1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

only Genius can do plz..please help me to remove this footer link

Discussion in 'PHP & Perl' started by yusuf0024, Jul 15, 2010.

  1. yusuf0024

    yusuf0024 Regular Member

    Joined:
    Sep 13, 2009
    Messages:
    289
    Likes Received:
    63
    hello please help me to remove footer links.i have 5 footer links in my theme. so i want to remove it. when i change the url link of the zenverse revival theme
    then the entire site get crashed. i decode code to
    but when i change footer link my site stop.please help me to remove this

    PHP:
    <?php
    eval(gzinflate(base64_decode('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')));
    ?>
     
    Last edited: Jul 15, 2010
  2. bzy39

    bzy39 Regular Member

    Joined:
    Jan 15, 2009
    Messages:
    434
    Likes Received:
    239
    here

    PHP:
    include('footer_content.php');echo '<div id="footcopy" class="pngfix" style="background-image:url('.get_bloginfo("template_directory").'/images/footer_btm.png);width:1000px;background-repeat:no-repeat;height:27px;padding-top:17px;text-align:center;color:#aaaaaa;display:block;">';echo '<div style="filter:alpha(opacity=70);opacity:0.7">';/*//original footer linksecho '<a style="color:#aaaaaa;" href="http://zenverse.net/the-revival-wordpress-theme/">The Revival</a> designed by <a href="http://zenverse.net/" style="color:#aaaaaa;">ZENVERSE</a>';*/echo '<a style="color:#aaaaaa;" href="http://zenverse.net/the-revival-wordpress-theme/">The Revival</a> designed by <a style="color:#aaaaaa;" href="http://www.jabam.de">Auktionshaus</a>   <span style="color:#999999">|</span>   <a style="color:#aaaaaa;" href="http://www.nalay.de">Online Magazin</a>   <span style="color:#999999">|</span>   <a style="color:#aaaaaa;" href="http://www.winworld.ch">Gewinnspiele</a>   <span style="color:#999999">|</span>   <a style="color:#aaaaaa;" href="http://www.abendmodeguide.de">Abendmodeguide</a>';echo '</div></div></div><!--/footer_real--></center></div><!--/footer_wrap-->';$zenverse_global_google_analytics get_option('zenverse_global_google_analytics');if ($zenverse_global_google_analytics != '') { echo stripslashes($zenverse_global_google_analytics); }wp_footer();echo '</body></html>';
    you can use this tool
    Code:
    http://www.tareeinternet.com/scripts/decrypt.php
     
  3. yusuf0024

    yusuf0024 Regular Member

    Joined:
    Sep 13, 2009
    Messages:
    289
    Likes Received:
    63
    when i change that link my site stop and i can not open my site
     
  4. bzy39

    bzy39 Regular Member

    Joined:
    Jan 15, 2009
    Messages:
    434
    Likes Received:
    239
    is there something error message?
     
  5. GreyWolf

    GreyWolf Executive VIP Jr. VIP

    Joined:
    Aug 17, 2009
    Messages:
    1,930
    Likes Received:
    5,387
    Gender:
    Male
    Occupation:
    Artist / Craftsman
    Location:
    sitting at my PC
    I'm not 100% i understand what you mean about changing the link.

    Did you try just repacing the
    Code:
    <?php
    eval(gzinflate(base64_decode('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')));
    ?> 
    
    with the decrypted code bzy39 gave you?

    Code:
    <?php
    include('footer_content.php');echo '<div id="footcopy" class="pngfix" style="background-image:url('.get_bloginfo("template_directory").'/images/footer_btm.png);width:1000px;background-repeat:no-repeat;height:27px;padding-top:17px;text-align:center;color:#aaaaaa;display:block;">';echo '<div style="filter:alpha(opacity=70);opacity:0.7">';/*//original footer linksecho '<a style="color:#aaaaaa;" href="http://zenverse.net/the-revival-wordpress-theme/">The Revival</a> designed by <a href="http://zenverse.net/" style="color:#aaaaaa;">ZENVERSE</a>';*/echo '<a style="color:#aaaaaa;" href="http://zenverse.net/the-revival-wordpress-theme/">The Revival</a> designed by <a style="color:#aaaaaa;" href="http://www.jabam.de">Auktionshaus</a>   <span style="color:#999999">|</span>   <a style="color:#aaaaaa;" href="http://www.nalay.de">Online Magazin</a>   <span style="color:#999999">|</span>   <a style="color:#aaaaaa;" href="http://www.winworld.ch">Gewinnspiele</a>   <span style="color:#999999">|</span>   <a style="color:#aaaaaa;" href="http://www.abendmodeguide.de">Abendmodeguide</a>';echo '</div></div></div><!--/footer_real--></center></div><!--/footer_wrap-->';$zenverse_global_google_analytics = get_option('zenverse_global_google_analytics');if ($zenverse_global_google_analytics != '') { echo stripslashes($zenverse_global_google_analytics); }wp_footer();echo '</body></html>';  
    ?> 
    
    And then your site quit working? Or did you try to make other changes before just trying the direct replacement.

    Usually its a good idea to take it in steps. First decode it, and replace intact to make sure it works, and only after your sure of that do you make any changes in the unobfuscated code.

    If it broke without any changes other than decoding it, then you might try going to the website and decoding it yourself just in case there was any errors when bzy39 posted it. If it worked after decoding, and then broke after trying to modify anything then you just need to look closer at the code to see what it's doing. There could even be something elsewhere in the template verifying that the link is there so you would need to look at that as well.

    To figure out what's going wrong we really need to know exactly what step your at, and exactly what changes your making.
     
  6. yusuf0024

    yusuf0024 Regular Member

    Joined:
    Sep 13, 2009
    Messages:
    289
    Likes Received:
    63
    thank you GreyWolf i tried everything what i can do. and when i try to replace link with my home page link or other link .then the entire site get crashed and my site can not reload . i dont have much knowledge about how to decode script. can you teach me i will follow you. my theme is zenverse revival
     
  7. GreyWolf

    GreyWolf Executive VIP Jr. VIP

    Joined:
    Aug 17, 2009
    Messages:
    1,930
    Likes Received:
    5,387
    Gender:
    Male
    Occupation:
    Artist / Craftsman
    Location:
    sitting at my PC
    bzy39 already gave you the decoded script. Just replace that section of code that you posted, with the decoded script that he provided. Don't try to change any links or do anything else until you've done that. You have to make sure that the decoded script will work in place of the encoded script before you can move on. Once you get that part working, then you can start working on changes to the links in the footer.
     
  8. bzy39

    bzy39 Regular Member

    Joined:
    Jan 15, 2009
    Messages:
    434
    Likes Received:
    239
    upload the theme, i will take a look at it.
     
  9. yusuf0024

    yusuf0024 Regular Member

    Joined:
    Sep 13, 2009
    Messages:
    289
    Likes Received:
    63
    this is Theme i upload here
     

    Attached Files:

  10. GreyWolf

    GreyWolf Executive VIP Jr. VIP

    Joined:
    Aug 17, 2009
    Messages:
    1,930
    Likes Received:
    5,387
    Gender:
    Male
    Occupation:
    Artist / Craftsman
    Location:
    sitting at my PC
    Well the OP already said when he tries to change anything his site stops working.

    I've yet to see a template in which the designer bothers to obfuscate a section of code that will work by simply removing it. There's always some bit of code in it that will cause the template to break if you just remove it. That's the whole purpose of the encoded script is for the theme designer to force most users to keep his footer intact. If you could just delete it then there isn't much point in doing it at all. LOL

    @OP - I think you should take bzy39 up on his offer to help.
     
  11. yusuf0024

    yusuf0024 Regular Member

    Joined:
    Sep 13, 2009
    Messages:
    289
    Likes Received:
    63
    i can not find eval in php
     
  12. yusuf0024

    yusuf0024 Regular Member

    Joined:
    Sep 13, 2009
    Messages:
    289
    Likes Received:
    63
    u can see in theme
     
  13. yusuf0024

    yusuf0024 Regular Member

    Joined:
    Sep 13, 2009
    Messages:
    289
    Likes Received:
    63
    i dont knowCock Zilla how to find code can you give me any idea
     
  14. bzy39

    bzy39 Regular Member

    Joined:
    Jan 15, 2009
    Messages:
    434
    Likes Received:
    239
    dammmm, found it at least.
    just remove the function zv_getnumofimages2 in zenverse_gallery.js
    or remove
    Code:
         
    if (zv_GETDATA.preview != "1") {
            zv_addLoadEvent(zv_getnumofimages2);
        }
    
    here the p.a.c.k.e.r. decode js. rename the extension to js.

    now you can remove the link
     

    Attached Files:

    • Thanks Thanks x 2
  15. GreyWolf

    GreyWolf Executive VIP Jr. VIP

    Joined:
    Aug 17, 2009
    Messages:
    1,930
    Likes Received:
    5,387
    Gender:
    Male
    Occupation:
    Artist / Craftsman
    Location:
    sitting at my PC
    What it's calling in the footer_content probably has to do in part with putting the user defined info in the footer above the template designers info. There's also a section for it to add google analytics at the bottom. The theme probably has a settings box in admin to put your ga code.

    That's why it's usually better to decode this stuff so everything the theme designer set up still works and then you can simply remove the few links out of the decoded footer that you don't want.

    If your dealing with a virus code injected into your theme, then ya just removing it and any other encoded sections that were also injected is a good idea. But when your dealing with code that the theme designer is trying to hide it's best to decode it so you can tell which parts are best left intact.

    From the questions the OP is asking though, I think he's at a little more basic level. I still think his best idea is to take bzy39 up on his offer.
     
  16. kaidoristm

    kaidoristm Power Member

    Joined:
    Feb 13, 2009
    Messages:
    561
    Likes Received:
    726
    Occupation:
    Freelancer
    Location:
    Estonia
    Home Page:
    Here's decoded footer

    PHP:

    include('footer_content.php');

    echo 
    '<div id="footcopy" class="pngfix" style="background-image:url('.get_bloginfo("template_directory").'/images/footer_btm.png);width:1000px;background-repeat:no-repeat;height:27px;padding-top:17px;text-align:center;color:#aaaaaa;display:block;">';
    echo 
    '<div style="filter:alpha(opacity=70);opacity:0.7">';
    echo 
    '<a style="color:#aaaaaa;" href="http://zenverse.net/the-revival-wordpress-theme/">The Revival</a> designed by <a style="color:#aaaaaa;" href="http://www.jabam.de">Auktionshaus</a>   <span style="color:#999999">|</span>   <a style="color:#aaaaaa;" href="http://www.nalay.de">Online Magazin</a>   <span style="color:#999999">|</span>   <a style="color:#aaaaaa;" href="http://www.winworld.ch">Gewinnspiele</a>   <span style="color:#999999">|</span>   <a style="color:#aaaaaa;" href="http://www.abendmodeguide.de">Abendmodeguide</a>';
    echo 
    '</div></div></div><!--/footer_real--></center></div><!--/footer_wrap-->';

    $zenverse_global_google_analytics get_option('zenverse_global_google_analytics');

    if (
    $zenverse_global_google_analytics != ''
    {
        echo 
    stripslashes($zenverse_global_google_analytics);
    }

    wp_footer();echo '</body></html>';

    Well those links are protected with javascript in zenverse_gallery.js
    Im not an javascript expert so i can't help with that.
    Of course one option is completely delete zenverse_gallery.js then you can remove footer links. Or find someone who will modify zenverse_gallery.js for you cause im not sure is that used for something else as well.


    Am i Genius now? :)

    Damit didn't notice "bzy39" post so Genius title goes to him :(
     
    Last edited: Jul 15, 2010
  17. yusuf0024

    yusuf0024 Regular Member

    Joined:
    Sep 13, 2009
    Messages:
    289
    Likes Received:
    63
    bzy39 ur Genius man thank u, u help me lot bro. when i remove
    if
    (zv_GETDATA.preview != "1") {
    zv_addLoadEvent(zv_getnumofimages2);
    }

    this still that problem. even wen i change url in js.script and footer link still my site get crashed what i did wrong?
     
    Last edited: Jul 15, 2010
  18. yusuf0024

    yusuf0024 Regular Member

    Joined:
    Sep 13, 2009
    Messages:
    289
    Likes Received:
    63
    kaidoristm

    Genius title goes to bzy39
     
  19. yusuf0024

    yusuf0024 Regular Member

    Joined:
    Sep 13, 2009
    Messages:
    289
    Likes Received:
    63
    which zenverse_gallery.js code i must to remove ????? pls. help me i am so near to delete footer links
     
    Last edited: Jul 15, 2010
  20. kaidoristm

    kaidoristm Power Member

    Joined:
    Feb 13, 2009
    Messages:
    561
    Likes Received:
    726
    Occupation:
    Freelancer
    Location:
    Estonia
    Home Page:
    Ok footer links removed!

    Open up footer.php you can see that footer links are commented out.
    You can replace those with your own or delete that line completely.

    So i assume that Genius title comes back to me :)
     
    • Thanks Thanks x 2
    Last edited: Jul 15, 2010