الوصف
Protect your WordPress site with the free AMWScan PHP antimalware engine, managed from a clear administrator-only workspace. AMWScan Antimalware Scanner Lite checks uploads before WordPress accepts them, runs deep scans on demand or on schedule, and turns each finding into a report you can review and act on.
Block threats at upload
Upload protection is enabled by default. It scans media and plugin or theme ZIP packages before WordPress accepts them. Detected files and uploads that cannot be scanned completely are blocked, and their reports are retained for review. ZIP inspection requires the PHP ZIP extension; administrators can disable upload protection under Antimalware > Settings > Scan policy.
Scan on your schedule
- Choose manual scans or precisely scheduled background scans.
- Follow live checked-file progress, scan rate, and estimated time remaining.
- Resume interrupted scans instead of starting over.
- Receive security finding alerts and see recent activity in the WordPress dashboard widget.
- Browse local folders or connect to read-only FTP/FTPS sources.
See the whole security picture
AMWScan organizes canonical findings so you can distinguish malware from other security risks without sorting through duplicate results.
- Detect suspicious code and signatures under Malware detections, shown once and collapsed until you open them.
- Review integrity, vulnerability, and reputation checks together under Security findings.
- Use lifecycle exceptions to manage known findings without losing their history.
- Opt in to bounded ZIP content scanning under Antimalware > Settings > Scope and limits. Archives that exceed the safety limits are reported as incomplete coverage.
Review and remediate with confidence
Responsive reports make findings easy to filter and inspect across desktop and mobile screens. Report-only scanning is enabled by default, so a scan does not change files unless you choose a remediation action.
From the dashboard, review scan history, manage the whitelist and quarantine, create backups, and apply supported automatic fixes. File-changing actions require explicit confirmation. Responsibility and backup warnings appear when automatic actions are enabled or saved and before report remediation or quarantine deletion. Lite can quarantine files and permanently delete them after confirmation, but it cannot restore them.
Built for WordPress administration
Only administrators with the manage_options capability can access AMWScan. The About page lists installed plugin and engine versions alongside documentation, support, contribution guidance, licensing, and project credits.
The plugin follows the WordPress site language. It includes bundled Italian, German, French, Spanish, Russian, Chinese, Japanese, Hindi, and Arabic translations, with English as the source and fallback. WordPress uses a matching WordPress.org language pack when available, then the bundled catalog. Arabic and other right-to-left locales receive a mirrored admin layout while file paths and hashes remain left-to-right.
Lite and Full editions
AMWScan Antimalware Scanner Lite is packaged independently for WordPress.org and contains no browser file editor or quarantined-file restoration code. Install only one AMWScan edition at a time.
Browser file editing and quarantined-file restoration are available only in the Full GitHub edition.
Interested in development?
Follow development, report issues, contribute, and download the Full edition on GitHub: https://github.com/marcocesarato/PHP-Antimalware-Scanner
Open Antimalware > About after installation to explore the plugin and its project resources.
لقطات الشاشة
التنصيب
- For a source checkout, run
composer install --no-dev --optimize-autoloaderin the plugin directory. - Upload the complete plugin directory, including
vendor, to/wp-content/plugins/amwscan. - Activate AMWScan Antimalware Scanner Lite in WordPress.
- Open Antimalware > Settings, verify the scan and storage paths, then run a report-only scan.
الأسئلة المتكررّة
-
Why is a queued scan not starting immediately?
-
WordPress cron runs when the site receives requests. Configure a system cron that runs
wp cron event run --due-nowwhen exact timing is required. -
How does upload protection work?
-
Scan and block malicious WordPress uploads is enabled by default under Antimalware > Settings > Scan policy. The plugin scans temporary media, plugin, and theme uploads in report-only mode before WordPress stores or installs them. Malware detections and incomplete scans block the upload. Plugin and theme ZIP inspection requires the PHP ZIP extension.
-
How do email alerts work?
-
Enable Email alerts under Antimalware > Settings. The plugin uses
wp_mailto notify the WordPress administrator when a completed scan contains unresolved security findings. You can add up to 20 optional recipients. Messages include scan counts and a protected report link, but no local paths or matched code. -
Where are reports, definitions, and quarantined files stored?
-
By default in an
amwscan-datadirectory beside the web document root and outside the scanned tree. Reports, lifecycle state, checkpoints, backups, downloaded Maltrail definitions, and quarantine data are protected and excluded from scans. Each scan checks the Maltrail release digest and downloads definitions only when changed; a failed update keeps the last verified cache. Enable Use cached Maltrail definitions without updating under Antimalware > Settings > Engine and storage to prevent update requests and use only the last verified cache. -
Does the plugin scan its own files?
-
No. The active AMWScan plugin directory and its private data directory are always excluded from scans.
-
How do I scan an FTP server?
-
Enable the PHP FTP extension, select FTP server under Antimalware > Settings, and enter a credential-free
ftps://host/pathURL. SetAMWSCAN_FTP_PASSWORDin the WordPress PHP process environment when authentication requires a password. Use FTPS for authenticated scans because plain FTP is unencrypted. Remote scans are read-only, and passwords are never stored in WordPress. -
Does uninstall delete security data?
-
No. Reports, logs, backups, quarantined files, and the whitelist are preserved. WordPress options and scheduled events are removed.
-
How can I contribute a detection?
-
Open a report finding and select Report finding. The plugin opens a public GitHub issue draft from legacy matches or canonical malware file signatures, containing signature names, detection types, scanner versions, and the file SHA-256 only. It excludes local paths and matched code. Do not attach executable malware to a public issue; maintainers can arrange a private transfer if they need the sample.
-
How can I contribute a translation?
-
Use the WordPress.org translation project for reviewed locale packs. The source template is
languages/amwscan.pot.
المراجعات
لا توجد مراجعات لهذه الإضافة.
المساهمون والمطوّرون
“AMWScan Antimalware Scanner Lite” هو برنامج مفتوح المصدر. وقد ساهم هؤلاء الأشخاص بالأسفل في هذه الإضافة.
المساهمون
لقد تم ترجمة ”AMWScan Antimalware Scanner Lite“ إلى لغة واحدة. شكراً إلى جميع المُترجمين لمُساهماتهم.
ترجمة ”AMWScan Antimalware Scanner Lite“ إلى لغتك.
مُهتم بالتطوير؟
تصفّح الشفرة، تحقق من مستودع SVN، أو الاشتراك في سجل التطوير بواسطة RSS.
سجل التغييرات
0.2.7
- See the GitHub release notes for this version.
0.2.6
- See the GitHub release notes for this version.
0.2.5
- See the GitHub release notes for this version.
0.2.4
- See the GitHub release notes for this version.
0.2.3
- See the GitHub release notes for this version.
0.2.2
- Rename the plugin to AMWScan Antimalware Scanner.
- Remove browser code editing and quarantined-file restoration for WordPress.org directory compliance.
- Pass all WordPress Plugin Check categories without errors or warnings.
0.2.1
- Follow the WordPress site language and remove the plugin-specific language override.
- Improve the WordPress admin experience with clearer navigation, responsive reports, collapsible settings, and initially collapsed malware detections.
0.2.0
- See the GitHub release notes for this version.
0.1.1
- Add upload scanning and configurable archive scanning safeguards.
0.1.0
- Initial free plugin with scheduled background scans, live scan status, CLI-equivalent settings, report exploration, browser editing, automatic fixes, whitelist management, and protected remediation actions.