Miscellaneous Hacks - Virus scanner for attachments

Hello guys and gals,
I was seeking for virus scanner addon for vBulletin 3.6.x , i found out one product for 3.5.8 Jafo232's addon but it was using fprot which is needing license and not free. So i decided do make it for 3.6.x and using LibClamAV.
It works fine and it's simple.
Here you go.
Thanks Jafo232 for his addon and idea and cheesegrits for his sample.

What does this plugin do?

This plugin let you have virus scanner for your forum's attachment managing.

Installing

Open your admin control panel and then
Plugin System -> Manage Products -> [Add/Import Product] -> Select 'product-vscan.xml' from your computer then press 'Import'
This plugin uses ClamAV for scanning files there is two method available for scanning:
First method requires LibClamAV support on your php settings. You can check it on phpinfo. If you do not have ClamAV , You can download it free at here and faster than second method.If you can not find php-clamav due to problems from its publisher server. You can download php-clamavlib-0.13-src.zip which i attached or you can download compiled version clamav.zip or if you are using Debian based system just type apt-get install php5-clamavlib on your shell.
Second method uses clamscan binary of ClamAV does not require LibClamAV just installing ClamAV enough for it but its a bit slower than first method.
Please feel free to ask any questions

This may be copied, reproduced or published anywhere without my permission.

Current version: 0.2a
File name: plugin-vscan2.xml
Change history:
0.2a: Added function for scanning file if php does not have ClamAV support this function uses clamscan and no need libclamav support just installing ClamAV enough for this somehow its a bit slower than php-clamav module, and installing php-clamav strongly suggested.Who is using 0.1a and having php-clamav on their system do not need update because there is no change for php-clamav support but if you want to feel better you can update it.
0.1a: Addon written based from Jafo232's old but changed scanning method for using libclamav

[nfn]

Hi,

this looks like a great mod, but is there a way to scan the file without LibClamAV?

[Snake]

That's what I'd like to know as well.

[bahisyeri]

Sure we can do it but as i said i prefer ClamAV because it has extension for php otherwise i dont know any antivir with php extension so we need to make some system base codes for example you can download AVG 7.5 Free for linux and when you wanna scan with it code might be like this

$var=system("avgscan -arch $file");
preg_match("/Virus found phrase/si", $var, $result);
if ($result) { code ... }

[djbaxter]

Originally Posted by andrewy3k

Looks good, but I'm wondering if there is a better alternative to ClamAV?

What's wrong or lacking in ClamAV? I have it on my VPS (installed by default) and it's updated nightly. I don't know a whole lot about it, to be honest, so I'm wondering if you know of anything to suggest it's unreliable.

[yoyoyoyo]

Originally Posted by bahisyeri

hm if you on shared host u can try use function dl and force loading module but talk with your host and they must have clamav on their module list coz every host is installing it for mail management

I checked with my host and they aren't offering it. Do I need shell access to use the dl function?

[bahisyeri]

Originally Posted by yoyoyoyo

I checked with my host and they aren't offering it. Do I need shell access to use the dl function?

Nope you do not need but u need to check did they enable this function for you in php.ini,
http://tr2.php.net/dl here is its usage and examples.
Between did you ask them for installing?

[lasto]

so when new viruses come out the virus checker will need to be updated - aint it easy just to download them and have a virus checker on your comp that auto scans any incoming files.

[bahisyeri]

Originally Posted by lasto

so when new viruses come out the virus checker will need to be updated - aint it easy just to download them and have a virus checker on your comp that auto scans any incoming files.

ClamAV has this option on virtualbox i recommend installing freshclam it works as a daemon and its doesnt eat so much resources actually it doesnt eat any

[WhaLberg]

bahisyeri, I really liked the idea. Congratulations, rated excellent.

[djbaxter]

Originally Posted by lasto

so when new viruses come out the virus checker will need to be updated - aint it easy just to download them and have a virus checker on your comp that auto scans any incoming files.

Not really.

First, since this is part of the PHP installation, on my VPS I have a cron job running nightly to update everything that needs to be updated and ClamAV is one of those modules - it may add a few seconds to the updates if installed but that's all.

Second, I think your forum members would be happier knowing that you are taking some steps to minimize the risk of downloading malware from your site.

Third, it will help you to avoid flags that increasingly get attached to sites, e.g., McAfee's site warnings and Google's.

I think this add-on is a great idea. :up: