search

FernleafSystems / Shield-Security-for-WordPress

Reflection of the Shield plugin on WordPress.org
https://getshieldsecurity.com
9 stars 4 forks source link

Respect WP_CONTENT_DIR when checking for modified files #11

Closed sellcom closed 8 years ago

sellcom commented 8 years ago

We receive daily warnings that Core WP files have been modified, like these: The following official WordPress core files are missing from your site:

These files don't actually exist, b/c we use an alternate directory for wp-content (a very effective security measure against script kiddies): /\ Tweak the place where user content and plugins are stored **/ define( 'WP_CONTENT_DIR', $_SERVER['DOCUMENT_ROOT'] . '/wpZZZ-content' ); define( 'WP_CONTENT_URL', 'http://www.xyz.com/wpZZZ-content');

Please check WP_CONTENT_DIR when looking for modified files.

paulgoodchild commented 8 years ago

This will be fixed by completely excluding the WP-CONTENT directory altogether. We're already excluding the plugins, themes, and languages. There's not much left there to examine