E-mail of unrecognized core changes
-
I got an E-mail saying my core files were changed and unrecognized I think it was. Since I got the E-mail on my phone I deleted it and now it doesn’t appear in my Thunderbird so I can go and see what exactly it said again. But the E-mail did list several core file changes. I know WP updated, so not sure why this plugin is giving me this warning. I never had such a warning before. It appears I am using WP version 4.8.1.
-
Hi Paul,
– ‘Shield’ never updates your WordPress or plugins. Only your WordPress site does this. But you might get a notice from Shield to tell you that it happened. If you want to turn off WordPress automatic updates, Shield has a option for this. And if you want to turn off the notification, you can do this also.
OK, I took a shortcut in expressing myself.
By default, WP does not update itself automatically.
Shield, by default, set WP to automatically update (minor versions only).I should have written: “After Shield let WP update to version 4.8.1, as set by default by this plugin.”
These files listed by the email have nothing whatsoever to do with Shield. These files are in your core WordPress directories.
Bad choice of words again, I should have written:
“It looks like Shield has not been updated to the most recent list of files, that have been modified by the last WP update.”These emails you are receiving have a link in them with ‘more info’. You need to click this link and read the article that explains what is going on here:
https://www.icontrolwp.com/blog/eliminate-hacker-files-wordpress/
If you do/don’t know what is going on, and you don’t want these notification emails, please turn off the hack protection module. These emails are there to direct you to take action because you may have hacked files in your WordPress installation.That is indeed why I have enabled that option.
Taking your files list, for example, there is no folder called “uploader” in the official ‘wp-admin’ folder, and there is certainly no file called ‘theme-uploader.php’ in the latest official WordPress installation within the wp-admin folder.
You need to take a closer look at the files. Read the documentation that comes with the plugin to understand what is happening.
I did, and it appears that these files are automatically installed by Plesk Panel (that I am using to manage all my server) on all WPs.
As it is not the less used panel, many people must have received a similar notice.
I would not be surprised if others come to you in the future, mentioning these same files.This being said, I totally understand that your Hack Protection option would be limited to accepting only modified WP files as legitimate.
Otherwise, its white-list would rapidly become enormous, and impossible to keep up to date.Let’s just say that I was a bit puzzled to receive, for 4 days in a row, a warning mail on the subject, with always the same list of files.
When previously, this happened only once.I do not know if it is part of the last upgrades, but if it is, I think it would be interesting to have an option, saying roughly: “I only want to be warned once about new unidentified suspect files, and not everyday about the same files.”
All that being said, let me congratulate you again on your kick-ass plugin, that has grown to become an indispensable feature to me.
It should IMHO be included as standard in WP!Regards,
Fran?oisPlease read here:
https://icontrolwp.freshdesk.com/support/solutions/articles/3000069312
- The topic ‘E-mail of unrecognized core changes’ is closed to new replies.
