Suspicious function found In class-utility.php By Defender

[Issa2M]

Hello, I got message from Defender Pro

There’s some suspicious looking code in the file wp-content/plugins/wp-stateless/vendor/usabilitydynamics/lib-utility/lib/class-utility.php. If you know the code is harmless you can ignore this warning. Otherwise, you can choose to delete this file. Before deleting any files from your site directory, we recommend backing up your website.

The Code is in line 2532
array_walk_recursive( $arr, create_function( '&$item, $key', 'if (is_string($item)) $item = mb_encode_numericentity($item, array (0x80, 0xffff, 0, 0xffff), "UTF-8");' ) );

May I ask Is it your code ? And Is it safe or not?

Best Regards

And Thank you for awsome plugin

[alimuzzaman]

@Issa2M
Yes, it's our code and safe to use.

The warning was shown because of the create_function, it's deprecated and uses eval() internally.

Will replace them with separate or anonymous function in the future.

@ewsopp Set a milestone.

[Issa2M]

Good Thank You :)

[oceandigital]

@Issa2M
Yes, it's our code and safe to use.

The warning was shown because of the create_function, it's deprecated and uses eval() internally.

Will replace them with separate or anonymous function in the future.

@ewsopp Set a milestone.

Hello, could you please also make this change for all the wp-property plugins as well?

/vendor/usabilitydynamics/lib-utility/lib/class-utility.php is in every plugin you make and they are all flagged as suspicious by Defender. Is it possible to just comment out the code for each file until updates are made like this:

// array_walk_recursive( $arr, create_function( '&$item, $key', 'if (is_string($item)) $item = mb_encode_numericentity($item, array (0x80, 0xffff, 0, 0xffff), "UTF-8");' ) );

?