Skip to content

PHP2Shell Shield v1.3.4

Choose a tag to compare

View all tags
@AbodyStudio AbodyStudio released this 23 Oct 17:18
· 3 commits to main since this release
v1.3.4
2392f75

Breach-check false-positive fix (no other behaviour change).

  • The uploads scan previously reported any .php under wp-content/uploads as a hidden shell — including the standard // Silence is golden. index.php that WordPress core, many plugins, and this plugin's own uploads/php2shell-shield/backups/ folder legitimately create.
  • The scan now skips an index.php only when it is empty or comment-only (no executable PHP). Anything containing real PHP is still reported — verified against a live shell, a comment-then-eval() decoy, and an oversized "comment" file, which are all still flagged.

If your previous scan listed php2shell-shield/backups/index.php (or a similar silence file) as a breach, that was this false positive — not a real compromise.

Update arrives automatically on 1.1.1+ (signed + verified).

Built by AbodyStudio · support@abodystudio.com

Assets 4
Loading