Base64_Decode Problem

Discussion in 'PHP' started by Whippet75, Feb 23, 2011.

0
  1. #1
    Can anyone decode this for me:

    <?php // This file is protected by copyright law and provided under license. Reverse engineering of this file is strictly prohibited.
$OOO0O0O00=__FILE__;$O00O00O00=__LINE__;$OO00O0000=1796;eval((base64_decode('JE8wMDBPME8wMD1mb3BlbigkT09PME8wTzAwLCdyYicpO3doaWxlKC0tJE8wME8wME8wMClmZ2V0cygkTzAwME8wTzAwLDEwMjQpO2ZnZXRzKCRPMDAwTzBPMDAsNDA5Nik7JE9PMDBPMDBPMD0oYmFzZTY0X2RlY29kZShzdHJ0cihmcmVhZCgkTzAwME8wTzAwLDM3MiksJ0VudGVyeW91d2toUkhZS05XT1VUQWFCYkNjRGRGZkdnSWlKakxsTW1QcFFxU3NWdlh4WnowMTIzNDU2Nzg5Ky89JywnQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVphYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5ejAxMjM0NTY3ODkrLycpKSk7ZXZhbCgkT08wME8wME8wKTs=')));return;?>
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
    PHP:
    I have tried a few decoders but nothing seems to work ?

    Thanks
     
    Whippet75, Feb 23, 2011 IP
  2. cono1616

    cono1616 Peon

    Messages:
    82
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    So it's illegal for us to attempt.
     
    cono1616, Feb 23, 2011 IP
  3. Whippet75

    Whippet75 Well-Known Member

    Messages:
    1,599
    Likes Received:
    23
    Best Answers:
    0
    Trophy Points:
    155
    #3
    Someone has already modified the files by Base64 encoding it !

    I need to make sure that the script is not compromised by the eval
     
    Whippet75, Feb 23, 2011 IP
  4. ap2010

    ap2010 Guest

    Messages:
    41
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    0
    #4
    It is a script that writes the following inside the footer of your WordPress blog:

    <a href="http://www.**the free themes website**.com" rel="dofollow">** keywords **</a>.
    PHP:
     
    ap2010, Feb 24, 2011 IP