Malware or false positive

class-pagespeedninja-public.php uses modification time (via PHP’s filemtime function) of pagecache.stamp file to know when to start clearing the cache directory.

ress/classes/helper.php contains encode and decode functions (wrappers on top of gzdeflate/gzinflate) that were used in the past for another project (based on our RESS framework), and currently are kept for backward compatibility only. PageSpeed Ninja doesn’t use them.

Anyway, PageSpeed Ninja is open source, so that you can check it yourself.

Hi Denis,

thank you for your (very) quick response!

Since i’m not that good in php i can’t draw conclusions like you did, eventhough it’s open source. So i’m thankful for your description of the malware message.

So it seems like the malware scanner is quite a bit overprotective, right?

Jan

> So it seems like the malware scanner is quite a bit overprotective, right?

Usually it gives you hints that should be checked manually. Such scanners are not AI and unable to reliably distinguish between valid and dangerous codes (scanners are just based on some heuristics), so false positives are possible, but as you are “not that good in php”, it’s better to trust scanners than to don’t trust.

makes sense, thank you!