哪位大哥幫忙解密一下一個php文件

是一個WP模板裡的footer文件,  在網上找了N久解密的方法, 沒試成功, 哪位大哥能幫忙解密一下, 拜謝!

0 T6 |* w* ]  k; ^8 a6 } footer.rar (1.14 KB, 下載次數: 0)

2013-9-16 23:00 上傳

點擊文件名下載附件

1. <?php $_F=__FILE__;$_X='Pz48ZDR2IGNsMXNzPSJjbDUxciI+PC9kNHY+DQo8ZDR2IDRkPSJmMjJ0NXIiPg0KCTxkNHYgNGQ9ImYyMnQ1cm0xNG4iPg0KCQk8MSA0ZD0iZjIydDVybDJnMiIgaHI1Zj0iPD9waHAgYmwyZzRuZjIoJzNybCcpOyA/PiIgdDR0bDU9Ijw/cGhwIGJsMmc0bmYyKCduMW01Jyk7ID8+Ij48LzE+DQoJPD9waHAgNWNoMiBzdHI0cHNsMXNoNXMoZzV0XzJwdDQybignY3I1NWsyMl9mMjJ0NXJsNG5rYzJkNScpKTsgPz48L2JyPjw/cGhwIDVjaDIgYzJtNGNwcjVzc19jMnB5cjRnaHQoKTsgPz4gPDEgaHI1Zj0iPD9waHAgNWNoMiBoMm01XzNybCggJy8nICkgPz4iIHQ0dGw1PSI8P3BocCA1Y2gyIDVzY18xdHRyKCBnNXRfYmwyZzRuZjIoICduMW01JywgJ2Q0c3BsMXknICkgKTsgPz4iIHI1bD0iaDJtNSIgdDFyZzV0PSJfYmwxbmsiPjw/cGhwIDVjaDIgNXNjXzF0dHIoIGc1dF9ibDJnNG5mMiggJ24xbTUnLCAnZDRzcGwxeScgKSApOyA/PjwvMT4gLSBQMnc1cjVkIGJ5IDwxIGhyNWY9Imh0dHA6Ly93d3cudzJyZHByNXNzLjJyZy8iIHI1bD0ibjJmMmxsMnciIHQxcmc1dD0iX2JsMW5rIj5XMnJkUHI1c3M8LzE+IDFuZCA8MSBocjVmPSJodHRwOi8vd3d3LmNyNTVrMjIuYzJtLyIgdDFyZzV0PSJfYmwxbmsiPkNyNTVLMjI8LzE+PD9waHAgNGYgKGc1dF8ycHQ0Mm4oJ2NyNTVrMjJfYjU0MW4nKSA9PSAnRDRzcGwxeScpIHsgPz4gLSA8P3BocCA1Y2gyIHN0cjRwc2wxc2g1cyhnNXRfMnB0NDJuKCdjcjU1azIyX2I1NDFuaDEyJykpOyA/Pjw/cGhwIH0gNWxzNSB7IH0gPz48P3BocCA0ZiAoZzV0XzJwdDQybignY3I1NWsyMl90aicpID09ICdENHNwbDF5JykgeyA/PiAtIDw/cGhwIDVjaDIgc3RyNHBzbDFzaDVzKGc1dF8ycHQ0Mm4oJ2NyNTVrMjJfdGpjMmQ1JykpOyA/Pjw/cGhwIH0gNWxzNSB7IH0gPz4NCgk8L2Q0dj4NCiA8L2Q0dj4NCjw/cGhwIHdwX2YyMnQ1cigpOyA/Pg0KPHNjcjRwdCB0eXA1PSJ0NXh0L2oxdjFzY3I0cHQiIHNyYz0iPD9waHAgYmwyZzRuZjIoJ3Q1bXBsMXQ1X2Q0cjVjdDJyeScpOyA/Pi9jMm1tNW50cy0xajF4LmpzIj48L3NjcjRwdD4NCjxzY3I0cHQgdHlwNT0idDV4dC9qMXYxc2NyNHB0IiBzcmM9Ijw/cGhwIGJsMmc0bmYyKCd0NW1wbDF0NV9kNHI1Y3QycnknKTsgPz4vY3I1NWsyMi5tNG4uanM/djYubyI+PC9zY3I0cHQ+DQo8L2IyZHk+DQo8L2h0bWw+';eval(base64_decode('JF9YPWJhc2U2NF9kZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCcxMjM0NTZhb3VpZScsJ2FvdWllMTIzNDU2Jyk7JF9SPWVyZWdfcmVwbGFjZSgnX19GSUxFX18nLCInIi4kX0YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRfWD0wOw=='));?>

複製代碼

( \2 `' o+ B, E百度搜索「Base64加密解密」，把<?php $_F=__FILE__;$_X='代碼'));?>之間的「代碼」輸進去解密


' _4 l4 o( f7 w補充內容 (2013-9-17 00:18):
0 A- k2 y2 v  o% F2 p/ O0 F+ U* w額，有兩段，沒看仔細，自己研究一下

就一段wp 代碼沒看出名堂來。

1. ?><div class="clear"></div>
   
2. <div id="footer">
   0 r% l, Q9 D2 n& ]6 q7 c, Z
3.         <div id="footermain">
   / Z) V0 k4 G. }& {5 U4 g
4.                 <a id="footerlogo" href="<?php bloginfo('url'); ?>" title="<?php bloginfo('name'); ?>"></a>
   . ]* S3 j, V, s7 C) A! z% O
5.         <?php echo stripslashes(get_option('creekoo_footerlinkcode')); ?></br><?php echo comicpress_copyright(); ?> <a href="<?php echo home_url( '/' ) ?>" title="<?php echo esc_attr( get_bloginfo( 'name', 'display' ) ); ?>" rel="home" target="_blank"><?php echo esc_attr( get_bloginfo( 'name', 'display' ) ); ?></a> - Powered by <a href="http://www.wordpress.org/" rel="nofollow" target="_blank">WordPress</a> and <a href="http://www.creekoo.com/" target="_blank">CreeKoo</a><?php if (get_option('creekoo_beian') == 'Display') { ?> - <?php echo stripslashes(get_option('creekoo_beianhao')); ?><?php } else { } ?><?php if (get_option('creekoo_tj') == 'Display') { ?> - <?php echo stripslashes(get_option('creekoo_tjcode')); ?><?php } else { } ?>
   + u/ R2 c+ O1 h4 v) ^$ u
6.         </div>
   
7. </div>
   # c$ L1 E# F7 ~3 u$ w' N8 H
8. <?php wp_footer(); ?>
   7 }5 w7 Y3 v1 k( Y, b
9. <script type="text/javascript" src="<?php bloginfo('template_directory'); ?>/comments-ajax.js"></script>
   * [0 [8 }, l4 U3 @
10. <script type="text/javascript" src="<?php bloginfo('template_directory'); ?>/creekoo.min.js?v1.3"></script>
    
11. </body>
    
12. </html>
    
13. 
    5 T( R  |- @/ R5 a# ]
14. 
    
15. $_X=base64_decode($_X);$_X=strtr($_X,'123456aouie','aouie123456');$_R=ereg_replace('__FILE__',"'".$_F."'",$_X);eval($_R);$_R=0;$_X=0;
    

複製代碼

進來學習了， 原來這個還有工具啊

古雨 發表於 2013-9-16 23:14
* d4 @. L% i5 W% r, \9 L百度搜索「Base64加密解密」，把

有兩段的，不是一段『代碼』。

bjghw 發表於 2013-9-16 23:32
2 M0 C6 _  l; w1 |5 E進來學習了， 原來這個還有工具啊

3 W* B: M* n* M; V6 ]1 j' m! [謝謝大哥, 直接把這覆蓋原來的嗎?
+ ?9 d. L, a& X9 v
. R/ T7 k0 N+ u' h

base64 在線的破解就一大把
$ s: y- S1 E0 C4 J  M6 e