Checking WordPress files integrity…

This message is there for hours.
It hangs with Step 3/14.

• This reply was modified 4 years, 1 month ago by bilip.

Click on the “Log” tab, and below the textarea, check the “Debug” checkbox. Do you see any error or warning in the log?

You can also enable WordPress debuggingand see if there’s anything written to the PHP error log:
1. Edit your wp-config.php
2. Search for:
define('WP_DEBUG', false);
3. Replace with:
define('WP_DEBUG', true);
4. Add this line below:
define( 'WP_DEBUG_LOG', true );

The log (if any) will be located in “/wp-content/debug.log”.

That′s the text from the Log-Tab:

07-Feb-21 11:07:15 INFO Processing step 1/14
07-Feb-21 11:07:15 INFO Checking NinjaScanner files integrity
07-Feb-21 11:07:15 DEBUG Using local cached version of checksums
07-Feb-21 11:07:16 INFO Files integrity is O.K
07-Feb-21 11:07:16 DEBUG Process executed in 0.8 seconds and used 68,42 MB of memory (NinjaScanner additional memory: 0,00 MB).
07-Feb-21 11:07:17 INFO Processing step 2/14
07-Feb-21 11:07:17 INFO Building file’s list
07-Feb-21 11:07:24 INFO Total files found: 12.071
07-Feb-21 11:07:24 INFO Building database posts and pages checksum
07-Feb-21 11:07:24 INFO Found 0 posts and 17 pages in the database
07-Feb-21 11:07:26 DEBUG Process executed in 9.72 seconds and used 68,42 MB of memory (NinjaScanner additional memory: 0,00 MB).
07-Feb-21 11:07:29 INFO Processing step 3/14
07-Feb-21 11:07:29 INFO Checking WordPress core files integrity
07-Feb-21 11:07:29 DEBUG Using local cached copy (wordpress-5.6.1-de_DE.zip)
07-Feb-21 11:07:29 DEBUG Building files list from ZIP archive
08-Feb-21 00:00:06 ERROR Security nonces do not match.
08-Feb-21 00:00:07 ERROR Security nonces do not match.

Unfortunately, there’s nothing in the log. It stopped here: 07-Feb-21 11:07:29 DEBUG Building files list from ZIP archive

Did you enable WordPress debugging and check the PHP error log too?

Yes, it′s enable but there is no error message to find.
The problem is still here.

Where can i check the PHP errors?

If you enabled WordPress debuggin, the log is in wp-content/debug.log. You coud also have a log in your WP root folder (error.log or error_log).

Do you have another security plugin that is doing rate-limiting? Or a security at the server level?

I haven′t found a error.log or error_log.
There isn′t any security plugin active.
If you want i can mail you the debug file.

Once again after 17 hours:

12-Feb-21 16:21:22 INFO Processing step 1/14
12-Feb-21 16:21:22 INFO Checking NinjaScanner files integrity
12-Feb-21 16:21:23 INFO Files integrity is O.K
12-Feb-21 16:21:25 INFO Processing step 2/14
12-Feb-21 16:21:25 INFO Building file’s list
12-Feb-21 16:21:33 INFO Total files found: 11.420
12-Feb-21 16:21:33 INFO Building database posts and pages checksum
12-Feb-21 16:21:33 INFO Found 0 posts and 17 pages in the database
12-Feb-21 16:21:39 INFO Processing step 3/14
12-Feb-21 16:21:39 INFO Checking WordPress core files integrity
13-Feb-21 09:20:32 ERROR Security nonces do not match.
13-Feb-21 09:20:33 ERROR Security nonces do not match.

Something is blocking the scan.
Did you check the HTTP server log for HTTP POST requests to the “admin-ajax.php” script such as this one:
"POST /wp-admin/admin-ajax.php HTTP/2.0" 200
Do they all return a “200” HTTP code?

Alternatively, can you change the forking method: NinjaScanner > Settings > Advanced Users Settings > Scanning process” and select “Fork process using WordPress built-in WP-CRON”.
The scanner will rely on /wp-cron.php instead of /wp-admin/admin-ajax.php.

If the scan hangs after 5mn, you can click the “cancel” button, no need to wait for hours.

• This reply was modified 4 years ago by nintechnet.

1st: If i select /wp-admin/admin-ajax.php in Browser, then i have 0 as return

2nd: For WP-Cron i get

Fatal error: the HTTP server returns a [500 Internal Server Error] HTTP code. Aborting

You need to check the HTTP log, not the browser console. The scanner forks a process which then will connect back to the site and you won’t be able to see that from the console, only in the HTTP logs. All requests should return a “200” code.

Regarding WP-Cron, you’ll need also to check the log. It too should return “200”, not “500”.
I’m still thinking there’s an issue (or a restriction) with your server that blocks the requests.
Did you check your .htaccess too? Are there any rules that could block or mess with AJAX and WP-CRON?

May you help me remote?
I think this would be easier.

We can’t provide support outside of this forum for the free version.
But if you can get the logs as mentioned in my previous message that would help us.
How about your .htaccess too? Did you check it?
Also, is this your own server or a shared hosting account?