View Issue Detail

ID	Project	Category	Submitted / Last Updated
00776	UserSpice	Misc	2020-01-08 10:54:44 / 2020-07-22 20:05:52
Reported	John Skliros	Assigned To	Unassigned
Priority	none	Reported	5.0.08
Status	closed	Resolution Version and Commit
Summary	cpGuard targeting backup_util.php as malware
Description	<p>I have spent a couple of days trying to install both 5.0.8 and 5.0.7 (clean installs) on a server that has quite happily run 4.x.x, but each attempt resulted in a 500 error 10-20 seconds after first log in.</p> <p>The server admins discovered that their malware detector (cpGuard) was flagging up backup_util.php as containing a dircopy virus and quarantining the file. After manually checking the contents, the admins whitelisted the file. 5.0.8 now installs, although there are some irregularities (Spice Shaker reverts to a 'Please Wait' when trying to install anything from a remote source). It is not clear if they are related.</p>

November 2021

<p>Cannot duplicate. My guess is that it has to do with the folder traversal stuff it does to actually backup the files.</p>
November 2021

<p>This doesn't appear to be an issue we can resolve. It sounds like the malware scanner is doing its job and caught the script performing a dircopy as its meant to.</p>