Comments on: [How to] Decode an Encoded PHP Script in Wordpress Themes

By: The Media Annexes

The Media Annexes — Sun, 26 Apr 2009 10:01:09 +0000

Fantastic!

By: Raju

Raju — Thu, 05 Mar 2009 20:40:59 +0000

@bachtiar,
Sorry dude, I cannot understand what the issue is. Please explain in detail

By: bachtiar

bachtiar — Thu, 05 Mar 2009 09:29:05 +0000

I am sorry, where is the true to debug in php ?

“”
(without quote)
or

?>
……………..

I will try both of them, because I found
“” (without quote)
in my wp theme.
I will learn php on next semester on my campus, once again thanks to Raju and mijk.

===========
Sorry Raju, I just look like spamer.
I repost my comment because the previous one is incomplete, you can delete it.

By: bachtiar

bachtiar — Thu, 05 Mar 2009 09:18:30 +0000

@ mijk

I am sorry, where is the true to debug in php ?

?>
……………..

I will try both of them, because I found

in my wp theme.
I will learn php on next semester on my campus, once again thanks to Raju and mijk.

By: bachtiar

bachtiar — Thu, 05 Mar 2009 08:17:50 +0000

@mijk,
Thanks for your solution, that is a bright idea.

yup, building your own.

By: Raju

Raju — Sun, 22 Feb 2009 19:44:33 +0000

@mijk,
You are absolutely right. I personally use WAMP and XAMPP, but what I meant was non-geeks will not dare to try most of the times. But yeah, its very easy I must thank you for sharing so much info with your 2 comments.

By: mijk

mijk — Sun, 22 Feb 2009 19:26:10 +0000

@Raju:
I think there is lot of all-in-one apache+mysql+php solutions (EasyPHP @ http://www.easyphp.org/, WAMP @ http://www.wampserver.com/en/ etc.) which are easy to install (standard installshield installation) and setup (fully featured clickable control panel with links to phpmyadmin, for setting up modules like gd etc., selecting php (4/5) or mysql version (for debugging purpose) – so for clarity I think that almost anyone could be capable to install WP locally

I was just sharing another approach to this issue (mainly ’cause of legality of this kind of approach).

Thank you very much for quick response and thanks once again for cool article.

By: Raju

Raju — Sun, 22 Feb 2009 15:42:41 +0000

@mijk,
Thanks for your comments. But how many people do you think will be capable enough to install WP locally? That is why I suggested decoding approach. You are absolutely right in terming it “legal”, Even I have mentioned the same above.

By: mijk

mijk — Sun, 22 Feb 2009 12:27:58 +0000

On gzipped content like: eval(gzinflate(base64_decode('glztGlnskJVlg0'))); – I have succesfully used this on-line decrypter:
http://www.tareeinternet.com/scripts/decrypt.php

Thanks for this article

MY solution (no decoding):
—————————-
1/ Install the theme on localhosted apache + php + wp
2/ Point browser there (http://localhost/wordpress/)
3/ View page source
4/ copy footer code from viewed source
5/ erase footer.php, create new file with same name
6/ paste footer code from clipboard into this newly created file footer.php
7/ save footer.php code and test the theme
8/ you may need to debug it little bit (someone is putting tricks like

?>


 footer html code
 
to protect theme from this kind of manipulation and such techniques).
→ This solution is absolutely legal, ’cause you are not modifiing footer.php, you aren’t reverse engineering, but you’re building your own footer.php file



By: Jean-Louis
Jean-Louis — Mon, 15 Dec 2008 13:43:26 +0000
Thank you for having looked at the code. The footer coded it becomes a very bad way. Especially we don’t know if it hides a malicious script.