Daze

WordPress themes from paddsolutions.com are very well done. However, they include nasty links in the footer. These links may negatively impact the Google Pagerank of the website that the theme is installed on. The malicious code is also possibly sending data about your blog to http:// starling.paddsolutions.com (presumably to check who installed their themes).

Simply removing the snippet <?php padd_theme_credits(); ?> from the footer.php file presents the user with this simple message: “Something wrong.” The actual WordPress function used is: wp_die('Something wrong.');

Some investigative work revealed that the encrypted file includes/prelude.php checks if the nasty links are left intact in the template. This file is in turn called from functions.php

To remove this behaviour, follow these steps:

1- find the last line in functions.php and either delete or comment it out:

require PADD_FUNCT_PATH . ‘prelude.php’;

2- in the footer.php file, either delete this snippet or comment it out:

<?php padd_theme_credits(); ?>

To comment out a section of php code, put it in between this /* and this */

For example: <?php /* padd_theme_credits(); */ ?>