[Plugin: Amazon Discount Finder] Is this plugin legitimate? (2 posts)

  1. Mike Little
    Posted 6 years ago #

    * The plugin download does not include a licence file, nor explicitly state the licence in the code.
    * The logic looks like it might use the author's Amazon affiliate code 2 in 10 times, not 1 in 10 as stated. And always if not yet configured.
    * The plugin enqueues a js file from the author's site which contains their Amazon codes again, but which could be changed at any time to execute any arbitrary JavaScript code.
    * The author is leaving inappropriate comments on unrelated blog posts advertising the plugin! And under different names!


  2. STRuk
    Posted 6 years ago #

    Thanks Mike, I was about to install it but after seeing that it executes a remote js file, it's not worth the security risk. I'll hire someone or use another.

Topic Closed

This topic has been closed to new replies.

About this Topic