Skip to content

Upd. Scan. Update skip policy. - #704

Merged
svfcode merged 2 commits into
fixfrom
upd-scan-detect-config
Aug 7, 2026
Merged

Upd. Scan. Update skip policy.#704
svfcode merged 2 commits into
fixfrom
upd-scan-detect-config

Conversation

@svfcode

@svfcode svfcode commented Aug 4, 2026

Copy link
Copy Markdown
Member

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates scanner handling of wp-config.php to allow detection while preventing automated remediation and reducing risk of credential exposure (no cloud upload; restricted viewing; blocked destructive actions).

Changes:

  • Adds Scanner\Helper utilities for identifying wp-config.php, restricting view access, and providing consistent user-facing messages.
  • Blocks curing/quarantine/delete/replace actions for wp-config.php and prevents sending it to cloud analysis.
  • Adjusts scanner UI/actions and scanning defaults so wp-config.php is scanned but handled as “manual cleanup only”.

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 3 comments.

Show a summary per file
File Description
lib/CleantalkSP/SpbctWP/Scanner/Stages/CureStage.php Skips wp-config.php in cure candidate selection and blocks cure in pre-check with a manual-cleanup message.
lib/CleantalkSP/SpbctWP/Scanner/Services/SendFileToCloudService.php Prevents sending wp-config.php to cloud analysis.
lib/CleantalkSP/SpbctWP/Scanner/ScannerQueue.php Removes default scan exclusion for wp-config.php so it can be detected.
lib/CleantalkSP/SpbctWP/Scanner/ScannerActions/QuarantineActions.php Blocks quarantining wp-config.php.
lib/CleantalkSP/SpbctWP/Scanner/ScannerActions/FileSystemActions.php Blocks delete/replace for wp-config.php; restricts viewing to Super Admin.
lib/CleantalkSP/SpbctWP/Scanner/Helper.php Introduces helper methods for wp-config.php path detection and related restriction messages.
inc/spbc-settings.php Hides/removes UI actions for wp-config.php and restricts viewing for non–Super Admin users.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread lib/CleantalkSP/SpbctWP/Scanner/Helper.php
Comment thread lib/CleantalkSP/SpbctWP/Scanner/Stages/CureStage.php
Comment thread lib/CleantalkSP/SpbctWP/Scanner/Helper.php

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 7 out of 7 changed files in this pull request and generated no new comments.

@svfcode
svfcode merged commit 5c75ded into fix Aug 7, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants