Support » Plugin: BulletProof Security » Hidden Plugin Folders|Files Cron (HPF) – Requires too much attention

  • Resolved Laughter On Water

    (@laughter-on-water)


    WP 5.9.3

    I have files here:
    /home/user/mysite/wp-content/plugins/files

    Since the latest BPS update, HPF Cron sends email alerts every fifteen minutes that I’ve got a problem. The files are not from hackers. They’re part of an old CiviCRM install that is still functioning with that folder structure. (New CiviCRM installs the “files” folder elsewhere.) But here, BPS sends an alert. Also, preferred zip files in the plugins folder are giving alerts. My working admin screen is continually below the fold due to a log of BPS admin notifications. This seems contradictory to good UI policy.

    I have tried adding the various below directory structures to the “Ignore Hidden Plugin Folders and Files” text area and saving. Save, and everything seems okay. But in fifteen minutes I still get an alert. And they keep coming after that. FWIW, the default of every 15 minutes seems a bit too aggressive as a security policy.

    /home/user/mysite.com/wp-content/plugins/files
    /wp-content/plugins/files
    wp-content/plugins/files
    files
    /files

    I’ve turned off HPF Cron. I’d like to turn it back on again.
    Obviously, none of these are the correct directory structure. It would have made sense to simply copy and paste the directory/file structure provided by BPS in the admin alerts. (Like the first line example in the code above.) I was wrong.

    What’s the proper directory structure for the above files folder to stop HPF from sending me and other admins an email, stop taking up the above-the-fold admin area, but still allow me to re-engage HPF Cron? Also for an example zip file in the plugins folder?

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author AITpro

    (@aitpro)

    The HPF Alert tells you the correct ignore rule to use. In the HPF alert below the example folder name is “test”. The HPF Ignore Rule is: test. HPF displays the correct ignore rule to use for folders or files. All ignore rules need to be separated by a comma and space. Example: test, example.zip, another-example.php, error_log. Do not use file or folder paths in the ignore rule. The ignore rule is simply the name of the folder or file with no slashes/paths.

    You can change the HPF cron frequency by changing the “HPF Cron Check Frequency” option setting.

    BPS Hidden Plugin Folder|Files (HPF) Alert
    A plugin folder was found in your /plugins/ folder that is either a hidden plugin (plugin that is not displayed on the WordPress Plugins page) or an empty plugin folder. You can either delete this folder or if you recognize this folder and/or it is safe to ignore this folder you can ignore this folder check by adding the HPF Ignore Rule shown below in the Ignore Hidden Plugin Folders & Files textarea box option to make this Alert go away.
    Plugin Folder Path: C:/xampp/htdocs9/demo2/wp-content/plugins/test
    HPF Ignore Rule: test

    Plugin Author AITpro

    (@aitpro)

    I’m releasing a new BPS version in a couple of hours that has a new option to turn Off HPF email alerts.

    Thread Starter Laughter On Water

    (@laughter-on-water)

    Thank you for your replies. I’ll give it a shot!

    Plugin Author AITpro

    (@aitpro)

    Assuming all questions have been answered – the thread has been resolved. If the issue/problem is not resolved or you have additional questions about this specific thread topic then you can post them at any time. I still receive email notifications when threads have been resolved.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Hidden Plugin Folders|Files Cron (HPF) – Requires too much attention’ is closed to new replies.