Support » Plugin: Anti-Malware Security and Brute-Force Firewall » more default extensions to skip

  • Resolved alx359

    (@alx359)


    Please consider adding webp,wpress to the list of default extensions to skip.

    webp is generated by many plugins as an alternative to jpg. wpress is the proprietary archive of the popular All-in-One WP Migration.

Viewing 1 replies (of 1 total)
  • Plugin Author Eli

    (@scheeeli)

    Thank you for this feedback. I will look into adding these to the list of default extensions to be skipped. Of course you know that you can add then your that list yourself in each of the sites that you install my plugin. Please also keep in mind that with every extension skipped there is the possibility that files with those extensions may contain malicious code instead of the expected binary content, and this exclusion could undermine the effectiveness of the scan. Other fail-safe measures would need to be present to ensure maximum security, such as the scrutiny of include and eval statements to make sure that they are not used to execute code in these new file types.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.