[closed] Removing Encoded Footer Links (7 posts)

  1. Heartlander
    Posted 6 years ago #

    I've spent the past several hours trying to find a way to circumvent the malicious (eval) code that some designers put in their templates.

    I have no problem crediting the designers, but I need to remove the potentially dangerous codes.

    The typical "wrap footer_starts_here" in the index and replacing the footer.php file is NOT working in the least. I did "decode" and it is exactly what the warning message states when removing the footer links.
    My template has the (eval) code in multiple files- header, home, etc.
    Removed all that I could find, and still get the site bounced to a preset warning by the designer about removing footer links.
    The "TAC" plug-in didn't even detect the malicious code.

    I really need this template and spent weeks working on it.

    Is there ANY definitive way to remove all instances of the malicious code while maintaining a working template?

  2. Clayton James
    Posted 6 years ago #

    Information located here: [edit] nevermind.. I see you've already been there! :P

    More information may be forthcoming if you give a link to your site, or a link to the theme in question so others might look at it if so inclined.

  3. Heartlander
    Posted 6 years ago #

    Presently, the working copy is:

  4. Clayton James
    Posted 6 years ago #

    I see ROT13 encryption in functions.php, header-home.php, and header.php. They all appear to be related to checking for links in the footer. Did you find the same thing? Oddly enough, the links in footer.php are in plain text. :-)

  5. Okoth1
    Posted 6 years ago #

    Decode it. Online there are decoders.

  6. conexaol
    Posted 5 years ago #

    Help me

    [Text removed]

  7. mrmist
    Forum Janitor
    Posted 5 years ago #

    @conexaol I'm confused as to how you managed to post your request in four separate threads, whilst managing to avoid the actual thread that's stickied for you to post stuff like that in. But still. Please see http://wordpress.org/support/topic/posts-requests-for-theme-decoding-in-here-1?replies=24

    I'll close this.

Topic Closed

This topic has been closed to new replies.

About this Topic