decoding - Decode a wordpress theme -

-

possible duplicate:
php decode starting $ooo000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63

this wordpress theme can big 10 on evil scale. functions.php file encoded can't rid of footer link. prevent improve theme , that's shame.

so, can decode ? tried online decoders, can't right. lot !

<?php /*  */$ooo000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$ooo0000o0=$ooo000000{4}.$ooo000000{9}.$ooo000000{3}.$ooo000000{5};$ooo0000o0.=$ooo000000{2}.$ooo000000{10}.$ooo000000{13}.$ooo000000{16};$ooo0000o0.=$ooo0000o0{3}.$ooo000000{11}.$ooo000000{12}.$ooo0000o0{7}.$ooo000000{5};$ooo000o00=$ooo000000{0}.$ooo000000{12}.$ooo000000{7}.$ooo000000{5}.$ooo000000{15};$o0o000o00=$ooo000000{0}.$ooo000000{1}.$ooo000000{5}.$ooo000000{14};$o0o000o0o=$o0o000o00.$ooo000000{11};$o0o000o00=$o0o000o00.$ooo000000{3};$o0o00oo00=$ooo000000{0}.$ooo000000{8}.$ooo000000{5}.$ooo000000{9}.$ooo000000{16};$ooo00000o=$ooo000000{3}.$ooo000000{14}.$ooo000000{8}.$ooo000000{14}.$ooo000000{8};$ooo0o0o00=__file__;$oo00o0000=0x908;eval($ooo0000o0('je8wmdbpme8wmd0kt09pmdawtzawkcrpt08wtzbpmdasj3jijyk7je8wtzawt08wmcgktzawme8wtzawldb4ndgxktskt08wme8wme8wpsrpt08wmdawtzaoje9ptzawmdawtygktzbpmdbptzawkcrpmdawtzbpmdasmhgxn2mplcdzme1pzzrjbgrimxvtrutxl1lrb3hiqlptohlgmkphumpqtduzcjlbeitlqzdvr3zocelubjz0tmzwavhed2txpscsj0fcq0rfrkdisuplte1ot1brulnuvvzxwflaywjjzgvmz2hpamtsbw5vchfyc3r1dnd4exowmtizndu2nzg5ky8nksk7zxzhbcgkt08wme8wme8wkts='));return;?>f]pdojwhgwqmo0qmo0qmo6tjlhr29bhfc458qjaz6wcqxp4z6daumdadlf3onwqmgdhotshuldadlh3onwqmoshmgdh1myqondhmoshmgdzhgdhotshondhmmj3otshmgdhotshumyqotshotshmos+umjtmg6q8ty5fcydmzbuyxupu6ryfnpl/r+oklrcm3+px9+/ooxt25r0alur/tjbyn8z2grxf58no98bybpgjtuzqq27hn4m/ny4y3jdqx+uog6ko60yxrexbb8zb4rysbh58cb98tp+y9u7fbvv2l4i2ny6jajfazzhmodteoxtetjv1ida1q3+kt85fcwt8qj3otshmgdhotsh1ourj9471myqotshotshots+kh==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

examine line:

$ooo000000 = urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');

decode here

$ooo000000 = 'fg6sbehpra4co_tnd';

then take next line:

$ooo0000o0 = $ooo000000{4}.$ooo000000{9}.$ooo000000{3}.$ooo000000{5};

which says take character 4, 9, 3, 5 string (index starting 0), get...

$ooo0000o0 = 'base';

now try rest yourself.

start make code little more readable:

<?php   $ooo000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');  $ooo0000o0=$ooo000000{4}.$ooo000000{9}.$ooo000000{3}.$ooo000000{5};  $ooo0000o0.=$ooo000000{2}.$ooo000000{10}.$ooo000000{13}.$ooo000000{16};  $ooo0000o0.=$ooo0000o0{3}.$ooo000000{11}.$ooo000000{12}.$ooo0000o0{7}.$ooo000000{5};  $ooo000o00=$ooo000000{0}.$ooo000000{12}.$ooo000000{7}.$ooo000000{5}.$ooo000000{15};  $o0o000o00=$ooo000000{0}.$ooo000000{1}.$ooo000000{5}.$ooo000000{14};  $o0o000o0o=$o0o000o00.$ooo000000{11};  $o0o000o00=$o0o000o00.$ooo000000{3};  $o0o00oo00=$ooo000000{0}.$ooo000000{8}.$ooo000000{5}.$ooo000000{9}.$ooo000000{16};  $ooo00000o=$ooo000000{3}.$ooo000000{14}.$ooo000000{8}.$ooo000000{14}.$ooo000000{8};  $ooo0o0o00=__file__;  $oo00o0000=0x908;  eval($ooo0000o0('je8wmdbpme8wmd0kt09pmdawtzawkcrpt08wtzbpmdasj3jijyk7je8wtzawt08wmcgktzawme8wtzawldb4ndgxktskt08wme8wme8wpsrpt08wmdawtzaoje9ptzawmdawtygktzbpmdbptzawkcrpmdawtzbpmdasmhgxn2mplcdzme1pzzrjbgrimxvtrutxl1lrb3hiqlptohlgmkphumpqtduzcjlbeitlqzdvr3zocelubjz0tmzwavhed2txpscsj0fcq0rfrkdisuplte1ot1brulnuvvzxwflaywjjzgvmz2hpamtsbw5vchfyc3r1dnd4exowmtizndu2nzg5ky8nksk7zxzhbcgkt08wme8wme8wkts='));  return;  ?>  f]pdojwhgwqmo0qmo0qmo6tjlhr29bhfc458qjaz6wcqxp4z6daumdadlf3onwqmgdhotshuldadlh3onwqmoshmgdh1myqondhmoshmgdzhgdhotshondhmmj3otshmgdhotshumyqotshotshmos+umjtmg6q8ty5fcydmzbuyxupu6ryfnpl/r+oklrcm3+px9+/ooxt25r0alur/tjbyn8z2grxf58no98bybpgjtuzqq27hn4m/ny4y3jdqx+uog6ko60yxrexbb8zb4rysbh58cb98tp+y9u7fbvv2l4i2ny6jajfazzhmodteoxtetjv1ida1q3+kt85fcwt8qj3otshmgdhotsh1ourj9471myqotshotshots+kh==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

then change eval echo eval. think should @ least started.


Comments

Post a Comment

Popular posts from this blog

linux - Mailx and Gmail nss config dir -

-
i trying send mail linux command line using mailx command. can send local domain no problem want set mail send gmail account receive mail sent gmail account. after configuring mail.rc so: account gmail { set smtp=smtps://smtp.gmail.com:587 set smtp-auth=login set smtp-auth-user=username@gmail.com set smtp-auth-password=password set ssl-verify=ignore } i error: resolving host smtp.gmail.com . . . done. connecting 74.125.25.109 . . . connected. missing "nss-config-dir" variable. "/home/username/dead.letter" 11/354 . . . message not sent. after looking "nss-config-dir" here , located certn.db , keyn.db files , added mail.rc so: account gmail { set smtp=smtps://smtp.gmail.com:587 set smtp-auth=login set smtp-auth-user=username@gmail.com set smtp-auth-password=password set ssl-verify=ignore set nss-config-dir=/home/user/.mozilla/firefox/location.default } now when try send mail using command: echo "sent gmail account" | mailx -v -a
Read more

c# - Is it possible to remove an existing registration from Autofac container builder? -

-
something along lines: builder.registertype<mytype>().as<itype>(); builder.registertype<mytype2>().as<itype>(); builder.deregistertype<mytype>().as<itype>() var container = builder.build(); var types = container.resolve<ienumerable<itype>>(); assert.istrue(types.count == 1); assert.istrue(types[0].gettype == typeof(mytype2)); scenario: go through bunch of assemblies , go register types want make sure have 1 implementation of given type. need before create container. track on own nice if autofac me bit. this cannot done directly using containerbuilder , unless start on new one. mind you, having first built container should able construct new container filtering away unwanted types , reusing registrations first container. this: ... var container = builder.build(); builder = new containerbuilder(); var components = container.componentregistry.registrations .where(cr => cr.activator.limittype != typ
Read more

php - Mysql PK and FK char(36) vs int(10) -

-
i have read mysql can handle indexes , searches better if tables keys integers rather char(36) uuid's. is worth converting int(10)? note: use 1 server , have have plans use multiple databases concurrently therefore removing 1 of big reasons using uuid. our tables innodb if makes difference. thanks in advance. usually rdbms can handle integer keys pk more efficient, other datatypes. reason how build index column, yes: long dont require string (or other typed) keys, should use integers. however: char(36) , int(10) far away being equal, because int(10) much smaller, char(36). dont know, if require many different keys, should keep in mind. update, complete last paragraph: int(10) 32-bit, char(36) 36 - ^byte^ (= 288-bit). not mean, int consumes less space, means, char(36) has 4 times more different keys.
Read more