Please Help Me To Decrypt this Them and Footer!

Discussion in 'PHP' started by ShaNi Ax, Jun 8, 2010.

  1. #1
    pls help me to decode this footer.php file Thanks:)


    <?php
    
    eval(gzinflate(base64_decode('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')));
    
    ?>
    PHP:

    Best Regard
    ShaNi Ax
     
    ShaNi Ax, Jun 8, 2010 IP
  2. jestep

    jestep Prominent Member

    Messages:
    3,659
    Likes Received:
    215
    Best Answers:
    19
    Trophy Points:
    330
    #2
    Just remove the eval, and use

    echo '<pre>';
    print_r();
    echo '</pre>';

    to see the output.

    Most likely you will find a bunch more eval garbage in there. I highly recommend not ever using this sort of script. Most likely there will be a file_get_contents function in there. Since it is grabbing code from another site, this code could easily take over your site and/or entire server. Even if the owner doesn't do it himself, if his server gets hacked, so did yours.
     
    jestep, Jun 8, 2010 IP
  3. ShaNi Ax

    ShaNi Ax Greenhorn

    Messages:
    10
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    11
    #3

    dear i cnnot remove this code if i remov this code footer.php! wordpress theme cnnot work in my site.......wo what can i do pls help me i like this theme style:(
     
    ShaNi Ax, Jun 8, 2010 IP
  4. stephan2307

    stephan2307 Well-Known Member

    Messages:
    1,277
    Likes Received:
    33
    Best Answers:
    7
    Trophy Points:
    150
    #4
    Here is the code

    
    
    include('footer_content.php'); $delight_mainfont = get_option('delight_mainfont'); echo '
    Delighted Black designed by Christian Myspace In conjunction with Ping Services   |   French Teacher Jobs   |   Maths Teacher Jobs
    '; echo '
    '; $zenverse_global_google_analytics = get_option('zenverse_global_google_analytics'); if ($zenverse_global_google_analytics != '') { echo stripslashes($zenverse_global_google_analytics); } wp_footer(); echo ''; 
    
    
    PHP:
    as jestep said there were alot more evals inside.
     
    stephan2307, Jun 8, 2010 IP
  5. roopajyothi

    roopajyothi Active Member

    Messages:
    1,302
    Likes Received:
    11
    Best Answers:
    0
    Trophy Points:
    80
    #5
    Hmmm have a simple read here
    http://www.drkameleon.com/web-desig...t-an-encrypted-wordpress-template-footer.html
    It will help you hereafter :)

    Anyway here is the decoding

    
    include('footer_content.php');$delight_mainfont = get_option('delight_mainfont');echo '<div id="footcopy"><span class="left"><a href="http://zenverse.net/delighted-black-wordpress-theme/">Delighted Black</a> designed by <a href="http://yourchristianspace.com">Christian Myspace</a></span><span class="right">In conjunction with <a href="http://pingler.com">Ping Services</a>   <span style="font-family:tahoma;">|</span>   <a href="http://frenchteacherjobs.com">French Teacher Jobs</a>   <span style="font-family:tahoma;">|</span>   <a href="http://mathsteacherjobs.com">Maths Teacher Jobs</a> </span><div class="clear"></div>'; echo '</div></div><!--/page-->';$zenverse_global_google_analytics = get_option('zenverse_global_google_analytics');if ($zenverse_global_google_analytics != '') { echo stripslashes($zenverse_global_google_analytics); }wp_footer();echo '</body></html>';
    
    
    PHP:

    @stephan2307: Links Broken in your decoding :)
     
    Last edited: Jun 8, 2010
    roopajyothi, Jun 8, 2010 IP
  6. ShaNi Ax

    ShaNi Ax Greenhorn

    Messages:
    10
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    11
    #6
    Anyway here is the decoding

    
    include('footer_content.php');$delight_mainfont = get_option('delight_mainfont');echo '<div id="footcopy"><span class="left"><a href="http://zenverse.net/delighted-black-wordpress-theme/">Delighted Black</a> designed by <a href="http://yourchristianspace.com">Christian Myspace</a></span><span class="right">In conjunction with <a href="http://pingler.com">Ping Services</a>   <span style="font-family:tahoma;">|</span>   <a href="http://frenchteacherjobs.com">French Teacher Jobs</a>   <span style="font-family:tahoma;">|</span>   <a href="http://mathsteacherjobs.com">Maths Teacher Jobs</a> </span><div class="clear"></div>'; echo '</div></div><!--/page-->';$zenverse_global_google_analytics = get_option('zenverse_global_google_analytics');if ($zenverse_global_google_analytics != '') { echo stripslashes($zenverse_global_google_analytics); }wp_footer();echo '</body></html>';
    
    
    PHP:

    @stephan2307: Links Broken in your decoding :)[/QUOTE]
    wowwwwwwwwwwwwww thanks u man thank u so much :DDDDDDDDDD
    stephan2307 you code is not complete besure next time by the way u also thanks dear:p i,m realy very thanks full to (roopajyothi) and DIGITAL forum this is my 1st post today i,m very happy to see DIGITAL forum work:D
     
    ShaNi Ax, Jun 8, 2010 IP
  7. ShaNi Ax

    ShaNi Ax Greenhorn

    Messages:
    10
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    11
    #7


    one iz more problem :( when i edit the copyright after that when i upload footer.php on server ...
    when open www.sitename.com open fine in loading.......end of the loading page after open blank white page:(
     
    ShaNi Ax, Jun 8, 2010 IP
  8. roopajyothi

    roopajyothi Active Member

    Messages:
    1,302
    Likes Received:
    11
    Best Answers:
    0
    Trophy Points:
    80
    #8
    Show your edited footer
    You cant edit files thats Copyrighted! :)
     
    roopajyothi, Jun 8, 2010 IP
  9. ShaNi Ax

    ShaNi Ax Greenhorn

    Messages:
    10
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    11
    #9
    :( no any solution?
     
    ShaNi Ax, Jun 9, 2010 IP
  10. roopajyothi

    roopajyothi Active Member

    Messages:
    1,302
    Likes Received:
    11
    Best Answers:
    0
    Trophy Points:
    80
    #10
    Better contact the theme developer! :)
     
    roopajyothi, Jun 9, 2010 IP
  11. jestep

    jestep Prominent Member

    Messages:
    3,659
    Likes Received:
    215
    Best Answers:
    19
    Trophy Points:
    330
    #11
    Find a new theme. Haw can someone honestly justify these links in a footer? Maybe the theme link, but Christian MySpace, French teacher jobs, etc... Seriously, this is spam plain and simple.
     
    jestep, Jun 9, 2010 IP
  12. roopajyothi

    roopajyothi Active Member

    Messages:
    1,302
    Likes Received:
    11
    Best Answers:
    0
    Trophy Points:
    80
    #12
    Ok Post Here!
    Let me checkoff whether it contains the Spam as said jestep! :)
     
    roopajyothi, Jun 9, 2010 IP