ClamAV antivirus plugin
Although we always recommend using Linux as a server for Chamilo, and as such are relatively immune to viruses affecting the server, it is a possibility that some users may upload infected files to Chamilo, and other users may then fall victim to these viruses.
To avoid that, we could implement a ClamAV plugin that automatically scans all files on upload, and informs the user (and rejects the file) if a virus was detected.
The ClamAV plugin should also be able to detect when a new version/database of ClamAV is available and to download it directly.
We would need this plugin to intercept all file uploads and intervene in all of them.
If a virus is detected, the user should not be able to upload it, and the system should tell the user there is a virus.
Additionally, a report should be sent to the admins by internal message and mail:
Subject: ClamAV detected a virus in a file to be uploaded to Chamilo Dear %, It has come to our attention that user % (ID %) has made a failed attempt at uploading a file infected by a virus to course %s (session %). The ClamAV plugin intercepted the file and refused to accept it. However, we recommend you take action by contacting the user and checking if everything is alright. You can contact him directly through the following e-mail address: %s. Yours, faithfully, Chamilo %s (URL)