Encrypted Wordpress Themes
Saturday, January 10th, 2009I was checking out a Wordpress template for a client who wanted to use it for one of their sites. When I came to the footer.php file, I noticed that the entire file consisted of a block of text in the following format:
eval(gzinflate(str_rot13(base64_decode('FZrHEo...'))));
I suppose that template authors do this to protect the footer ‘Designed by’ references to their own site, which is fair enough. However, as would generally be the case, I wanted to see the unencrypted PHP code to ensure that nothing malicious was happening within it. Also, in this case, a significant portion of design code was contained within this encrypted code, and I wanted to modify the design a bit.
Decryption code for this type of stuff is common, and a google search will give you ample results.
One great online decoder I found is here: http://josh.thespiffylife.com/decrypt.php
