Title: Suspicious function found
Last modified: October 23, 2019

---

# Suspicious function found

 *  Resolved [jongag1](https://wordpress.org/support/users/jongag1/)
 * (@jongag1)
 * [6 years, 6 months ago](https://wordpress.org/support/topic/suspicious-function-found-3/)
 * Hi,
 * Guess it’s a false report from Defender. But just to be sure: Is it safe to ignore
   the below report?
 * gr, Age
    ————————————————-
 * jetpack-likes-settings, Suspicious function found
 * Issue Details:
 * We’ve uncovered suspicious code in /wp-content/plugins/jetpack/modules/likes/
   jetpack-likes-settings.php. The red highlighted code is the flagged code and 
   the green is the cleaned up code. Note that these warnings can be false positives,
   so consult your developer before taking action.
 * Error
 *     ```
       				if ( true == $db_state && ! $this->in_jetpack ) {
       					$g_gif = file_get_contents( 'https://pixel.wp.com/g.gif?v=wpcom-no-pv&x_likes=disabled_likes' );
       				if ( true == $db_state && ! $this->in_jetpack ) {
       ```
   
 * The function file_get_contents line 604 column 15 execute using unsanitize user
   inputs
 * Error
 *     ```
       				if ( false == $db_state && ! $this->in_jetpack ) {
       					$g_gif = file_get_contents( 'https://pixel.wp.com/g.gif?v=wpcom-no-pv&x_likes=reenabled_likes' );
       				if ( false == $db_state && ! $this->in_jetpack ) {
       ```
   
 * The function file_get_contents line 611 column 15 execute using unsanitize user
   inputs
 * Error
 *     ```
       				if ( true == $reblogs_db_state && ! $this->in_jetpack ) {
       					$g_gif = file_get_contents( 'https://pixel.wp.com/g.gif?v=wpcom-no-pv&x_reblogs=disabled_reblogs' );
       				if ( true == $reblogs_db_state && ! $this->in_jetpack ) {
       ```
   
 * The function file_get_contents line 620 column 15 execute using unsanitize user
   inputs
 * Error
 *     ```
       				if ( false == $reblogs_db_state && ! $this->in_jetpack ) {
       					$g_gif = file_get_contents( 'https://pixel.wp.com/g.gif?v=wpcom-no-pv&x_reblogs=reenabled_reblogs' );
       				if ( false == $reblogs_db_state && ! $this->in_jetpack ) {
       ```
   
 * The function file_get_contents line 627 column 15 execute using unsanitize user
   inputs

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Plugin Support [lizkarkoski](https://wordpress.org/support/users/lizkarkoski/)
 * (@lizkarkoski)
 * [6 years, 6 months ago](https://wordpress.org/support/topic/suspicious-function-found-3/#post-12058478)
 * Howdy –
 * Please let me know which site you’re experiencing this on. Share the URL here,
   or if you prefer, via [https://jetpack.com/contact-support/?rel=support](https://jetpack.com/contact-support/?rel=support)
 * Thanks so much!
 *  Plugin Support [lizkarkoski](https://wordpress.org/support/users/lizkarkoski/)
 * (@lizkarkoski)
 * [6 years, 6 months ago](https://wordpress.org/support/topic/suspicious-function-found-3/#post-12058497)
 * Ah. I found a previous report from yesterday with the same plugin. From the development
   team regarding this report:
 * > It’s fine. It’s not something we usually do in Jetpack, but it’s been like 
   > that since Likes were added to Jetpack, and it actually only runs on WordPress.
   > com, that code does not do anything in Jetpack.
   > You could open an issue in the Jetpack repo suggesting we update this, but 
   > it’s not a security issue, more of a WordPress Coding Standards change.
 *  Thread Starter [jongag1](https://wordpress.org/support/users/jongag1/)
 * (@jongag1)
 * [6 years, 6 months ago](https://wordpress.org/support/topic/suspicious-function-found-3/#post-12060889)
 * okay! thank you.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Suspicious function found’ is closed to new replies.

 * ![](https://ps.w.org/jetpack/assets/icon.svg?rev=2819237)
 * [Jetpack - WP Security, Backup, Speed, & Growth](https://wordpress.org/plugins/jetpack/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/jetpack/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/jetpack/)
 * [Active Topics](https://wordpress.org/support/plugin/jetpack/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/jetpack/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/jetpack/reviews/)

 * 3 replies
 * 2 participants
 * Last reply from: [jongag1](https://wordpress.org/support/users/jongag1/)
 * Last activity: [6 years, 6 months ago](https://wordpress.org/support/topic/suspicious-function-found-3/#post-12060889)
 * Status: resolved