This would bring it in line with the method used on the security scanner tab where multiple items may be selected then ignored or deleted.
]]>My security plugin has been placing a couple of files in the quarantine over the last couple of days. When I Googled the file names, it pointed to the W3TC plugin. The files are:
The ‘xxxxxxx’ is a numerical value. Do you know why this is generated, and can I stop it from continuing?
EDIT: It’s trying to write these files to /wp-content/etc/passwd/
]]>_________
system Warning: New file added: (multiple entires):
.htaccess (size: 233)
gd-config.php (size: 567)
index.php
license.txt
readme.html
robots.txt
wp-activate.php
wp-admin/about.php
wp-admin/admin-ajax.php
wp-admin/admin-footer.php
wp-admin/admin-functions.php
wp-admin/admin-header.php
wp-admin/admin-post.php
wp-admin/admin.php
wp-admin/async-upload.php
wp-admin/comment.php
wp-admin/credits.php
wp-admin/css/about-rtl.css
wp-admin/css/about-rtl.min.css
wp-admin/css/about.css
etc….
____________
system Warning: New file added: (multiple entires):
.htaccess (size: 929)
.htaccess_backup_1564517821 (size: 468)
.sucuriquarantine/.htaccess
.sucuriquarantine/index.html
.sucuriquarantine/index.php
.sucuriquarantine/index.php_sucuribackup.1508779062_1508779054wordpressupdate
.sucuriquarantine/wp-activate.php_sucuribackup.1508779061_1508779054wordpressupdate
.sucuriquarantine/wp-admin-srcbak/setup-config.php_sucuribackup.1508797065_1508797002cleanup
.sucuriquarantine/wp-admin-srcbak/setup-config.php_sucuribackup.1508797100_1508797062cleanup
.sucuriquarantine/wp-admin-srcbak/setup-config.php_sucuribackup.1508797140_1508797127cleanup
.sucuriquarantine/wp-admin/about.php_sucuribackup.1508779077_1508779054wordpressupdate
.sucuriquarantine/wp-admin/admin-ajax.php_sucuribackup.1508779075_1508779054wordpressupdate
.sucuriquarantine/wp-admin/admin-footer.php_sucuribackup.1508779079_1508779054wordpressupdate
.sucuriquarantine/wp-admin/admin-functions.php_sucuribackup.1508779082_1508779054wordpressupdate
.sucuriquarantine/wp-admin/admin-header.php_sucuribackup.1508779075_1508779054wordpressupdate
.sucuriquarantine/wp-admin/admin-post.php_sucuribackup.1508779082_1508779054wordpressupdate
.sucuriquarantine/wp-admin/admin.php_sucuribackup.1508779079_1508779054wordpressupdate
.sucuriquarantine/wp-admin/async-upload.php_sucuribackup.1508779075_1508779054wordpressupdate
.sucuriquarantine/wp-admin/comment.php_sucuribackup.1508779079_1508779054wordpressupdate
.sucuriquarantine/wp-admin/credits.php_sucuribackup.1508779078_1508779054wordpressupdate
.sucuriquarantine/wp-admin/css/about-rtl.css_sucuribackup.1508779082_1508779054wordpressupdate
.sucuriquarantine/wp-admin/css/about-rtl.min.css_sucuribackup.1508779082_1508779054wordpressupdate
.sucuriquarantine/wp-admin/css/about.css_sucuribackup.1508779082_1508779054wordpressupdate
etc…
_____________
What does this mean? What do I need to do to stop it?
]]>WF tells me this: Publicly accessible quarantined file found: wp-content/uploads/class_akismet.php.suspected
Type: Quarantined File
Some questions:
1. Does that mean I don’t have to worry about it because it’s quarantined?
2. Does that mean I can safely delete the file?
3. Does that mean that Akismet is infected? I don’t even have that plugin installed!
Thanks,
Bob
Situation ;
Quarantiners need to make decisions and take actions in the procedures for quarantining topics. A similar process is also applied to the continued quarantining of all following topic by the same author.
These are some ideas that might be useful for the tasks involved in quarantining ;
1a) When a moderator stops a topic from being posted for what ever reason, they are presented with a list (drop down) of the range of reasons, that they can select from. This saves any typing.
b) When they select the reason on the list, the topic is then recorded as being stopped for that reason, and any other details that may be needed may be recorded at the same time.
c) The selected reason is then used to generate a message that attached to the topic, for the author to see.
d) The selected reason generates a link to an explanation of the reason, and how to avoid further similar actions or situations, or this information could be pop-up/drop down available in the topic for the author to see.
2) There might be made available some options for the author to choose, based on the information in the explanation, which may include any of the following;
a) choose to delete the topic
b) choose to amend or edit the contents
c) choose any alternative activity that may be suggested
3) In situations where it has been decided to continue quarantining a topic author then the following functions could be automated ;
a) make a decision about how long time, how many topics, or other conditions to be satisfied, at the start. This way there is some way to see if the applied measures are beginning to go on beyond what was reasonably anticipated at the start.
b) for every topic that gets put in (temporary) quarantine, the quarantine message, contains the reason (or all the reason-s) why the quarantine system is being used for the topic author.
4) Once a quarantined topic has been checked and ;
a) is then passed out of quarantine, to be posted on the forum, it could be certified as having passed quarantine checks. Say, have some icon to show this. This could limited to the view of the user and moderators, or could be made viewable to all.
b) is denied being posted on the forum, it could be certified as having been stopped. Say by an icon – a bit like the padlock icon, which locks a topic closed.
The essence of these ideas , is to find ways to make the quarantine processes that the moderators use, involve less typing, smoother decision steps, and automated communication of important and timely information to the user, without as much need for custom typed messages from the moderators.
At the same time, it makes it much easier for the moderators to review the course of events.
Similar situations happen in customer management systems, and “help ticket” systems.
All the improvements that get made to this system on the WordPress site, can be incorporated in to any forum plugins for use in wordpress based sites, just as some improvements in wordpress plugin forum plugins might have some application to the system here (might – I don’t know – I haven’t checked – maybe somebody is researching that already).
Thank you for all the hard work done in the Quarantine Team,
and I hope the website and forum development teams find something of help or use in at least some part of the above.
Problem ;
In the users topic list,
The time gets altered to show the time of the last reply (being the topic authors reply), while the displayed reply author is shown as the author of the reply before the last reply.
Guess at Cause ;
I am not sure whether it is intended to show to the user, the information for to which the user has replied, or to show to the user the information of the user’s reply.
But the display is presently showing a mix.
AT a guess this may be because the conditional decisions being made in the code are being made separately for the time and respondent, rather than the same decision covering both – but that is just a guess.
Hope this helps.
]]>My host, Inmotion, quarantined my site a couple of weeks ago. I followed InMotion’s instructions on how to restore my site. However, while the site is back up, the content for the posts are missing, and so are all the photos for each post. I don’t know how to fix this. The title for each post shows up on the home page, but the photos are no longer there. And if I click on the post title to reach an article, I get this message:
“Error 404 – Not Found
The document you are looking for may have been removed or re-named. Please contact the web site owner for further assistance.”
How can I fix this?
Thanks for your help,
Kim