Viewing 4 replies - 1 through 4 (of 4 total)
  • I have added this exception to my definitions updates so that this plugin should not be identified as a threat any more.

    I agree that this code is not intended to be used maliciously in this plugin, it is only used to promote the authors website. However, you and the author should know that many hackers used this same example code to promote their malicious sites and execute XSS scripts on unsuspecting admins. Personally, I think the author should change the name of the admin notice function, if only to avoid conflicting with the same code from any other amateur programmer that copied the this example code and also didn’t change the function name.

    Thread Starter catmaniax

    (@catmaniax)

    Thanks for your input, I appreciate it.

    Plugin Author WP SITES

    (@wordpresssites)

    Thanks Eli. Changed the function name for the admin notice.

    Plugin Author WP SITES

    (@wordpresssites)

    Resolved

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Potential threat in code?’ is closed to new replies.