diff --git a/README.md b/README.md index eb1268d..22e8a07 100644 --- a/README.md +++ b/README.md @@ -32,9 +32,11 @@ To activate Web Shell Detector: Example: http://www.website.com/shelldetect.php -3) Inspect all strange files, if some of files look suspicious, send them to http://www.shelldetector.com team. After submitting your file, it will be inspected and if there are any threats, it will be inserted into a “web shell detector” web shells signature database. +3) Enter authentication information if needed (default user is "admin" with password "protect") -4) If any web shells found and identified use your ftp/ssh client to remove it from your web server (IMPORTANT: please be carefull because some of shells may be integrated into system files!). +4) Inspect all strange files, if some of files look suspicious, send them to http://www.shelldetector.com team. After submitting your file, it will be inspected and if there are any threats, it will be inserted into a “web shell detector” web shells signature database. + +5) If any web shells found and identified use your ftp/ssh client to remove it from your web server (IMPORTANT: please be carefull because some of shells may be integrated into system files!). Demo ---- @@ -87,4 +89,4 @@ Changelog - 1.1 fingerprint function change show line regex changed - - 1.0 first version \ No newline at end of file + - 1.0 first version diff --git a/shelldetect.php b/shelldetect.php index 8fb3e1f..226b3d0 100644 --- a/shelldetect.php +++ b/shelldetect.php @@ -395,7 +395,7 @@ private function anaylize() { private function fileprepare($file, $base64_content) { $filtered_file = filter_var($file, FILTER_SANITIZE_SPECIAL_CHARS); $key = $this->t('Negative') . ' (' . $this->t('if wrong') . ' ' . $this->t('submit file for analize') . ')'; - $key .= '