-hex_general_commands.csv | **General command detections.** This signature file can detect simple commands such as eval, require, include, unserialize, etc, often found in executable script files. If you happen to allow only very small, "non-binary" (i.e., plain-text) files, small image files for forum avatars and etc to be uploaded, and if your website only deals with low volumes of uploads, this signature file may be useful as a means to detect unwanted, obfuscated executable code and scripting hidden within such files, enabling phpMussel to identify such files as malicious, when they would otherwise appear benign. However, it should be noted that this particular signature file poses a **VERY** high false positive risk! If your phpMussel setup or your website's upload facility deals with more than low volumes of uploads, is expected to process "binary files", anything other than very small files, or is expected to process large images, videos, executable files, etc, then this particular signature file should, in most cases, be avoided.
0 commit comments