Does anyone know how to decode this base64 decode?

[icreatehosting]

<?php
$OOO0O0O00=__FILE__;$O00O00O00=__LINE__;$OO00O0000=1128;eval((base64_decode('JE8wMDBPME8wMD1mb3BlbigkT09PME8wTzAwLCdyYicpO3doaWxlKC0tJE8wME8wME8wMClmZ2V0cygkTzAwME8wTzAwLDEwMjQpO2ZnZXRzKCRPMDAwTzBPMDAsNDA5Nik7JE9PMDBPMDBPMD0oYmFzZTY0X2RlY29kZShzdHJ0cihmcmVhZCgkTzAwME8wTzAwLDM3MiksJ0VudGVyeW91d2toUkhZS05XT1VUQWFCYkNjRGRGZkdnSWl***xsTW1QcFFxU3NWdlh4WnowMTIzNDU2Nzg5Ky89JywnQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVphYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5ejAxMjM0NTY3ODkrLycpKSk7ZXZhbCgkT08wME8wME8wKTs=')));return;?>
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

 

[warchylde]

http://www.opinionatedgeek.com/dotnet/tools/Base64Decode/

 

[diabolus]

http://www.tools4noobs.com/online_php_functions/base64_decode/

 

[icreatehosting]

All I get is this:

$O000O0O00=fopen($OOO0O0O00,'rb');while(--$O00O00O00)fgets($O000O0O00,1024);fgets($O000O0O00,4096);$OO00O00O0=(base64_decode(strtr(fread($O000O0O00,372),'EnteryouwkhRHYKNWOUTAaBbCcDdFfGgIiJjLlMmPpQqSsVvXxZz0123456789+/=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/')));eval($OO00O00O0);

It's supposed to look something like:

</div>

<div id="footer">

<div style="float:left">
MY Blog is proudly powered by
<a href="http://wordpress.org/">WordPress</a>
<br /><a href="http://demo.wpspark.com/wp/wordpress/?feed=rss2">Entries (RSS)</a>
and <a href="http://demo.wpspark.com/wp/wordpress/?feed=comments-rss2">Comments (RSS)</a>.

</div>

<div style="float:right;">

Designed by <a href="http://pspslimhacks.com/">PSP Hacks</a>.
&nbsp;Coding done by <a href="http://www.moonbingo.com//">Bingo</a> |
<a href="http://www.lordbingo.co.uk/foxy-bingo.html">Foxy Bingo</a> |
<a href="http://www.gossipbingo.co.uk/">Free Bingo</a>
</div>



</div>
</div><!-- End Wrap-->

</body>
</html>

 

[guest2013-1]

Gimme a sec to figure it out

 

[guest2013-1]

It opens up a file and reads a specific line to which it then encoded a specific string, using the eval function it probably contains the HTML you need in there.

If you know the output of the HTML it gives you, why don't you replace that specific eval'ed string with the HTML? Thats what I did when I helped whats-his-name with his footer problem on wordpress

 

[guest2013-1]

BTW, if you need help figuring this out PM me the login details of the site and I'll go through it and rip it to shreds for you (in terms of fixing it, not messing it up lol)

 

[icreatehosting]

HA HA HA! Thanks.

I don't have the HTML code. That other code I placed there is just an example of the footer code off of another site.

But currently the footer is in base 64 code. I need it in the php code.

 

[guest2013-1]

Well if nothing happens in the footer code then you might as well View Source the site, copy what is needed, and replace the base64 coded stuff with it. That's what I did for that other dude (really can't remember the name now!)

His problem was essentially that the right hand side bar couldn't function because it was hidden in the footer code basically. And if it's wordpress it's piss easy to just get that working again without having access to the php at all

 

[icreatehosting]

But the thing is that this wordpress site has widgets and php code in the footer as well. When I view source it displays as HTML. Not as php code.

 

[FlatspinZA]

It's reading instructions off a PHP server. Your return values will be gibberish.

 

[guest2013-1]

It's reading instructions off a PHP server. Your return values will be gibberish.

It actually does a very simple encryption technique to do what it does... this runs off a php server yet, but it opens a file (I don't know what file) and reads a certain part of that file that contains the secret word that holds the key to breaking this encryption. Think Davinci.

But the thing is that this wordpress site has widgets and php code in the footer as well. When I view source it displays as HTML. Not as php code.

If you know Wordpress it should be pretty simple to put back the widget code in there, because wordpress is standard. Like I said. Copy/paste the output of the footer where it needs to go and just replace the widget code with the necessary wordpress code... i doubt its custom made else it wouldn't be a true wordpress template. The only thing these douche bags does is insert their link (back link to their site) in your footer. The rest is simple wordpress code

 

[icreatehosting]

Thanks AcidRazor for all your help. I also posted this problem on another forum in the UK where other users had the same problem.

So one guy came back to me with the whole file decoded. So I just pasted it into my footer.php file and it worked!!!!

So now I'm trying to get the guy to tell me how he did it so I know in the future.

Thanks again!

 

[FlatspinZA]

It actually does a very simple encryption technique to do what it does... this runs off a php server yet, but it opens a file (I don't know what file) and reads a certain part of that file that contains the secret word that holds the key to breaking this encryption. Think Davinci.

It's a pleasure