Standard wordpress file false positive

scr34m / php-malware-scanner

Scans PHP files for malwares and known threats

GNU General Public License v3.0

556 stars 96 forks source link

Standard wordpress file false positive #27

Closed shamilovtim closed 6 years ago

shamilovtim commented 6 years ago

false positive from this stock wordpress file

# ER 22:16 29-09-201859c701d09896cf859689dcf457597084 # {/home/mothicco/public_html/wp-admin/includes/class-pclzip.php} #php_uname() # web shells host type extraction

scr34m commented 6 years ago

Well you cloud make an whitelist, but as it looks like this is a wordpress so could you specify the version?

shamilovtim commented 6 years ago

4.9.8

also: wp-includes/formatting.php is another false positive

shamilovtim commented 6 years ago

oh, I see your whitelist already includes these. thanks for the tip