Looks like False positive email sent by hack protection tool
-
Hi,
Installed this security plugin yesterday. What I really liked was, it does not mess around with my Cache-Control headers. Also it is working efficiently. Checked the log files… well it does its job really well. It was acting hard upon the bad bots.But this morning I received an email stating the following
Details for the problem files are below:
The MD5 Checksum Hashes for following core files do not match the official www.ads-software.com Checksum Hashes:
– wp-includes/js/jquery/jquery-migrate.js (www.ads-software.com source file)
– wp-includes/js/jquery/jquery-migrate.min.js (www.ads-software.com source file)
– wp-includes/js/mediaelement/controls.svg (www.ads-software.com source file)You should review these files and replace them with official versions if required.
So to have closer look, I downloaded the latest wordpress tarball. and compared the files. I used the good old
diff
utility. At first I randiff file1 file2
Huge differences popped up.
So I decided to pass the-w
switch to thediff
command, which basically tells it to ignore the whitespace changes.
this is what I diddiff -w file1 file2
And than diff was not reporting any differences in files.
So what I feel here is the hack protection tool does not ignore white spaces while comparing files. As a result. It is reporting false positives.Please correct me if my approach of looking at file differences is wrong.
- The topic ‘Looks like False positive email sent by hack protection tool’ is closed to new replies.