Support » Plugin: Ultimate Security Checker » [Plugin: Ultimate Security Checker] Cloudflare causes a false positive

  • If you’ve connected your site to Cloudflare, run_test_23() will throw a false positive, because the server header returned is ‘cloudflare-nqinx’, as opposed to ‘apache’ or ‘nqinx’ which you’re currently looking for.

    This could be fixed by changing the code in run_test_23 (line 858 of securitycheck.class.php) and replacing:

    preg_match("/^(apache|nginx)$/i",$response['headers']['server']) === 0

    with

    preg_match( "/^(apache|nginx|cloudflare\-nginx)$/i", $this->response['headers']['server'] ) === 0

    There may be a better way to do this, but I needed a quick hack.

    http://wordpress.org/extend/plugins/ultimate-security-checker/

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
  • The topic ‘[Plugin: Ultimate Security Checker] Cloudflare causes a false positive’ is closed to new replies.