Question re Core File Scanner

  • Resolved floridante

    (@floridante)


    6 years, 10 months ago

    Hello,

    I received a warning today that 4 core files didn’t match official WP-files and were repaired/replaced:

    – wp-includes/js/zxcvbn.min.js
    – wp-includes/js/mediaelement/mediaelement-and-player.min.js
    – wp-includes/js/codemirror/csslint.js
    – wp-includes/js/plupload/moxie.min.js

    When comparing the replaced/repaired files with my 4 last backups I notice that these files didn’t match already for the last 4 weeks.

    My settings for Shield were not changed for the last couple of months. So a rather general question: How could it happen that the Core File Scanner didn’t notice that those 4 files dind’t match during the last couple of weeks?

    Was there an update for Shield that would make the scanner more sensitive?
    Or is possible that those files in question were recently updated by WordPress and the scanner detected the differences before my site would update to the new version?

    I hope that this question is general enough to qualify for a reply outside pro-support.

    Thanks in avance.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author One Dollar Plugin

    (@onedollarplugin)

    If the scanner was running successfully, it would have picked up these files if they were different. This suggests to me that perhaps, for some reason, the cron/scanner wasn’t successfully running.

    If the files are identical to what they were 4 weeks ago, there’s no reason that the scanner would pick it up today, but not 4 weeks ago. I can only surmise the scanner wasn’t actually running.

    Or, it was running but you weren’t receiving the emails. This is quite possible and we’ve seen it many times in the past:
    https://onedollarplugin.com/wordpress-email-deliverability/

    Thread Starter floridante

    (@floridante)

    Is there a possibility to check whether the scanner was running or not? Some sort of protocol? As I wrote I didn’t change any settings. Both websites I’m running received this warning and the message that these 4 files were replaced/repaired. Both websites have the same settings for Shield.

    I downloaded WP after receiving the warning and compared the 4 files in the WP-zip file w/ the ones on my server which were just replaced by Shield. The compare plugin of Notepad++ let me know there were different encodings and then pointed out extactly the same differences as with the files in my last 4 backups.

    So I’m a bit buffled that the files Shield had just replaced are apparently not identical to the WP files. Any idea how that can happen?

    Plugin Author One Dollar Plugin

    (@onedollarplugin)

    We’ve got a huge helpdesk of articles here which is a good first place to look for background information on these scanners at the least:
    https://icontrolwp.freshdesk.com/a/solutions/folders/3000008886

    This article may help explain it:
    https://icontrolwp.freshdesk.com/support/solutions/articles/3000048817-the-core-file-scanner-reports-files-are-different-but-they-aren-t-

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Question re Core File Scanner’ is closed to new replies.