Malicious Code? | Wordpress Support | Forum Archive

The free forums are no longer in use. It remains available as read-only archive.

Lost password?

Home
Forum Archive
Wordpress Support
Malicious Code?

The forums are currently locked and only available for read only access

Topic RSS

Malicious Code?

February 21, 2014
5:37 pm

matt

Member

Members

Forum Posts: 4

Member Since:
November 6, 2013

Offline

Hi! I use WordFence security plugin with WP, and it recently reported what it thought to be malicious code inserted into Xcloner. The offending line is:

if($_REQUEST['use_mysqldump'] == 1){

echo shell_exec($_REQUEST['mysqldump_path']." -u ".$_REQUEST[mysql_username]." -p".$_REQUEST[mysql_pass]." -h ".$_REQUEST[mysql_server]." ".$_REQUEST[mysql_db]." < ".$sqlfile);

return;

Which is part of

function populate_db

Is that code snippet legit? Thanks.

February 21, 2014
5:43 pm