• Resolved syzygist

    (@syzygist)


    My client has an old (3+ years) non-working WordPress installation in her public_html folder. In public_html/herdomain, she has a second WordPress installation which is active and working, and into which I have installed Wordfence. Also in the public_html/herdomain directory, she has a number of plain html pages, which are in the same domain as her WordPress installation, but are not a part of her WordPress site.

    I have “Scan files outside your WordPress installation” enabled, since she was hacked. If I am understanding the information on this setting correctly, her html pages WILL be scanned, because they are in the same directory as the WordPress installation in which Wordfence is installed, but the non-working WordPress installation in public_html will not be, because they are in the directory above the WordPress installation with Wordfence?

    https://www.ads-software.com/plugins/wordfence/

Viewing 1 replies (of 1 total)
  • I believe you are correct. If I were you, I would advocate ditching the old wordpress site folders. If it is in public_html it can be exploited.

    tim

Viewing 1 replies (of 1 total)
  • The topic ‘Question about "Scan files outside your WordPress installation"’ is closed to new replies.