Plugin Support
Nick C
(@modernnerd)
The plugin’s public commit history is visible here:
The latest version of class-listings.php uses agentpress-listings as the text domain, and not the apl from your screenshot. It also uses ‘public’ and not ‘var’. https://plugins.trac.ww.wp.xz.cn/browser/agentpress-listings/tags/1.2.6/includes/class-listings.php#L28
However, the change you mention does not look malicious to me; it seems like the result of a find-replace operation for agentpress-listings to apl and public to var. Perhaps such a change was made if you’ve already been editing the plugin files directly.
Although the plugin has not received a recent update, these forums are monitored and the plugin is safe to continue using.
Thanks for the über fast response Nick!
It’s strange though…I had not changed anything outside of the “Basement” > “Occupied?” text in that file myself and that was more than a year ago, possibly longer.
So I let Wordfence roll it back to the original file and it reflects the “agent press-listings” again (mirroring the code that you linked). I updated line #39 from “Basement” to “Occupied?” again.
Afterward I ran a Wordfence scan and it picked up my change, but everything else matches:
Agent Press Listing Update
The listings are still functioning normally and site appears to be working fine so there don’t appear to be any ill effects.
Still…it’s odd that the file was changed somehow.
Thanks again for the great support!
Plugin Support
Nick C
(@modernnerd)
You’re welcome!
Looking at the commit history for that file, the text domain did used to be apl. Maybe you edited an old version locally and pushed the changes to the remote site (overwriting the longer text domain), or otherwise modified an older version.
Well done for putting it right, anyway.
Thanks Nick. I’m sure you’re theory is right now that I think about it, makes perfect sense. Mistake on my part.
Odd that Wordfence only picked up on it just now though. Perhaps they recently updated their database, who knows?
Thanks again!
