<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Hi Tyler</div><div><br></div><div>The code is trying to hide that it's adding a credit link to the author. It's not doing anything dangerous, but it's not allowed. </div>You can take the entire code and replace all the encoded strings with the decode version (use <a href="http://www.opinionatedgeek.com/dotnet/tools/base64decode/">http://www.opinionatedgeek.com/dotnet/tools/base64decode/</a> or a similar tool for that) then You'll see that its just encoded strings representing some links and even the name of the base64_decode function.<div><br></div><div>When run in its current form the function simply returns the following string:</div><div><br></div><div>"<span class="Apple-style-span" style="color: rgb(0, 0, 102); font-family: monospace; font-size: 13px; white-space: pre; "><a href="<a href="http://wordpress.org/">http://wordpress.org/</a>">WordPress</a> and <a href="<a href="http://www.foxload.com/naturefox-wordpress-theme/">http://www.foxload.com/naturefox-wordpress-theme/</a>">NatureFox</a></span>"</div><div><div apple-content-edited="true">
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div><br class="Apple-interchange-newline"><br></div><div>----</div><div><br></div><div>Mikkel Breum</div><div><a href="http://wpKitchen.com">wpKitchen.com</a></div><div><br></div><div><a href="mailto:mikkel@wpkitchen.com">mikkel@wpkitchen.com</a></div><div>phone: +49 176 23885016</div><div>skype: mikwolbre</div></span>
</div>
<br><div><div>On 04/11/2011, at 06.53, Merci Javier wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><br>Agreed. That's a fail. <br><br>Couldn't even decode it with one of tools given <a href="http://wordpress.org/support/topic/theme-decoding-thread?replies=43">http://wordpress.org/support/topic/theme-decoding-thread?replies=43</a> Just curious what was there.<br>
<br><br><br><div class="gmail_quote">On Thu, Nov 3, 2011 at 10:16 PM, Doug Stewart <span dir="ltr"><<a href="mailto:zamoose@gmail.com">zamoose@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
That base64 should be enough to FAIL immediately.<br>
<div><div></div><div class="h5"><br>
On Fri, Nov 4, 2011 at 1:12 AM, Tyler Cunningham<br>
<<a href="mailto:seizedpropaganda@gmail.com">seizedpropaganda@gmail.com</a>> wrote:<br>
> Hey all,<br>
> Finally had some time to sit down and do some reviews so I was clearing out<br>
> some of the priority 1 tickets and came across something I wanted to run by<br>
> some of the more senior review members. Check out the following diff:<br>
> <a href="http://themes.trac.wordpress.org/changeset?old_path=/naturefox/1.0.5&new_path=/naturefox/1.0.6#file8" target="_blank">http://themes.trac.wordpress.org/changeset?old_path=/naturefox/1.0.5&new_path=/naturefox/1.0.6#file8</a><br>
> As soon as I saw the naturefox_credits function a red flag came up. Should I<br>
> ask the author what the purpose behind this is? Is this a no-no?<br>
> Thanks.<br>
> Regards,<br>
><br>
> Tyler Cunningham | Founder, COO - CyberChimps LLC<br>
> @tylerbcunning<br>
> <a href="http://gplus.to/tylercunningham" target="_blank">http://gplus.to/tylercunningham</a><br>
> <a href="http://linkedin.com/in/tylerbcunningham" target="_blank">http://linkedin.com/in/tylerbcunningham</a><br>
> <a href="mailto:tyler@cyberchimps.com">tyler@cyberchimps.com</a><br>
><br>
><br>
</div></div>> _______________________________________________<br>
> theme-reviewers mailing list<br>
> <a href="mailto:theme-reviewers@lists.wordpress.org">theme-reviewers@lists.wordpress.org</a><br>
> <a href="http://lists.wordpress.org/mailman/listinfo/theme-reviewers" target="_blank">http://lists.wordpress.org/mailman/listinfo/theme-reviewers</a><br>
><br>
><br>
<font color="#888888"><br>
<br>
<br>
--<br>
-Doug<br>
_______________________________________________<br>
theme-reviewers mailing list<br>
<a href="mailto:theme-reviewers@lists.wordpress.org">theme-reviewers@lists.wordpress.org</a><br>
<a href="http://lists.wordpress.org/mailman/listinfo/theme-reviewers" target="_blank">http://lists.wordpress.org/mailman/listinfo/theme-reviewers</a><br>
</font></blockquote></div><br>
_______________________________________________<br>theme-reviewers mailing list<br><a href="mailto:theme-reviewers@lists.wordpress.org">theme-reviewers@lists.wordpress.org</a><br>http://lists.wordpress.org/mailman/listinfo/theme-reviewers<br></blockquote></div><br></div></body></html>