WordPress.org

Ready to get started?Download WordPress

Forums

iThemes Security (formerly Better WP Security)
Blank file-change notifications (5 posts)

  1. grahman
    Member
    Posted 1 year ago #

    (Bug fix below.)

    I'm receiving blank file-change notifications in email and in the WordPress admin. I can induce a file-change notification by changing a file and manually firing the file check procedure. It will tell me that a file change has occurred, but no changes are reported either in email or in the reporting interface.

    I did some debugging. It looks like the call to insert a record in the log is failing. The file is inc/filecheck.php and the relevant lines (starting at line 225) are:

    $wpdb->insert(
      $wpdb->base_prefix . 'bwps_log',
      array(
        'type' => '3',
        'timestamp' => current_time( 'timestamp' ),
        'host' => '',
        'user' => '',
        'url' => '',
        'referrer' => '',
        'data' => serialize( $combined )
      )
    );

    If I run this query directly against the database with dummy data, I get an error that the 'user' column is supposed to be an integer and it won't accept '' as a value.

    I confirmed that the insert is failing in two ways: (1) the value of $wpdb->insert_id after the insert returns 0 and (2) there are no records in the database with type=3.

    After changing the query above to the following, it began working:

    $wpdb->insert(
      $wpdb->base_prefix . 'bwps_log',
      array(
        'type' => '3',
        'timestamp' => current_time( 'timestamp' ),
        'host' => '',
        'user' => 0,
        'username' => '',
        'url' => '',
        'referrer' => '',
        'data' => serialize( $combined )
      )
    );

    Note that I added username, to set it to '' rather than leaving it null. Just a preference on my part based on similar code found in secure.php at line 749.

    I also wanted to mention that this may be related to this older issue: http://wordpress.org/support/topic/plugin-better-wp-security-dozens-of-blank-file-change-warning-emails-a-day?replies=7

    http://wordpress.org/extend/plugins/better-wp-security/

  2. Zanimul
    Member
    Posted 1 year ago #

    I was being blasted with blank emails, to the point that my hosting service shut the site down due to server load. I've not re-activated this plugin because of this issue was hoping that someone would have the same issue and post a fix.... and here you are!

  3. Autumn Walker
    Member
    Posted 11 months ago #

    I'm having the same issue one one of three blogs I have installed this plugin on. All three of the blogs are on the same server - not sure why only this one blog is having the issue.

  4. ganeshbala
    Member
    Posted 11 months ago #

    Hi,

    I am happy and sad to hear this.

    My site had the same issue (and effectively I had to remove the plugin via the FTP interface) as I could not login to the dashboard.

    The error logs size kept increasing and my ISP had to increase size. It was notuseful (increase in size) as the error logs kept increasing till I removed the plugin. I am hoping for an answer for the Better WP Support team.

    Thanks

  5. aussiewpking
    Member
    Posted 7 months ago #

    i have 2 sites on the same server that have this happening too

    when i disable the betterWPsecurity plugin [ by renaming the plugin folder as i cant login to the WP dashboard]

    then everything works fine [ can log into dashboard , site displays content instead of no content and dont get an email every minute or 10 mins ]

    im keen to keep the protection up - i use wordfence too - and its found no bugs/ malware etc

    do you think its the error log size? as i always use this plugin on many other sites and dont have issues with any of them [ except these 2 ]

    im glad [ and sad ] that others are having this issue

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic