Obfuscated Code!
-
Stay away from this plugin, the sourcecode is full of base64 obfuscated code!
-
In which file you found base64 obfuscated code?
WordPress.org does’t allow this code? Could you show us sample?
@jdembowski we don’t have base64 obfuscated in our plugin file. I think, it’s an intentional negative review. Could you check it please.
Thank you
The files with base64 code are:
woo-variation-gallery/assets/css/theme-support.css
woo-variation-gallery/assets/css/slick.css
woo-variation-gallery/assets/css/frontend.css
woo-variation-gallery/assets/css/gwp-admin-notice.css
woo-variation-gallery/assets/css/gwp-admin.css
woo-variation-gallery/assets/css/admin.css
woo-variation-gallery/assets/js/theme-support
woo-variation-gallery/assets/js/gwp-admin.js
woo-variation-gallery/assets/js/frontend.js
woo-variation-gallery/assets/js/admin.jsSample code in woo-variation-gallery/assets/css/theme-support.css (a short one) on line 9:
/*# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYXNzZXRzL2Nzcy90aGVtZS1zdXBwb3J0LmNzcyIsInNvdXJjZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7OzsiLCJzb3VyY2VSb290IjoiIn0=*/Thank you.
These are SourceMap, not anything suspicious. If you don’t have idea about source map, check here: https://blog.teamtreehouse.com/introduction-source-maps
@jdembowski and other moderators reviewed our closely, you can ask them.
If our code are Obfuscated, will wp.org allow us?
Thank You
@wpeshaan That is indeed obfuscated code, please check your email for a message from the Plugin Review Team
@tiberiumanolache In the future, if you see that, please just email us directly at
[email protected]– Thank you for your report!Has this plugin completely removed? Actually, many of my projects are on it. It’s been more than 2 weeks, I couldn’t download this plugin.
Is there any chances to come back?
Thank You
The plugin page tells you the status
I will say that the vast majority of cases can be resolved, and most plugins can be restored. The plugin developer has been notified.
so its safe now?
The topic ‘Obfuscated Code!’ is closed to new replies.