[Support request] suspicious code according to anti-malware scan

[Patricia]

Hi guys, I run an anti-malware scan on my site and the program told that some files of generatepress could be infected. I would like to share with you the suspicious lines/codes to ask you if you recognize them or if you think they are actually malicious code the were injected please!

Here we have the codeas:

1. …/public_html/wp-content/plugins/gp-premium/elements/class-hooks.php

Potential malicious code:

`if ( $this->php && GeneratePress_Elements_Helper::should_execute_php() ) {
ob_start();
eval( ‘?>’ . $content . ‘<?php ‘ ); // phpcs:ignore — Using eval() to execute PHP.
echo ob_get_clean(); // phpcs:ignore — Escaping not necessary.
} else {
echo $content; // phpcs:ignore — Escaping not necessary.
}

[Patricia]

2. ?…/public_html/wp-content/plugins/gp-premium/hooks/functions/hooks.php

Potential malicious code:

`
if ( ‘true’ == $php && ! defined( ‘GENERATE_HOOKS_DISALLOW_PHP’ ) ) {
eval( “?>$value<?php ” );
} else {
echo $value;
}
}
}

Thanks for the help!

[David]

Hi there,

that code is fine.
its what GP uses to allow you to add PHP to a GP Hook Element.
You can safely ignore those warnings.

[Patricia]

super! thank you for your quick support! have a nice day!!

[David]

You’re welcome – and you too!

[Author]

Posts