哪位大哥帮忙解密一下一个php文件

crazysnail

是一个WP模板里的footer文件,  在网上找了N久解密的方法, 没试成功, 哪位大哥能帮忙解密一下, 拜谢!

1. <?php $_F=__FILE__;$_X='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';eval(base64_decode('JF9YPWJhc2U2NF9kZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCcxMjM0NTZhb3VpZScsJ2FvdWllMTIzNDU2Jyk7JF9SPWVyZWdfcmVwbGFjZSgnX19GSUxFX18nLCInIi4kX0YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRfWD0wOw=='));?>

复制代码

古雨

百度搜索“Base64加密解密”，把<?php $_F=__FILE__;$_X='代码'));?>之间的“代码”输进去解密


补充内容 (2013-9-17 00:18):
额，有两段，没看仔细，自己研究一下

hudba

就一段wp 代码没看出名堂来。

1. ?><div class="clear"></div>
   
2. <div id="footer">
   
3.         <div id="footermain">
   
4.                 <a id="footerlogo" href="<?php bloginfo('url'); ?>" title="<?php bloginfo('name'); ?>"></a>
   
5.         <?php echo stripslashes(get_option('creekoo_footerlinkcode')); ?></br><?php echo comicpress_copyright(); ?> <a href="<?php echo home_url( '/' ) ?>" title="<?php echo esc_attr( get_bloginfo( 'name', 'display' ) ); ?>" rel="home" target="_blank"><?php echo esc_attr( get_bloginfo( 'name', 'display' ) ); ?></a> - Powered by <a href="http://www.wordpress.org/" rel="nofollow" target="_blank">WordPress</a> and <a href="http://www.creekoo.com/" target="_blank">CreeKoo</a><?php if (get_option('creekoo_beian') == 'Display') { ?> - <?php echo stripslashes(get_option('creekoo_beianhao')); ?><?php } else { } ?><?php if (get_option('creekoo_tj') == 'Display') { ?> - <?php echo stripslashes(get_option('creekoo_tjcode')); ?><?php } else { } ?>
   
6.         </div>
   
7. </div>
   
8. <?php wp_footer(); ?>
   
9. <script type="text/javascript" src="<?php bloginfo('template_directory'); ?>/comments-ajax.js"></script>
   
10. <script type="text/javascript" src="<?php bloginfo('template_directory'); ?>/creekoo.min.js?v1.3"></script>
    
11. </body>
    
12. </html>
    
13. 
    
14. 
    
15. $_X=base64_decode($_X);$_X=strtr($_X,'123456aouie','aouie123456');$_R=ereg_replace('__FILE__',"'".$_F."'",$_X);eval($_R);$_R=0;$_X=0;
    

复制代码

bjghw

进来学习了， 原来这个还有工具啊

GG=GreatGuy

古雨 发表于 2013-9-16 23:14
百度搜索“Base64加密解密”，把

有两段的，不是一段‘代码’。

crazysnail

bjghw 发表于 2013-9-16 23:32
进来学习了， 原来这个还有工具啊

谢谢大哥, 直接把这覆盖原来的吗?

xnq777

base64 在线的破解就一大把