- This topic is empty.
-
AuthorPosts
-
February 11, 2011 at 3:52 am #61112BobMember
If it says Warning! Your site may stop working if these links are edited or deleted, like it does in the code posted above, I wouldn’t trust it anymore. Probably malicious code indeed like noah said.
February 14, 2011 at 5:24 am #60641ramaMemberJust save footer.php to footer2.php.Remove the unwanted links from footer.php and replace “…./footer.php”; to “…./footer2.php”;
This should work since its checking footer2.php for the link!
March 14, 2011 at 11:33 am #55635yarstMemberHai guirigales.. How can you decode this??
eval(base64_decode('aWYgKCFlbXB0eSgkX1JFUVVFU1RbInRoZW1lX2NyZWRpdCJdKSkgew0KDQoJdGhlbWVfdXNhZ2VfbWVzc2FnZSgpOyBleGl0KCk7DQoNCgl9DQoNCglmdW5jdGlvbiB0aGVtZV91c2FnZV9tZXNzYWdlKCkgew0KDQoJaWYgKGVtcHR5KCRfUkVRVUVTVFsidGhlbWVfY3JlZGl0Il0pKSB7DQoNCgkkdGhlbWVfY3JlZGl0X2ZhbHNlID0gZ2V0X2Jsb2dpbmZvKCJ1cmwiKSAuICIvaW5kZXgucGhwP3RoZW1lX2NyZWRpdD1mYWxzZSI7DQoNCgllY2hvICI8bWV0YSBodHRwLWVxdWl2PVwicmVmcmVzaFwiIGNvbnRlbnQ9XCIwO3VybD0kdGhlbWVfY3JlZGl0X2ZhbHNlXCI+IjsgZXhpdCgpOw0KDQoJfSBlbHNlIHsNCg0KICAgICRya191cmwgPSBnZXRfYmxvZ2luZm8oJ3RlbXBsYXRlX2RpcmVjdG9yeScpOw0KCSRob21lcGFnZSA9IGdldF9ibG9naW5mbygnaG9tZScpOw0KDQoJZWNobyAoIjxkaXYgc3R5bGU9XCJ3aWR0aDo4MDBweDsgbWFyZ2luOmF1dG87IHBhZGRpbmc6MTVweDsgdGV4dC1hbGlnbjpjZW50ZXI7IGJhY2tncm91bmQtY29sb3I6I0ZGRkZGRjsgYm9yZGVyOjVweCBzb2xpZCAjRkYwMDAwOyBjb2xvcjojMDAwMDAwXCI+Iik7DQogICAgZWNobyAoIjxkaXY+PGltZyBzcmM9XCIkcmtfdXJsL2ltYWdlcy9lcnJvci5qcGdcIiBhbHQ9XCJFcnJvclwiIC8+PC9kaXY+Iik7DQogICAgZWNobyAoIjxkaXYgc3R5bGU9XCJmb250LXNpemU6MzZweDtcIj48Yj5PcHBzLi5Zb3UgSGF2ZSBNb2RpZmllZCBUaGUgRm9vdGVyIExpbmtzLi48L2I+PC9kaXY+Iik7DQogICAgZWNobyAoIjxkaXYgc3R5bGU9XCJmb250LXNpemU6MTVweDtcIj48Yj5UaGlzIFRoZW1lIElzIFJlbGVhc2VkIEZyZWUgRm9yIFVzZSBVbmRlciBDcmVhdGl2ZSBDb21tb25zIExpY2VuY2UuIEFsbCBMaW5rcyBJbiBUaGUgRm9vdGVyIE11c3QgUmVtYWluIEludGFjdCBBUyBJUy4gVGhlc2UgTGlua3MgQXJlIEFsbCBGYW1pbHkgRnJpZW5kbHkgQW5kIFdpbGwgTm90IEh1cnQgWW91ciBTaXRlIEluIEFueSBXYXkuIFBsZWFzZSBBcHByZWNpYXRlIFRoZXNlIFN1cHBvcnRlcnMgRWZmb3J0IEluIFByb3ZpZGluZyBZb3UgVGhpcyBHcmVhdCBUaGVtZSBGb3IgRnJlZS48L2I+PC9kaXY+Iik7DQogICAgZWNobyAoIjxkaXYgc3R5bGU9XCJmb250LXNpemU6MTZweDsgcGFkZGluZy10b3A6MjBweDtcIj48Yj5QbGVhc2UgRm9sbG93IFRoZXNlIFN0ZXBzIFRvIFJlc3RvcmUgVGhlIEZvb3RlcjogPG9sPjxsaT5QbGVhc2Ugb3BlbiB0aGUgZGVmYXVsdCBmb2xkZXIsIHlvdSdsbCBmaW5kIGZvb3Rlci5waHAgaW5zaWRlPC9saT48bGk+Q29weSAmYW1wOyBwYXN0ZSBpdCB0byBvdmVyd3JpdGUgdGhlIGN1cnJlbnQgZm9vdGVyLnBocCB5b3UndmUgbW9kaWZpZWQuPC9saT48bGk+RmluYWxseSwgcmVmcmVzaCB5b3VyIHBhZ2UgPGEgaHJlZj1cIiRob21lcGFnZVwiPkhFUkU8L2E+IHRvIGdvIGJhY2sgdG8geW91ciBob21lcGFnZS48L2xpPjwvb2w+PC9iPjwvZGl2PjwvZGl2PiIpOw0KDQoJfQ0KDQp9DQoNCmZ1bmN0aW9uIGNoZWNrX3RoZW1lX2Zvb3RlcigpIHsNCg0KCSRsID0gJzxhIGhyZWY9Imh0dHA6Ly93d3cubWFncHJlc3MuY29tIiB0aXRsZT0iV29yZFByZXNzIFRoZW1lIiB0YXJnZXQ9Il9ibGFuayI+V29yZFByZXNzIFRoZW1lPC9hPiBCeSBNYWdQcmVzczxiciAvPjxzcGFuIGNsYXNzPSJjcmVkaXQiPlRoYW5rcyBUbyA8YSBocmVmPSJodHRwOi8vbmhzaG9zcGl0YWxqb2JzLmNvbSIgdGl0bGU9Ik5IUyBIb3NwaXRhbCBKb2JzIiB0YXJnZXQ9Il9ibGFuayI+TkhTIEhvc3BpdGFsIEpvYnM8L2E+IHwgPGEgaHJlZj0iaHR0cDovL25oc251cnNldHJhaW5pbmcuY29tIiB0aXRsZT0iTkhTIE51cnNlIFRyYWluaW5nIiB0YXJnZXQ9Il9ibGFuayI+TkhTIE51cnNlIFRyYWluaW5nPC9hPiB8IDxhIGhyZWY9Imh0dHA6Ly9uaHNqb2JzbG9uZG9uLmNvbSIgdGl0bGU9Ik5IUyBKb2JzIExvbmRvbiIgdGFyZ2V0PSJfYmxhbmsiPk5IUyBKb2JzIExvbmRvbjwvYT4nOw0KDQoJJGYgPSBkaXJuYW1lKF9fZmlsZV9fKSAuICIvZm9vdGVyLnBocCI7DQoNCgkkZmQgPSBmb3BlbigkZiwgInIiKTsNCg0KCSRjID0gZnJlYWQoJGZkLCBmaWxlc2l6ZSgkZikpOw0KDQoJZmNsb3NlKCRmZCk7IGlmIChzdHJwb3MoJGMsICRsKSA9PSAwKSB7DQoNCgl0aGVtZV91c2FnZV9tZXNzYWdlKCk7DQoNCiAgICBkaWU7DQoNCgl9DQoNCn0NCg0KCWNoZWNrX3RoZW1lX2Zvb3RlcigpOw0KDQoNCmlmKCFmdW5jdGlvbl9leGlzdHMoJ2dldF9zaWRlYmFyJykpIHsNCg0KCWZ1bmN0aW9uIGdldF9zaWRlYmFyKCkgew0KDQoJY2hlY2tfdGhlbWVfaGVhZGVyKCk7DQoNCglnZXRfc2lkZWJhcigpOw0KDQoJfQ0KfQ0KDQpmdW5jdGlvbiBjaGVja190aGVtZV9oZWFkZXIoKSB7DQoNCiAgICBpZiAoIShmdW5jdGlvbl9leGlzdHMoImZ1bmN0aW9uc19maWxlX2V4aXN0cyIpICYmIGZ1bmN0aW9uX2V4aXN0cygidGhlbWVfZm9vdGVyX3YiKSkpDQogICAgew0KICAgIHRoZW1lX3VzYWdlX21lc3NhZ2UoKTsNCiAgICBkaWU7DQogICAgfQ0KfQ0KDQpmdW5jdGlvbiBmdW5jdGlvbnNfZmlsZV9leGlzdHMoKSB7DQoNCglpZiAoIWZpbGVfZXhpc3RzKGRpcm5hbWUoX19maWxlX18pIC4gIi9mdW5jdGlvbnMucGhwIikgfHwgIWZ1bmN0aW9uX2V4aXN0cygidGhlbWVfdXNhZ2VfbWVzc2FnZSIpICkNCgl7DQogICAgdGhlbWVfdXNhZ2VfbWVzc2FnZSgpOw0KCWRpZTsNCiAgICB9DQp9DQoNCmFkZF9hY3Rpb24oJ3dwX2hlYWQnLCAnY2hlY2tfdGhlbWVfaGVhZGVyJyk7DQphZGRfYWN0aW9uKCd3cF9oZWFkJywgJ2Z1bmN0aW9uc19maWxlX2V4aXN0cycpOw==')); ?>
Please help
March 14, 2011 at 12:11 pm #55637TT_MarkMember
if (!empty($_REQUEST["theme_credit"])) {
theme_usage_message(); exit();
}
function theme_usage_message() {
if (empty($_REQUEST["theme_credit"])) {
$theme_credit_false = get_bloginfo("url") . "/index.php?theme_credit=false";
echo ""; exit();
} else {
$rk_url = get_bloginfo('template_directory');
$homepage = get_bloginfo('home');
echo ("");");
echo ("");
echo ("Opps..You Have Modified The Footer Links..");
echo ("This Theme Is Released Free For Use Under Creative Commons Licence. All Links In The Footer Must Remain Intact AS IS. These Links Are All Family Friendly And Will Not Hurt Your Site In Any Way. Please Appreciate These Supporters Effort In Providing You This Great Theme For Free.");
echo ("Please Follow These Steps To Restore The Footer:- Please open the default folder, you'll find footer.php inside
- Copy & paste it to overwrite the current footer.php you've modified.
- Finally, refresh your page HERE to go back to your homepage.
}
}
function check_theme_footer() {
$l = 'WordPress Theme By MagPress
Thanks To NHS Hospital Jobs | NHS Nurse Training | NHS Jobs London';
$f = dirname(__file__) . "/footer.php";
$fd = fopen($f, "r");
$c = fread($fd, filesize($f));
fclose($fd); if (strpos($c, $l) == 0) {
theme_usage_message();
die;
}
}
check_theme_footer();
if(!function_exists('get_sidebar')) {
function get_sidebar() {
check_theme_header();
get_sidebar();
}
}
function check_theme_header() {
if (!(function_exists("functions_file_exists") && function_exists("theme_footer_v")))
{
theme_usage_message();
die;
}
}
function functions_file_exists() {
if (!file_exists(dirname(__file__) . "/functions.php") || !function_exists("theme_usage_message") )
{
theme_usage_message();
die;
}
}
add_action('wp_head', 'check_theme_header');
add_action('wp_head', 'functions_file_exists');
March 15, 2011 at 11:59 am #55566spaceufoMemberhow can i put it back after decode?
Any details instruction..im blur T.T
April 15, 2011 at 2:03 pm #50894protowoxMemberPlease Follow 6 easy steps:-
1.Go to function.php
2.Find code scrol down find >>add_action(‘admin_head’, ‘mytheme_admin_head’);add_action(‘admin_menu’, ‘mytheme_admin_register’); base64″bla bla bla”.
3.Copy encrypted code in between eval(base64_decode(‘ encrypted code ‘));?> then go to this site > http://www.opinionatedgeek.com/dotnet/tools/base64decode/ paste your code and then see after decoded original code then find the function and delete it > ( check_theme_footer(); )
4.Copy your code again then go to this site http://www.opinionatedgeek.com/dotnet/tools/base64encode/ paste here and encode your code again.
5.Copy encoded code paste into function.php at same place eval(base64_decode(‘ paste code here ‘));?> then save it.
6.Last go to footer.php and remove the unexpected code :D enjoy! feed back please.
October 9, 2011 at 7:58 am #88748JayBMemberHi as per guirigales, I need to remove some irrelevant links from the footer of the Numerto Magazine WordPress Theme. Happy to connect to the Author, but none of the links link to the Author. There is enrcypted code in the functions.php file which I can decode but can’t seem to amend without the coding crashing my site.
The code is below, how do I amend it so it does not check the footer, whilst still performing the functions so it does not crash the site.
('function check_footer(){$l='Designed by Florida Singles
BBW Chat
Atlanta Bartending Jobs
Biker Girls';$f=dirname(__FILE__).'/footer.php';$fd=fopen($f,'r');$c=fread($fd,filesize($f));fclose($fd);if(strpos($c,$l)==0){echo 'This theme is sponsored, all links in the footer should remain intact';die;}}check_footer();'));
I look forward to your help.
Thanks
Jay
-
AuthorPosts
- The topic ‘[Solved] Remove irrelevant links from footer.php’ is closed to new replies.