Web Security Tools for Wordpress

Web Security Tools By VNetPublishing.Com

Copyright Ralph Ritoch 2012 - ALL RIGHTS RESERVED

Latest Version:

1.0.10 Cobra

Forum

Web Security Tools Forum

VNet Publishings Web Security tools WordPress Plugin will automatically monitor your site for php viruses and htaccess infections. If a virus is detected the system will attempt to automatically clean your site using known virus definitions. The latest version also supports automatic detection of new virus strains, and automatic creation of virus defintions. If the system is unable to clean the infection the site will be shutdown by renaming all of your .htaccess to .htaccess.########## files and installing a new .htaccess file to place your site into maintenance mode.

New Features in Cobra (version 1.0.9 and above)

• Shutdown Email Notifications
• Strike - Automatic creation of virus definitions
• Multi-Byte attack protection
• Blocks executable uploads (.php, .exe, .sh, etc.)
• Encrypted threat definitions
• Configuration panel in multisite installations now only available to network adminsitrators
• Threat definition folders blocked from the web with .htaccess files

Changes in version 1.0.10 Cobra

• Repaired bug in multi-byte checks when index is numeric
• Repaired bug in file upload checks when upload error has occured

Donations

If you want to see development of these tools and other VNetPublishing.Com free applications to continue, please donate.

Guide

1. The logger

   All activity by the security tools is logged to a file named websec.log which will be created in your document root folder.

2. Adding a custom definition

   If you have found a PHP virus or .htaccess infection than you will need to create a definition file. The definition file must contain the PHP code which must be removed to disable he virus. The definition is placed in the definitions folder.
   
   For a Virus
   
   wp-content/plugins/web-security-tools/phpwebsectools/modules/virus_clean/definitions
   
   For a .htaccess infection
   
   wp-content/plugins/web-security-tools/phpwebsectools/modules/htaccess_clean/definitions
   
   Definition files must be named with the extension of .static
   
   Note: To automate removal of an infection without your web site shutting down than the virus definition must exactly match the code the virus injected. This includes spaces and hidden characters.

3. Recovering from an infection

   • The first thing you must do is remove the virus. To do this you can add the virus you have as a static virus definition file. If the security system has already shut down your site, you will need to rename or delete all of the .htaccess files on your site.
     
     Next open your browser to the folowing page on in your wordpress installation.
     
     /wp-content/plugins/web-security-tools/phpwebsectools/clean.php
     
     
   • Manually re-install the web security tools plugin to ensure none of the sources have been corrupted.
   • Once your site is clean, you will need to uninstall and reinstall this plugin with a fresh copy to ensure it has not been altered in any way by the infection.
   • Modify or replace the .htaccess files created by this plugin to bring your site back online.

Donations

If you want to see development of these tools and other VNetPublishing.Com free applications to continue, please donate.