Theme decoding thread

  • First read this information.

    Seriously, READ THAT THREAD BEFORE POSTING HERE. That thread will give you details on how to decrypt these sort of things yourself. Almost everything posted here has been something that could have been easily decrypted by simply reading that post.

    We recommend that you do not use encrypted themes. Encryption is often used to insert malicious code. Decoding part of an encrypted theme does not mean that it is all clean. If you choose to use an encrypted theme, it is at your own risk.

    If your theme has been posted under a non-GPL license, it may be against the terms of the theme to attempt to decode it or to have someone else decode it for you.

    If you can’t decode your own encrypted themes using this information and still want to use one rather than pick from the thousands of themes that don’t have obfuscated code in them, post your request for decryption in here, and maybe someone will help you out.

    Note

    • Code should be place into a pastebin, not into this thread.
    • Decoding the theme does not guarantee safety from malicious code.
    • Seperate decoding threads will be closed.
    • Best practice is to avoid such websites that distribute malicious code in themes (most of them just provide ripped knockoff themes, why trust these people?)
Viewing 15 replies - 226 through 240 (of 448 total)

  • @claytonjames

    Yeah, that’s what I figured. I started removing all base64 code from functions.php right after I made my initial post :).

    Thanks for the info and warnings!
    StudioRed theme has a Base64 encoding in the footer that has a Massemailer link. I was going nuts trying to resolve why I couldn’t edit or find reference till I found the eval(Base64….) code.

    hello,
    i look for a solution of this Black Tribe WordPress Theme.

    i decrypt the footer.php 

    <?php
eval(gzinflate(base64_decode('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')));

?>

    to this

    <?php
include(TEMPLATEPATH.'/footer_content.php');echo '<div style="background-image:url('.get_bloginfo("template_directory").'/images/footer_copy.gif);height:23px;display:block;color:#3f3f3f;text-align:center;padding-top:8px;"><div id="footcopy" class="onethousand_wrap"><a href="https://zenverse.net/black-tribe-wordpress-theme/">Black Tribe</a> designed by <a href="https://themes.zenverse.net/">Premium WordPress Themes</a>  |  Brought to you by <a href="https://all-inkl.com/?partner=158367">WordPress Hosting Provider</a> from the #1 <a href="https://all-inkl.com/?partner=158367/">All-Inkl.com</a> - Alles einfach Internet</div><!--/onethousand_wrap--> </div>';$zenverse_global_google_analytics = get_option("zenverse_global_google_analytics");if ($zenverse_global_google_analytics != "") { echo stripslashes($zenverse_global_google_analytics); }wp_footer();echo '</body></html>';
?>

    but any changes i do in the decrypted footer.php i will see a blank page without any content.

    i know my english sucks but i hope its readable for you and i can get a tip to fix that problem. big thx

    Hi, can I get some help decoding this? I know it’s a piece of cake for you experts, but I’m working on day 3 here… I tried a few of the decoding scripts and I probably just did something stupid wrong. Then I tried following Otto’s instructions but I was again probably just making some stupid mistake. If someone made a video on doing this it’d be GREAT!! Even though it’s only going to have to be done once, I don’t like not knowing how to do something. Anyway here’s the link. Thanks in advance, you guys are awesome!!

    https://pastebin.com/5L0ScanL

    PLease help me break this decoded file:

    https://pastebin.com/zHNGQ4Vu

    thanks all

    Joining the list of many beaten by base64 encoding here… I now realize I should have checked prior to using it as a template.

    I understand the problem probably stems from the functions file, but have included the footer in question too, just to make things clearer should you try and help. Of course, it would be massively appreciated, and I’ll owe you one!

    Functions: https://pastebin.com/raw.php?i=8rRsCnfZ
    Footer: https://pastebin.com/raw.php?i=3DqnxtFv

    As you can see from the link below, I need to shift the footer text to stop it stomping all over the footer. Obviously it would look better without, but I’m even open to a solution which would just shift the text (other than a redesign!)

    https://blog.razzlewis.com

    razzlewis
    functions.php
    https://wordpress.pastebin.com/LhSLHERu
    it has checks for header, sidebar and footer

    your footer is fine if you remove the checks in functions.php correctly

    @vobu66:
    Usually there is a function to check the footer in functions.php

    @takeninvain:
    https://pastebin.com/wUYYVP56

    @sosowich:
    https://pastebin.com/ZXumkPZb

    i need some help with this footer

    https://wordpress.pastebin.com/0acnDg3i

    @punzzer:
    https://pastebin.com/1Nwwf0ZF

    tnx but i have this code in header ??
    https://wordpress.pastebin.com/cFSrR5rr

    and this code in function.php

    https://wordpress.pastebin.com/TmtEePVJ

    @punzzer:
    The first one is the function that check the footer
    https://pastebin.com/htqYNWSQ

    The other one is the function check the header
    https://pastebin.com/9uTC0uDn

    what i have to do? to change the footer link.

    you can remove those functions

    Tnx, i make the change ??

Viewing 15 replies - 226 through 240 (of 448 total)
  • The topic ‘Theme decoding thread’ is closed to new replies.