Base64 Decode Error

Disabling base64_decode() is not a good idea. It’s a “throwing the baby out with the bath water” solution along the lines of “hackers can hack my computer, so I’ll just keep it completely disconnected from the internet at all times.”

While it’s true that hackers use that function to obfuscate code, there are many legitimate reasons it is used for site functionality and even site security.

I appreciate that bluebear, but disabling the base64_decode has deterred many many attacks. At one point earlier this year I had 30k plus attacks per day and they were all placing base64 encoded crap. Once the door was open it was a free for all.

I had ,what I thought was tight security before that first file was placed. I was using wordfence and BPS as well as an apache firewall with regular scans.

Might be the baby with bathwater but the only issue so far after 6 months is this one site and with WAF.

Hi cappuccinomedia,
you may want to turn of display errors in PHP. I can’t guarantee how the plugin will work with base64_decode turned off but that will at least stop the warnings from displaying to users on your site. You could of course also choose to keep the Firewall off though that is not something I can recommend for obvious reasons.