Virus removal
PHP
Website engine: WordPress
The following work has been completed
- checksums of the core and plugins have been verified using WP CLI. Detected virus files have been removed in this way
- plugins/core have been updated
- unlicensed plugins without a key have been replaced with similar open-source ones
- access to theme/custom plugin files has been restricted using .htaccess directives
- a check has been added to theme/custom plugin files to see if a certain WordPress constant is set; if not set, exit the program,
- other directories have been scanned, including wp-content/uploads for the presence of php files.
- the theme/custom plugins have been checked for SQL injection/XSS vulnerabilities and others. For example, wpdb->prepare, esc_html/esc_attr have been added
- WordPress cryptographic data has been replaced
The following work has been completed
- checksums of the core and plugins have been verified using WP CLI. Detected virus files have been removed in this way
- plugins/core have been updated
- unlicensed plugins without a key have been replaced with similar open-source ones
- access to theme/custom plugin files has been restricted using .htaccess directives
- a check has been added to theme/custom plugin files to see if a certain WordPress constant is set; if not set, exit the program,
- other directories have been scanned, including wp-content/uploads for the presence of php files.
- the theme/custom plugins have been checked for SQL injection/XSS vulnerabilities and others. For example, wpdb->prepare, esc_html/esc_attr have been added
- WordPress cryptographic data has been replaced