{"id":16320069,"date":"2022-12-26T08:44:24","date_gmt":"2022-12-26T08:44:24","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/sql-injection-attempt\/"},"modified":"2022-12-26T08:44:24","modified_gmt":"2022-12-26T08:44:24","slug":"sql-injection-attempt","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/sql-injection-attempt\/","title":{"rendered":"SQL injection attempt"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Hello,<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">My site has been the victim of an SQL injection attempt via this plugin.<br \/>The target file is: \/plugins\/kirki\/packages\/kirki-framework\/module-webfonts\/src\/Webfonts\/Downloader.php<br \/><br \/><em>mysite.com [Sun Dec 25 00:00:16.798343 2022] [-:error] [pid 166256:tid 140154672981760] [client 127.0.0.1:44292] FastCGI: server &#8220;\/home\/clients\/5ze5riuhA1zeu7eh79u6sd4uzR3uz5u\/.config\/apache\/mysite.com\/.fpm\/php5.external&#8221; stderr: \/home\/clients\/5ze5riuhA1zeu7eh79u6sd4uzR3uz5u\/web\/wp-content\/plugins\/kirki\/packages\/kirki-framework\/module-webfonts\/src\/Webfonts\/Downloader.php on line 47PHP message: PHP Warning: array_keys() expects parameter 1 to be array, string given in \/home\/clients\/5ze5riuhA1zeu7eh79u6sd4uzR3uz5u\/web\/wp-content\/plugins\/kirki\/packages\/kirki-framework\/module-webfonts\/src\/Webfonts\/Downloader.php on linexPHP message: PHP Warning: array_values() expects parameter 1 to be array, string given in \/home\/clients\/5ze5riuhA1zeu7eh79u6sd4uzR3uz5u\/web\/wp-content\/plugins\/kirki\/packages\/kirki-framework\/module-webfonts\/src\/Webfonts\/Downloader.php on line xxxHP message: PHP Warning: Ixxxxxxxxxxxxxxxt &#8216;https:\/\/fonts.gstatic.com\/s\/rubik\/v23\/iqszezeze<\/em><br \/><br \/>My web host reacted quickly.<br \/>Is it possible to set up protections on the plugin or on these files?<br \/>Thanks for your help.<\/p>\n","protected":false},"template":"","class_list":["post-16320069","topic","type-topic","status-publish","hentry","topic-tag-sql-injection"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/16320069","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/16320069\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=16320069"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}