Recent content by financing

It reads plain files and check if their content matches any signature you want, stored as a regex string in xml files. Files must match some extension, by default, only .php, .html, .htm and .pl files are processed. Every file that matches is logged on a file of your choice

If you talk about those web app hardening services they provide, they are completely different. This script works by statically scanning files, for certain signatures, so it doesn't secure your app, it just protects the server from malicious files.

For you guys who manage a web host, I've created an script to check for scam/malicious files. You can define your own rules, so, for example, you can check for proxy or torrent scripts. The default rules look for paypal, facebook scams and for some common unobfuscated shells. It's opensource...