I downloaded The source theme (nice premium wordpress theme), and already removed the links found in the footer.php (not encrypted) I was testing the theme apparently without any problem, but after 2 days it began to occasionally appear links in the footer. And I just can't find the file - code line that generates this links. Anyone knows how to fix this?
Copy the link name and use the search for function in dreamweaver (it can search through multiple files to find a string) Posted via Mobile Device
I have already used the dreamweaver search option with no results, I have searched clinkft (seen when rollovering with firebug) and the link name, and nothing. The function.php has only a few lines of code and no one related to the links. Any other idea?
The next time the links show up in the footer, view the source code of the page to see what other code you can look for when you do a "Find all" in Dreamweaver. You could also go through each file in the theme one by one and see if there's anything suspicious.
The link(s) have appeared again, you can check it at: changeria . com In the source code the line for this links is that clinkft1 script. But again could not found anything related to it in the themes files.
Is there an admin_panel.php file in the theme? Someone else is reporting the same problem and says that there's some encrypted code in that file that has added a donation link to the admin area for the theme: Code: http://scriptmafia.org/templates/16067-industry-themejam-wordpress-theme.html I also found these links which have references to w3b0y: Code: http://www.sharemafia.com/decode-help/137837-please-i-need-help-footer-code.html Code: http://translate.google.com/translate?hl=en&sl=id&u=http://www.sharemafia.com/decode-help/70911-please-decode-wordpress-files-part-1-a.html&ei=NzFGTLCDIoO8lQfrupzuAw&sa=X&oi=translate&ct=result&resnum=5&ved=0CCgQ7gEwBDgK&prev=/search%3Fq%3Dthemes.weboy.org%2B%252Bfooter.php%2B-inurl:themes.weboy.org%26start%3D10%26hl%3Den%26sa%3DN Going through the other theme files, do you see anything that's encrypted/encoded? The only reason I can think of for why you're not finding clinkft1 is that it exists somewhere in the theme in an encoded format and only appears in decoded form when the page is rendered in a browser. To figure this out, we need to find all encoded pieces of the theme and decode them.
Finally I fixed the problem, the lines of code were in the custom_funtions.php file, not encrypted but each word of the URLs were divided is several parts I guess to hide them from searches. Thanks a lot 195471 and the other guys for the ideas. BHW my love! LOL
