Bu kodu nasıl çözerim?

18-03-2009, 02:51:19

Üyeliği durduruldu

Arkadaşlar wordpress temamda foootterda bu kod var adam benden backlink bekliyo nası çözerim

<?php    if (!function_exists("T7FC56270E7A70FA81A5935B72EACBE29"))  {   function T7FC56270E7A70FA81A5935B72EACBE29($TF186217753C37B9B9F958D906208506E)   {    $TF186217753C37B9B9F958D906208506E = base64_decode($TF186217753C37B9B9F958D906208506E);    $T7FC56270E7A70FA81A5935B72EACBE29 = 0;    $T9D5ED678FE57BCCA610140957AFAB571 = 0;    $T0D61F8370CAD1D412F80B84D143E1257 = 0;    $TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[1]) << 8) + ord($TF186217753C37B9B9F958D906208506E[2]);    $T3A3EA00CFC35332CEDF6E5E9A32E94DA = 3;    $T800618943025315F869E4E1F09471012 = 0;    $TDFCF28D0734569A6A693BC8194DE62BF = 16;    $TC1D9F50F86825A1A2302EC2449C17196 = "";    $TDD7536794B63BF90ECCFD37F9B147D7F = strlen($TF186217753C37B9B9F958D906208506E);    $TFF44570ACA8241914870AFBC310CDB85 = __FILE__;    $TFF44570ACA8241914870AFBC310CDB85 = file_get_contents($TFF44570ACA8241914870AFBC310CDB85);    $TA5F3C6A11B03839D46AF9FB43C97C188 = 0;    preg_match(base64_decode("LyhwcmludHxzcHJpbnR8ZWNobykv"), $TFF44570ACA8241914870AFBC310CDB85, $TA5F3C6A11B03839D46AF9FB43C97C188);    for (;$T3A3EA00CFC35332CEDF6E5E9A32E94DA<$TDD7536794B63BF90ECCFD37F9B147D7F;)    {     if (count($TA5F3C6A11B03839D46AF9FB43C97C188)) exit;     if ($TDFCF28D0734569A6A693BC8194DE62BF == 0)     {      $TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 8);      $TF623E75AF30E62BBD73D6DF5B50BB7B5 += ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]);      $TDFCF28D0734569A6A693BC8194DE62BF = 16;     }     if ($TF623E75AF30E62BBD73D6DF5B50BB7B5 & 0x8000)     {      $T7FC56270E7A70FA81A5935B72EACBE29 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 4);      $T7FC56270E7A70FA81A5935B72EACBE29 += (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA]) >> 4);      if ($T7FC56270E7A70FA81A5935B72EACBE29)      {       $T9D5ED678FE57BCCA610140957AFAB571 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) & 0x0F) + 3;       for ($T0D61F8370CAD1D412F80B84D143E1257 = 0; $T0D61F8370CAD1D412F80B84D143E1257 < $T9D5ED678FE57BCCA610140957AFAB571; $T0D61F8370CAD1D412F80B84D143E1257++)        $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012+$T0D61F8370CAD1D412F80B84D143E1257] = $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012-$T7FC56270E7A70FA81A5935B72EACBE29+$T0D61F8370CAD1D412F80B84D143E1257];       $T800618943025315F869E4E1F09471012 += $T9D5ED678FE57BCCA610140957AFAB571;      }      else      {       $T9D5ED678FE57BCCA610140957AFAB571 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 8);       $T9D5ED678FE57BCCA610140957AFAB571 += ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) + 16;       for ($T0D61F8370CAD1D412F80B84D143E1257 = 0; $T0D61F8370CAD1D412F80B84D143E1257 < $T9D5ED678FE57BCCA610140957AFAB571; $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012+$T0D61F8370CAD1D412F80B84D143E1257++] = $TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA]);       $T3A3EA00CFC35332CEDF6E5E9A32E94DA++; $T800618943025315F869E4E1F09471012 += $T9D5ED678FE57BCCA610140957AFAB571;      }     }     else $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012++] = $TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++];     $TF623E75AF30E62BBD73D6DF5B50BB7B5 <<= 1;     $TDFCF28D0734569A6A693BC8194DE62BF--;     if ($T3A3EA00CFC35332CEDF6E5E9A32E94DA == $TDD7536794B63BF90ECCFD37F9B147D7F)     {      $TFF44570ACA8241914870AFBC310CDB85 = implode("", $TC1D9F50F86825A1A2302EC2449C17196);      $TFF44570ACA8241914870AFBC310CDB85 = "?".">".$TFF44570ACA8241914870AFBC310CDB85."<"."?";      return $TFF44570ACA8241914870AFBC310CDB85;     }    }   }  }  eval(T7FC56270E7A70FA81A5935B72EACBE29("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"));  ?>

18-03-2009, 02:55:24

#2

dextroit

Konuyu yanlış yere açmışsınız moderatörlere bildirin taşısınlar.

18-03-2009, 03:03:57

#3

~~Mortimer~~

Üyeliği durduruldu

Konunun yeri doğru, ingilizcen varsa How To Remove Encrypted Footer From Wordpress Theme? WordPress KnowledgeBase | BestWPThemez.Com
Dosyayı eklersen gerekli işlemleri yapman konusunda yardımcı olabilirim.

18-03-2009, 03:06:35

#4

~~Societa~~

Üyeliği durduruldu

todozamax adlı üyeden alıntı: mesajı görüntüle

Arkadaşlar wordpress temamda foootterda bu kod var adam benden backlink bekliyo nası çözerim

<?php    if (!function_exists("T7FC56270E7A70FA81A5935B72EACBE29"))  {   function T7FC56270E7A70FA81A5935B72EACBE29($TF186217753C37B9B9F958D906208506E)   {    $TF186217753C37B9B9F958D906208506E = base64_decode($TF186217753C37B9B9F958D906208506E);    $T7FC56270E7A70FA81A5935B72EACBE29 = 0;    $T9D5ED678FE57BCCA610140957AFAB571 = 0;    $T0D61F8370CAD1D412F80B84D143E1257 = 0;    $TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[1]) << 8) + ord($TF186217753C37B9B9F958D906208506E[2]);    $T3A3EA00CFC35332CEDF6E5E9A32E94DA = 3;    $T800618943025315F869E4E1F09471012 = 0;    $TDFCF28D0734569A6A693BC8194DE62BF = 16;    $TC1D9F50F86825A1A2302EC2449C17196 = "";    $TDD7536794B63BF90ECCFD37F9B147D7F = strlen($TF186217753C37B9B9F958D906208506E);    $TFF44570ACA8241914870AFBC310CDB85 = __FILE__;    $TFF44570ACA8241914870AFBC310CDB85 = file_get_contents($TFF44570ACA8241914870AFBC310CDB85);    $TA5F3C6A11B03839D46AF9FB43C97C188 = 0;    preg_match(base64_decode("LyhwcmludHxzcHJpbnR8ZWNobykv"), $TFF44570ACA8241914870AFBC310CDB85, $TA5F3C6A11B03839D46AF9FB43C97C188);    for (;$T3A3EA00CFC35332CEDF6E5E9A32E94DA<$TDD7536794B63BF90ECCFD37F9B147D7F;)    {     if (count($TA5F3C6A11B03839D46AF9FB43C97C188)) exit;     if ($TDFCF28D0734569A6A693BC8194DE62BF == 0)     {      $TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 8);      $TF623E75AF30E62BBD73D6DF5B50BB7B5 += ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]);      $TDFCF28D0734569A6A693BC8194DE62BF = 16;     }     if ($TF623E75AF30E62BBD73D6DF5B50BB7B5 & 0x8000)     {      $T7FC56270E7A70FA81A5935B72EACBE29 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 4);      $T7FC56270E7A70FA81A5935B72EACBE29 += (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA]) >> 4);      if ($T7FC56270E7A70FA81A5935B72EACBE29)      {       $T9D5ED678FE57BCCA610140957AFAB571 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) & 0x0F) + 3;       for ($T0D61F8370CAD1D412F80B84D143E1257 = 0; $T0D61F8370CAD1D412F80B84D143E1257 < $T9D5ED678FE57BCCA610140957AFAB571; $T0D61F8370CAD1D412F80B84D143E1257++)        $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012+$T0D61F8370CAD1D412F80B84D143E1257] = $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012-$T7FC56270E7A70FA81A5935B72EACBE29+$T0D61F8370CAD1D412F80B84D143E1257];       $T800618943025315F869E4E1F09471012 += $T9D5ED678FE57BCCA610140957AFAB571;      }      else      {       $T9D5ED678FE57BCCA610140957AFAB571 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 8);       $T9D5ED678FE57BCCA610140957AFAB571 += ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) + 16;       for ($T0D61F8370CAD1D412F80B84D143E1257 = 0; $T0D61F8370CAD1D412F80B84D143E1257 < $T9D5ED678FE57BCCA610140957AFAB571; $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012+$T0D61F8370CAD1D412F80B84D143E1257++] = $TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA]);       $T3A3EA00CFC35332CEDF6E5E9A32E94DA++; $T800618943025315F869E4E1F09471012 += $T9D5ED678FE57BCCA610140957AFAB571;      }     }     else $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012++] = $TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++];     $TF623E75AF30E62BBD73D6DF5B50BB7B5 <<= 1;     $TDFCF28D0734569A6A693BC8194DE62BF--;     if ($T3A3EA00CFC35332CEDF6E5E9A32E94DA == $TDD7536794B63BF90ECCFD37F9B147D7F)     {      $TFF44570ACA8241914870AFBC310CDB85 = implode("", $TC1D9F50F86825A1A2302EC2449C17196);      $TFF44570ACA8241914870AFBC310CDB85 = "?".">".$TFF44570ACA8241914870AFBC310CDB85."<"."?";      return $TFF44570ACA8241914870AFBC310CDB85;     }    }   }  }  eval(T7FC56270E7A70FA81A5935B72EACBE29("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"));  ?>

temanın asıl yapanı yada türkçeleştireni ise beklemesi çok normal o kadar emek veriyolar

18-03-2009, 03:07:05

#5

Cagonni

Mortimer adlı üyeden alıntı: mesajı görüntüle

Konunun yeri doğru, ingilizcen varsa How To Remove Encrypted Footer From Wordpress Theme? WordPress KnowledgeBase | BestWPThemez.Com
Dosyayı eklersen gerekli işlemleri yapman konusunda yardımcı olabilirim.

burada kaynak kodundan alınmasını anlatmış.Peki kaynak kodunda görünmeyen php değişkenler ne olacak?

18-03-2009, 03:11:24

#6

~~Mortimer~~

Üyeliği durduruldu

Cagonni adlı üyeden alıntı: mesajı görüntüle

burada kaynak kodundan alınmasını anlatmış.Peki kaynak kodunda görünmeyen php değişkenler ne olacak?

Footerde çok fazla php değişkeni yoktur, diğer dosyalara görede mevcut değişkenler kolaylıkla tahmin edilip konulabilir. Açıkçası başka bir siteye bu şekilde link vermek yerine footerdeki php değişkenlerden vazgeçilebilir.

18-03-2009, 03:12:41

#7

Tias

neden istiyorsun böyle bi'şeyi?

18-03-2009, 03:14:40

#8

Cagonni

Mortimer adlı üyeden alıntı: mesajı görüntüle

Footerde çok fazla php değişkeni yoktur, diğer dosyalara görede mevcut değişkenler kolaylıkla tahmin edilip konulabilir. Açıkçası başka bir siteye bu şekilde link vermek yerine footerdeki php değişkenlerden vazgeçilebilir.

yani bu linki burdan kaldırmak zaten başlı başına emeğe saygısızlık ama şuanda çözülemeyen bir kodlama yok.

base64, sourceguardian, zend5, ioncube hepsi çözülüyor.Neden vazgeçeyim php değişkenlerinden değil mi?

18-03-2009, 03:18:05

#9

seemsiyah

Tias adlı üyeden alıntı: mesajı görüntüle

neden istiyorsun böyle bi'şeyi?

Adama bi backlink vermeyi çok görmüş, o yüzden hocam