• Resolved chanel

    (@chanel)


    Can someone decrypt this code for me? It’s spamming weblinks into a theme.

    <?php $_F=__FILE__;$_X=’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’;eval(base64_decode(‘JF9YPWJhc2U2NF9kZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCcxMjM0NTZhb3VpZScsJ2FvdWllMTIzNDU2Jyk7JF9SPWVyZWdfcmVwbGFjZSgnX19GSUxFX18nLCInIi4kX0YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRfWD0wOw==’));?>

  • The topic ‘Decrypt footer code’ is closed to new replies.