Gecko [ naturenectar.co.uk ]

Name	Size	Permission	Date
csf_action.php	6.05 KB	-rwxr-xr-x	2024-11-08 06:51
csf_migration.php	21.32 KB	-rwxr-xr-x	2025-09-26 13:25
cwp_suspend_hook.php	3.34 KB	-rw-r--r--	2023-09-25 10:22
cwp_user_list.php	639 B	-rw-r--r--	2023-09-25 10:22
cyberpanel_domain_list.php	3.51 KB	-rw-r--r--	2023-09-25 10:22
cyberpanel_user_list.php	792 B	-rw-r--r--	2023-09-25 10:22
enhance_domain_list.php	3.6 KB	-rw-r--r--	2023-09-25 10:22
enhance_suspend_hook.php	7.63 KB	-rw-r--r--	2023-09-25 10:22
enhance_user_list.php	3.79 KB	-rw-r--r--	2023-09-25 10:22
fw_debug.sh	3.42 KB	-rw-r--r--	2025-10-13 09:29
fw_list.sh	5.02 KB	-rw-r--r--	2025-10-13 09:29
interworx_domain_list.php	583 B	-rw-r--r--	2023-09-25 10:22
interworx_suspend_hook.php	3.63 KB	-rw-r--r--	2023-09-25 10:22
interworx_user_list.php	533 B	-rw-r--r--	2023-09-25 10:22
ioncube.php	42 B	-rw-r--r--	2022-12-02 17:04
reset_iptables.sh	3.6 KB	-rw-r--r--	2025-10-16 14:19
suspend_hook_sample.php	3.28 KB	-rw-r--r--	2023-09-25 10:22
virus_hook_sample.php	3.36 KB	-rw-r--r--	2023-09-25 10:22
webmin_domain_list.php	767 B	-rw-r--r--	2023-09-25 10:22
webmin_suspend_hook.php	3.32 KB	-rw-r--r--	2023-09-25 10:22
webmin_user_list.php	648 B	-rw-r--r--	2023-09-25 10:22
webuzo_domain_list.php	609 B	-rw-r--r--	2023-09-25 10:22
webuzo_suspend_hook.php	3.61 KB	-rw-r--r--	2023-09-25 10:22
webuzo_user_list.php	493 B	-rw-r--r--	2023-09-25 10:22

Rename

#!/opt/cpguard/cpg-php-fpm/bin/php
<?php

## DO NOT CUSTOMISE THIS FILE
## This file may be updated during software update
## Please make a copy of the file (as virus_hook.php) and customize it

## Remember to make this file executable

$original_path = $argv[1];      // Original path of infected file
$quarantine_path = $argv[2];    // Path to Quarantined file or "not-quarantined" if file was not quarantined
$virus_definition = $argv[3];   // Virus Description
$category = $argv[4];           // Virus File | Supicious File | Binary File | Symbolic Link
$username = $argv[5];           // Username affected
$user_email = $argv[6];         // User email

/* -------------------------------------------------------------------------
 *      SLACK WEBHOOKS
 *      REFER https://api.slack.com/messaging/webhooks
 * ---------------------------------------------------------------------- */

$server = gethostname();

$webhook_url = "https://hooks.slack.com/xxxxxxxxxxxx";

$data = array(
    "text" => "$category found on $server",
    "blocks" => array(
        array(
            "type" => "section",
            "text" => array(
                "type" => "mrkdwn",
                "text" => "*$category* found on $server"
            )
        ),
        array(
            "type" => "context",
            "elements" => array(array(
                    "type" => "mrkdwn",
                    "text" => "*Original path* : $original_path\n"
                    . "*Quarantine path* : $quarantine_path\n"
                    . "*Definition* : $virus_definition\n"
                    . "*User* : $username\n"
                )
            )
        ),
    )
);

$data_string = json_encode($data);
$ch = curl_init($webhook_url);
curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "POST");
curl_setopt($ch, CURLOPT_POSTFIELDS, $data_string);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, array(
    'Content-Type: application/json',
    'Content-Length: ' . strlen($data_string))
);

$result = curl_exec($ch);

/* -------------------------------------------------------------------------
 *      SENDING EMAILS TO END USERS
 * ---------------------------------------------------------------------- */

$subject = "$category found";

$message = "
<html>
    <head>
        <title>$category found</title>
    </head>
    <body>
        <p>$category found</p>
        <table>
            <tr>
                <th style=\"text-align:left\">Type</th>
                <td>$category</td>
            </tr>
            <tr>
                <th style=\"text-align:left\">Original Path</th>
                <td>$original_path</td>
            </tr>
            <tr>
                <th style=\"text-align:left\">Quarantine path</th>
                <td>$quarantine_path</td>
            </tr>
            <tr>
                <th style=\"text-align:left\">Description</th>
                <td>$virus_definition</td>
            </tr>
            <tr>
                <th style=\"text-align:left\">User</th>
                <td>$username</td>
            </tr>
        </table>
    </body>
</html>
";

// Always set content-type when sending HTML email
$headers = "MIME-Version: 1.0" . "\r\n";
$headers .= "Content-type:text/html;charset=UTF-8" . "\r\n";

// More headers
$headers .= 'From: <webmaster@example.com>' . "\r\n";
$headers .= 'Cc: myboss@example.com' . "\r\n";

mail($user_email, $subject, $message, $headers);