• Resolved c0c0c0

    (@c0c0c0)


    Hello, I love the fact that there is now a hidden folders and files alert, and I like it at every 15 minutes, but it shouldn’t send the alert on the same folders/files. Add those to the db, and alert old / unchecked/unruled items every day or every 7 days. To get an email for the same item every 15 minutes is going to cause people to shut off this feature all together, especially when they are not able to immediately check or add to the ignore list.

    https://www.ads-software.com/plugins/bulletproof-security/

Viewing 10 replies - 1 through 10 (of 10 total)
  • Plugin Author AITpro

    (@aitpro)

    The general idea is to alert someone about a possible problem ASAP. Logically this should only happen once or very, very rarely. Since the ramifications could be as bad as the site is hacked then someone should be alerted about that ASAP. So since this check should be an “ASAP” type of check then making it a long term check would defeat the intended purpose/usage of alerting someone immediately about a potential problem. Logically someone would only have to create a folder or file whitelist/ignore rule once or maybe down the road in the future once. So setting the default email alert to 60 minutes may be more convenient to a user, but it decreases the value of the HPF check itself to the point of pretty much negating it’s value altogether. ??

    Thread Starter c0c0c0

    (@c0c0c0)

    I understand the alert, I want the alert, but I want it once, or once every x days. The problem is when I have the cron at 15 minutes I get an alert for the same file every 15 minutes.

    Plugin Author AITpro

    (@aitpro)

    If the file safe to ignore/whitelist then use the Ignore Hidden Plugin Folders & Files option: https://www.ads-software.com/support/topic/hidden-folders-files-alert-on-s2member-files?replies=6 Email alerts will no longer be sent for that file.

    Thread Starter c0c0c0

    (@c0c0c0)

    As i stated in the first post people are not usually immediately able to take care of tbe issues, so if i am at work i can get as many as 40 emails for each item found. I could be traveling or on vacation or otherwise not able to get to a computer while i am getting many multiple messages for the same thing. It isnt a matter of just adding them to the list if you dont have a means to either check the item or go into the admin to ignore it. I ended up having to kill the cron job since i had no access to ftp to check the files.

    Plugin Author AITpro

    (@aitpro)

    Hmm interesting scenario. Ok we will see if we can figure out something for this type of scenario that does not negate HPF altogether. How did you kill the cron job? Maybe however you did that is the method we could use in this type of scenario.

    Thread Starter c0c0c0

    (@c0c0c0)

    I do have access to wordpress at work, so i did it properly in the admin area. A lot people have a lot stricter Internet access rules than i do, and mine are strict and constantly getting stricter. I didnt have access to ftp to check the two items that i needed to check.

    I still havent had time to actually check the files, i might get a chance to later on today or tomorrow.

    Plugin Author AITpro

    (@aitpro)

    Ok got it. We will do some brainstorming on this and see if we can figure something out for this particular scenario.

    Plugin Author AITpro

    (@aitpro)

    One thing that is most likely going to be added is a way to directly download or view the file or folder that was detected since a lot of folks get stuck at using FTP.

    Plugin Author AITpro

    (@aitpro)

    A new Feature/Option Request Task has been scheduled to look into this further. The thread has been resolved.

    Thread Start Date: 6-27-2016
    Thread Resolved/Current Date: 6-28-2016
    Comments: Reference Scheduled Task #040657

    Plugin Author AITpro

    (@aitpro)

    It was decided that the only logical additional option would be to add a once daily check to the list of HPF Cron Check Frequency option values. That would still require that someone was able to login to their WordPress site to set this option value. We were unable to think of any other way of doing anything differently than the current available options and without having to login to the WordPress site. This new option value will be added in BPS .54.

    Run Check Every 15 Minutes



    Run Check Once Daily

    And the file contents will be viewable/displayed in the HPF Alert so that someone can post the file contents if they would like us to check the file contents.

Viewing 10 replies - 1 through 10 (of 10 total)
  • The topic ‘Hidden Folders and files Alert’ is closed to new replies.