Base64 Decryption Required

Discussion in 'PHP' started by geniusrohit, Feb 20, 2009.

  1. #1
    Hello,

    This is footer of my blog which is encrypted in Base64.
    Can someone help me to decode it ? i tried the way replaceing eval with echo or highlight_string but both are not giving me any clue.

    Please help

    <?php 
    $o="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";eval(base64_decode("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"));return;?>
    Code (markup):
     
    geniusrohit, Feb 20, 2009 IP
  2. Pos1tron

    Pos1tron Peon

    Messages:
    95
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    0
    #2
    If it's in base64 then you're probably not allowed to edit it... people, please don't help people with things like this unless they can show they are allowed to.
     
    Pos1tron, Feb 20, 2009 IP
  3. geniusrohit

    geniusrohit Peon

    Messages:
    26
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    Here wat wordpress mods saying.
    
    http://wordpress.org/support/topic/235287?replies=17#post-987487
    
    Code (markup):
     
    geniusrohit, Feb 21, 2009 IP
  4. Danltn

    Danltn Well-Known Member

    Messages:
    679
    Likes Received:
    36
    Best Answers:
    0
    Trophy Points:
    120
    #4
    I hate people like you.

    Here's the solution however:

    ?><?php include (TEMPLATEPATH . '/bottom.php'); ?>
    <div class="clear"></div>
    <div id="footer">
    <div class="fmenu">
     <ul>
     <li><a href="<?php bloginfo('url'); ?>">Home</a></li>
     <?php wp_list_pages('sort_column=menu_order&depth=1&title_li='); ?>
    </ul>
    </div>	
    
    <span class="left">  Designed  by <a href="http://www.shuttersdirect.nl/" target="_blank">Shutters and Blinds </a>  </span>
    
    <span class="right"> Coded  by <a href="http://www.localmatch.com/" target="_blank">Local Dating</a>, <a href="http://www.onlinedatingresource.com/" target="_blank">Dating Tips</a>,<a href="http://www.millionaireflirt.com/" target="_blank">Sugar Daddies</a>  </span>
    		
    </div>
    </div>
    <?php wp_footer(); ?>
    </body>
    </html>     <?
    Code (markup):
     
    Danltn, Feb 21, 2009 IP
  5. SmallPotatoes

    SmallPotatoes Peon

    Messages:
    1,321
    Likes Received:
    41
    Best Answers:
    0
    Trophy Points:
    0
    #5
    Base64 isn't encryption, it's just encoding. You can undo it using base64_decode. Ultimately all that obfuscated nonsense yields this:

    ?><?php include (TEMPLATEPATH . '/bottom.php'); ?>
    <div class="clear"></div>
    <div id="footer">
    <div class="fmenu">
     <ul>
     <li><a href="<?php bloginfo('url'); ?>">Home</a></li>
     <?php wp_list_pages('sort_column=menu_order&depth=1&title_li='); ?>
    </ul>
    </div>  
    
    <span class="left">  Designed  by <a href="http://www.shuttersdirect.nl/" target="_blank">Shutters and Blinds </a>  </span>
    <span class="right"> Coded  by <a href="http://www.localmatch.com/" target="_blank">Local Dating</a>, <a href="http://www.onlinedatingresource.com/" target="_blank">Dating Tips</a>,<a href="http://www.millionaireflirt.com/" target="_blank">Sugar Daddies</a>  </span>
                    
    </div>
    </div>
    <?php wp_footer(); ?>
    </body>
    </html>     <?
    Code (markup):
     
    SmallPotatoes, Feb 21, 2009 IP
  6. SmallPotatoes

    SmallPotatoes Peon

    Messages:
    1,321
    Likes Received:
    41
    Best Answers:
    0
    Trophy Points:
    0
    #6
    Oops! Danltn beat me to it. Oh well.
     
    SmallPotatoes, Feb 21, 2009 IP
  7. geniusrohit

    geniusrohit Peon

    Messages:
    26
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #7
    Thanks :) though you hate me.
     
    geniusrohit, Feb 28, 2009 IP