Backdoor:PHP/encoded.filewrite.8853

  • Resolved sam1215

    (@sam1215)


    5 years, 3 months ago

    I download your plugin yesterday morning and today Wordfence detected The issue type is: Backdoor:PHP/encoded.file write.8853 / Description: Decoding of a base64 encoded string with subsequent writing to file

    What is this all about? There is no file on my server.

    The page I need help with: [log in to see the link]

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Author Optimizing Matters

    (@optimizingmatters)

    5 years, 3 months ago

    While AO clearly use base64 and does write files to the filesystem, I have not seen WordFence complain about this totally normal behavior.

    Obviously it is also possible that something entirely different is coinciding with the installation of Autoptimize.

    Is there any indication in the WordFence warning that this is in any way related to Autoptimize?

    frank

    Thread Starter sam1215

    (@sam1215)

    5 years, 3 months ago

    No, but about two weeks ago had this Autoptimize plugin installed and the next day WordFence send me the same message. So I’m thinking it has to come from Autoptimize. At this time I deactivated this plugin and ran a scan so have no warning message yet.

    Plugin Author Optimizing Matters

    (@optimizingmatters)

    5 years, 3 months ago

    well, I can only say AO itself does indeed write files and does indeed use base64 but that that is totally normal. try getting more info from Wordfence maybe?

    Plugin Author Optimizing Matters

    (@optimizingmatters)

    5 years, 3 months ago

    any news on this @sam1215 ? were you able to identify the root issue?

    Plugin Author Optimizing Matters

    (@optimizingmatters)

    5 years, 2 months ago

    No feedback so I assume this got resolved? Feel free to follow up if you still encounter issues!

    have a nice day!
    frank

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Backdoor:PHP/encoded.filewrite.8853’ is closed to new replies.