Photo Gallery Forums

Hello, Karl!

I have some trouble with antivirus software of my virtual hosting.
They blocked my account because they found malicious code in this file
..httpdocs/panel/x3_htaccess.php

Description:
Antivirus signatures: php.post.file.put.contents
Revealed properties:
  * Manipulates the values of POST variables/forms.

Can you help me?

morgenius wrote:I have some trouble with antivirus software of my virtual hosting.
They blocked my account because they found malicious code in this file
..httpdocs/panel/x3_htaccess.php

Description:
Antivirus signatures: php.post.file.put.contents
Revealed properties:
  * Manipulates the values of POST variables/forms.

Where did you get this information from? What is the malicious code? You can find the official file x3_htaccess.php in the link below, and there is nothing malicious about it:
https://github.com/mjau-mjau/x3/blob/ma ... access.php

The file_put_contents() functions is used to write data to a file, which is necessary if X3 is going to try to write the .htaccess file automatically. It's not unusual to have "firewall" security features on server, but not really "anti-virus" ... Besides, what "virus" is this then? Where is the malicious code? Either your hosting is reacting stupid, or this file has been hacked by someone else (feel free to send a copy to me). I really can't say anything else than that ... Servers that react to false positives are not configured correctly, and I can't help that.

Sorry, almost had to read this again, it's silly. What anti-virus is this?

Karl, I'm sorry for this.
Hosting support just answered: "System department checked the file, false positive. The lock is removed, the file is added to the exclusions. We apologize for the inconvenience caused."

Glad it's solved!