Results 1 to 7 of 7

Thread: Wordpress Obfuscated Code. Need to Remove It.

Threaded View

  1. #1
    Join Date
    Mar 2009
    Location
    If I tell you, I would have to kill you.
    Posts
    614

    Wordpress Obfuscated Code. Need to Remove It.

    Ok guys I downloaded this awesome theme from skinpress and they have obfuscated code in their header.php and functions.php.

    NOT in the footer.php. The footer has sponsored links.

    I don't mind the sponsored links but I want the code on my site clean.

    The code is in rot13 which I decoded. The obfuscated code in header.php calls the obfuscated code in functions.php to ensures that the footer link are intact.

    I think it notifies the theme owner/sponsor if any site removes the footer link. I want these codes to begone from my site.

    But when I remove them, they break the entire theme. How can I remove them??

    Obfuscated codes:

    Header.php

    PHP Code:
    <?php eval(str_rot13('shapgvba purpx_s_sbbgre(){vs(!(shapgvba_rkvfgf("purpx_sbbgre")&&shapgvba_rkvfgf("purpx_urnqre"))){rpub(\'Guvf gurzr vf eryrnfrq haqre perngvir pbzzbaf yvprapr, nyy yvaxf va gur sbbgre fubhyq erznva vagnpg\');qvr;}}purpx_s_sbbgre();'));eval(str_rot13('shapgvba purpx_shapgvbaf(){vs(!svyr_rkvfgf(qveanzr(__SVYR__)."/shapgvbaf.cuc")){rpub(\'Guvf gurzr vf eryrnfrq haqre perngvir pbzzbaf yvprapr, nyy yvaxf va gur sbbgre fubhyq erznva vagnpg\');qvr;}}purpx_shapgvbaf();')); ?>
    Functions.php
    PHP Code:
    eval(str_rot13('shapgvba purpx_sbbgre(){$y=\'<o><n uers="uggc://jjj.fxvacerff.pbz/">Serr Jbeqcerff Gurzrf</n></o> Qrfvtarq ol <o><n uers="uggc://jjj.npgvirgenvy.pbz/">Rznvy Znexrgvat</n></o> naq <o><n uers="uggc://jjj.npnqrzvpnqivfbewbof.pbz/">Nqivfbe Wbof</n></o>\';$s=qveanzr(__SVYR__).\'/sbbgre.cuc\';$sq=sbcra($s,\'e\');$p=sernq($sq,svyrfvmr($s));spybfr($sq);vs(fgecbf($p,$y)==0){rpub(\'Guvf gurzr vf eryrnfrq haqre perngvir pbzzbaf yvprapr, nyy yvaxf va gur sbbgre fubhyq erznva vagnpg\');qvr;}}purpx_sbbgre();')); eval(str_rot13('shapgvba purpx_urnqre(){vs(!(shapgvba_rkvfgf("purpx_shapgvbaf")&&shapgvba_rkvfgf("purpx_s_sbbgre"))){rpub(\'Guvf gurzr vf eryrnfrq haqre perngvir pbzzbaf yvprapr, nyy yvaxf va gur sbbgre fubhyq erznva vagnpg\');qvr;}}')); 


    Decoded:


    Header.php

    PHP Code:
    <?php eval(str_rot13('function check_f_footer(){if(!(function_exists("check_footer")&&function_exists("check_header"))){echo(\'This theme is released under creative commons licence, all links in the footer should remain intact\');
    die;
    }}check_f_footer();
    '
    ));
    riny(fge_ebg13('function check_functions(){if(!file_exists(dirname(__FILE__)."/functions.php")){echo(\'This theme is released under creative commons licence, all links in the footer should remain intact\');
    die;
    }}check_functions();
    '
    ));
    ?>
    Functions.php
    PHP Code:
    <?php eval(str_rot13('function check_footer(){$l=\'<b><a href="http://www.skinpress.com/">Free Wordpress Themes</a></b> Designed by <b><a href="http://www.activetrail.com/">Email Marketing</a></b> and <b><a href="http://www.academicadvisorjobs.com/">Advisor Jobs</a></b>\';
    $f=dirname(__FILE__).\'/footer.php\';
    $fd=fopen($f,\'r\');
    $c=fread($fd,filesize($f));
    fclose($fd);
    if(strpos($c,$l)==0){echo(\'This theme is released under creative commons licence, all links in the footer should remain intact\');
    die;
    }}check_footer();
    '
    )); 
    riny(fge_ebg13('function check_header(){if(!(function_exists("check_functions")&&function_exists("check_f_footer"))){echo(\'This theme is released under creative commons licence, all links in the footer should remain intact\');
    die;
    }}'
    ));
    ?>
    In case they cannot be removed, are they safe?? Skinpress.com is a trustworthy site btw.
    Last edited by rome9t9; 14 December, 2010 at 16:48 PM.

Similar Threads

  1. Replies: 0
    Last Post: 29 March, 2011, 12:21 PM
  2. Replies: 13
    Last Post: 11 September, 2010, 21:26 PM
  3. Remove Category plugin ?
    By SonnyCooL in forum Wordpress
    Replies: 3
    Last Post: 19 January, 2010, 02:19 AM
  4. 2 Guest Welcome Messages. Remove One?
    By Arlind in forum Announcements and Suggestions
    Replies: 1
    Last Post: 12 August, 2009, 05:29 AM
  5. remove all spaces from string [vb]
    By ghadeer in forum Programming
    Replies: 5
    Last Post: 9 May, 2009, 05:08 AM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •