Using PHP File Change Scanner, set it up a few days ago and have now started to go through the files marked as suspicious.
Having problems with this one: libraries/fof/utils/ip/ip.php
The version on my site starts:
<?php /** * @package FrameworkOnFramework * @subpackage utils * @copyright Copyright (C) 2010 - 2015 Nicholas K. Dionysopoulos / Akeeba Ltd. All rights reserved. * @license GNU General Public License version 2 or later; see LICENSE.txt */ defined('FOF_INCLUDED') or die; /** * IP address utilities */ abstract class FOFUtilsIp { /** @var string The IP address of the current visitor */ protected static $ip = null; /** * Get the current visitor's IP address * * @return string */ public static function getIp() { if (is_null(static::$ip)) { $ip = self::detectAndCleanIP();
Current checksum 05f32e28eb276bdf1482c0392ce79150
But I was checking it against the same file in a fresh download zip and it is slightly different:
<?php /** * @package FrameworkOnFramework * @subpackage utils * @copyright Copyright (C) 2010 - 2015 Nicholas K. Dionysopoulos / Akeeba Ltd. All rights reserved. * @license GNU General Public License version 2 or later; see LICENSE.txt */ defined('F0F_INCLUDED') or die; /** * IP address utilities */ abstract class F0FUtilsIp { /** @var string The IP address of the current visitor */ protected static $ip = null; /** * Should I allow IP overrides through X-Forwarded-For or Client-Ip HTTP headers? * * @var bool */ protected static $allowIpOverrides = true; /** * Get the current visitor's IP address * * @return string */ public static function getIp()
A few lines after abstract class FOFUtilsIp are different. Why are they different?
There is another very similar file also in the suspicious list: libraries/f0f/utils/ip/ip.php (note the zero), but this isn't in the fresh downloaded zip file. Is this OK?
Thanks.