Suspicious function found

  • Resolved jongag1

    (@jongag1)


    5 years, 5 months ago

    Hi,

    Guess it’s a false report from Defender. But just to be sure: Is it safe to ignore the below report?

    gr, Age
    ————————————————-

    jetpack-likes-settings, Suspicious function found

    Issue Details:

    We’ve uncovered suspicious code in /wp-content/plugins/jetpack/modules/likes/jetpack-likes-settings.php. The red highlighted code is the flagged code and the green is the cleaned up code. Note that these warnings can be false positives, so consult your developer before taking action.

    Error

    				if ( true == $db_state && ! $this->in_jetpack ) {
					$g_gif = file_get_contents( 'https://pixel.wp.com/g.gif?v=wpcom-no-pv&x_likes=disabled_likes' );
				if ( true == $db_state && ! $this->in_jetpack ) {

    The function file_get_contents line 604 column 15 execute using unsanitize user inputs

    Error

    
				if ( false == $db_state && ! $this->in_jetpack ) {
					$g_gif = file_get_contents( 'https://pixel.wp.com/g.gif?v=wpcom-no-pv&x_likes=reenabled_likes' );
				if ( false == $db_state && ! $this->in_jetpack ) {

    The function file_get_contents line 611 column 15 execute using unsanitize user inputs

    Error

    
				if ( true == $reblogs_db_state && ! $this->in_jetpack ) {
					$g_gif = file_get_contents( 'https://pixel.wp.com/g.gif?v=wpcom-no-pv&x_reblogs=disabled_reblogs' );
				if ( true == $reblogs_db_state && ! $this->in_jetpack ) {

    The function file_get_contents line 620 column 15 execute using unsanitize user inputs

    Error

    
				if ( false == $reblogs_db_state && ! $this->in_jetpack ) {
					$g_gif = file_get_contents( 'https://pixel.wp.com/g.gif?v=wpcom-no-pv&x_reblogs=reenabled_reblogs' );
				if ( false == $reblogs_db_state && ! $this->in_jetpack ) {

    The function file_get_contents line 627 column 15 execute using unsanitize user inputs

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support lizkarkoski

    (@lizkarkoski)

    Howdy –

    Please let me know which site you’re experiencing this on. Share the URL here, or if you prefer, via https://jetpack.com/contact-support/?rel=support

    Thanks so much!

    Plugin Support lizkarkoski

    (@lizkarkoski)

    Ah. I found a previous report from yesterday with the same plugin. From the development team regarding this report:

    It’s fine. It’s not something we usually do in Jetpack, but it’s been like that since Likes were added to Jetpack, and it actually only runs on WordPress.com, that code does not do anything in Jetpack.

    You could open an issue in the Jetpack repo suggesting we update this, but it’s not a security issue, more of a WordPress Coding Standards change.

    Thread Starter jongag1

    (@jongag1)

    okay! thank you.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Suspicious function found’ is closed to new replies.