A strange code in a free wordpress theme

Discussion in 'Programming' started by abdostar, Dec 24, 2010.

  1. #1
    I downloaded a free wordpress theme for my blogsite, and while working to edit and costumize it for my needs i notices there is some strange code in one file (I guess it's some kind of coded file) I want to know if my guess it right or wrong, and what's the decryption of that code (if it's possible)
    here is a link to a txt file with the code : http://hotfile.com/dl/91768801/51573fd/codefile.txt.html
    also the files in the attachment View attachment codefile.php around 24Ko
    thankx
     
    Last edited: Dec 24, 2010
    abdostar, Dec 24, 2010 IP
  2. temp2

    temp2 Well-Known Member

    Messages:
    1,231
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    150
    Digital Goods:
    2
    #2
    I think noone help u by downloading the file then view it

    why dont you upload it?
     
    temp2, Dec 24, 2010 IP
  3. abdostar

    abdostar Peon

    Messages:
    66
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    so what i'm supposed to do, the file is more than 30000 characters!!!
     
    abdostar, Dec 24, 2010 IP
  4. abdostar

    abdostar Peon

    Messages:
    66
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #4
    can someone plz help me in that
     
    abdostar, Dec 24, 2010 IP
  5. Mr.AD

    Mr.AD Member

    Messages:
    89
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    41
    #5
    The file you uploaded is encrypted, you need someone help you decrypt it ?
     
    Mr.AD, Dec 24, 2010 IP
  6. abdostar

    abdostar Peon

    Messages:
    66
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #6
    yes, please, i do need help to decrypt it, is that possible?how?
     
    abdostar, Dec 24, 2010 IP
  7. abdostar

    abdostar Peon

    Messages:
    66
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #7
    any one? :( .....
     
    abdostar, Dec 26, 2010 IP
  8. Bohra

    Bohra Prominent Member

    Messages:
    12,573
    Likes Received:
    537
    Best Answers:
    0
    Trophy Points:
    310
    #8
    is it the footer ?
     
    Bohra, Dec 26, 2010 IP
  9. guardian999

    guardian999 Well-Known Member

    Messages:
    376
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    103
    #9
    I think it's nulled theme, right?
    post link to download page.
     
    guardian999, Dec 27, 2010 IP
  10. abdostar

    abdostar Peon

    Messages:
    66
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #10
    It's not in the footer. it's in a setting page, and the file i uploaded is a cop of all what in the original file, except the other one is .php and the one i uploaded is .txt
     
    abdostar, Dec 27, 2010 IP
  11. guardian999

    guardian999 Well-Known Member

    Messages:
    376
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    103
    #11
    Why not send link to download page?

    No one will help you, if you keep it secret.
     
    guardian999, Dec 30, 2010 IP
  12. iLegitimate

    iLegitimate Peon

    Messages:
    319
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #12
    this looks strange from what i see it looks like html code
     
    iLegitimate, Dec 30, 2010 IP
  13. jarrodw

    jarrodw Peon

    Messages:
    31
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #13
    This is base64 encoded text to obfuscate the php code. The code does stuff that will inhibit things from working as expected if the copyright is removed.

    For example look at this:

    <usernameremoved>@<hostremoved>~$ base64 -d
    QAcAICANCiAAEABvASU8L2Rpdj4NCkAAPABwIGNsYXNzPSJmb290ZXJAICIBYCZjb3B5OyBDAGByaWdodAAAIDw/cGhwIGVjaG8gZGF0ZQAAKCJZIik7Pz4gPGEgaHJlZiAAPSICE2Jsb2dpbmZvKCd1cmwAAicpOyA/PiIgIHRpdGxlAj9uFgBhbWUCRD4D/QHHPC9hPi4gQWxsIAAgUgihcyBSZXNlcnZlZCB8IAIwRGVzaWduALBCeToIsQaURnJlZQAAIFdvcmRwcmVzcyBUaGVtZSAAcyIKlGh0dHA6Ly93d3cucm8AgGNraW5nd3B0AiIuY29tLyI+R/FSAWMgV1ADpAghEpATFQCEASARQndwXxODYIAoDvIBcC9ib2R5FFA8L2h0bWw+
    @
    o%</div>
    @<p class="footer@ "`&copy; C`right <?php echo date("Y");?> <a href ="bloginfo('url'); ?>" title?nameD>ýÇ</a>. All ¡s Reserved | 0Design°By±Free Wordpress Theme s"
    http://www.rockingwpt".com/">GñRc WP!
    Bwp_`(òp/bodyP</html><usernameremoved>@<hostremoved>:~$


    Note the end of the base64 output. This is obviously a theme credit that you have noticed. Please do not remove it. The text is base64 encoded to obfuscate the php. I am not going to post the rest of the php because the work is not mine.
     
    Last edited: Dec 30, 2010
    jarrodw, Dec 30, 2010 IP