malicious code?

  • Resolved toshiamcbrowns

    (@toshiamcbrowns)


    5 years, 8 months ago

    Hi,

    I downloaded amp for wp plugin and further looking to swift/single.php I found encoded code like:

    <amp-img src=”data:image/svg+xml;utf8;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iaXNvLTg4NTktMSI/Pgo8IS0tIEdlbmVy….
    ===

    My question is why its encoded and how can we ensure that its not some malicious code?

    Thanks,
    Toshi

Viewing 3 replies - 1 through 3 (of 3 total)

  • Just lol. If it was put by the team which made this plugin, do you really think they’ll say “yeah, it’s a malicious code” you’re funny.

    And moreover, you’re a bit inexperimenced to say that. Just run your “malicious code” through a Base64 decoder (like this: https://www.base64decode.org/ ) and you’ll see that your code is just a svg code made with Adobe Illustrator.

    Plugin Author Ahmed Kaludi

    (@ahmedkaludi)

    toshiamcbrowns, it’s an image added in its base format, which is totally right way to do it.

    Believe me, We are a team of 25 people working hard day and night, we would never do or let anything malicious come closer to our users.

    Thread Starter toshiamcbrowns

    (@toshiamcbrowns)

    Thanks Kaludi for the clarification.

    But I am facing a problem as:

    I secured my WP by putting this code in .htaccess in wp-content folder:

    ===

    # BEGIN only media files are allowed to be uploaded
    Order deny,allow
    Deny from all
    <Files ~ “.(xml|css|jpe?g|png|gif|js|svg)$”>
    Allow from all
    </Files>
    # END only media files are allowed to be uploaded

    ====
    like given at https://www.cloudways.com/blog/protect-wordpress-with-htaccess/

    Now the problem is that, the share icons, search icon, breadcrumb icon are not visble in amp theme..

    If i disable that htacess file the icons appear fine.

    Please advice the solution for this problem as we have to secure our installtion and make amp for wp also work fine.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘malicious code?’ is closed to new replies.

Tags