Translation:
Good morning,
Here is the message obtained after a Wordfence scan:
Unknown file in WordPress core: wp-admin/css/colors/blue/php.ini (+ 238 more)Type: File
Issue Found October 12, 2023 8:03 a.m.
Obviously 238 files are problematic and I don’t really know what to do to fix it. First of all, is it possible that this is a reading error? Or is it serious?
Here is the message obtained at the end of the box:
Details: This file is in a WordPress core location but is not distributed with this version of WordPress. This scan often includes files left over from a previous WordPress version, but it may also find files added by another plugin, files added by your host, or malicious files added by an attacker. 238 more similar files were found
Thanks for your help,
Hello @gaelleclairfonce, and thanks for reaching out to us!
If you already know about the listed file, you can click the link to ignore the file until it changes. If you don’t know what the file is, it may require some investigation to find out if your host has placed it there, if your FTP application or OS may have created it, or if it is malicious.
Some “Managed WordPress” hosting plans do not allow you to change core files, and on some hosts, if a new version of WordPress no longer includes a particular file, it may be left in your site’s files after they update WordPress. In this case, it is generally safe to ignore the file, or you can contact the host if you believe it should be removed.
In a few cases, we have seen that a host’s support staff or a host’s control panel may place “php.ini” files in every subdirectory of WordPress’s core files. Typically, this is to change PHP settings throughout the site. Since this can generate a lot of scan results, we combine results for php.ini files into a single result with a note like “(238 more similar files were found.)”
If that occurs, we recommend checking the contents of some of these files to make sure they are safe. Assuming that they are safe, your host may have a better way to set the same PHP settings without adding additional files; depending on the server configuration, it is usually done through the PHPRC environment variable or by using.user.ini.
Alternatively, if you are sure they are safe, you can use the “ignore” option to hide the result unless there are future changes.
Let me know if this helps!
Thanks,
Mark
