phpmussel / core

phpMussel core (dedicated Composer version).

What is phpMussel?

An ideal solution for shared hosting environments, where it's often not possible to utilise or install conventional anti-virus protection solutions, phpMussel is a PHP script designed to detect trojans, viruses, malware and other threats within files uploaded to your system wherever the script is hooked, based on the signatures of ClamAV and others.

---

Features:

• Licensed as GNU General Public License version 2.0 (GPLv2).
• Easy to install, easy to customise, easy to use.
• Works for any system with PHP+PCRE installed, regardless of OS (PHP+PCRE required).
• Fully configurable based on your needs.
• Ideal solution for shared hosting services.
• Ideal solution for forum systems in need of file upload protection.
• Does NOT require shell access.
• Does NOT require administrative privileges.
• CLI mode available.
• Good, strong, stable support base.

---

Documentation:

• English
• العربية
• Deutsch
• Español
• Français
• Bahasa Indonesia
• Italiano
• 日本語
• 한국어
• Nederlandse
• Português
• Русский
• اردو
• Tiếng Việt
• 中文（简体）
• 中文（傳統）

See also:

• phpMussel/phpMussel – The main phpMussel repository (you can get phpMussel versions prior to v3 from here).
• phpMussel/Core – phpMussel core (dedicated Composer version).
• phpMussel/CLI – phpMussel CLI-mode (dedicated Composer version).
• phpMussel/FrontEnd – phpMussel front-end (dedicated Composer version).
• phpMussel/Web – phpMussel upload handler (dedicated Composer version).
• phpMussel/Examples – Prebuilt examples for phpMussel (useful for users which don't want to use Composer to install phpMussel).
• phpMussel/plugin-boilerplates – This repository contains boilerplate code which can be used to create new plugins for phpMussel.
• phpMussel/Plugin-PHPMailer – Provides 2FA and email notifications support for phpMussel v3+.
• CONTRIBUTING.md – Contribution guidelines.

---

Last Updated: 1 July 2024 (2024.07.01).

core's Issues

Undefined variable $In in Scanner.php

Server information.

phpMussel version used (if known, please also include the exact commit hash).

v3.2 from composer

Signatures version (if known).

Manual installed using SigTool

PHP SAPI used

cgi-fcgi

PHP version installed

7.3.27

Operating system used

macOS 11.3.1

---

Issue

I'm seeing the following error in the phpMussel error_log:

[2021-05-28T13:23:19+02:00] Error at /Users/.../app/vendor/phpmussel/core/src/Scanner.php:L648 (error code 8): "Undefined variable: In".

As far as I can see the variable $In should have been $in in line 648:

Core/src/Scanner.php

Line 648 in c6e4328

($AtInstanceLookupKey = sprintf('%s:%d:%s', $InSha256, strlen($In), $OriginalFilenameClean)) &&

It is also present in the current master:

Core/src/Scanner.php

Line 640 in 389dec2

($AtInstanceLookupKey = sprintf('%s:%d:%s', $InSha256, strlen($In), $OriginalFilenameClean)) &&

Expected behavior

No error, get length of read data

Actual behavior

Undefined variable error, no length.

Steps to reproduce the behavior

• Initialize Scanner from Core, with error_log configured
• Scan file (I tested txt, jpg, and mov files)

Recursor resets WhyFlagged at each iteration when... [<=v3.0.0-alpha2]

Recursor resets WhyFlagged at each iteration when scanning multiple items. [<=v3.0.0-alpha2]

(I'll start working on this shortly).