Need Some Help in Removing Credit Links

L

leontran

Newbie
Joined
Aug 16, 2012
Messages
25
Reaction score
8
Hello,

Can some one help me in removing theme credit links on my site? I tried to do it but when ever i remove the links my site will crash and i have to add the links again to make site work.

here is the encoded script in Function.php

PHP: 
// WARNING: THE THEME WILL DEACTIVATE IF BELOW CODE ARE REMOVED //

eval(base64_decode('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'));?>
Im still a noob in php, so any help in this regard is very much appreciated.

Thanks and Regards,
 
Advertise on BHW
It decodes to this:
Have fun!

Code: 
$thetheme = 'Pinkster';
$theerrmessage = "<div style=\"font-size:13px;line-height:19px;\"><a href='" . admin_url() . "'>« Back To Admin Dashboard</a><br />" . "<b>Oppss! Looks like you have removed or changed the theme credit links. Well, we did put a <span style=\"color:#CC3300\">WARNING SIGN</span> there. The theme is now deactivated.</b></div><br /><div style=\"font-size:19px; padding-top:20px;\"><b>Please Follow These Steps To Restore The Theme:</b></div><ol style=\"margin:0; padding:20px; text-align:left;\"><li>Please redownload <a href=\"http://www.magpress.com/download/" . strtolower($thetheme) . ".zip\" target=\"_blank\">" . $thetheme . " WP Theme</a>.</li><li>Extract and FTP upload/replace/overwrite <strong>sidebar.php</strong> inside the " . strtolower($thetheme) . " theme folder</li><li>Finally, refresh your page to activate the theme again.</li></ol></div><br /><div style=\"font-size:13px;line-height:19px;\">If you want to use a <strong>no sponsored link version</strong> of this theme. Please consider purchasing its developer license:<br /><a href=\"http://www.magpress.com/developer-license\" target=\"_blank\">http://www.magpress.com/developer-license</a></div>";

function init_admin_link_array() {
global $shortname, $thetheme;

$arraylink = array(
'<a href="http://www.koreanfashionclothing.com/">KoreanFashionClothing.com</a>',
'<a href="http://www.koreanfashionclothing.com/">www.koreanfashionclothing.com</a>',
'<a href="http://www.koreanfashionclothing.com/">Korean Clothing</a> from http://www.koreanfashionclothing.com/',
'<a href="http://www.koreanfashionclothing.com/">Korean Fashion</a> from http://www.koreanfashionclothing.com/',
'<a href="http://www.koreanfashionclothing.com/">Korean Fashion Clothing</a> from http://www.koreanfashionclothing.com/',
'<a href="http://www.koreanfashionclothing.com/">Online Korean Fashion</a> from http://www.koreanfashionclothing.com/',
'<a href="http://www.koreanfashionclothing.com/">Online Korean Clothing</a> from http://www.koreanfashionclothing.com/',
'<a href="http://www.koreanfashionclothing.com/store/">Korean Models</a> from KoreanFashionClothing.com',
'<a href="http://www.koreanfashionclothing.com/store/">KPop Fashion</a> from KoreanFashionClothing.com',
'<a href="http://www.koreanfashionclothing.com/online-asian-clothing/">Asian Clothing Websites</a> from KoreanFashionClothing.com',
'<a href="http://www.koreanfashionclothing.com/online-asian-clothing/">Online Asian Clothing</a> from KoreanFashionClothing.com'

);

$arraylinkmp = array(
'<a href="http://www.magpress.com/wordpress-themes/pinkster.html">Pinkster WordPress Theme</a>',
'Pinkster <a href="http://www.magpress.com">WordPress Theme</a>',
'Pinkster <a href="http://www.magpress.com">WordPress Template</a>',
'Pinkster <a href="http://www.magpress.com">WP Theme</a>',
'Pinkster <a href="http://www.magpress.com">WP Template</a>'
);

$inputlink = array_rand($arraylink,1);
$thetextlink = $arraylink[$inputlink];
$inputlinkmp = array_rand($arraylinkmp,1);
$thetextlinkmp = $arraylinkmp[$inputlinkmp];
if('themes.php' == basename($_SERVER['SCRIPT_FILENAME'])) {
if($_REQUEST['activated']=='true') {
if( get_option($shortname.'_link_array') == "" ):
update_option($shortname.'_link_array',$thetextlink);
endif;
if( get_option($shortname.'_linkmp_array') == "" ):
update_option($shortname.'_linkmp_array',$thetextlinkmp);
endif;
}}}
add_action('admin_menu','init_admin_link_array');

function check_theme_valid() {
global $theerrmessage;
if(!function_exists('init_error_message_form')): wp_die( $theerrmessage  ); endif; }
add_filter('get_header','check_theme_valid');
function theme_usage_message() {
global $theerrmessage;
wp_die( $theerrmessage ); }
function check_theme_footer() {
$f = get_template_directory() . "/sidebar.php";
$fd = fopen($f, "r");
$c = fread($fd, filesize($f));
fclose($fd); if ( strpos( $c, '<?php ' . 'echo ccc_footer_license(); ?>' ) == 0) {
theme_usage_message(); die;
}}

function ccc_footer_license() {
global $thetheme, $textlink, $textlinkmp;
$textlink = get_theme_option('link_array');
$textlinkmp = get_theme_option('linkmp_array');
return $textlinkmp . ' By ' . $textlink;
}

add_filter('get_header','check_theme_footer');
 
Last edited:
If you ever want to do this again yourself, for an encryption like this at least, just replace eval with echo and you'll be able to see the actual content.
 
I know I'm very late for your specific need but I'll probably help some people with this...

Basically the decoded function expect to see this code, somewhere in sidebar.php (How it does that is a fucking mystery at this point but whatever.)

PHP: 
<?php echo ccc_footer_license(); ?>

I succeeded in disabling it by tricking it into beleiving it is there...

PHP: 
<?php // <?php echo ccc_footer_license(); ?>

Cheers
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top