Version 1.0.2 Released

FujitsuBoy — Mon, 04 Jul 2005 15:55:26 -0000

Minor point release today, with a few improvements:

* 164 new "virus definitions"
* Support for HTML, CSS, Javascript, VB Script, text files, flat data files and CGI scripts
* Modular configuration file, with defaults if not found

Like I said, minor point release :)

PHP AntiVirus 1.0.1 Released

FujitsuBoy — Fri, 24 Jun 2005 09:02:20 -0000

Bug Fixes
- Register_globals vulnerability patched
- Checking file permissions on 'virus.def' before execution

Improvements
- Rewritten documentation
- Used more efficient string container
- 2 new virus definitions
- Added new file extensions to scan

Thanks to tobozo and gossi for their contributions.

3 Vulnerabilities in V1.0.0

FujitsuBoy — Thu, 23 Jun 2005 23:16:03 -0000

Vulnerabilities will be repaired in V1.0.1 due for release in a few days. Basic new features will also be tentatively introduced.

File System Vulnerability:
File permissions; if incorrectly set in a shared server environment can allow de-activation & malicious use of configuration, operation and search & replace function.

PHP Configuration Vulnerability:
Register globals; if enabled can allow malicious code to be returned to unauthorized users by means of manipulated publically-available URLs.

File System Vulnerability:
Plain text virus defs; In a generic shared hosting environment, a PHP-readable virus definition file will be accessable by most user accounts and scripts on the server, including injected code. The enemy can instantly scan defences.

PHP Anti-Virus v1.0 Released

FujitsuBoy — Wed, 22 Jun 2005 17:12:30 -0000

The first release of PHP Anti-Virus is available for download on the project's homepage. Although in beta, it should successfully (but crudely) scan your public web files for malicious code.

Documentation does exist for this first release, although rather sparse. Should you require help installing for any reason, please open a support ticket and I will do my best to help. Feedback at this point is crucial.

I will slowly add more documentation as the level of my vodka bottle decreases, unfortunately time is pressing over the next couple of weeks. Expect great things within the next four weeks.

We need you! I am desperately looking for methods to continuously improve virus definitions. If you have any ideas please post in the project's forums. If you have any virus definitions open a feature request (this will change soon I promise). If you have constant access to lots of virus definitions, please please please join the project to lend a helping hand.

Recent posts to news

Version 1.0.2 Released

PHP AntiVirus 1.0.1 Released

3 Vulnerabilities in V1.0.0

PHP Anti-Virus v1.0 Released