config file has been changed

  • A scan shows my config file was changed 9 hours ago. I have not been on the site and not sure what this means.

    (unset( $line );
    262 262
    263 if ( ! is_writable(ABSPATH) ) : 263 if ( ! win_is_writable(ABSPATH) ) :
    264 setup_config_display_header(); 264 setup_config_display_header(); )

    I have the option to reset. is this safe and any insight into what changed this and what is means. I’m a noobie but working on eventually being in the codex.

    Thanks for your help.

Viewing 6 replies - 1 through 6 (of 6 total)

  • What config file are you referring to? A generic wp-config.php file probably has less than 100 lines in total.

    Thread Starter DinghyBlonde

    (@dinghyblonde)

    wp-admin/setup-config.php
    File type: WordPress Core File

    I’d suggest scanning your site for any signs of a hack. Even if the results are negative, re-upload a fresh set of core files.

    Thread Starter DinghyBlonde

    (@dinghyblonde)

    Thanks esmi

    Can you please elaborate. I am new. I don’t know how to look for a hack and the main things I would like to understand are:
    1) Should my core files ever change without me getting in them? Is this part of an update or hack? And, it is more in depth, but I’d like to know what altering this file with 3 characters means.
    2) And most importantly, I have Word Fence offering to revert it and on a technical level, without knowing what it is or what it can potentially do, I’d really like a technical opinion of what it will do if I revert. I am not comfortable enough to replace a fresh set of core files but I will revert to the original file once I know what I am dealing with.
    If this is too in-depth for this forum please direct me to where I should post for more information on understanding what has happened here so that I might be able to recognize a hack in the future.
    I do appreciate all your time and your assistance.

    DinghyBlonde: I just got this same message – what did you decide to do?

    Thread Starter DinghyBlonde

    (@dinghyblonde)

    Hi Colleen:
    I didn’t end up doing anything. I took this to my WP meet up group and their response was too technical. I was also contacted by Wordfence directly who suggested I take it to
    my host. Since I am in the process of building a new site and there isn’t much data, I will
    just reload the whole thing on a new installation of WP when I’m finished. Not the best
    answer sorry. In the meantime, nothing has gone wrong with the site so maybe it has
    been handled in the updates. I just keep looking for information about it so that I can
    be confident enough to deal with it if it happens again. Post here if you find anything useful.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘config file has been changed’ is closed to new replies.