Removing Encoded Footer Links
I’ve spent the past several hours trying to find a way to circumvent the malicious (eval) code that some designers put in their templates.
I have no problem crediting the designers, but I need to remove the potentially dangerous codes.
The typical “wrap footer_starts_here” in the index and replacing the footer.php file is NOT working in the least. I did “decode” and it is exactly what the warning message states when removing the footer links.
My template has the (eval) code in multiple files- header, home, etc.
Removed all that I could find, and still get the site bounced to a preset warning by the designer about removing footer links.
The “TAC” plug-in didn’t even detect the malicious code.
I really need this template and spent weeks working on it.
Is there ANY definitive way to remove all instances of the malicious code while maintaining a working template?
Information located here:  nevermind.. I see you’ve already been there! 😛
More information may be forthcoming if you give a link to your site, or a link to the theme in question so others might look at it if so inclined.
I see ROT13 encryption in functions.php, header-home.php, and header.php. They all appear to be related to checking for links in the footer. Did you find the same thing? Oddly enough, the links in footer.php are in plain text. 🙂
@conexaol I’m confused as to how you managed to post your request in four separate threads, whilst managing to avoid the actual thread that’s stickied for you to post stuff like that in. But still. Please see http://wordpress.org/support/topic/posts-requests-for-theme-decoding-in-here-1?replies=24
I’ll close this.
- The topic ‘Removing Encoded Footer Links’ is closed to new replies.