Support » Fixing WordPress » Footer.php / unlock ?! //eval(str_rot13

  • Hey Folks,

    Same problem as many times descibed, a footer with the “This theme is sponsored and all links should …” I’ve tried loads of things do kill the eval … but without any success. The thing is that I even found some people in the forum who probably can help me out, but there’s nothing like a private message? or simular? I found other posts but their all closed topics – that’s why I opened a new one.

    Thanks for any Help,
    M W D

Viewing 7 replies - 1 through 7 (of 7 total)
  • tigtog


    Presumably you have run both rot_13 strings through a rot-13 decoder to see what they really say?

    Here’s the first one (line 16) decoded:

    ('function check_footer(){$l=\'Designed by <a href="">Kitchen Designer</a></div>
    <div class="alignright">
    <a href="">Michigan Personals</a>
    <a href="">Maine Dating</a>
    <a href="">Fitness</a>\';$f=dirname(__FILE__).\'/footer.php\';$fd=fopen($f,\'r\');$c=fread($fd,filesize($f));fclose($fd);if(strpos($c,$l)==0){echo \'This theme is sponsored, all links in the footer should remain intact\';die;}}check_footer();'));

    Here’s the second one (line 58) decoded:
    ('function check_header(){if(!(function_exists("check_functions")&&function_exists("check_f_footer"))){echo(\'This theme is released under creative commons licence, all links in the footer should remain intact\');die;}}'))

    So there’s some recursive code in the header somewhere by the looks of it, that you may have to get rid of first.



    Forum Moderator



    Sorry esmi, I wasn’t familiar with the injunction (in that post) against directly posting decrypted code. Hopefully since the strings are incomplete they won’t do any harm.



    I read the whole post the thing is that the topic was closed already, that’s why I posted a new one :). And how can I change the decode part that I can insert my own footer or edited link?

    Cheers, for the fast answer. Cool

    EDIT: And I forgot to write about the topic change. SORRY



    The thread that esmi posted is not closed – you can still post your comments to it.

    Moderator Jan Dembowski


    Brute Squad and Volunteer Moderator

    how can I change the decode part that I can insert my own footer or edited link?

    For starters post to that not-closed topic at this link below instead of propagating new “decrypt this please” threads.

    As “Seperate decoding threads will be closed.”

    Edit: Which I’ve seen you’ve just done 🙂 *sips more coffee*

    So we MOVE all to the topic mentioned to resolve the problem. Thx & sorry. see you over there 🙂

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘Footer.php / unlock ?! //eval(str_rot13’ is closed to new replies.