removeWafQuarantine — Removing files from the quarantine list

As part of the backdoor and shell script mitigation policy, files determined to be malicious backdoors may be automatically quarantined to prevent malicious actions from being taken by third parties.

The removeWafQuarantine method removes a URL from the backdoor protection list.

The API endpoint is:

https://api.sitelock.com/v1/partner

Request format

SiteLockOnlineRequest: This element is used to delineate the full API request.
- authentication: The partner’s username, password, and branding
  - username: The partner’s API username
  - password: The partner’s API password
  - partner: (Optional) The brand name to use in messaging
- removeWafQuarantine: The method name
  - site_id: The ID of the site for which to remove the URL from the quarantine list
  - quarantined_url: The absolute path to the backdoor file, including the protocol

Example request

<SiteLockOnlineRequest>
    <authentication>
        <user>Username</user>
        <password>Password</password>
    </authentication>
    <removeWafQuarantine>
        <site_id>12</site_id>
        <quarantined_url>https://www.example.com/mt25652484n.php</quarantined_url>
    </removeWafQuarantine>
</SiteLockOnlineRequest>

Response format

SiteLockOnlineResponse: This element is used to delineate the full API response.
- removeWafQuarantine: The method name
  - items: A list of backdoor files removed from the quarantine
    
    item: (Repeatable) A backdoor file. This element has either a single backdoor element, or a backdoors element containing multiple backdoor elements.
    
    url: [attribute] - The absolute path to the backdoor file, including the protocol
    
    backdoors: A list of backdoors found in the file
    
    backdoor: (Repeatable) The name of the backdoor removed from the quarantine
    
    type: [attribute] - The type of the backdoor detected

Example response

<SiteLockOnlineResponse>
    <getWafQuarantine>
        <items>
            <item url="https://www.example.com/mt25652484n.php">
                <backdoor type="PHPBackdoor">r57</backdoor>
            </item>
        </items>
        <status>ok</status>
    </getWafQuarantine>
</SiteLockOnlineResponse>