how can I tell wordpress plugins are secure?
What steps can I do to see if a wordpress plugin doesn’t have malicious code or call outs to some websites? I’m thinking maybe if the plugin has some binary code?. I know there’s the Theme Authenticity Checker and I’m lokking for somethingn similar for plugins. Thx!
Mail this postPopularity: 1% [?]
2 Comments »
RSS feed for comments on this post. TrackBack URL
For the most part, plugins available through wordpress.org are secure, and best of all, they are tried and tested by many users. Most Wordpress sites are infected by post scripting and RPC, and SQL vulnerabilities. So with that in mind, a good defense and being prepared for a hack is the best approach. There are a couple of useful plugins available to help minimize the chances of being hacked, and that allow you to recover from one if it does take place. For more info check out:
http://www.inforats.com/wordpress-virus-prevention-and-removal/
You could check the source code. If you download it you should be able to check the php/html code it contains. But in general if you get it from the wordpress site it should be ok. If it is from elsewhere take care!