For everyone else here, me and Eddie have been PMing to figure this out. Turns out there are two more sets of encoded functions in the header.php, get those out and it should be good to go. Have to be careful though, the second occurance in the header.php file also had legitimate WordPress code after the end of the string of encoded functions.
Well let's say that Chris has done the work I just keep asking questions. I've removed the code from the header and functions and replaced it with the decoded code but I still get the footer must remain in tact message. I'll keep looking maybe there is more I'm overlooking in other files. I've never had one this deep!
this is the code that i am getting in the functions.php file, if i so much as touch or change one thing here the entire template will crash and have to be either reloaded or replace the code back with the original one, What i cant figure out is what i need to do to this code correctly in order to be able to change the links in the footer.php file, is there anyone that can help me with this method, please email me or some thing <?php eval(str_rot13('shapgvba purpx_urnqre(){vs(!(shapgvba_rkvfgf("purpx_shapgvbaf")&&shapgvba_rkvfgf("purpx_s_sbbgre"))){rpub(\'Guvf gurzr vf eryrnfrq haqre perngvir pbzzbaf yvprapr, nyy yvaxf va gur sbbgre fubhyq erznva vagnpg\');qvr;}}'));?>
Just to clarify, there are four locations where there are encrypted functions like this: middle of functions.php, end of functions.php, beginning of header.php, middle of header.php. If you remove any one of those without removing the others, the theme will not work. Only when you remove all four does the theme work and allow footer.php changes. I have the caffeine theme successfully running with modified footer.
can someone help me with this issue i am having in php, in my template in 3 different sections is that hidden code <?php eval(str_rot13('shapgvba purpx_urnqre(){vs(!(shapgvba_rkvfgf("purpx_shapgvbaf")&&shapgvba_rkvfgf("purpx_s_sbbgre"))){rpub(\'Guvf gurzr vf eryrnfrq haqre perngvir pbzzbaf yvprapr, nyy yvaxf va gur sbbgre fubhyq erznva vagnpg\');qvr;}}'));?> I have no idea what to do with this in order to be able to adjust and remove the links in the footer.php file, if i so much as touch 1 letter in the footer.php file the whole template will crash down and u cant use it, i dont know how to fix this problem, can someone help me , my email is
Which theme are you using? I'll take a look. The code you posted is the same as that in the caffeine theme. I found different codes in four locations, detailed in my last post. If you remove them all, you should be able to make changes in the footer.php. The way I found each one was by using the Find & Replace feature to search for rot13, the function used to encrypt the code.
First of all- thank you for this extremely helpful information! I've been searching all day for an answer to this question, and you explained things very well. Secondly, I apologize for any thread necromancy but I believe it's better to boot an old thread than start another new one about the exact same thing. Back to the topic at hand- I think it's important to remember that there are a lot of reasons why a person may not want to keep the links in the footer, and they aren't all because people are scumbags who don't want to give others credit for their hard work. In my case, for example... I only recently learned how to use WordPress and am in the process of teaching myself how to create themes. I found one online that basically had a similar layout to what I was looking to create so I downloaded it and have edited it to the point where it bears almost no resemblance to the original. Different graphics, different features, etc. The footer included with the theme package is, flat-out, ugly. The rest of the theme, as I've edited it, looks great- but even after editing the styles, the footer looks terrible with far too many links. I still intend to link to the original theme's original creator, just not in that particular spot on the page. I apologize for the mini-rant but I don't want to seem like an ideas-thief for wanting to get rid of the links as they are! Which brings me to my question: You talked about running the encoded functions through a decoder in order to understand what they do (which makes sense to me). However, I'm having trouble finding a decoder that is able to work for me. Can you recommend a decoder that we can use to translate this 'gibberish'?
Well put! The answer to your question: http://www.rot13.com/ Just put the code in there, minus the function, so just what is inside the outer quotes (I think, going off memory here). ROT13 is a decoder and encoder all in one, encoded text gets decoded, decoded text get encoded. If you need further help, I can look into it more.
Thanks so much! I've successfully managed to decode, and now I'm looking at removing the troublesome bits. It seems that the encrypted code is only hiding in two places- the functions.php file and the header.php file. I was able to successfully remove the bit in the header and it didn't seem to have any effect on the theme overall (minor success!); however, the bit of code in the functions.php file is making me a little crazy. This is the portion of the file that contains the encrypted code is as follows: After decoding, I know that the php reads as follows: Translating it helps- now I know what's causing the issue. However, I can't seem to figure out how to remove the troublesome bit without skewing the entire page. I'm not entirely sure what to remove and what to leave. When I remove only the encoded portion, I get the following error message: "Parse error: syntax error, unexpected $end on line 157" Can anyone tell me how to 'snip' out the unwanted part without mucking the theme up entirely? (Oh, and in case it matters, the original theme I was working from is "PinkThree")
Well, that usually means there was too much removed, such as an extra bracket or something. However, you should be able to remove the related functions completely and that removes all the checks. If I have some time later I will look at the theme files.
I've figured it out! With this template, it seems that areas needed to be deleted in a certain order. For example, I had to remove the portions in the header, then save. Then I had to remove the second part (in the function.php file) that referred to 'check_header', and save. Finally, I removed the portion referring to check_footer, and saved. This worked perfectly! I didn't remove any more (or less) code than I had before- but doing it in a certain order really seemed to make a difference.
Hmm, ok, the order should make no difference, as long as they are all gone, it ends up the same way anyway. Anyway, glad it is working for you now!
I realize it sounds strange. I think that this is due to the fact that I was editing through Wordpress (the order wouldn't have been an issue if I'd edited the files and then uploaded them, I don't think). As soon as I removed one piece of code, I would get an error message or the pre-programmed message, which basically 'shut down' my editor. I'd re-upload my backup (had Filezilla running the entire time), hit 'reload' and try again. (The problem is that the machine I was using was an older work computer, and while I can seem to open and edit the files fine with a text editor, they're not very nicely formatted and I have to be that much more careful not to make errors. I find it simpler to edit on that particular computer using the WP editor) It just goes to show that there are positives and negatives when working with the WP editor. In the end, I'm happy I was able to figure things out with your help (and learn a few new lessons along the way!) so, thank you very much.
Hello Web4Guru, I need to decode a .php file but unfortunately not able to decode by the link you have post. Can you try the file to decode i have uploaded. View attachment template-scheme.php
That author took a slightly different approach, but it should still work. Each individual variable at the top needs to be decoded and the decoding functions stripped from the code, and some variables need to be combined before they are decoded - it is quite a process. The only difference is there are many individual parts that are encoded instead of the whole document. This one will take some more time to do, some tedious decoding. It's Christmas and I'm not going to do it for free, but others might or you could contract me or someone else to do it for a small fee, I might do it for $25, but probably not this week.
Well, I have found that encrypted piece of code in 3 places, 2 in functions.php and 1 in header.php Just remove everything that looks like that, it worked for me