Suspicious function found

Defender found suspicious code in the Oxygen plugin, that can be a potential security threat. I’ve contacted the plugin’s developers and they said that there is nothing to worry about. Would you please elaborate on the code that was marked as a potential security threat? Please, advise why the following code can be a threat?

eval(‘return (‘.$logic.’:wink: !== false;’:wink:;

eval(‘ ?>’.$code_php.'<?php ‘:wink:;

eval(” ?>”.$GLOBALS->param_array.”<?php “:wink:;

eval(“?> “.$options.”<?php “:wink:;

  • Nithin Ramdas
    • Support Wizard

    Hi Alexandru,

    Hope you are doing good today. :slight_smile:

    Eval is an inbuilt PHP function, the function by itself isn’t vulnerable, but it depends upon how the eval() function is used in a plugin, and if not implemented correctly there are chances it could lead to potential vulnerability issues.

    Due to this nature what Defender plugin does is highlight eval and base64 functions to bring into the user’s attention, as these could be exploited. If the plugin is from trustable source then such notices are safe to ignore.

    When such scans results are encountered, would highly recommend you to bring this into the plugin developers attention, and check with the developer to see whether it’s safe

    Since you have already done that, and the developer has stated it should be fine, you can mark the scan results for the mentioned plugin as “Ignore” so Defender would treat it as a false positive.

    I hope it’s clear now. Please let us know if you have any further query. Have a nice day ahead.

    Best Regards,

    Nithin