php footer help

Discussion in 'PHP' started by surya, Feb 14, 2008.

  1. #1
    can anyone here help me to decode a php footer??
     
    surya, Feb 14, 2008 IP
  2. jayshah

    jayshah Peon

    Messages:
    1,126
    Likes Received:
    68
    Best Answers:
    1
    Trophy Points:
    0
    #2
    Care to paste the code?
     
    jayshah, Feb 14, 2008 IP
  3. surya

    surya Peon

    Messages:
    720
    Likes Received:
    12
    Best Answers:
    0
    Trophy Points:
    0
    #3
    oops..
    here ya go..

    <?php
    $o="QAAADTtjbnEnZGtmdHQ6JWRrYgIYZnUlOTsoAUA5DQ4OAJcBECduYwHAOiVhaGhzYgIwAdAAMEB1YmJpZQAAYnV1fidjYnRuYGliYydlfgAAJztmJ291YmE6JW9zc3c9KAAAKHBwcCljaGt3b25pd3VoagAAaHNuaGl0KWRoKXJsKCU5JwQAUGJlJ0MD8ic7KGY5KydKZmMaEGInYQXABN8oBNJiam5kBBhEZmtuHgBldWYFcQQkCcAIX3ApcG5rdGhpYQggbmJrYwf0ZGh1d2gDsGIoZHFmAAAqa252cm5jKmZjam5pKW9zQBxqCdBOaXRoa3FiaWQNcAnSBY9wKQAKdWhoYWVoaWMpZW59DSFVAQAnmyADoHJrCVINYQ0JMRWCDg0Vcw4ODg0NAEA7OHdvdydwd1gVky8uPCc4OYYAAhBlaGN+AIEIUGs5DQ==";eval(base64_decode("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"));return;?>
     
    surya, Feb 14, 2008 IP
  4. jayshah

    jayshah Peon

    Messages:
    1,126
    Likes Received:
    68
    Best Answers:
    1
    Trophy Points:
    0
    #4
    Easily possible. But no way am I going to help you break the law.
     
    jayshah, Feb 14, 2008 IP
  5. surya

    surya Peon

    Messages:
    720
    Likes Received:
    12
    Best Answers:
    0
    Trophy Points:
    0
    #5
    c'mon man..
    i am not going to misuse it !!
    i am using the theme for my college site..
    hence, i dont want unnecessary links there..
     
    surya, Feb 14, 2008 IP
  6. hostydotnet

    hostydotnet Active Member

    Messages:
    355
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    65
    #6
    sounds illegal to me
     
    hostydotnet, Feb 14, 2008 IP
  7. nico_swd

    nico_swd Prominent Member

    Messages:
    4,153
    Likes Received:
    344
    Best Answers:
    18
    Trophy Points:
    375
  8. surya

    surya Peon

    Messages:
    720
    Likes Received:
    12
    Best Answers:
    0
    Trophy Points:
    0
    #8
    surya, Feb 14, 2008 IP
  9. nico_swd

    nico_swd Prominent Member

    Messages:
    4,153
    Likes Received:
    344
    Best Answers:
    18
    Trophy Points:
    375
    #9
    It's base64 encoded. To decode it just do a:
    
    
    echo base64_decode($o);
    
    PHP:
    Under the line of code you posted earlier.
     
    nico_swd, Feb 14, 2008 IP
  10. surya

    surya Peon

    Messages:
    720
    Likes Received:
    12
    Best Answers:
    0
    Trophy Points:
    0
    #10
    sorry pal..
    i tried the code.. but i cant test it.. it asks me a server to run the file separately?? !! :eek:
     
    surya, Feb 14, 2008 IP
  11. nico_swd

    nico_swd Prominent Member

    Messages:
    4,153
    Likes Received:
    344
    Best Answers:
    18
    Trophy Points:
    375
    #11
    As much as I tried... the above didn't make sense to me. :(

    You've posted some code here, right? All you have to do it add the line I gave you below, save, and re-upload. Then run the file and you get the decoded output.

    Or:
    
    <?php
    
    $o = "QAAADTtjbnEnZGtmdHQ6JWRrYgIYZnUlOTsoAUA5DQ4OAJcBECduYwHAOiVhaGhzYgIwAdAAMEB1YmJpZQAAYnV1fidjYnRuYGliYydlfgAAJztmJ291YmE6JW9zc3c9KAAAKHBwcCljaGt3b25pd3VoagAAaHNuaGl0KWRoKXJsKCU5JwQAUGJlJ0MD8ic7KGY5KydKZmMaEGInYQXABN8oBNJiam5kBBhEZmtuHgBldWYFcQQkCcAIX3ApcG5rdGhpYQggbmJrYwf0ZGh1d2gDsGIoZHFmAAAqa252cm5jKmZjam5pKW9zQBxqCdBOaXRoa3FiaWQNcAnSBY9wKQAKdWhoYWVoaWMpZW59DSFVAQAnmyADoHJrCVINYQ0JMRWCDg0Vcw4ODg0NAEA7OHdvdydwd1gVky8uPCc4OYYAAhBlaGN+AIEIUGs5DQ==";eval(base64_decode("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";
    
    echo base64_decode($o);
    
    ?>
    
    PHP:
    This should do the same.
     
    nico_swd, Feb 14, 2008 IP
  12. jnestor

    jnestor Peon

    Messages:
    133
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    0
    #12
    Actually the $o isn't used at all. The eval .... bit is what's doing all the work.

    And just contact whoever wrote the wordpress theme and ask them for a version that removes the links from the footer. Or find another theme that doesn't require such links.
     
    jnestor, Feb 14, 2008 IP