Remove suspicious link that followed theme

What theme or site URL? Either you’ve downloaded a theme with encryptions or obfuscated code OR you’ve been hacked. Check your theme and if you find the encryptions, some solutions are here. If you’ve been hacked – check this out or this.

This is the theme.. https://www.wordpresstemplates.com/demo/?theme=Financial+Circle

Not sure if this was from where I downloaded it tho!
I have been modifying a bit too..

I have been looking thro the themes php-files without finding any of the encryption types in the other thread.. And again; I’m not a coder so.. not sure what else to look for and where :/

I’ve also been trying this:
https://www.ads-software.com/extend/plugins/tac/

and this:
https://cyko.decodethe.net/

without any result.

I don’t think that I’ve been hacked.. i have only had this wp site in a few days…

Any suggestions?
Thanks for helping!!!

It appears your functions.php file is calling the start_template.php file which is likely the culprit in this instance.

You can try removing one (1) line of code from functions.php (line 54 in a fresh install) starting with:

function decode_it($code) ...

Hope that helps … obfuscated code is truly irritating.

PS: I believe this may be the real author’s site for the theme in question too: https://www.ezwpthemes.com/templates/financial-circle.html

You could try a fresh install with the theme downloaded from there.

I tried to remove the line you mentioned.. it takes away the bad link but also everything else.. Only the background is left.. :/ I also tried to replace functions.php with whe file from the real author’s site.. Same result..

I could do a fresh install but I would prefer not as I’ve modifed things as language and such.. And then I will have to do it all over again.. Hoping to find some shortcut..
Do you guys think it can be a problem with my language changing..? (I thing that I’ve only changed things as “next, prev, author, archive and such)

Feeling so stupid downloading from a non-serious site.. ??

If it was me, I would feel better about starting fresh with a current version from the author’s web site, especially since it is freely available. It will likely be more current, as in possible minor fixes, and maybe even more features, too …

Re-editing the theme will just be the price you pay. Good Luck!

I tried to remove the line you mentioned.

you could always decode what’s in the header file per 1st link I gave above which has different kinds of decoders or download original file from link cais gave you and re-upload the theme.

I have been re-uploaded the theme from the real author’s homepage now.

Thanks a lot for all the help! ??