Still getting updates

  • Resolved timoheinonen

    (@timoheinonen)


    6 years, 7 months ago

    I installed this plugin and all the updates are disabled
    Also wpconfig i made

    define( 'WP_AUTO_UPDATE_CORE', false );

    define( ‘AUTOMATIC_UPDATER_DISABLED’, true );

    I also have Wordfence Security -plugin that does not update anything but detects if files are changing and this week there was these files changed:

     WordPress core file modified: wp-includes/general-template.php

    WordPress core file modified: wp-includes/http.php
    ` WordPress core file modified: wp-login.php

    I looked the files and it didn’t seem like a virus, but like more secure functions. Just couple of lines changed.

    So what the H* is updating my files ?
    And how to block ALL automatic updates ?!
    I want only to update things manyally when i have time for that and time for all the troubles that comes from the updates

    btw.cannot use in wp-config:
    add_filter( ‘auto_update_plugin’, ‘__return_false’ );
    add_filter( ‘auto_update_theme’, ‘__return_false’ );
    because site will stop working
    WordPress version is 4.9.4

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author David Anderson

    (@davidanderson)

    Perhaps your site is hacked? You should compare those files to the pristine versions to see what’s changed (or perhaps WordFence will show you)?

    Thread Starter timoheinonen

    (@timoheinonen)

    Thanks, but i don’t think so

    The files I looked changed only little bit to more secure and when i compared it to the wordpress change log, it looked like my wordpress updated itself but without changing the version number.

    “WordPress versions 4.9.4 and earlier are affected by three security issues. As part of the core team’s ongoing commitment to security hardening, the following fixes have been implemented in 4.9.5:

    Don’t treat localhost as same host by default.
    Use safe redirects when redirecting the login page if SSL is forced.
    Make sure the version string is correctly escaped for use in generator tags.”

    These are just the changes i’ve got, even i didn’t want them and all updates should be off!
    But still only 3 files changed (according to wordfence) when wp changelod shows that so many more files have been revised..

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Still getting updates’ is closed to new replies.