-
VaultPress is alerting with this message soon after I installed and tried a couple test galleries:
“PHP.Generic.BadPattern.5
This code pattern is often used to run a very dangerous shell programs on your server. The code in these files needs to be reviewed, and possibly cleaned.
1 File Affected
Middleware.php
/wp-content/plugins/fv-wordpress-flowplayer/includes/aws/GuzzleHttp”What’s the deal?
-
-
Hello Dave,
no need to worry. This is actually the AWS PHP library: https://aws.amazon.com/sdk-for-php/. The specific file you have mentioned can be found here – https://github.com/aws/aws-sdk-php/blob/master/src/Middleware.php, so feel free to take a look at it and compare if that’s the same file as what you have.
We got alterted about this before, I wish there would be some way to fix this. We could alter that file to make sure it’s not detected, but at the same time we would like to get rid of the AWS library in our plugins and install some other plugin for it automatically, as not everybody uses it and it’s a lot of code to carry around in our plugin.
Thanks,
Martin
