Admin Tools

#32881 Difference between the file source yellow highlights threats indication and “Calculate diffs when scanning”?

Posted in ‘Admin Tools for Joomla! 4 & 5’

This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version

n/a

PHP version

n/a

Admin Tools version

n/a

Latest post by Chacapamac on Monday, 20 April 2020 09:33 CDT

Saturday, 18 April 2020 12:30 CDT

Chacapamac

• I like to know the difference between the file source yellow highlights threats indication and “Calculate diffs when scanning”?

I think I know, but I want to be sure...

Also you seem to discourage the use of “Calculate Diffs” because it can make the database bigger. Understand

• My question is when you mark files Safe if the “Diffs” are deleted from the database?
I ask because, logically, if you mark it safe you should not need that “Diffs” infos anymore.

If not, it will be a great addition to the php scanner.

Just a note: your forum text is REALLY small on my Imac 27 look like 4-5 point.....

Monday, 20 April 2020 03:58 CDT

tampe125

Hello,

the yellow parts are the sections that are containing suspicious commands.

The Calculate diff option is useful to know what changed between the two versions (ie, first it was safe, then suspicious, what exactly changed?)

You don't want to purge file contents on the database when a file is marked as safe. That's because attackers will most likely "infect" an harmless file. I remember some time ago they were injecting malicious code in index.php or template files.
If you keep the previous value, you can actually see what was changed between the scans.

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Monday, 20 April 2020 09:33 CDT

Chacapamac

Ok Thanks!

Support