Title: Eli's Replies - page 17 | WordPress.org --- # Eli [ ](https://wordpress.org/support/users/scheeeli/) * [Profile](https://wordpress.org/support/users/scheeeli/) * [Topics Started](https://wordpress.org/support/users/scheeeli/topics/) * [Replies Created](https://wordpress.org/support/users/scheeeli/replies/) * [Reviews Written](https://wordpress.org/support/users/scheeeli/reviews/) * [Topics Replied To](https://wordpress.org/support/users/scheeeli/replied-to/) * [Engagements](https://wordpress.org/support/users/scheeeli/engagements/) * [Favorites](https://wordpress.org/support/users/scheeeli/favorites/) Search replies: ## Forum Replies Created Viewing 15 replies - 241 through 255 (of 2,029 total) [←](https://wordpress.org/support/users/scheeeli/replies/page/16/?output_format=md) [1](https://wordpress.org/support/users/scheeeli/replies/?output_format=md) [2](https://wordpress.org/support/users/scheeeli/replies/page/2/?output_format=md) [3](https://wordpress.org/support/users/scheeeli/replies/page/3/?output_format=md)… [16](https://wordpress.org/support/users/scheeeli/replies/page/16/?output_format=md) 17 [18](https://wordpress.org/support/users/scheeeli/replies/page/18/?output_format=md)… [134](https://wordpress.org/support/users/scheeeli/replies/page/134/?output_format=md) [135](https://wordpress.org/support/users/scheeeli/replies/page/135/?output_format=md) [136](https://wordpress.org/support/users/scheeeli/replies/page/136/?output_format=md) [→](https://wordpress.org/support/users/scheeeli/replies/page/18/?output_format=md) * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Anti-Malware Security and Brute-Force Firewall] Got stuck, got stuck (at 99%)](https://wordpress.org/support/topic/got-stuck-got-stuck-at-99/) * Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/) * (@scheeeli) * [5 years, 1 month ago](https://wordpress.org/support/topic/got-stuck-got-stuck-at-99/#post-14620475) * 6 days? that’s way too long! * Just so you know it shouldn’t take more than an hour for the Complete Scan to finish, otherwise there is definitely something wrong with your server. The average site hosted on any of my own servers only takes around 10 to 20 minutes to finish the Complete Scan on the whole site. I’ve seen it take over an hour on some other server which are either under-powered or overburdened, but it should never take 6 days, that make the scan almost useless. * You should talk to your hosting provider about all this. They should be able to tell you about your memory limits and database restrictions and help you access your database to find out how many records your tables have. You can also ask them about your error_log files so that you can find out what sort of errors are causing the site and the scan to take so long. * If they are not helpful and cooperative (or maybe even if they are) you might want to thing about finding another place to host your site. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Anti-Malware Security and Brute-Force Firewall] Got stuck, got stuck (at 99%)](https://wordpress.org/support/topic/got-stuck-got-stuck-at-99/) * Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/) * (@scheeeli) * [5 years, 1 month ago](https://wordpress.org/support/topic/got-stuck-got-stuck-at-99/#post-14596620) * It looks like your scans are getting stuck on the DB Scan. To verify this you could un-check the Database Injections option under “What to look for”. and run the Complete Scan to see if it finishes. * If your server is having issues only on the DB Scan then it is probably something to do with the settings or limitations on the DB server. Maybe it’s a low memory limit or a query time limit. How many records do you have in your wp_posts table? * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Anti-Malware Security and Brute-Force Firewall] FW_Traversal](https://wordpress.org/support/topic/fw_traversal/) * Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/) * (@scheeeli) * [5 years, 2 months ago](https://wordpress.org/support/topic/fw_traversal/#post-14559677) * I have not seen any emails from you yet and I look forward to helping you find the solution to this issue. Please let me know if you figure it out or if you need more help. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Anti-Malware Security and Brute-Force Firewall] FW_Traversal](https://wordpress.org/support/topic/fw_traversal/) * Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/) * (@scheeeli) * [5 years, 2 months ago](https://wordpress.org/support/topic/fw_traversal/#post-14549474) * Maybe it was something like /etc/ or maybe it was a hidden field. * If this is a consistent and repeatable occurrence then maybe you could provide me with HTML of the completed form that is getting blocked/redirected so that I can check it against the current firewall pattern to see what it causing it to be flagged as a directory transversal? * You can email me with any content examples if you don’t want it to be posted on this public forum: eli AT gotmls DOT net * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Anti-Malware Security and Brute-Force Firewall] FW_Traversal](https://wordpress.org/support/topic/fw_traversal/) * Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/) * (@scheeeli) * [5 years, 2 months ago](https://wordpress.org/support/topic/fw_traversal/#post-14549232) * This is the Directory Transversal protection in the Firewall Options. This feature prevents the submission of any variable that contains ../ in the value, which protects you against the potential exploitation of some themes and plugins that might otherwise allow a hacker to read or write to an arbitrary file on your server. * You can look into the contents of the form that you posted on your site that got redirected and see if you can spot the usage of ../ in one of that field values, or you can just turn this feature off on the Firewall Options page in your wp-admin (but understand that you may be leaving your site open to a directory transversal attack if you have any vulnerable plugins or theme feature that could be exploitable if you turn off this option). * Feel free to write back with more detail if figure out why this form was getting blocked or if you need more help to figure it out. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Anti-Malware Security and Brute-Force Firewall] Gdpr and privacy policy](https://wordpress.org/support/topic/gdpr-and-privacy-policy/) * Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/) * (@scheeeli) * [5 years, 3 months ago](https://wordpress.org/support/topic/gdpr-and-privacy-policy/#post-14402188) * No, as my plugin does not store any cookies I have no need to make a page that discloses cookies. * Why would your policy need to link to or reference every single plugin you use on your site? I think you only need to disclose your usage of cookies and that of any other plugin that you utilize which also uses cookies. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Anti-Malware Security and Brute-Force Firewall] Gdpr and privacy policy](https://wordpress.org/support/topic/gdpr-and-privacy-policy/) * Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/) * (@scheeeli) * [5 years, 3 months ago](https://wordpress.org/support/topic/gdpr-and-privacy-policy/#post-14400082) * My plugin does not store any cookie data for any visitors who come into contact with your site. * Please let me know if that does not cover it and you need any more info. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Anti-Malware Security and Brute-Force Firewall] Detects but cannot remove malware this time =/](https://wordpress.org/support/topic/detects-but-cannot-remove-malware-this-time/) * Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/) * (@scheeeli) * [5 years, 3 months ago](https://wordpress.org/support/topic/detects-but-cannot-remove-malware-this-time/#post-14387662) * I think I have fixed this issue but I’m not sure why this file was identified as a known threat in the first place. Can you both please confirm what version of PHP is installed on your server? * Also, please download the latest definition updates and then run the Complete Scan again to confirm that this file is no longer detected as a known threat. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Anti-Malware Security and Brute-Force Firewall] Detects but cannot remove malware this time =/](https://wordpress.org/support/topic/detects-but-cannot-remove-malware-this-time/) * Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/) * (@scheeeli) * [5 years, 3 months ago](https://wordpress.org/support/topic/detects-but-cannot-remove-malware-this-time/#post-14386353) * I would like to help you fix this issue but I will need to see the whole of the malicious code that was injected in that file.php … Can you please email that infected file so that I can see what is going wrong with it? * You can email me the whole file with the infection in it directly to me: eli AT gotmls DOT net * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Anti-Malware Security and Brute-Force Firewall] GOTMLS no longer working?](https://wordpress.org/support/topic/gotmls-no-longer-working/) * Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/) * (@scheeeli) * [5 years, 4 months ago](https://wordpress.org/support/topic/gotmls-no-longer-working/#post-14295848) * This looks like a new threat that might not be in my latest definitions. Can you please send me the full contents of one of those files so that I can add this new threat to my definition updates? * You can email the infected file or files to me directly: eli AT gotmls DOT net * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Anti-Malware Security and Brute-Force Firewall] When will you update the plugin?](https://wordpress.org/support/topic/when-will-you-update-the-plugin-2/) * Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/) * (@scheeeli) * [5 years, 4 months ago](https://wordpress.org/support/topic/when-will-you-update-the-plugin-2/#post-14295845) * Thanks, There is not as much of a need for plugin updates as you might think. My plugin works well and you can download definition update of new threats without updating the core plugin code. Therefore, there are only plugin updates when I an releasing a completely new feature or fixing a bug in the program. I am working on a few new feature that I hope to release soon, so there will actually be a new plugin update as soon as I have finished and tested these updates. * Rest assured, the current version of my plugin if fully compatible with the latest release of WordPress, and I am constantly releasing new definition updates as new threats emerge. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Anti-Malware Security and Brute-Force Firewall] GOTMLS found malware in GOTMLS](https://wordpress.org/support/topic/gotmls-found-malware-in-gotmls/) * Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/) * (@scheeeli) * [5 years, 5 months ago](https://wordpress.org/support/topic/gotmls-found-malware-in-gotmls/#post-14202460) * That issue was caused by a false positive that I corrected this morning in my latest definition updates. Please make sure you have download the latest definition updates on all your sites before scanning again. Sorry for the inconvenience. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Anti-Malware Security and Brute-Force Firewall] False positive in GOTMLS code?](https://wordpress.org/support/topic/false-positive-in-gotmls-code/) * Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/) * (@scheeeli) * [5 years, 5 months ago](https://wordpress.org/support/topic/false-positive-in-gotmls-code/#post-14202010) * Thanks so much for reporting this. Yes, this is a false positive in the definition updates that I released last night. I have just released a new definition update to correct this issue. Please download the latest definition updates ( L3I4w ) before running the scan again. * Sorry for any trouble this might have caused and thanks again for spotting my mistake and bringing it to my attention. * Aloha, Eli * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Anti-Malware Security and Brute-Force Firewall] Full scan stuck at 0%](https://wordpress.org/support/topic/full-scan-stuck-at-0/) * Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/) * (@scheeeli) * [5 years, 5 months ago](https://wordpress.org/support/topic/full-scan-stuck-at-0/#post-14168733) * A screenshot would be helpful so that I would see what it’s getting stuck on. There could be interference from another plugin, so it would great if you can open the Console tab in your browser’s Inspector so that we can see if it’s a JavaScript error. If there are no JavaScript errors then you can check the error_log files on your server for any PHP errors that might shed some light on why it’s getting stuck. * You can send any of these further details directly to me if you don’t want to post that stuff on this public forum. eli AT gotmls DOT net * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Anti-Malware Security and Brute-Force Firewall] shedule scan](https://wordpress.org/support/topic/shedule-scan/) * Plugin Author [Eli](https://wordpress.org/support/users/scheeeli/) * (@scheeeli) * [5 years, 6 months ago](https://wordpress.org/support/topic/shedule-scan/#post-14054892) * I have been steadily working towards a scheduled scan feature but this has proved more difficult to implement than I had thought and I will need more time to work transform the scan engine so that it can run without a browser console. Also, a lot of thing in my life have changed so I have not had as much free time lately to work on new features. Life happens ;-/ * Yes, you can delete the records in your Anti-Malware Quarantine, but these are just records of the infections and they are not dangerous to keep. It can also sometime prove to be very helpful to have these records to refer to if you need to track down the source of any recurring infections. * To delete all quarantine records just check the box next to “Check all Items in Quarantine”, then click the red Delete button, then you can click the link to Purge the deleted records if you are sure that you want to completely erase all the records of these infected files. Viewing 15 replies - 241 through 255 (of 2,029 total) [←](https://wordpress.org/support/users/scheeeli/replies/page/16/?output_format=md) [1](https://wordpress.org/support/users/scheeeli/replies/?output_format=md) [2](https://wordpress.org/support/users/scheeeli/replies/page/2/?output_format=md) [3](https://wordpress.org/support/users/scheeeli/replies/page/3/?output_format=md)… [16](https://wordpress.org/support/users/scheeeli/replies/page/16/?output_format=md) 17 [18](https://wordpress.org/support/users/scheeeli/replies/page/18/?output_format=md)… [134](https://wordpress.org/support/users/scheeeli/replies/page/134/?output_format=md) [135](https://wordpress.org/support/users/scheeeli/replies/page/135/?output_format=md) [136](https://wordpress.org/support/users/scheeeli/replies/page/136/?output_format=md) [→](https://wordpress.org/support/users/scheeeli/replies/page/18/?output_format=md)