<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Proxyutza blog &#187; base64_decode</title>
	<atom:link href="http://www.proxyutza.com/tag/base64_decode/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.proxyutza.com</link>
	<description>About all sorth of things: PHP, Hacks, Scripts, Servers, Linux, Technology, News, Trends</description>
	<lastBuildDate>Wed, 26 May 2010 10:37:11 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Decoding with the script from earlier post failed on some code</title>
		<link>http://www.proxyutza.com/decoding-with-the-script-from-earlier-post-failed-on-some-code/</link>
		<comments>http://www.proxyutza.com/decoding-with-the-script-from-earlier-post-failed-on-some-code/#comments</comments>
		<pubDate>Sat, 23 Feb 2008 14:02:15 +0000</pubDate>
		<dc:creator>ProXy</dc:creator>
				<category><![CDATA[Hacks]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[Wordpress]]></category>
		<category><![CDATA[base64_decode]]></category>
		<category><![CDATA[decode]]></category>
		<category><![CDATA[eval]]></category>
		<category><![CDATA[gzinflate]]></category>
		<category><![CDATA[theme]]></category>

		<guid isPermaLink="false">http://www.proxyutza.com/2008/02/23/decoding-with-the-script-from-earlier-post-failed-on-some-code/</guid>
		<description><![CDATA[Today i tried to decode another pice of ugly code with &#8220;eval(gzinflate(base64_decode&#8221; and i was surprised to find that the script couldnt decode this piece. As usually the code is from a themes footer in which i dont want to keep theep the outgoing reffers. Here is the code: $_F=__FILE__;$_X='Pz48ZDR2IDRkPSJmMjJ0NXIiPg0KPGM1bnQ1cj48Zj JudCBzNHo1PSAiNiI+RDRzdHI0YjN0NWQgYnkgMW4gPDEgaHI1Zj0iaHR0cD ovL3d3dy5raDFsNGRzbDRmNS5jMm0iIHQxcmc1dD1uNXc+SW50NXJuNXQ gRW50cjVwcjVuNTNyPC8xPiB8ICBTcDJuczJyNWQgYnkgMSA8MSBocjVmP SJodHRwOi8vd3d3LjJmZmI1MXQ0bmsuYzJtIiB0MXJnNXQ9bjV3PlQxdHQyM jwvMT4gczR0NTwvYzVudDVyPg0KCTwvZDR2Pg0KDQo8L2Q0dj4NCg0KDQ [...]]]></description>
			<content:encoded><![CDATA[<p>Today i tried to decode another pice of ugly code with &#8220;eval(gzinflate(base64_decode&#8221; and i was surprised to find that the script couldnt decode this piece. As usually the code is from a themes footer in which i dont want to keep theep the outgoing reffers.</p>
<p>Here is the code:<br />
<code><br />
$_F=__FILE__;$_X='Pz48ZDR2IDRkPSJmMjJ0NXIiPg0KPGM1bnQ1cj48Zj<br />
JudCBzNHo1PSAiNiI+RDRzdHI0YjN0NWQgYnkgMW4gPDEgaHI1Zj0iaHR0cD<br />
ovL3d3dy5raDFsNGRzbDRmNS5jMm0iIHQxcmc1dD1uNXc+SW50NXJuNXQ<br />
gRW50cjVwcjVuNTNyPC8xPiB8ICBTcDJuczJyNWQgYnkgMSA8MSBocjVmP<br />
SJodHRwOi8vd3d3LjJmZmI1MXQ0bmsuYzJtIiB0MXJnNXQ9bjV3PlQxdHQyM<br />
jwvMT4gczR0NTwvYzVudDVyPg0KCTwvZDR2Pg0KDQo8L2Q0dj4NCg0KDQ<br />
o8P3BocCAvKiAiSjNzdCB3aDF0IGQyIHkyMyB0aDRuayB5MjMncjUgZDI0bm<br />
cgRDF2NT8iICovID8+DQoNCgkJPD9waHAgd3BfZjIydDVyKCk7ID8+DQo8L2<br />
IyZHk+DQo8L2h0bWw+DQo=';eval(base64_decode('JF9YPWJhc2U2NF9k<br />
ZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCcxMjM0NTZhb3VpZScsJ2FvdW<br />
llMTIzNDU2Jyk7JF9SPWVyZWdfcmVwbGFjZSgnX19GSUxFX18nLCInIi4kX0<br />
YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRfWD0wOw=='));<br />
</code></p>
<p>For the moment i&#8217;m stuck with the code.. and trying to find a solution.. I will give an update if i succeed in decoding it.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.proxyutza.com/decoding-with-the-script-from-earlier-post-failed-on-some-code/feed/</wfw:commentRss>
		<slash:comments>7</slash:comments>
		</item>
		<item>
		<title>How to decode ugly eval(gzinflate(base64_decode</title>
		<link>http://www.proxyutza.com/how-to-decode-ugly-evalgzinflatebase64_decode/</link>
		<comments>http://www.proxyutza.com/how-to-decode-ugly-evalgzinflatebase64_decode/#comments</comments>
		<pubDate>Thu, 21 Feb 2008 16:51:42 +0000</pubDate>
		<dc:creator>ProXy</dc:creator>
				<category><![CDATA[PHP]]></category>
		<category><![CDATA[Wordpress]]></category>
		<category><![CDATA[base64_decode]]></category>
		<category><![CDATA[chmod]]></category>
		<category><![CDATA[eval]]></category>
		<category><![CDATA[gzinflate]]></category>
		<category><![CDATA[HTML]]></category>
		<category><![CDATA[PHP. script]]></category>
		<category><![CDATA[theme]]></category>

		<guid isPermaLink="false">http://www.proxyutza.com/2008/02/21/how-to-decode-ugly-evalgzinflatebase64_decode/</guid>
		<description><![CDATA[I just installed this great new theme, and i though everything is gonna be easy in customizing it. I don&#8217;t have a problem with keeping the authors link in the footer because its his credit and he diserve&#8217;s it but when he forces me trough this coded footer it becomes a problem. So i decided [...]]]></description>
			<content:encoded><![CDATA[<p>I just installed this great new theme, and i though everything is gonna be easy in customizing it. I don&#8217;t have a problem with keeping the authors link in the footer because its his credit and he diserve&#8217;s it but when he forces me trough this coded footer it becomes a problem. So i decided i want to remove this shit from my footer file. Where to start ? i didnt knew anything about gzinflate or base64_decode, so i googled after this things and came across this nice script that does all the job for you. As the author says a little disclaimer is needed so you don&#8217;t understand this wrong.</p>
<p>Disclaimer: I don&#8217;t condone modifying and distributing copyright files, this is simply provided so you can view the plain source to ensure your script isn&#8217;t doing anything malicious on your property ie server.</p>
<p>And here is the script and <a href="http://www.tareeinternet.com/forum/knowledgebase/274-decoding-eval-gzinflate-base64_decode.html" title="decoding">Link to authors page</a>.</p>
<blockquote><p><code>&lt;?php</code><br />
<code>echo "\nDECODE nested eval(gzinflate()) from Taree Internet <www.tareeinternet.com>\n\n";<br />
echo "1. Reading coded.txt\n";<br />
$fp1 = fopen ("coded.txt", "r");<br />
$contents = fread ($fp1, filesize ("coded.txt"));<br />
fclose($fp1);<br />
echo "2. Decoding\n";<br />
while (preg_match("/eval\(gzinflate/",$contents)) {<br />
$contents=preg_replace("/&lt;\?|\?&gt;/", "", $contents); eval(preg_replace("/eval/", "\$contents=", $contents)); } echo "3. Writing decoded.txt\n"; $fp2 = fopen("decoded.txt","w"); fwrite($fp2, trim($contents)); fclose($fp2);<br />
?&gt;</www.tareeinternet.com></code></p></blockquote>
<p>Now the first step you need to take is to save this code in a file named <strong>decrypt.php</strong></p>
<p>Second step is to save your encoded file inside a file name <strong>coded.txt</strong> (make sure you get all the code, i noticed when working with notepad and very long code lines some of the code gets skiped, and you dont want that to happen as the script wont work)</p>
<p>And the third step is to create an empty file named <strong>decoded.txt </strong></p>
<p>Now upload all three files on your webserver and chmod the <strong>decoded.txt</strong> file with 666</p>
<p>Next you need to run the <strong>decrypt.php</strong> file  from your server like this : http://yourdomain.com/path-to-script/decrypt.php. It should display a message about the operation and say &#8220;Writing Decoded.txt&#8221;. Now you are done the <strong>decoded.txt</strong> file that was empty should now have inside it the HTML code that you need to place inside your footer.php file and edit at your needs.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.proxyutza.com/how-to-decode-ugly-evalgzinflatebase64_decode/feed/</wfw:commentRss>
		<slash:comments>59</slash:comments>
		</item>
	</channel>
</rss>
