Wrong file change warning emails. Possible bug in class-itsec-file-change.php

  • Resolved Capobis

    (@ioweuiraosjfosj)


    9 years, 7 months ago

    I’ve been getting wrong file change warning emails for a while. As in… no files have actually been changed. The email report ALL files as Files Added, not just from that WordPress install, but from the root (there are 3 WP installs)

    I looked in the error_log file and stumbled upon entries like these:

    [05-Sep-2014 07:36:32 UTC] PHP Warning: opendir(): open_basedir restriction in effect. File(/) is not within the allowed path(s): (/home/eurotr:/usr/lib/php:/usr/php4/lib/php:/usr/local/lib/php:/usr/local/php4/lib/php:/tmp) in /home/eurotr/public_html/eurotrainer/wordpress/wp-content/plugins/better-wp-security/modules/free/file-change/class-itsec-file-change.php on line 452

    [05-Sep-2014 07:36:32 UTC] PHP Warning: opendir(/): failed to open dir: Operation not permitted in /home/eurotr/public_html/eurotrainer/wordpress/wp-content/plugins/better-wp-security/modules/free/file-change/class-itsec-file-change.php on line 452

    Line 452 is:

    if ( $directory_handle = opendir(ITSEC_Lib::get_home_path() . $clean_path ) ) { //get the directory

    I’m thinking this may have something to do with the file change warnings.

    https://wordpress.org/plugins/better-wp-security/

Viewing 3 replies - 1 through 3 (of 3 total)
  • *B.V.RammannaRaau*

    (@reviewkeys)

    9 years, 7 months ago

    It is a minor security issue with iThemes Security Plugin right from the version 4.3.2.
    The following setups can stop such errors in error_log.txt.

    Under file change detection>>
    1).Deselect “Split File Scanning”

    2).From drop down options for “Include/Exclude Files and Folders“
    select “Exclude Selected“

    3).From “Files and Folders List” add directories similar to the following:
    wp-content/cache/
    wp-content/uploads/ithemes-security/

    Thread Starter Capobis

    (@ioweuiraosjfosj)

    9 years, 7 months ago

    I think that worked!

    One more question: Is it normal for the Files and Folders List to show the root (/home/eurotr/public_html/)?
    I expected it instead to start from the site folder (/home/eurotr/public_html/eurotrainer/) or WordPress installation folder (/home/eurotr/public_html/eurotrainer/wordpress/)

    Thanks for your help!

    terrainnova

    (@terrainnova)

    9 years, 5 months ago

    Hello,

    I see notifications of file changes for files and directories I have explicitly asked to be excluded from change detection and corresponding notifications. Has anyone seen this? Is it a bug?

    Thanks

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Wrong file change warning emails. Possible bug in class-itsec-file-change.php’ is closed to new replies.