Hi,
Could you share some examples of files that are being modified?
Thanks,
Gerroald
No files are being modified, iThemes Security is just telling me they are. First I get a notice that thousands of files have been deleted, when they have not. Then I get a notice that the thousands of files that have always been there have been added.
Hi,
Okay, thanks for reporting this. I’ll file a report and make sure the developer is aware.
My apologies for the inconvenience,
Gerroald
You’re welcome.
It behaves as if some error condition occurring during the file scan is not being caught and causing all the files in the installation to be reported as not there rather than reporting the error or waiting and retrying later. No guesses as to why it can do one or two more scans before it realizes the files are there and reports them as being added.
A bit more data for you to work with. File change log on one site for the past month:
Check Time Files Added Files Deleted Files Changed Memory Used Details
2015-04-23 11:40:35 2801 0 0 4.88MB Details
2015-04-22 11:38:04 0 2801 0 7.09MB Details
2015-04-21 11:16:22 11 0 281 11.77MB Details
2015-04-20 11:14:52 0 0 0 7.4MB
2015-04-19 11:10:15 2790 0 0 4.85MB Details
2015-04-18 11:08:04 0 2790 0 7.04MB Details
2015-04-17 10:58:39 0 0 0 7.41MB
2015-04-16 10:40:24 0 0 0 7.42MB
2015-04-15 10:38:56 2790 0 0 4.86MB Details
2015-04-14 10:38:03 0 2790 0 7.04MB Details
2015-04-13 10:18:12 0 0 0 7.39MB
2015-04-12 10:10:47 0 0 0 7.39MB
2015-04-11 10:10:16 0 0 0 7.4MB
2015-04-10 10:09:11 2790 0 0 4.85MB Details
2015-04-09 10:08:03 0 2790 0 7.04MB Details
2015-04-08 10:07:37 0 0 0 7.42MB
2015-04-07 10:05:19 0 0 18 11.6MB Details
2015-04-06 10:02:10 0 0 0 7.42MB
2015-04-05 09:58:41 0 0 0 7.41MB
2015-04-04 09:53:46 1 0 35 11.61MB Details
2015-04-03 09:48:46 0 0 0 7.42MB
2015-04-02 09:48:22 0 0 145 11.67MB Details
2015-04-01 09:45:30 0 0 107 11.65MB Details
2015-03-31 09:43:43 0 0 0 7.42MB
2015-03-30 09:39:47 0 0 0 7.41MB
2015-03-29 09:39:29 0 0 0 7.41MB
2015-03-28 09:38:07 2789 0 0 4.85MB Details
2015-03-27 09:38:03 0 2789 0 7.04MB Details
2015-03-26 09:27:07 0 0 0 7.41MB
2015-03-25 09:10:58 2789 0 0 4.85MB Details
2015-03-24 09:08:03 0 2789 0 7.04MB Details
Hi,
Thanks for the additional information. I’ve added a link to this thread in the report so I can notify you of any progress. I don’t have a timeline at this time, but I will update you as soon as I know anything at all.
Thanks,
Gerroald
I’m still seeing this constantly, any news? It’s getting really old. I would gladly help debug this to get it fixed. There’s got to be somewhere that some error isn’t being handled when the scan runs and when it fails it thinks there were no files found, then finds them all again on the next run. The first one on this site (it’s happening on multiple sites on different hosting providers) I ran the file check again manually the minute the error email arrived and it found all the files again.
Check Time Files Added Files Deleted Files Changed Memory Used Details
Check Time Files Added Files Deleted Files Changed Memory Used Details
2015-05-12 16:59:20 2749 0 0 4.82MB Details
2015-05-12 15:02:05 0 2749 0 7.25MB Details
2015-05-11 14:32:35 2749 0 0 4.83MB Details
2015-05-10 14:32:04 0 0 0 0.06MB
2015-05-09 14:32:03 0 2749 0 7.25MB Details
2015-05-08 14:05:49 2749 0 0 4.84MB Details
2015-05-07 14:02:04 0 2752 0 7.26MB Details
2015-05-06 13:36:16 2752 0 0 4.84MB Details
2015-05-05 13:32:04 0 2752 0 7.26MB Details
2015-05-04 13:09:26 0 0 0 7.23MB
2015-05-03 13:09:24 0 0 0 7.22MB
2015-05-02 13:09:01 0 0 0 7.22MB
2015-05-01 13:04:26 2752 0 0 4.84MB Details
2015-04-30 13:02:04 0 2752 0 7.26MB Details
2015-04-29 12:43:59 0 0 0 7.23MB
2015-04-28 12:40:37 0 0 6 11.86MB Details
2015-04-27 12:40:03 0 0 14 11.54MB Details
2015-04-26 12:36:32 2752 0 0 4.83MB Details
2015-04-25 12:32:04 0 2752 0 7.25MB Details
2015-04-24 12:30:12 23 0 819 11.92MB Details
2015-04-23 12:29:22 0 0 0 7.15MB
2015-04-23 12:28:58 2729 0 0 4.78MB Details
2015-04-23 12:02:04 0 2729 0 0.14MB Details
2015-04-22 11:37:55 17 2 239 4.51MB Details
2015-04-21 11:34:09 11 0 256 4.48MB Details
2015-04-20 11:32:51 2703 0 0 29.07MB Details
2015-04-19 11:32:03 0 2703 0 0.09MB Details
2015-04-18 11:23:24 0 0 0 0.06MB
2015-04-17 11:18:53 0 0 0 0.16MB
2015-04-16 11:14:14 0 0 0 0.08MB
2015-04-15 11:13:15 0 0 0 0.16MB
2015-04-14 11:09:41 0 0 182 4.4MB Details
2015-04-13 11:09:37 0 0 0 0.08MB
2015-04-12 11:05:24 0 0 0 0.07MB
Try this:
After a (scheduled) file Change Detection Scan that reports ~2749 files added log into phpMyAdmin and execute the following SQL statement:
Select * from [prefix]options where option_name=’itsec_local_file_list’;
Where [prefix] should be substituted with your database table prefix.
It should display the complete file list of ~2749 files in serialized format.
Then perform a manual scan AFTER (temporarily) setting WP_DEBUG to true in the wp-config.php file.
Actually add a new line in front of the WP_DEBUG line so the content of the wp-config.php file looks like this:
…
error_reporting(E_ALL); ini_set(‘display_errors’, 1);
define(‘WP_DEBUG’, true);
…
Please note that other warnings\errors might start displaying (front and backend) which have absolutely nothing to do with this issue.
You may have to repeat this test as I see from your log entries that there is no guarantee that the next scan reports ~2749 files deleted.
So if you don’t get any error or warning check the Logs to make sure the
manual scan reports ~2749 files deleted.
Only that situation might give us some (error) feedback.
If the manual scan does not report ~2749 files deleted in the Logs page repeat the test till it does.
And keep in mind there is still the possibility of no (error) feedback at all …
Don’t forget to undo the changes in the wp-config.php file after you are done.
dwinden
Hmm, I’ve had the site configured as requested for two days, have run a manual scan 30 times and have not seen it fail yet. Thankfully, the site I chose does not generate any warnings with the debug enabled, so I can leave it this way in hopes of catching the error. It’s happening on a bunch of other client sites, but I can’t set them all up like this.
I’ve reconfigured the site I was using to debug this to log all php errors to a file. I’ll just let it run normally and see if I get anything useful next time it hiccups doing the automatic scan. Running the scans manually isn’t causing the error.
Ok, good thinking.
It’s very well possible the issue is limited to scheduled scans only.
Which is already a clue that might help us find the root cause of this issue.
dwinden
Hi,
I have the plugin install it and for some time I receive emails but in the emails the changed files are not display it anymore. I get only:
File changes detected: iThemes Security detected file changes on your system.
but I don’t receive witch files was changed!
And on other website where I install the plugin I receive the list with the files changed.
How can I make to receive the list with the files changed.
Thank you
It just reported every single file in the installation deleted a few minutes ago on the most recent automatic file check. Unfortunately, there were no php errors (and yes, I did verify that it is configured to log to the file-there are a couple of unrelated site operations that generate warnings and they do show up in the log file).
Any ideas/suggestions on how to proceed from here?
I did just think of something else. I was having issues with automatic updates of plugins and the support guys fixed it by explicitly setting the temp folder used by WP in wp-config.php. Perhaps the temp folder is “going away” during the scan?
Ok so it is an issue that happens when running a scheduled scan.
Did you also do the first part of my instructions ?
After a (scheduled) file Change Detection Scan that reports ~2749 files added log into phpMyAdmin and execute the following SQL statement:
Select * from [prefix]options where option_name=’itsec_local_file_list’;
Where [prefix] should be substituted with your database table prefix.
It should display the complete file list of ~2749 files in serialized format.
It will now actually display pretty much empty (check it anyway just for extra info), and then wait for a file scan that adds all the files again
and then check it again.
Hmmm, don’t know whether temp folder could be causing this … I’ll keep this in mind while we continue tracking this down …
dwinden
