Flag unknown files found in WordPress core directories.
Scan Non-PHP & JavaScript Files
Include non-code files in the malware scan.
Line Length Limit
Lines longer than this are flagged as suspicious. Nominal: 128–256.
Character Frequency Limit
How similar code must be to standard PHP files. Nominal: 1–20.
Percent Unknown Variable Names
Malware uses random names. Min % of unknown names to flag. Nominal: 25–45.
Custom Regular Expression
Your own regex to detect malware. Include leading and trailing /.
Dynamic Function Call Thresholds
Malware hides in dynamic function calls. BitFire flags unknown files with dynamic calls when combined with random names, encryption, or obfuscation.
Set BitFire Password
BitFire password is required to access the dashboard. If you forget the password, change the "password" key in config.json to "default" to relaunch this modal, or set it to the SHA3-256 hash of your password.