Filter: securityninja_malware_scannable_extensions

The securityninja_malware_scannable_extensions filter controls which file extensions the Malware Scanner inspects.

Requires Security Ninja Premium 5.273 or newer.

By default the scanner focuses on extensions that often hold executable or hidden code (such as .php). Malware can also hide in .html, .js, .txt, and other types.

Use this filter to:

• Scan extra file types
• Include custom extensions your site uses
• Narrow the list to reduce scan time

Add extensions

add_filter( 'securityninja_malware_scannable_extensions', 'filter_securityninja_scannable_extensions' );

function filter_securityninja_scannable_extensions( $extensions ) {
  $extensions[] = 'html';
  $extensions[] = 'js';
  return $extensions;
}

Remove an extension

add_filter( 'securityninja_malware_scannable_extensions', 'filter_securityninja_scannable_extensions' );

function filter_securityninja_scannable_extensions( $extensions ) {
  $extensions = array_diff( $extensions, array( 'html' ) );
  return $extensions;
}

Replace the full list

add_filter( 'securityninja_malware_scannable_extensions', 'filter_securityninja_scannable_extensions' );

function filter_securityninja_scannable_extensions( $extensions ) {
  return array(
    'php',
    'js',
    'html',
    'htm',
  );
}

Notes

• Most WordPress malware lives in .php files.
• Adding many extensions can slow large sites.
• Removing php weakens detection.

For most sites, the default list is a good balance.

Where to add the code

How to include custom code on your website