We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
We could add some more words to the Regex check: https://github.com/pluginkollektiv/antivirus/blob/master/inc/class-antivirus-checkinternals.php#L154
Like functions for adding new administrators (as seen in a recent hack I cleaned up):
wp_create_user set_role username_exists email_exists add_cap WP_User
Maybe more concrete, like set_role( 'administrator' )
set_role( 'administrator' )
The text was updated successfully, but these errors were encountered:
Another one could be preventing to show errors: error_reporting(0);
error_reporting(0);
Sorry, something went wrong.
After reading the blog post, we could add visitorTracker_isMob to the list of bad words.
visitorTracker_isMob
From #14
According to OWASP there are more filesystem function we could check for: bzopen and gzopen and chgrp, chownand chmod
bzopen
gzopen
chgrp
chown
chmod
And some information disclosure functions like phpinfo, getenv, getmygid/pid/uid.
phpinfo
getenv
getmygid/pid/uid
And for obfuscation functions like: str_rot13
str_rot13
No branches or pull requests
We could add some more words to the Regex check:
https://github.com/pluginkollektiv/antivirus/blob/master/inc/class-antivirus-checkinternals.php#L154
Like functions for adding new administrators (as seen in a recent hack I cleaned up):
Maybe more concrete, like
set_role( 'administrator' )
The text was updated successfully, but these errors were encountered: