Can anyone decode this?

**Horny Joe** · January 23rd, 2012, 01:41 PM

THis is in the footer of a blog theme... I do not suspect it to be anything "weird" but want to be sure. Can anyone decode this? Or are there any website/program that I can use to do it?

Code:

<?php $_F=__FILE__;$_X='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';eval(base64_decode('JF9YPWJhc2U2NF9kZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCcxMjM0NTZhb3VpZScsJ2FvdWllMTIzNDU2Jyk7JF9SPWVyZWdfcmVwbGFjZSgnX19GSUxFX18nLCInIi4kX0YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRfWD0wOw=='));?>

Thanks!

**JaySch** · January 23rd, 2012, 02:04 PM

Originally Posted by Horny Joe

THis is in the footer of a blog theme... I do not suspect it to be anything "weird" but want to be sure. Can anyone decode this? Or are there any website/program that I can use to do it?

does nothing serious, just output the footer. The generated source is like following:

PHP Code:


?></div> <!-- end div #page-inner -->

</div> <!-- end div #page -->

<!-- END PAGE -->





    <?php if (get_option('eted_activate_bottom_menu' ) =='true' ) {include(TEMPLATEPATH . '/includes/bottom-menu.php'); } ?> 

    



    <!-- BEGIN FOOTER -->

    <div id="footer">

    <div id="footer-inner" class="clearfix">

        

        <div id="footer-left">



            <p>Theme by <a href="http://www.hostingz.com/bluehost-coupon.html" target="_blank">Bluehost Coupon</a><br />

            <a href="http://www.hostingz.com/hostmonster-coupon.html" target="_blank">Hostmonster Coupon</a> | <a href="http://www.hosting-coupon.org/bluehost-coupon.html" target="_blank">Bluehost Coupon</a> | <a href="http://www.hosting-coupon.org/hostmonster-coupon.html" target="_blank">Hostmonster Coupon</a>

            </p>

        </div> <!-- end div #footer-left -->



        <div id="footer-right">

            <p>&copy; <?php echo date('Y');?> <a href="<?php bloginfo('siteurl');?>/" title="<?php bloginfo('name');?>" ><?php bloginfo('name');?></a><br />

            <?php echo stripslashes(get_option('eted_footer_text')); ?></p>

        </div> <!-- end div #footer-right -->



    </div> <!-- end div #footer-inner -->

    </div> <!-- end div #footer -->



    <!-- END FOOTER -->

        

</div> <!-- end wrapper -->



<?php wp_footer(); ?>



</body>

</html>

**Horny Joe** · January 23rd, 2012, 02:05 PM

Great, thanks! I though so, just wanted to be sure. How did you decode it? Just for the future

**JaySch** · January 24th, 2012, 01:29 PM

Originally Posted by Horny Joe

Great, thanks! I though so, just wanted to be sure. How did you decode it? Just for the future

There's no secret, I have just split it in parts and first checked what echo base64_decode('JF9... outputs and so on.

Thread: Can anyone decode this?

Thread Tools

Can anyone decode this?

Posting Permissions