backdoor identified in your plugin

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Max K

    (@kaminskym)

    Hey,

    As you can see:

    1. This code has been commented for many years
    2. There is nothing related to the?Backdoor, it’s only checking that the Admin notice hash is correct while?dismissing the admin notice:

    // // Verify that data was not changed
    // if ( $_GET['hash'] !== md5($_GET['key'] . NONCE_SALT . $_GET['save_to']) ) {
    // wp_send_json_error();
    // }

    You can always upload it to the Virus Total, if you have any doubts.

    • This reply was modified 11 months ago by Max K.
    Thread Starter horsee

    (@horsee)

    can you just remove it from the code if you commented it? Just to avoid the confusion a positive detections from the security plugins?

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘backdoor identified in your plugin’ is closed to new replies.