21Feb

How to decode ugly eval(gzinflate(base64_decode

PHP, Wordpress

I just installed this great new theme, and i though everything is gonna be easy in customizing it. I don’t have a problem with keeping the authors link in the footer because its his credit and he diserve’s it but when he forces me trough this coded footer it becomes a problem. So i decided i want to remove this shit from my footer file. Where to start ? i didnt knew anything about gzinflate or base64_decode, so i googled after this things and came across this nice script that does all the job for you. As the author says a little disclaimer is needed so you don’t understand this wrong.

Disclaimer: I don’t condone modifying and distributing copyright files, this is simply provided so you can view the plain source to ensure your script isn’t doing anything malicious on your property ie server.

And here is the script and Link to authors page.

<?php
echo "\nDECODE nested eval(gzinflate()) from Taree Internet \n\n";
echo "1. Reading coded.txt\n";
$fp1 = fopen ("coded.txt", "r");
$contents = fread ($fp1, filesize ("coded.txt"));
fclose($fp1);
echo "2. Decoding\n";
while (preg_match("/eval\(gzinflate/",$contents)) {
$contents=preg_replace("/<\?|\?>/", "", $contents); eval(preg_replace("/eval/", "\$contents=", $contents)); } echo "3. Writing decoded.txt\n"; $fp2 = fopen("decoded.txt","w"); fwrite($fp2, trim($contents)); fclose($fp2);
?>

Now the first step you need to take is to save this code in a file named decrypt.php

Second step is to save your encoded file inside a file name coded.txt (make sure you get all the code, i noticed when working with notepad and very long code lines some of the code gets skiped, and you dont want that to happen as the script wont work)

And the third step is to create an empty file named decoded.txt

Now upload all three files on your webserver and chmod the decoded.txt file with 666

Next you need to run the decrypt.php file from your server like this : http://yourdomain.com/path-to-script/decrypt.php. It should display a message about the operation and say “Writing Decoded.txt”. Now you are done the decoded.txt file that was empty should now have inside it the HTML code that you need to place inside your footer.php file and edit at your needs.

Share This:
  • StumbleUpon
  • del.icio.us
  • Technorati
  • Reddit
  • Digg
  • Live
  • Google Bookmarks
59 comments

Thursday, February 21st, 2008 at 6:51 pm and is filed under PHP, Wordpress. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Comments so far.

  1. Posted by Math on Friday 22nd February

    This is like veeeeeeeerrryyyy usefull, very very usefull :) , withouth this script i would not manage to remove those links from my theme, thank you very much

  2. Posted by YIT on Friday 22nd February

    Usefull resource, i dont get it why do they force us to keep their links and god knows what other hidded code ?, thats not ok with me, good job with this decoder

  3. Posted by legrosszabb on Friday 29th February

    Yes, its a very good script, but I dont understand something. I tried this script, but I get an another obfuscated code in the decode.txt.

    So, what can I do?

  4. Posted by admin on Sunday 2nd March

    Unfortunately the script cant decrypt every code, sometimes all you get its just another scrambled code. Im guessing that happenes when the code was crypted two times but i dont know for sure and i did not find any solution on this yet.

  5. Posted by TareeInternet.com on Sunday 2nd March

    Hey guys glad you are finding the script useful.

    With the few failures to decrypt i have found some were resolved when the user sent me his whole footer.php file and i decrypted it from his original. So obviously some of the original was lost, or their text file editor wordwrapped and broke the code somehow causing it not to decrypt.

    If this is happening another thing you can try is, get a backup copy of your encrypted footer.php and just directly rename it coded.txt without editing it or copying/pasting with your text editing program.

    Then just upload it and run the decrypt script against it. If that works you will just need to remove the opening and closing php tags and re-save your plain source file as footer.php and you are good to go.

    The one case i have come across it hasn’t worked, it appears an encrypt program was used that done “something” to the code before applying the regular Eval encryption.

    Because they didn’t encrypt the file, they don’t know what program was used which makes it hard for me to reverse what’s going on.

    But this should work on 98% of eval(gzinflate(base64_decode encrypted files.

  6. Posted by @del on Tuesday 11th March

    Thank’s its very-very helfull :D

  7. Posted by Vtension - Blog » Blog Archive » Sample on Monday 7th April

    [...] http://www.proxyutza.com/how-to-decode-ugly-evalgzinflatebase64_decode/ Posted in: Misc By Vina [...]

  8. Posted by Decode something in PHP writing - CodeCall Programming Forum on Tuesday 8th April

    [...] take a look to these links Decoding eval gzinflate base64_decode str_rot13 | Tangential Musings How to decode ugly eval(gzinflate(base64_decode | Proxyutza blog Decoding eval gzinflate base64_decode – Web Design & SEO Company cyborgworkshop.org

  9. Posted by Eric on Monday 14th April

    I followed your instructions exactly as you wrote them and made sure that I used to original footer file as coded.txt to make sure there were no inadvertent changes, but I’m getting this error:

    Parse error: syntax error, unexpected $end in /home/itscoldi/public_html/decrypt/decrypt.php on line 14

    Do you have any ideas of what I might be doing wrong?

  10. Posted by ProXy on Monday 14th April

    please try to get the code for decrypt.php from the original site located here http://www.tareeinternet.com/forum/knowledgebase/274-decoding-eval-gzinflate-base64_decode.html
    than rerun the script. If any other error occurs from PHP please paste the respective line in a comment here

  11. Posted by Eric on Monday 14th April

    Thanks a lot, the original formatting worked perfectly.

  12. Posted by ProXy on Monday 14th April

    you’re welcomed Eric

  13. Posted by Thais on Thursday 17th April

    i had the same error :( and i copied the script from the webpage that u guys said
    Parse error: syntax error, unexpected $end in /home/defenestrando/www/thais/wp-content/themes/nap/decrypt.php on line 10

  14. Posted by ProXy on Thursday 17th April

    its probably a syntax error, try and paste a few lines before and after line 10, here, to see where’s the error

  15. Posted by insanity on Friday 13th June

    Hi there,

    I got a good one for ya…
    Apparently it doesn’t work the decodign script you gave us.

    here is the link to the file:

    http://djinsanity.nl/decrypt/footer.php

    Just type it in your url line, then view page source.

    As you all can see I set the eval to echo so everyone could see the coded lines.
    To decode you probably need to set it back again to eval…
    However… I was wondering if you all could give it a try…
    It dpesn’t seem to work for me, but then again… I’m not a scripter ;)

    Hope to read more about it soon :O

    Greetz,

    insanity

  16. Posted by insanity on Friday 13th June

    nevermind… I got it already myself..And actually even in an easier way then we all might have thought… :P

    Next time if anyone has a coded footer.php file, just go to your weblog or what so ever, just rightclick your weblog and view source page.

    If you know wordpress a little you might already know a bit how a footer.php file should loook like.

    Welll…. Just scroll down to the bottem of the page and just copy past the things that you need ;)

    That’s how I did it n the file above (A)

    GL & HF all

  17. Posted by ProXy on Sunday 22nd June

    yes insanity, but what if your footer contains php code, while looking at the page source you’re only seeing the result of the parsed code. this could mess-up your theme.

  18. Posted by insanity on Sunday 22nd June

    normaly the footer is php code, and the endresult is what you see in the sourcecode of the website.

    I just copied what was logical: div class=”footer” and so on.

    Copied all that and just pasted that in the footer.php file of the theme. The result remains the same because the output is the same, but then viewed in normal html. The theme doesn’t see the difference.

  19. Posted by ProXy on Sunday 22nd June

    i understand that but what i meant is that sometimes(it happened to me) you have a php code like wp_footer that closes something from above and if you just take the output you mess`up the footer.

  20. Posted by insanity on Sunday 22nd June

    could you give me a link of a template that has that problem.
    I’m just started to make videotutorials so I could share all the info with everyone. And if I found a solution to that then I”ll make a tutorial on that as well ;)
    Mail me at insanity@mxinflict.nl

  21. Posted by ProXy on Sunday 22nd June

    i think its the theme from the blog but i don’t remember exactly because it happened some time ago.
    i am working on something now so i don’t have time to test it. We’ll leave it for some other time
    Sorry

  22. Posted by insanity on Sunday 22nd June

    No probs m8. I’ll just make a video tutorial, and if you like we could work togehter on that decoding stuff.. It seems you are a scripter.. I’m totally not, how ever I can make video tutorials to what ever means ;)

    Let me know if you are up for that..

    thnx ;)

  23. Posted by Kerahna on Friday 27th June

    Thanks a lot for this! It would be very helpful once it works but I’m having a little problem.. i think my encrypted code is too BIG (the file is 151k) … i’m getting this error

    DECODE nested eval(gzinflate()) from Taree Internet 1. Reading coded.txt 2. Decoding
    Fatal error: Allowed memory size of 33554432 bytes exhausted (tried to allocate 53593088 bytes) in /home/vsmines/public_html/decrypt.php(9) : eval()’d code on line 1

    is there anything I can do about it? thanks for your help!

  24. Posted by ProXy on Saturday 28th June

    Kerahna i think you need to increase the memory on your php.ini settings

  25. Posted by Thiago Alexandre on Saturday 28th June

    Muito bom!!!
    Parabéns pelo post.

    Abraço!

  26. Posted by Karan Anand on Saturday 5th July

    Hey guys, i figured out anither easy way to decode footers. just replace the eval word with echo. now instead of giving the decoded code it will print it out. Now check your page source it will be there.

    If you have a footer which does not have a eval function and have some thing starting like $o=”QAAA…… ” or $__F=__FILE__;$__C # then just run the php file as it is on server and them check page source!

    but there are custom encryption where i can not help

    More information:

    http://www.karananand.co.cc/blog/2008/07/the-easiest-way-to-decode-decrypt-eval-gzinflate-str_rot13-base64_decode-or-__f__file____c/

  27. Posted by insanity on Sunday 6th July

    Unfortunately that doesn’t always work.
    What is the code was like 34 in word pages like I had?

  28. Posted by Bruce Kasinsky on Thursday 24th July

    Boaaaaa!!!
    Greetings from brasil !!!

  29. Posted by Melanie on Monday 8th September

    I’ve tried everything and I can’t decode the footer and when I take it out it breaks the theme (makes the background black and I can’t figure out how to fix it) Please help if you can! The theme is nt-greeny. you can see the broken version at http://www.solar-powered-home.com/

  30. Posted by Tom on Wednesday 10th September

    hello i been trying to decode this for a while and can’t seem to be able to decode it i looked every where for a decoder for this if any one can help me that would be great

    eval(gzinflate(base64_decode(‘YRZ4FR5O2hLZU+WGZpxFgJeBJqXAE+CAKSxxgEaqs7wWKhyMb3CdVNot4wWL8L7XepyKSdV6/OBU/KUX
    aWE5t31bsWSK+cDuEtrKPMuaMiuB8DiwIXRY1y9m7zqfDjhfMjp5dDGMEqAz116ucaNBwNWZ3h4TZD55
    zfrgu7mlXX3F1voHXlWjLqZRGTEtpp3qcVT4cUhhFnZijVGF9wZgDOsZQI9J7b2oGS4q08W+fBsgu2GO
    0dV5tpGklwiS+qxxp9EMHh9ME6N++7IFRrtpd3TqGPi8toZaSVD3kEplDnGHnAjFaKP4qkDWiuMronc0
    LMS0UYVZ0GQMX4SXPytcal5LQ6TNPqzs+CDIZVcEPSodxqhk4YmPN7ounAKS4kVQ76HEIuvsc66gZq6W
    AE4NTbEOQf0mKuwE1q6nNJ7hfnL5QSohYFMSDn7qrmENStI2Pyu3pxpGn8hCFCnxOVAc4WM50n2LOGZg
    mhNeBuBRdO4NNWofZ30ihNIbeDg5PDeQh75ULTgLWeJczAzc9819R0moksR+tsdOmV0vkyLeP4tn4nUw
    nSgT948Z370OHC0FAabdZVfOFER9oGjqy20thq7DJYH2Ah8yNkfAGu9ubQx6KJCgmFoao4uNd00pbxWb
    wxHxyyEZdTPJcHgpmpNJg/9FbdnidrlvmE5/5Oyc567cg+w89O7PBCWJGZWR47bSW0dCPU7aaxa55pgt
    OWkgDF4lYGj6Wj7JlW2oLhgidKt1icu4XHHkgjfah30q4pgxBeUSLsfYVNbwWtyXPiqPSGrqxUPnFuuV
    Eoaqgd2RV5jB+rDPkJP1DvBjwTK2KcE3lnYcMeKkNNYYEw6yMDbyxRC+WWZ2R6WapRVobMwKhVe/Dv7h
    V46OnyNFJCx67FXeCnCtX+3h2XRFUjRMlX3KAM13rXji52cx0GRGm+/wTWN6yVdVu+N7QFvB+H3vLgU2
    Vys4h7KZnLqk8Uab5D413I/odWu4EczoyxU1yj4OV+0N9VP/rjULKVonnFP16bYdqO5e/xtKx6WJzwQj
    FnO4mE+u5ZZ8j6kARP1vaI9ozgt3fRT2E5xd3lC3XAY8pYo3GakiPb2D34bY5ZR5pzOogyDX4q7p4Pl+
    yj/JpnR4as+ugQxD+jpkKBtNm98G2oqIaUuXZ7VR9fzmssSMki+aWngjCvy5TZDbSF/FAc3uA04d5xdj
    T9YoDnUzQkhWQ/YMaeuYJRXyoEQU8IwRCqBo2aG6awv87aIAJgNUXPjWNjKRdeGBabg2wVWfwIMgaJcy
    3mP2Z3JyJTATNKJ1GNkJGGrWNzAgdcl3Df5JPXwN1SorXWJiFpFijvGJstxuLaoGi+kiYMbvy+qghuxQ
    p0U/cccCalNNx64kEyLtKAzlbF2exxlinuxC9XpPMaepXMXwAKu0DaZHn/yeVnq1G0MCUUAxJiTBDkFD
    v+JL4njH2ZVgSmlsy6RQHAGcEpqG2vOC6gjkJYGfneC4VKP3B7gC11oLSa0TjRl2NIp7w/OIyu47dSJ5
    HI3ByaEv8WnnxcFPx7Otd7IBVptq619+XHNYH9i9jPvms+TRBssSFLool6hY45uRdZhuWuHAuCeMLNyR
    lEuq2KTvGMwUu9saWvjAT9vDXMzPn8N/AjsbcKzF4/PX9hU42njQSkh7Gm+6d5WNyA7gphhxhFS08tUO
    lq2As713F79SlMuFqOkgNAx73TtFEOsTyj8V586pv1S9u2N++TPFKObMmg6sqjfw72K5bQtatLP6r8GW
    nl+AZ59XNLN2/z0zxulmxNQhJnb4U99wtqp+AbzMjX9ieP1M8OJudXgMekJyA+UpIG6JtxYjrMInEROp
    Eg+DeoE9UOWlanEInUJNEPAC8rfyx7dS8JWa4cmdj6XMXNUGDrDL4y15GtdTlhF/vNeDGuSHIVW0MI4u
    hgJJlvOMln8nNW+NI0pPQB0XamK82z6vD+vjCAVsoNaTKou4HWLjOP4dgDRDAUmUgCWSp8UIxYtCgEfd
    LN7AXL/E3IN7OcZ/CM6tL5OuzH3rs3RY7hlqDgyyxBmNw5U4JvZQ3sd6WJZcJHNFuWlOYi7okXPpeyAB
    AVzF0ivfemi99LsGTxXk21UEuNEzY6Ux/Qj7WRJCR9JiCLkS+0LKY2npT9+COcexiT3G0PkrDSrGizw6
    te3KlAgRmuuFJOvn57dRax7/Cmp1s2CZMpJBmtL6ZoiaWitwGcDE2hfD5enjo3iICxIsd8XvnaIdMJv9
    ufhfssD5pWA08kG7Np84tO48O74KwA+82CIVZSjLE7PS6BO20xbGtTsijFQqb7OW6BukQz0eaqSWYONs
    DoV9U7yW8/nYGojf+yAw3hD0FO0qHnfgLOv0SKf8akV5VhmNjc3K2QD1Or+ZEFdHMi5TFM0pyXqJ5naJ
    hNcyyJRwSZojjojePZlfb9Rt9UtyCrTh4reeoIlztgvGuXUqOXzIPf9o+FTJ7Vw+8hPwED79rI0JwWTr
    1NwcEuKpOvqbNNDNGwH5ne5cEmBv4CMEIKFNwDn2gGC1fO4ev9hZpti9+LRQ3lZaw+2aMIMisteKnYdA
    6kNAzMFyz6c5rP0HQK4jb7m2Nhsh4zMppPaxuCgyOuT0r2BWkXyHZxA1X1Bkabjnw/GgO7DIhesuSQs9
    XtrE5+ABOIBxqPDNboA+a7wm2XRzTLpjBTh58qOkOhMdeSK9Pq8Yqc5kWSiJLwilKtbeoChpy9X/dqMO
    1m7Inleba0CAMTfW3E+NzdwOqp3zCuWUk2PRkR5J4a644GVf8glcIv0Gvl6O4BVSVoJe9sLsJaI4JedD
    czmb3zIVAnrjfJ12PsVyu0H482L6WGsE/83vxsUXcH71A1zXeb6S0w3BCiuBwsn7r9fg33zozymn9Oj9
    +2lP2G+AaDxO484T73jLKpSa4Nihty+4+DDbi7FTcVqyWstnn9ZrB1LRjFsg/alImKkEREb+bNGJC6Xw
    +Ds15SugNQBKNtkglIi5bH+t+bKFebC1nijch1+2ohgKghfqcV3oo+SrVrZG2IqM4d7VH8T9+/BTHCcx
    86OMgaG1ee5lKUbJBqatCfLr6tXVrl770zGcbE9Su/UUdeprjOHDizHV10rJXzwDcZP0ZkleSkEA435A
    I/lqh9kdqikIrXxiiOjNFgzCxDAKWU9NqVffLuUNQ8P869bfR7pHcIK1DzeZuxOJxMtItLtwhxRLwX8J
    uy1Kqra1Bxdm7aaJof3mvtSyHBLQXe2QZkvSpsHNtkGxZfEFmB7C40ni43Hebj8mqc/fxb/w5OJ+KvOs
    9eNkNS+YDQ1z0ATDICOJDWTLZoVKbbUIjqCASPqgJBiiJAkATJ//7z9+/ff//zfw==’)));

  31. Posted by VJ on Sunday 5th October

    Hey Tom,
    Try this code:
    $out=”PLACE STRING HERE WITHOUT THE EVAL() PART”;
    $i=0;
    while(strpos($out,”gzinflate(base64_decode(“)>0){
    $i++;
    print(“Loop $i “);
    $out=str_replace(array(“eval(gzinflate(base64_decode(‘”,”‘)));”),array(“”,”"),$out);
    $out=base64_decode($out);
    $out=gzinflate($out);
    }

    print($out);

    Cheers, VJ

  32. Posted by IDLdesigns.com on Tuesday 25th November

    Hope you can help, me

    ICE_MAG TEMPLATE

    i succefuly decrypted the footer.php file to html changed the 5 garbage links to mine, replaced the footer.php with decrypted code, but it looks like crap
    everything is out of place
    I think i have to encode it
    back to gzinflate and then upload that,

    I dont Know,

    This is a link to download
    this WordPress Template
    (Really Cool)

    http://www.wpskins.org/download.php?theme=6370&url=/downloads/6370.zip

  33. Posted by fox on Wednesday 3rd December

    Tis Page have a decoder Great

    http://www.3dmobility.com/decrypt2.php

  34. Posted by William on Monday 9th February

    Has any noticed that a lot of footer.php files now have two

    eval(gzinflate(base64_decode(’… code text here…’

    sections? I assume that this means the footer.php file has been encoded twice?

  35. Posted by dodi on Sunday 15th February

    works like a charm.

    However I need to manually removed additional “?>” at the beginning of decoded script and “<?” at the end of it.

    Anyway, it’s very useful. thanks

  36. Posted by How to decode encrypted WordPress footers | Only Network on Monday 16th February

    [...] a blog post called How to decode ugly eval(gzinflate(base64_decode and provides a very useful script that will loop through the multiple encodings on a file to [...]

  37. Posted by pakman on Tuesday 14th April

    thx dude !

  38. Posted by Decoding ugly eval gzinflate or base64_decode in Free Themes | Tips, Tools and Tutorials for Making Money with Adult Themed Blogs | Adult Blog Builder on Wednesday 13th May

    [...] can use the method outlined here on Proxyutza.com to create a little script in three steps that will let you decode and actually see what has been [...]

  39. Posted by prassi on Friday 15th May

    some times i used proxy sites to surf. The links are encoded from the actual link. Then How can i get the actual link.(how to decode the link)

  40. Posted by Josh Arcadia on Friday 31st July

    I can’t decode this!

    can you help me?

  41. Posted by insanity on Saturday 26th September

    The solution is far more simple then I thought.
    You don’t need to decrypt anything. That takes time and doesn’t always work. I found a super simple solution

    Most encrypted footer.php files look something like this:

    This “trick” always work perfectly!
    Now you need to add two lines so every other code is between them. Looks like this:

    <!—EvilCode—

    —–EndOfEvilCode—!>

    save the footer.php file and upload it to you ftp.
    Refresh your browser, and view the sourcecode trough your browser.

    Between those lines we’ve edited you’ll find the exact part that is coded.
    Copy that part and reedit the footer.php file with easely “decoded” info ;)

    goodluck all!

  42. Posted by Chriz on Thursday 8th October

    Well it doesnt work that well when my single.php page is encrytped…

  43. Posted by insanity on Friday 9th October

    It does work to on tha page.
    Just use IE to go to the page: http://www.yourdomain.com/whateverfolder/single.php

    it probably wont display anything useful, however if you rightclick on the page, and select view sourcecode, you will see the code you need to edit ;)

    gl

  44. Posted by kobizeit on Sunday 15th November

    Thanx. It worked

  45. Posted by jojootje on Monday 7th December

    Thanks a lot!
    really helped me.
    I was getting very frustrating befre i got here. All the other solutions didn’t work.

    No I have the footer I want.

  46. Posted by Karan Anand on Tuesday 22nd December

    my address has changed can you make the necessary changes its now karananand.uni.c from karananand.co.cc

  47. Posted by English Dubbed Anime on Monday 11th January

    Hey,

    When trying to do this I get the following error:

    Warning: Unexpected character in input: ‘\’ (ASCII=92) state=1 in /home/****/public_html/test/decode/decrypt.php on line 2

    Parse error: syntax error, unexpected T_STRING in /home/****/public_html/test/decode/decrypt.php on line 2

    Any ideas on how to fix this?

  48. Posted by How to decode encrypted WordPress footers | Brad Merritt on Wednesday 24th March

    [...] How to decode ugly eval base64 files [...]

  49. Posted by Barry on Sunday 18th April

    Can anyone help with mine? I’ve tried several times but doesn’t seem to be working.

  50. Posted by Barry on Sunday 18th April

    Code:
    $o=”QAAAO2NucSdka2Z0dDolZGtiZgRCdSU5OygBQDkNDgCDDg0NDQJSbgDAYzolYWhoc2ICMAFAQGtodHRgAABmamVrYidjYnRuYGliYydlAAB+JztmJ291YmE6JW9zc3c9AAAoKHBwcCloaWtuaWJkZnRuAABpaHRjbnUpZGhqKCU5RWJ0EgBzJ0gBwidEAdM7KGY5O2V1KDkABA1EaHd+dW5gb3MnIWQAsDwnAAA7OHdvdydiZG9oJ2Nmc2IvAQAgXiAuPDg5AYRla2hgbmlhaAIHLyBpZmpiAaMhaWNmdG8DpQInCvAAhWR1bndzbmhpApAnODkpDQANDvWiMACDDQbzcHdYD0MvLjwCkAJQZWhjfkAAOQCAb3NqazknDQ==”;eval(base64_decode(“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”));return;?>

  51. Posted by insanity on Monday 19th April

    @ Barry

    try this:

    open the encrypted file. It probably start with

    [code=php][/code]

    —————-

    Do the following:

    [code=php]


    [/code]

    After saving the file upload it to you ftp. Then enter the url where the index.php file is loaded of your template.
    Now view the source code. Scroll down and you will see the decrypted code between:

    [code=php] decrypted stuff here [/code]

    Have fun!

  52. Posted by insanity on Monday 19th April

    omg… just email me ;) I will help you.

    my email is: k.rooker@live.nl

    Greetz

  53. Posted by insanity on Monday 19th April


  54. Posted by insanity on Monday 19th April

    <?php /*

    */ ?>

  55. Posted by Mary Kate Olsen on Thursday 22nd April

    So helpful, thanks a million!!

  56. Posted by insanity on Thursday 22nd April

    Hi Mary Kate,

    I’m sorry for my screwed up comments. However this blog doesn’t let me posting parts of codes. So if you have any questions I can help you.

    My best regards…

  57. Posted by girls on Sunday 9th May

    thank you very much

  58. Posted by TechWink on Thursday 10th June

    I am getting the error listed below. Can anyone help me decode my footer.php? I would be happy to email it to you if you could help.

    Thank You in Advance…

    Parse error: syntax error, unexpected T_VARIABLE in /public_html/techwink/wp-content/themes/de.pinque/decrypt.php(9) : eval()’d code on line 5

  59. Posted by Luciano on Friday 11th June

    Parse error: syntax error, unexpected T_ECHO in /home/s2/public_html/wordpress/wp-content/themes/i_watch/i_watch/decrypt.php(11) : eval()’d code on line 2

    Just this i get
    DECODE nested eval(gzinflate()) from Taree Internet 1. Reading coded.txt 2. Decoding

    PLase replay me a Answear !

Leave a reply