ycampo

[email protected] is one of the accounts our support team sometimes uses when working on a malware cleanup request. They use it to make sure Google stops flagging or blacklisting the site, a process that might take a few days. It’s safe to remove it from Google Search Console once the case is resolved.

The plugin doesn’t provide a firewall service. It indicate that a firewall would help your website’s security.

With “Plugin and Theme Editor” hardening, it will not be possible to modify plugin or theme code through the WP interface. It’s recommended to apply this hardening.

Typically these files are not a problem, but it’s impossible to tell for sure without examining the content. If you decide to trust these files, then you can “mark them as fixed” in the Core Integrity section in the plugin to ignore them in future checks.

Hi,

I see that this ticket is already being worked on.

The quickest way to reach our team for an status check is via the chat help on the website or by calling. This forum is monitored less often since it’s meant for questions about our free WP plugin that are typically not as urgent.

Please try upgrading to 1.8.18. It might be related to another bug we fixed with the settings.

Hi Andrew,

We’ve implemented the change in 1.8.18 as you suggested. The plugin doesn’t lose its settings when it’s deactivated now. The settings will still be cleared when the plugin is deleted. Thank you so much for the useful feedback!

Please try upgrading the plugin to 1.8.18.

@nodvnovnono & @jkuzma, there is a fix in 1.8.18 to address this problem. Thanks!

Jacob, please upgrade the plugin to 1.8.18.

Thank you very much! I think I see the problem now. We’ll do more testing on our side and then push an update.

Hi,

Are the settings getting reverted back immediately as you change them?

Let’s try this:

1. In Settings -> General -> Import & Export Settings, copy the current settings and save them someplace to be imported back later. Search it to see if it includes: “sucuriscan_notify_failed_login”:”enabled”

2. Find the sucuri-settings.php file (by default in wp-content/uploads/sucuri but this path can be changed by setting SUCURI_DATA_STORAGE). Rename this file to something else so that the plugin will create a new sucuri-settings.php file with default settings next time you access the plugin. If the file wasn’t recreated then it might be a permissions issue after all.

3. The option to send alerts of failed logins is not enabled by default, so those emails should stop at this point. See if you’re able to change settings now through the plugin interface.

4. We can restore the original settings manually or through Settings -> General -> Import & Export Settings (replace the content of the text file with your saved settings from step 1, and press Submit). Manually is safer but import is faster.

5. If the problem wasn’t the file permissions, please also copy the content of the old sucuri-settings.php file here (after obscuring all sensitive information like IPs and email addresses) to help me try to reproduce the issue on my side.

Thanks!

Hi there,

Thanks for letting us know of this.

The alert settings and other settings are saved in wp-content/uploads/sucuri/sucuri-settings.php. Deleting this file or making it unreadable would change all settings back to default. But, the default is for the setting to send email alerts to be disabled.

Do you know if there might be another plugin installed that is overwriting the content of this file?

Do you know if any other settings are also getting changed?

I’m not able to reproduce the problem so far, but if you have any more details I’d like to continue trying.

Hi, sorry about the slow response.

You followed the correct steps by forcing a re-scan and deleting sucuri-sitecheck. If this happens again, I suggest clearing the browser’s cache and any hosting cache. It should clear on its own after a while.

Please use:
define(‘SUCURI_DATA_STORAGE’, ‘path…’);
in wp-config.php.

Hi Andrew,

That does sound like a good idea. I’ve submitted it for consideration for a future release. Thanks!