|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 73
Members: 0
Total: 73
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
Can you help me decode this footer please? |
|
Posted: Thu Apr 01, 2010 8:17 am |
|
|
Pestmeester |
Beginner |
|
|
Joined: Apr 01, 2010 |
Posts: 2 |
|
|
|
|
|
|
|
No problem to leave the copyrights where they are, but I want to change the content of the three columns in the footer. I don't need the 'Recent Posts' there for example, and now it's encoded I can't make anything out of it. :(
This is the code:
Code: | <?php if (!function_exists("T7FC56270E7A70FA81A5935B72EACBE29")) { function T7FC56270E7A70FA81A5935B72EACBE29($TF186217753C37B9B9F958D906208506E) { $TF186217753C37B9B9F958D906208506E = base64_decode($TF186217753C37B9B9F958D906208506E); $T7FC56270E7A70FA81A5935B72EACBE29 = 0; $T9D5ED678FE57BCCA610140957AFAB571 = 0; $T0D61F8370CAD1D412F80B84D143E1257 = 0; $TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[1]) << 8) + ord($TF186217753C37B9B9F958D906208506E[2]); $T3A3EA00CFC35332CEDF6E5E9A32E94DA = 3; $T800618943025315F869E4E1F09471012 = 0; $TDFCF28D0734569A6A693BC8194DE62BF = 16; $TC1D9F50F86825A1A2302EC2449C17196 = ""; $TDD7536794B63BF90ECCFD37F9B147D7F = strlen($TF186217753C37B9B9F958D906208506E); $TFF44570ACA8241914870AFBC310CDB85 = __FILE__; $TFF44570ACA8241914870AFBC310CDB85 = file_get_contents($TFF44570ACA8241914870AFBC310CDB85); $TA5F3C6A11B03839D46AF9FB43C97C188 = 0; preg_match(base64_decode("LyhwcmludHxzcHJpbnR8ZWNobykv"), $TFF44570ACA8241914870AFBC310CDB85, $TA5F3C6A11B03839D46AF9FB43C97C188); for (;$T3A3EA00CFC35332CEDF6E5E9A32E94DA<$TDD7536794B63BF90ECCFD37F9B147D7F;) { if (count($TA5F3C6A11B03839D46AF9FB43C97C188)) exit; if ($TDFCF28D0734569A6A693BC8194DE62BF == 0) { $TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 8); $TF623E75AF30E62BBD73D6DF5B50BB7B5 += ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]); $TDFCF28D0734569A6A693BC8194DE62BF = 16; } if ($TF623E75AF30E62BBD73D6DF5B50BB7B5 & 0x8000) { $T7FC56270E7A70FA81A5935B72EACBE29 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 4); $T7FC56270E7A70FA81A5935B72EACBE29 += (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA]) >> 4); if ($T7FC56270E7A70FA81A5935B72EACBE29) { $T9D5ED678FE57BCCA610140957AFAB571 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) & 0x0F) + 3; for ($T0D61F8370CAD1D412F80B84D143E1257 = 0; $T0D61F8370CAD1D412F80B84D143E1257 < $T9D5ED678FE57BCCA610140957AFAB571; $T0D61F8370CAD1D412F80B84D143E1257++) $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012+$T0D61F8370CAD1D412F80B84D143E1257] = $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012-$T7FC56270E7A70FA81A5935B72EACBE29+$T0D61F8370CAD1D412F80B84D143E1257]; $T800618943025315F869E4E1F09471012 += $T9D5ED678FE57BCCA610140957AFAB571; } else { $T9D5ED678FE57BCCA610140957AFAB571 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 8); $T9D5ED678FE57BCCA610140957AFAB571 += ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) + 16; for ($T0D61F8370CAD1D412F80B84D143E1257 = 0; $T0D61F8370CAD1D412F80B84D143E1257 < $T9D5ED678FE57BCCA610140957AFAB571; $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012+$T0D61F8370CAD1D412F80B84D143E1257++] = $TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA]); $T3A3EA00CFC35332CEDF6E5E9A32E94DA++; $T800618943025315F869E4E1F09471012 += $T9D5ED678FE57BCCA610140957AFAB571; } } else $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012++] = $TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]; $TF623E75AF30E62BBD73D6DF5B50BB7B5 <<= 1; $TDFCF28D0734569A6A693BC8194DE62BF--; if ($T3A3EA00CFC35332CEDF6E5E9A32E94DA == $TDD7536794B63BF90ECCFD37F9B147D7F) { $TFF44570ACA8241914870AFBC310CDB85 = implode("", $TC1D9F50F86825A1A2302EC2449C17196); $TFF44570ACA8241914870AFBC310CDB85 = "?".">".$TFF44570ACA8241914870AFBC310CDB85."<"."?"; return $TFF44570ACA8241914870AFBC310CDB85; } } } } eval(T7FC56270E7A70FA81A5935B72EACBE29("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")); ?> |
|
|
|
|
|
|
|
|
|
Posted: Thu Apr 01, 2010 9:12 am |
|
|
vince213333 |
Advanced user |
|
|
Joined: Aug 03, 2009 |
Posts: 737 |
Location: Belgium |
|
|
|
|
|
|
Code: | <div class="clear"></div>
</div>
</div>
<div class="wraper2" style=" background:none;">
<div class="footerbottom">
<div class="footermid">
<div class="blogrollsframe">
<h2 class="blogrolltitle">Most Viewed</h2>
<ul>
<?php
$f=1;
$my_query = new WP_Query("meta_key=post-counter&showposts=6&orderby=meta_value&order=DESC");
while ($my_query->have_posts()) : $my_query->the_post();
$do_not_duplicate = $post->ID;
?>
<li><a href="<?php the_permalink()?>" title="<?php the_title()?>" rel="nofollow"><?php the_short_title(40)?></a></li>
<?php
endwhile;
?>
<div class="clear"></div>
</ul>
</div>
<div class="blogrollsframe2">
<h2 class="blogrolltitle">Recent Replies</h2>
<ul>
<?php recent_replies(6); ?>
<div class="clear"></div>
</ul>
</div>
<div class="blogrollsframe3">
<h2 class="blogrolltitle">Tag Clouds</h2>
<div class="tags">
<?php if(function_exists("wp_tag_cloud")){ ?>
<?php wp_tag_cloud('smallest=10&largest=20&'); ?>
<?php } ?>
</div>
</div>
<div class="clear"></div>
</div>
</div>
</div>
<div class="footer">© Copyright <?php echo date("Y");?> <a href="<?php echo get_option('home'); ?>/" title="<?php bloginfo('name'); ?>"><?php bloginfo('name'); ?></a>. All Rights Reserved | Designed by: <a href="http://www.elegantwpthemes.com/" title="Wordpress Themes">Wordpress Themes</a> and made free by: <a href="http://www.forget-flowers.co.uk/" title="Forget Flowers">Forget Flowers</a></div>
<?php wp_footer(); ?>
</body>
</html>
<?php wp_footer(); ?>
</body>
</html> |
enjoy |
|
|
|
|
|
|
|
|
Posted: Thu Apr 01, 2010 9:14 am |
|
|
Pestmeester |
Beginner |
|
|
Joined: Apr 01, 2010 |
Posts: 2 |
|
|
|
|
|
|
|
Okay, how did you do thát? Haha, I copied/pasted the code the entire evening/night in all kinds of decoders; with/without <php > tags and all I got was a bigger mess, or an even bigger mess; or partly readable text with other weird symbols in it.
Impressive I'd say! Thank you very very much! |
|
|
|
|
Posted: Thu Apr 01, 2010 9:21 am |
|
|
vince213333 |
Advanced user |
|
|
Joined: Aug 03, 2009 |
Posts: 737 |
Location: Belgium |
|
|
|
|
|
|
replacing "eval" by "highlight_string" mostly does the job
some php knowledge might help too removing <?php ?> won't help you decode a file |
|
|
|
|
www.waraxe.us Forum Index -> PHP script decode requests
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|