Title: malicious code?
Last modified: July 30, 2019

---

# malicious code?

 *  Resolved [toshiamcbrowns](https://wordpress.org/support/users/toshiamcbrowns/)
 * (@toshiamcbrowns)
 * [6 years, 10 months ago](https://wordpress.org/support/topic/malicious-code-17/)
 * Hi,
 * I downloaded amp for wp plugin and further looking to swift/single.php I found
   encoded code like:
 * <amp-img src=”data:image/svg+xml;utf8;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iaXNvLTg4NTktMSI/
   Pgo8IS0tIEdlbmVy….
    ===
 * My question is why its encoded and how can we ensure that its not some malicious
   code?
 * Thanks,
    Toshi

Viewing 3 replies - 1 through 3 (of 3 total)

 *  [adamfartassi](https://wordpress.org/support/users/adamfartassi/)
 * (@adamfartassi)
 * [6 years, 10 months ago](https://wordpress.org/support/topic/malicious-code-17/#post-11780894)
 * Just lol. If it was put by the team which made this plugin, do you really think
   they’ll say “yeah, it’s a malicious code” you’re funny.
 * And moreover, you’re a bit inexperimenced to say that. Just run your “malicious
   code” through a Base64 decoder (like this: [https://www.base64decode.org/](https://www.base64decode.org/))
   and you’ll see that your code is just a svg code made with Adobe Illustrator.
 *  Plugin Author [Ahmed Kaludi](https://wordpress.org/support/users/ahmedkaludi/)
 * (@ahmedkaludi)
 * [6 years, 10 months ago](https://wordpress.org/support/topic/malicious-code-17/#post-11782162)
 * toshiamcbrowns, it’s an image added in its base format, which is totally right
   way to do it.
 * Believe me, We are a team of 25 people working hard day and night, we would never
   do or let anything malicious come closer to our users.
 *  Thread Starter [toshiamcbrowns](https://wordpress.org/support/users/toshiamcbrowns/)
 * (@toshiamcbrowns)
 * [6 years, 10 months ago](https://wordpress.org/support/topic/malicious-code-17/#post-11784752)
 * Thanks Kaludi for the clarification.
 * But I am facing a problem as:
 * I secured my WP by putting this code in .htaccess in wp-content folder:
 * ===
 * # BEGIN only media files are allowed to be uploaded
    Order deny,allow Deny from
   all <Files ~ “.(xml|css|jpe?g|png|gif|js|svg)$”> Allow from all </Files> # END
   only media files are allowed to be uploaded
 * ====
    like given at [https://www.cloudways.com/blog/protect-wordpress-with-htaccess/](https://www.cloudways.com/blog/protect-wordpress-with-htaccess/)
 * Now the problem is that, the share icons, search icon, breadcrumb icon are not
   visble in amp theme..
 * If i disable that htacess file the icons appear fine.
 * Please advice the solution for this problem as we have to secure our installtion
   and make amp for wp also work fine.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘malicious code?’ is closed to new replies.

 * ![](https://ps.w.org/accelerated-mobile-pages/assets/icon-256x256.png?rev=1693616)
 * [AMP for WP - Accelerated Mobile Pages](https://wordpress.org/plugins/accelerated-mobile-pages/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/accelerated-mobile-pages/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/accelerated-mobile-pages/)
 * [Active Topics](https://wordpress.org/support/plugin/accelerated-mobile-pages/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/accelerated-mobile-pages/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/accelerated-mobile-pages/reviews/)

## Tags

 * [encoded](https://wordpress.org/support/topic-tag/encoded/)

 * 3 replies
 * 3 participants
 * Last reply from: [toshiamcbrowns](https://wordpress.org/support/users/toshiamcbrowns/)
 * Last activity: [6 years, 10 months ago](https://wordpress.org/support/topic/malicious-code-17/#post-11784752)
 * Status: resolved