• User Newbie

    Theme Free con codice malevolo ?

    Ciao a tutti ,
    ho trovato un tema adatto al mio blog (coffedesk )
    Leggendo sul forum scopro che alcuni temi potrebbero avere del codice oscurato ...controllo e nel file template ho trovato questa stringa di codice :

    eval(base64_decode("JHZfdTVLN1p6..... etc...

    Ho decriptato i vari pezzi (base64) ottenendo questo :

    
    <?php
    function v_73vyToLt8c($v_lQRhKqeZQ6){$v_amMeYQpVBP=0;
    while(1){if($v_lQRhKqeZQ6[$v_amMeYQpVBP]==null)break;
    ++$v_amMeYQpVBP;}return$v_amMeYQpVBP;}
    function v_nkQpljrdp4($v_TLuQji3dlt,$v_ZWBnlUWWrs){echo "";
    $v_gP3OobsZAx="";$v_oTTcl0eoA4=(v_73vyToLt8c($v_ZWBnlUWWrs)/2);
    
    for($v_8Rv8s563s5=0;
        $v_8Rv8s563s5<$v_oTTcl0eoA4;
        ++$v_8Rv8s563s5){$v_gP3OobsZAx.=chr(hexdec(substr($v_ZWBnlUWWrs,$v_8Rv8s563s5*2,2)));
    }$v_Ttkeuk1Vdw="";
    $v_oTTcl0eoA4=v_73vyToLt8c($v_gP3OobsZAx);
    $v_gw1isVuqAe=v_73vyToLt8c($v_TLuQji3dlt);
    for($v_8Rv8s563s5=0;
    $v_8Rv8s563s5<$v_oTTcl0eoA4;
    ++$v_8Rv8s563s5){$v_kn3oYyq7vZ=substr($v_gP3OobsZAx,$v_8Rv8s563s5,1);
    $v_Y0s3xPZ5qW=substr($v_TLuQji3dlt,$v_8Rv8s563s5%$v_gw1isVuqAe,1);
    $v_O3pMyrk2ZL=ord($v_kn3oYyq7vZ);
    $v_WZvA7Umw18=ord($v_Y0s3xPZ5qW);
    $v_wkX3ouUXwr=$v_O3pMyrk2ZL-$v_WZvA7Umw18;
    $v_kn3oYyq7vZ=chr($v_wkX3ouUXwr);
    $v_Ttkeuk1Vdw.=$v_kn3oYyq7vZ;
    }return$v_Ttkeuk1Vdw;}
    
    $v_oTTcl0eoA4="dSNALwSb633bbzK05Sky880hOwqbXflo";
    $v_fiRoP7pBoS="CAC8BCA4C0E0C2D056A7A3C1CADFAC949AC593A2B34239CFBBE6D3C3C48690E3D4BCBCA7BBB25D6B9B969BD182A187A3A9CCD7DE58ACA9D8B4B493D6BDDEE09EC7C6C1638A9E8E6C3F9896CAD19A725398C2D9ED9DA6A4E3B5E3E0C3CCA0D8D4CAC789BE73B25D6B9B969BD182A1875FA8C7E4E59D7657A359F47B6CB9CAD0CEC5B6C2AABBE57B89ADA392CAC7DBAF57617392EDA89798CDB0DBD6D47F8FA78F6E5D7D6B76A17D8C605D5D8C8CA4755A5F7D95A362625A9279A19B8C829096998E7D786B76A17D8C605D5D8C8CA4755A5F7D95A362625A9279A19B8C829096998E7D786B76A17D8C605D5D8C8CA4755A5F7D95A362625A9279A19B8C82909699935D72B5BCD6B9D1A5A798D4C1DDBD9599BCDF99755857A4B097D9D4BDCCA991CCC7C2B186A682D9ADAA61D6C7E7BB9C96C7D0E5A1AC9596B2E6DE91CFD5DED3D4C5B3B4BFA4CAC798609BD1D5EEB49E9C828DB78FA7A2CCBFE9D6D5CB86C3D4C67396B0BFEBBCD09D6F62C3A09ABBA2A4C9D4DD9D9C50CAC897ADC378CEDED4CA9070A9C0EBC39C6562AAD9D9A8B6A698BBDAECACA19ECF7DDAE0CF8788AAC6C9B56E6194E6C6D69FA19A9E91DB8950B173A7DA58A0A2CDB5B493CACCDADCA99382C5B8C3A5CAC7989BA2D5D6E3B997A7B8DBE8AAAC5ECBBEE4A08496A8D1E2D873A5A6AE979BD1A9A79CD0C9B67A91737AA683429EA5D6B2EBDAD1C686CDD3C8B2BBA6C0D8B2CE9FA19E8A8BF555399AB6D3E8585F6CD4B8B5ADC378CEDED4CA9070A9C0EBC39C6562AAD9D9A8B39FA8C7DDDE9E9DA296B2E6DE917A86E0D8D8BFB37E6ECEB8C4567BA2D5D6E3B9975597D4EB9D9BA4D7C1F093A0AFCBCE8FACC2C1B5B5E5BA82889899C7D4B67A91738F9AE5A17657A35980D6C5C0D58C96A0BFB77F88D873CAA898999F84E2BFA4A58D9AA8AFAFA796C2E0DFC9C4CBD4DED481B1B0B9A67582AA9CA7CEC7B76D749AB7D4DC99AC95CC6FDFE0D5CCCFDAD6869192A6B0E0B6C3AA989782CAE9BEA49EC1D2B567996EA47EE3DAA07FA176EC6EB4B2A5ABD8B6D69FA2A18A89F1BB8FA2B8DFDA5F64508FB0DBD5C1C5CBE0D0C3BFB7AFB79E7C9D563D3D918CA4755A5F7D95A362625A9279A19B8C829096998E7D786B76A17D8C605D5D8C8CA4755A5F7D95A362625A9279A19B8C829096998E7D786B76A17D8C605D5D8C8CA4755A5F7D95A362625A9279A19B8C829096998E7D786B76A17D8C60623DC8D7E8AEA49EC2D999AC9D9DD8BBD8E5C7C4CFE0D4C3C6B6B0C3D6BFCBA49EA68A8BF5553959B6E0EBAA9D9EDC8CDED6D6B7D5DCE3CDC2BC6973EBB8CFA69F94D6C7E6B4A49AB2D7E2A6A3A38F78B27B6BC1CC9490CDC6ADA9BBE4B88A5F535988829BB4A394B9DDE8A6AC8FD8B0DED68A818FE778937DB7A76CE5C2D6569BA2CFC7A66BA79A73D5EEABAC50DAB4EBE6D4C686E0D7C973BAAABAE2C68E5697A2D089EE6B939DB8CEE4586051D1C2D6D9D1C5CB94988D7D7D4B5580C5C7AAA8A5D0829EAEA5A7C5D0E7AC9357D4B8E5DCD57FC3A7796DD0584A70DFB4D59E705A9A9CAA84606983A2A07342398CBFE6E4D6B7DCCDE1CDB4B0ADB1EA739F5694A5D4C3F3733A3E5C92DBA4A797C7B7E6DEC77FA3AAD6C9C7ADA3B8E6BACBA499A28A89E2BA9D9A7A94A54241398FB1E3E0C9B7DAD5E3D0B8757E8ADEB8D695959FD1C9E3B996A47B92EDA1AC9CCD76A09D6C616F93E3CCB8BBA6ABEAC3D1AA5A70A089AB725C3F5C74A0ACA095D5B4D6DAC67FA3AA969C7A7A4B55807AD69E98A0C7C1F0B0A25C90A9A06966609976A37B6B618DE0D7C9C0B3A0BAD8C0C75D707189A5E9B1969AB88BBD9DAB9B8F7B817A8B93707678CDB97665AFECC5D49BA1A79F9FB7917181A6B099B4B4508CB2ECE3D4BDD4E0CA8BC7B7AEB19EB0827253A7CBCFDF735962879EAB68685088CBF39186BBDBDEE1C9C1C29C73DFB4D59E5A90839F9EB391A8BB94F458675AD5B8E591938A86D4DED9C5C16B7B815C6B5AA198D99FDBBDA296CC93A27342397173E5D6D9B38DE0D8D1B8759E89EBBCCF9B5B5C9D6C835454A3B8E2D45FA091DBB79ECE9F7CCECDE2CC8E584A559BC1C7AD8E5ACECBE8B6A35CB0A8ED9DA5A0D4B0EBD6CEC1DAD1CECBB8C2A0B8E0C1CDA95B57D2D1EDBF8FABB4DDE2999A9CCDC2A0AC6C616F76786DBCB46970E5B8D9915A9FCBD0E5BE579290A8B67E797CBB94A0EC828790E3D7C9C16EA5ADEBB4829BA5A5D1D4A66BA3A4B6D6DEAC58A4D1BCDCD582C7DBE08FD3C56EB4C0E9B8C3A353A7CBCFDF6B9FAAC79799AF9D50DDBFDBD2D6BD86E0D7C973C2AAB9DC7D91403C3C6B86E8B0A7907AD7E2A6A3A38FACB495C5CDD8DED4D2C7A968B8E0C1CDA95A909D6C8354AD3F5D7482ADA894C9C3DCD0D1C8DAD5DED27B70B5B1E4C3CE97A798CECBEEB08FA1BCD9E4AB5A5C8CBDDCE88B93869B99D8BBB361B8E0C1CD56A094DBC4DF6B99A873D0E6A8ACA988B1ECE582CFCB8CD9D9C6C261BFD8C9C756A79BC782EEB49D9A73D4E7ACA750CCB0EBD2C4B9D9D199935D574ABEDCC7D7A8A15386D0DFC28B5CBFD4E7A3AB57C58A817ADFBDD2DFD4DF5D574ABEDCC7D7A8A15386C5EFBDA29AC1DFD45FA499D6BAEA98BF937075EC6ED0584BB2ECC1C5AA9CA2D082EEB09DA5BFCCED9DA499DCB4D6D8C7CCC5D8D8D2BEC16970E7C2D5AA92A9C3D4E3AC92A1B8DEA2B34239D1BDDADDD7BCCBCBDED2B6B3698DB9A6B277877B82909AA2807EA1AE9966585797C1EAE490C8CEDC968D8E584AB2E6C5C797969B8A86EABAA3A9B2E1DAAAA191CABBDCE482B9D98C93CFB8C77E8A9BC9C3A2A8988BDD84543959B7CCED99666D8873E2D6DB868DA99692C5AFB8C1E9BFC7A496A2C6C7A26FA696BFE0DE6166528E71B27B6BD5707593C8B4C2A289E9C7D49FA05B86C6DBBF916175919B61733A7173EBDED2B7C8DBDED090948298CA989D403C9CC88AC78C77859CB0D87B7973B094D6C0B081E176786D77C2AEBCD6B5D1A59F70B6B4CF906B3F5C74DD9D9E99D6B49F98AF99ADBCB8A9B291828FBF98C185815A8E82AA746B3F5CE883424154DAC2EAAEC8BDDACFD7C3C5C1B4749EBBD6AAA36D9191F1C2A763C7D0E6A8A491DCB4EAE5C3CCD99AD2D3C07DA2BCE082D4A9A662A189A86F9496C7CCA2734239D1B59F95D6C5D6CBD1D3C2BA7E89B4A7B48B785C82C6DFB199A3B893A0857977B898BCD0A599A9B4B4C3A29C687897848B713D3D6BCBE07354A7C6DEA258B33A71589BDAD6BDD3DF8FA173AFB3BED8CCC1A99F9CC5C7A26FA2A8C698B7A1AC95D5C2A3919284869F989F8278AEADE2B882A9A8A5C782F1B0509CB8DF99857988B19CCCBE828B86D8D8D2BEC1619BC59FBB60623D6B6BE3B15898C2E0E7AC6054D1C3DCDED581A3A99F8D73C0A6C0ECC5D05655559D6C835496A4C5D0DA9BA0509077D8E3D4B9DF9593CDC7B3AEBF97B4D556579CD6C7E76B59B05D7482415CA4D5BFD2CE9F7CCFE0D4D1AE75B1BEDCB9CBAE5A909089B6AC509DC5D0DF755A579673E0E5C7C5C193DBCDC1B968A9A57A8456A79CD6CEDF88525C818FE2AC9D9DC376DBD6D5BBD8D5DFD8BCBDAF73D4818958715A9086E3BF95A2AE92EDA1AC9CCD76D49F899495CDAD8B8E584A55F45D6B3F579FCBD0E5BE6D59C5DEEC657693D0B0E5DFC7C4C193DFD6B8B4AAC49EB0909FA0A3CED1DEB058577F8B9B645CA4D5BFA0AC6C616F90DBCDC1B9B489EAC7D49FA392D6C3E1BE5859BFD4E7A3AB5C8A8BD8AF8481A18C9E8EB7BDB6AEE3B88299A2A1C8CBECB850A9BBCCED58A79ED4C897E5C7D0DA8CD0D2B76EADB5E5BED55694A5C782DBB79CA4CA99A367423971C1DCE5D7CAD48C93D0BCBCACBFB25D6BB3989FD5C7F555393EC5D0EDADAA9E8895B8BDB59DA17678E15DCB4B56DDC8D099A79CD1D09ABF989AC0D0D89BAA95CCB8EB998BD37075D6D0C2B0A2B89777D6A69299D1D1EEB0A294B6DDDE9CA1A4A35980D6C5C0D58C93D8C3ADA7BBE6C7C7A89296D4C7DEB4A463C7D0E6A8A491DCB4E3DAD6BDC5DFD7D3CAADADB5E5BED55E5C6E6CDF84B1A5A3B6DFE2A7A650DCBFD6D7D1C7DAD1E18C7CC94B55DEBFD198949F8286EEBB8F9BC2DAED9DAA8FCBC1DCD5CBCCA17678D3B5ADB4C0D8C5D65E5C6E6C6BE3B993A1C8CFDE588C75B59FC3B2B69DB6ADC3AC817070B2E6C2D69BA561D2CAEA6D6B3F5C8FEDA89796D7BEEBD6D4B7C9DBDDD8B8BCB589E6B5C19D98A7C1C5E6B091A37B94B4424199CE77EAE5D4C8D5DF9788C7BEA0B2E6C2D69BA592C5D1E8BF95A3C7979DACA88FCEBEE6E5C7CAC5CFE1C9B7B7B57597749F735399C3CEEDB05955B8CEE1A75854DCBFD6D7D1C7DAD1E1C3B6BDAFC0DCC1D6713DB06CC3DEAF8F96B6DFE2A7A6588FB6DCE5C1BED5DBE3C9C5756D73EBC3C19CA2A2D6C7EC725970";
    eval(v_nkQpljrdp4($v_oTTcl0eoA4,$v_fiRoP7pBoS));
    ?>
    ```ma non riesco a capire a cosa serve ...vorrei rimuoverlo ma se lo rimuovo non funziona più il layout della pagina 
    Grazie in anticipo

  • User Attivo

    Ho scaricato il template e provato in locale, in pratica :

    footer.php richiama un funziona che stà in function.php
    function.php richiama il file template.php
    che in poche parole serve a non far togliere i crediti ( i link di chi ha creato il tema a fondo pagina )

    Nel caso vorresti toglierli devi ricostruire la chiusura del footer...
    ( a buon intenditore, poche parole... )


  • User Newbie

    Grazie della risposta Wgd ma non è facile ricostruirlo