Reply To: WebsiteDefender backdoor script

February 22, 2013 at 8:15 am #645

Member

Thanks for sending me the file. I’ve been looking at that code you sent me and it isÂ definitelyÂ a back-door (that does not mean that it is bad),Â back-doors can be very useful andÂ it’s pretty obvious that they intend to use it to help you. My worry is that their code could be vulnerable to exploitation. I can tell you that they have made many good attempts to secure and limit the use of this file to them alone. So, if you trust them, then it is probably fine to continue using this service. However “probably” is not good enough for me to white-list this back-door (I feel I have labeled it correctly and people should know what they have on their server).

The potential for this code to be exploited is notÂ erasedÂ in my mind. I will be testing this file even more thoroughly against specific attacks and may yetÂ decideÂ to while-list or at least downgrade it in the future if I find it to be completely safe.

Thanks again for your help in this matter and please let me know if there is anything else I can do.

Testimonials

First simple and useful tool. I have donated small amount of money. What was possible. Great job man :)
-- Kris Dustbrothers

Been using this on most sites I run for a number of years now. Have pretty tight security with iThemes Security Pro and Wordfence Pro. On the odd occasion something slips through and gotmls cleans up the mess. Ran into major problems today on a new site for a client. After panic stations gotmls sorted the problem out.
A must have piece of kit for every website I build.
Five stars+
-- Colin James

This is the best plugin out there to fix WordPress issues. We use it for many customers and never got disappointed. We donated for your great work. :-)
-- Tom Alexander Tepaß

Get Off Those Maliciously Loaded Scripts!
Download this free Anti-Malware Plugin for WordPress.