Clear logs files

Below the code of the relevant callback from the better-wp-security/core/lib/log.php file:

public static function purge_entries() {
	global $wpdb;

	$database_entry_expiration = date( 'Y-m-d H:i:s', ITSEC_Core::get_current_time_gmt() - ( ITSEC_Modules::get_setting( 'global', 'log_rotation' ) * DAY_IN_SECONDS ) );
	$query = $wpdb->prepare( "DELETE FROM <code>{$wpdb->base_prefix}itsec_logs</code> WHERE timestamp<%s", $database_entry_expiration );
	$wpdb->query( $query );

	$log_type = ITSEC_Modules::get_setting( 'global', 'log_type' );

	if ( 'database' !== $log_type ) {
		self::rotate_log_files();
	}
}

Looks like database logs are always (attempted to be) purged while file logs are only purged when log type is not equal to ‘database’.

• This reply was modified 1 year, 7 months ago by nlpro.

@shanedelierrr

While having a closer look at the relevant code I noticed something in the get_log_file_path() method (from the log.php file). It’s about the log_info entry in the global settings.

According to the better-wp-security/core/modules/global/module.json file the log_info global setting is listed under “removed-settings”.

Yet, in the get_log_file_path() method an attempt is done to save/write a value to the log_info global setting.
If I’m not mistaken an attempt to save the log_info global setting would probably fail on validation. Something like log_info is not a valid global entry…

Could you please contact Timothy to verify this?

It’s the line below from the get_log_file_path() method that fails silently:

ITSEC_Modules::set_setting( 'global', 'log_info', $log_info );

As a result every time the get_log_file_path() method is executed a new log file is created. That explains the large amount of log files created.

Definately a bug that needs to be fixed.

To prevent disaster but still be able to use the iTSec plugin you can temporarily change the How should event logs be kept settings value to Database Only in the Global Settings. The bug only affects file logging.

Navigation path:
Security > Settings > CONFIGURE

Scroll down to the Logging section.

After changing the How should event logs be kept settings value don’t forget to click on the blue Save button at the bottom of the page 😉