Error log file showing as modified file in Wordfence

  • Resolved mcgregormedia

    (@mcgregormedia)


    7 years, 1 month ago

    The file includes/error_log/yikes-easy-mailchimp-error-log.php is being written to when there’s an error and is showing as a modified file in Wordfence scans. Users may see that this is purely a log file and choose to ignore future scan notifications which could lead to security issues.

    Can I suggest that the plugin writes the log to a text file outside the plugin directory, perhaps in a custom directory in wp-content?

Viewing 1 replies (of 1 total)
  • Plugin Contributor yikesitskevin

    (@yikesitskevin)

    Hi @mcgregormedia,

    You’re the second person to report this issue in the last few months. I didn’t think it was a big deal because the file is called error.log and is only written to when debugging is deliberately enabled. However, I will make a ticket for this and we’ll try to get it out with our next release.

    Thanks,
    Kevin.

Viewing 1 replies (of 1 total)
  • The topic ‘Error log file showing as modified file in Wordfence’ is closed to new replies.