Please explain why Godaddy modified wordpress files

  • Resolved elieobeid7

    (@elieobeid7)


    3 weeks ago

    I’m hosting a WordPress website for a client on Godaddy managed WordPress hosting, they picked that hosting. Godaddy is integrated inside the admin area.

    Today I received this email from wordfence

    High Severity Problems:
    * Unknown file in WordPress core: wp-includes/meta.php.orig
    * Unknown file in WordPress core: wp-includes/post.php.orig
    * Unknown file in WordPress core: wp-includes/taxonomy.php.orig
    * WordPress core file modified: wp-includes/class-wp-post.php
    * WordPress core file modified: wp-includes/class-wp-query.php
    * WordPress core file modified: wp-includes/meta.php
    * WordPress core file modified: wp-includes/post.php
    * WordPress core file modified: wp-includes/taxonomy.php

    Diffing the changes via wordfence I see these changes

    rich text editor image

    I can’t even revert back or delete the files from within wordfence, it’s a read only filesystem. I don’t understand why they did it or how since it’s a read only filesystem. I don’t even understand what those orig files are, maybe a backup before they edited the files.

    I have another website for someone else, also hosted on Godaddy managed VPS, I didn’t encounter such issue. Anyone hosting who has encountered this issue?

Viewing 4 replies - 1 through 4 (of 4 total)
  • Generosus

    (@generosus)

    Hey @elieobeid7,

    If you don’t mind, please allow me to help.

    Your topic is not new. Please read this topic and perform a keyword search (e.g., “GoDaddy”) in this support forum to find answers to your questions.

    If satisfied with the above, please consider closing this topic as “Resolved.”

    Cheers!

    Thread Starter elieobeid7

    (@elieobeid7)

    Thanks for your reply, I still have one question that wasn’t answered, is this a securty problem I need to worry about or just some caching mechanism by Godaddy?

    by the way, I have ticked “Notify me of follow-up replies via email” but I didn’t receive any email to my gmail when you replied, so maybe the mailing functionality on this server is broken.

    Generosus

    (@generosus)

    Once you confirm the noted files were modified by GoDaddy, I wouldn’t worry about it. Simply follow the instructions provided by Wordfence in this forum (given in the link I provided or search results) to ignore those files. If you ask me, I would avoid GoDaddy. Used them in the past. A disaster.

    There is nothing wrong with this server. I receive all of my emails (gmail, etc.) from this support forum. Check your spam folder.

    If satisfied with the above, please consider closing this topic as “Resolved.”

    Cheers!

    Thread Starter elieobeid7

    (@elieobeid7)

    Ok thanks a lot, resolving this.

Viewing 4 replies - 1 through 4 (of 4 total)
  • You must be logged in to reply to this topic.

Tags