ZenphotoCMS Forum
WordFence reports suspicious code in ZenPhoto file - Printable Version

+- ZenphotoCMS Forum (https://forum.zenphoto.org)
+-- Forum: Support (https://forum.zenphoto.org/forum-1.html)
+--- Forum: General support (https://forum.zenphoto.org/forum-4.html)
+--- Thread: WordFence reports suspicious code in ZenPhoto file (/thread-12563.html)



WordFence reports suspicious code in ZenPhoto file - pwforaker - 2016-08-13

After several months of quietude, WordFence today started sending me this message:

  • File appears to be malicious: …/zp-core/zp-extensions/viewer_size_image.php

I immediately downloaded the latest version of ZenPhoto and compared that file with the one on the server. They are identical.

Next steps?

-- Paul




WordFence reports suspicious code in ZenPhoto file - pwforaker - 2016-08-13

I've reported what appears to be a false positive to the WordFence support team.




WordFence reports suspicious code in ZenPhoto file - acrylian - 2016-08-14

Thanks, reporting is best. If they insist, we need to know why actually. Although it is quite usual also for server side security measures to be a bit too tight at times.