• Resolved Wasabee

    (@wasabee)


    Hello,

    I’ve installed Wordfence Security 6.0.7 and wanted to exclude files from scan that match following wildcard patterns:
    *.png,*.jpg

    Using the options doesn’t work for me.

    As in the file lib/wfConfig.php ‘scan_exclude’ => ” was never changed, I went desperate and even tried to define
    $excludePattern = ‘/^(?:.*\.png|.*\.jpg)$/i’;
    in the file lib/wordfenceScanner.php.

    But those file are still scanned.

    Do you have any idea, what the problem could be?

    Thanks in advance!

    Regards
    Nina

    https://wordpress.org/plugins/wordfence/

Viewing 6 replies - 1 through 6 (of 6 total)
  • Hi Nina,

    Was exclude wildcards working for your prior to 6.0.7?

    Thanks,
    Brian

    Thread Starter Wasabee

    (@wasabee)

    Hi Brian,

    thanks for your quick response.
    I’ve used 6.0.3 before and wildcards didn’t work already.
    I hoped an update would fix the problem…

    Regards,
    Nina

    Do you have the scan images as executable option checked?

    tim

    Thread Starter Wasabee

    (@wasabee)

    Hi Tim,

    no, “Scan image files as if they were executable” is not checked.

    In fact my “scans to include” options look like follows:

    Scan for the HeartBleed vulnerability?
    -> checked
    Scan core files against repository versions for changes
    -> checked
    Scan theme files against repository versions for changes
    -> nope
    Scan plugin files against repository versions for changes
    -> checked
    Scan for signatures of known malicious files
    -> checked
    Scan file contents for backdoors, trojans and suspicious code
    -> checked
    Scan database for backdoors, trojans and suspicious code
    -> checked
    Scan posts for known dangerous URLs and suspicious content
    -> checked
    Scan comments for known dangerous URLs and suspicious content
    -> checked
    Scan for out of date plugins, themes and WordPress versions
    -> checked
    Check the strength of passwords
    -> checked
    Monitor disk space
    -> checked
    Scan for unauthorized DNS changes
    -> checked
    Scan files outside your WordPress installation
    -> nope
    Scan image files as if they were executable
    -> nope
    Enable HIGH SENSITIVITY scanning. May give false positives.
    -> nope
    Exclude files from scan that match these wildcard patterns. Comma separated.
    -> *.jpg,*.png

    Regards,
    Nina

    Thread Starter Wasabee

    (@wasabee)

    Does anyone have an idea for a solution?

    We were testing this and I apologize for not getting back to you. I have a bug in on this now. We’ll announce it when it gets addressed, hopefully soon.
    Thanks for reporting it.

    tim
    FB811

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘Exclude files from scan’ is closed to new replies.