How to ignore a single PHP file in all websites
I want to ignore CONFIGSERVER warnings for a single file, "STATE.php", on all websites.
I tried this code but it appears to not be working as I'm still getting warnings.
Any ideas?
'/home/XXXXXXXX/public_html/plugins/system/bfnetwork/bfnetwork/tmp/STATE.php'
Universal decode regex match = [universal decoder]I tried this code but it appears to not be working as I'm still getting warnings.
# bypass MySites STATE.php file
# Joomla
cmd:/usr/bin/php /usr/local/cpanel/public_html/plugins/system/bfnetwork/bfnetwork/tmp/STATE.php
# Wordpress
cmd:/usr/bin/php /usr/local/cpanel/public_html/wp-content/plugins/mywpguru/bfnetwork/tmp
Any ideas?
-
# bypass MySites STATE.php file # Joomla cmd:/usr/bin/php /usr/local/cpanel/public_html/plugins/system/bfnetwork/bfnetwork/tmp/STATE.php # Wordpress cmd:/usr/bin/php /usr/local/cpanel/public_html/wp-content/plugins/mywpguru/bfnetwork/tmp
Is the mentioned line added to file /etc/csf/csf.pignore ?0 -
Is the mentioned line added to file /etc/csf/csf.pignore ?
Yes. In fact the following Code is what I have in the /etc/csf/csf.pignore file.# bypass MySites STATE.php file # Joomla cmd:/usr/bin/php /usr/local/cpanel/public_html/plugins/system/bfnetwork/bfnetwork/tmp/STATE.php # Wordpress cmd:/usr/bin/php /usr/local/cpanel/public_html/wp-content/plugins/mywpguru/bfnetwork/tmp0 -
I believe the message that you are quoting is from CXS (exploit scanner) not CSF (firewall). The ignore file for CXS is /etc/cxs/cxs.ignore and I believe the syntax would be: hfile:/public_html/plugins/system/bfnetwork/bfnetwork/tmp/STATE.php0 -
It is actually the /etc/csf/csf.pignore where I put your code. So I have added your code to the /etc/cxs/csx.ignore file. 0
Please sign in to leave a comment.
Comments
5 comments