.dieselstation.com/car-pictures.html">Car Pictures</a>, <a href="http://www.fruitydirectory.com/">Fruity Health Directory</a>, <a href="http://www.reikimadrid.com/">Reiki</a>
    </div>
    </div>
</body>
</html>

    Then in theory, you could edit it. But I don’t do decoding and I wouldn’t be caught using that template. I would look through it ,and see if anything else was obfuscated, though.

    😛

    Thread Starter tomtuul

    (@tomtuul)

    17 years, 4 months ago

    I’ve considered deleting everything from footer.php and replacing everything with the code you mentioned, however I believe this might cause a malfunction in a theme. At the same time, I don’t want to install this theme to my website, because I don’t know what’s included in a footer. I’ve read an article about malicious codes in wp themes ( http://5thirtyone.com/archives/870 ), and I don’t want to risk my content.

    I believe that decoding the footer would be the best idea.

    Tom Tuul

    moshu

    (@moshu)

    17 years, 4 months ago

    however I believe this might cause a malfunction in a theme.
    You are completely wrong! The code given by CJ should work perfectly.

    The best is
    a) not to use their themes…
    b) blog about those jerks so everybody knows what they do
    or
    c) clean up the theme and offer the clean version for everybody to download 🙂

    p.s. usually they hide there crappy links which they don’t want you to remove.

    Clayton James

    (@claytonjames)

    17 years, 4 months ago

    I believe that decoding the footer would be the best idea.

    1) I was being a smart-ass. I did decode it. What I posted above is what you need to put in footer.php to get rid of the encoding and make it editable.

    2) moshu is right on the mark.

    a) not to use their themes…
    b) blog about those jerks so everybody knows what they do
    or
    c) clean up the theme and offer the clean version for everybody to download 🙂

    I like option A the best!

    Amen.

    Clayton James

    (@claytonjames)

    17 years, 4 months ago

    Now, if I could only figure out how to decompile an .SWF created with flash 8 to an .fla that’s compatible with MX 2004 pro… Hmmm…

    …sorry. Irrelevant. Just thinking out loud.

    🙂

    Thread Starter tomtuul

    (@tomtuul)

    17 years, 4 months ago

    CJ, what would that code look like in php?

    I like option A as well:) I appreciate your input guys.

    Tom Tuul

    Clayton James

    (@claytonjames)

    17 years, 4 months ago

    No php required. Copy as is. Exactly. If it does not work I will install the theme on my test server and see what does. …Maybe not till tomorrow, though. 🙂

    Thread Starter tomtuul

    (@tomtuul)

    17 years, 4 months ago

    Thanks so much for your help CJ! 🙂

    Clayton James

    (@claytonjames)

    17 years, 4 months ago

    Glad I could help! Look in those other files if you are going to use the theme.

    Peace!

Viewing 12 replies - 1 through 12 (of 12 total)

The topic ‘Footer Issue’ is closed to new replies.