Forums

The forums ran from 2008-2020 and are now closed and viewable here as an archive.

Home Forums Other [Solved] Weird code in theme….what is eval (base64_decode(….) ???

  • This topic is empty.
Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • #26889
    Hayley
    Member

    Can anybody explain what eval (base64_decode(…random letters and numbers…) means? It’s all that’s in the footer file of a theme I’m working on for a friend. I downloaded a new copy of the theme, and it comes with it, so it’s not hacked or anything. ( I don’t think..)

    #80124
    Luminated
    Member

    I’m guessing its a site created with PHP, either WordPress or OSCommerce?

    Oof! I just had a get rid of a MASSIVE infection, which is exactly what that is. Do you or does she have a clean version? You need to either start from scratch or go through a very lengthy cleaning process. Whatever you do though, for now, take the site down completely and change all passwords asap to something super strong. I know I sound serious…and I am! Its very nasty and can cause weeks to months of problems if left unchecked!

    See:

    http://forums.digitalpoint.com/showthread.php?t=1578782

    http://hubpages.com/hub/How-To-Remove-The-evalbase64_decode-Virus

    http://forums.digitalpoint.com/showthread.php?t=1578782

    Edit – Just saw you said it was a new copy of the theme…not sure then. You can decode the string and see what you get (assuming its a full string):

    http://www.javazoom.net/services/base64/base64.jsp

    I’d still be skeptical, though.

    #80086
    Hayley
    Member

    Thanks for the input, @Luminated. I just decoded the string. Surprise, surprise…it was hiding a link to a diet pill website. Really?! :rolls eyes: ‘cmon, people. There were also javascript files in there as well, I don’t know Javascript, but I’m really afraid of what’s in there now. Maybe I’ll just delete them all and see what it does to the theme…or maybe my friend will pick another one.
    I didn’t know about base-64 encoding before. I understand that it is used for good purposes, and I guess some designers use it to encode their copyright link at the bottom of their free themes. I wouldn’t mind that so much. Wow, the poor people who have no idea what’s in their free theme…

    #80088
    Luminated
    Member

    I suspected as much! Glad you pursued it. Yeah, base64 has great uses but it’s just been abused now. That’s just mean, really. :/

    Glad you figured it out!

Viewing 4 posts - 1 through 4 (of 4 total)
  • The forum ‘Other’ is closed to new topics and replies.