So for the new installation, I cloned the code from github and switch to tag v4.0.0 (hopefully this way I know if a file have changed). Copied the config file and the plugins directory from my previous installation and uninstalled the VideoAds plugin from the web app, only the default plugins remain. Also had to do a `composer install`. All this in order to keep the database intact and not have to configure the entire adserver again. Just two questions remain:
Since the plugins directory is not directly under source control. How can I make sure none of the default plugins are compromised?.
Does Revive store any code in the database, is there a chance that the problematic code is in the database and not in the files?
Thanks for your time.