is there a chance to post the original one here or mega? I would like to compare the 3 versionsHold on, guys! check out this :
it comes from my original pro version of wprocket!
here is the file that may be infected :
lazyload-scripts.min.js
All clean
the one that he's working on is the one located here: https://github.com/wp-media/wp-rocket that's why sometimes they come with a version that is not officially realized yet! for example, version 3.12.5 is not out for the public yet! and it's here in the forum !!!is there a chance to post the original one here or mega? I would like to compare the 3 versions
The only diff in source code between Phan & Tomz posted files is this:
You will find original WP Rocket v3.12.5, here as pre release
github.com
nice,so no need to be afraid to install this plugin?All clean
==== BEFORE YOU CONTINUE READING ====
You do NOT need to edit anything! I have some free time so I decided to check this upload against the original WP Rocket files. I am doing this for those who are afraid of malware. Most people don't know how the plugin is patched so I wanted to check it and explain what is changed. If I give it a green checkmark, that means only necessary changes are made - no malicious code is added. If you want to know more about this patch - continue reading. If you do not care - just download the newest update and upload it on your site.
===============================
Patches applied in this upload:
- the validation server is intercepted using the "pre_http_request" hook
- rocket_valid_key() function is forced to always returns "true"
Additional changes I found:
- \inc\admin\admin.php
Function rocket_send_analytics_data() is disabled (always returns false)
Virustotal:
- The "Zillya Dropper.Bomgen.VBS.1" is false-positive, ignore it, there is no trace of any virus.
I can vouch for the version v3.12.4, I'll check the v3.12.5 and I'll let you know.
OK, I'll think about it again, and thanks for the suggestion, I'll try and research the code inside
Thanks for the info. Would be helpfull to know what type of errors and does one need to enable dabug to see them? Sofar the testing site work fine here, at least on the frontend
This has been discussed many times, in this thread.There is that warning after I save the settings ->
We couldn't generate the used CSS because you're using a nulled version of WP Rocket. You need an active license to use the Remove Unused CSS feature and further improve your website's performance.
And also there is a button with a promo code named IAMNOTAPIRATE
/?add-to-cart=191&coupon_code=iamnotapirate10
Version ->
wp-rocket_3.12.5
Yes there is an issue with the last update, got it from other source same issue. Roll back to 3.12.4. LEt's wait for next update but this one should be removed.
The plugin works fine. I even took the version with github.com and compared it with the one posted on the forum.
I didn't said there was a virus, just that this last version was creating conflict somewhere (probably a conflict with another plugin or theme). It seems like an infinite loop ongoing then gone once plugin was removed but nothing on the php log error related. Wouldn't had talk about if it wasn't for the other folks sharing the same issue. And Same issue with the one you have lastly shared.
What errors does the plugin give out on the site?
