Does Wordfence ever modify other plugin files? (updraftplus.php)

  • Resolved bonjon9

    (@bonjon9ecrrcom)


    12 years ago

    Wordfence scan is showing a change in my updraftplus.php file. The change is new code inserted:
    ‘ # The Google Analyticator plugin does something horrible: loads an old version of the Google SDK on init, always – which breaks us
    if ((defined(‘DOING_CRON’) && DOING_CRON) || (isset($_GET[‘page’]) && $_GET[‘page’] == ‘updraftplus’)) remove_action(‘init’, ‘ganalyticator_stats_init’); ‘

    This was after several scans failed with this error: Call to Wordfence API to resolve IPs failed: We received an error response when trying to contact the Wordfence scanning servers. The HTTP status code was [0] and the curl error number was [6] and the error from CURL was: Couldn’t resolve host ‘noc1.wordfence.com’

    A couple of days ago, Wordfence gave me a different “file difference” warning on Updraftplus.php. I re-installed UpdraftPlus and it went away. That’s what’s got me wondering if the new difference was inserted by Wordfence. But the “which breaks us” in the message doesn’t say who “us” is.

    I don’t use the Google Analyticator plugin.

    Anyone else seeing this?

    https://wordpress.org/plugins/wordfence/

Viewing 1 replies (of 1 total)
  • Thread Starter bonjon9

    (@bonjon9ecrrcom)

    12 years ago

    Found the answer. Sorry for bugging anyone here.

    In case someone is looking for this issue, here’s what the developer of UpdraftPlus said on that forum:

    “The fault is in Google Analyticator – on every page load, it loads an old, incompatible copy of the Google SDK (instead of only loading it when needed) – which pollutes the function space for other plugins. The fatal conflict comes because of it being an old version, which conflicts with the new version. There’s no opportunity for another plugin to load its version of the Google SDK.

    I’ve added some code in UpdraftPlus to specifically detect Google Analyticator, and prevent it doing this. If you de-install and then install UpdraftPlus, then it’ll still be 1.9.5 – but should work (it fixed it for me on the site I reproduced it on).

    This is an ugly solution, really – custom work-arounds for brokenness in other plugins are really inefficient ways of solving things…. Hence, I’ve opened a support request in Google Analyticator’s forum – hopefully they’ll fix it soon:

    https://wordpress.org/support/topic/dont-unconditionally-load-old-google-sdk

    Best wishes,
    David”

Viewing 1 replies (of 1 total)

The topic ‘Does Wordfence ever modify other plugin files? (updraftplus.php)’ is closed to new replies.