iThemes Security has noticed a change to some files in your WordPress site

@darrenchu

First of all I don’t think there is any relation between the alert message and the fact that the wp_itsec_log table seems to be corrupt.

The file change detection (FCD) warning alert is normally only displayed after a manual FCD scan … but there is a recent topic in this forum where this alert suddenly starts showing after a scheduled FCD scan completes…

Would be interesting to get this change of behaviour confirmed from a second source.

To fix the log table you can try and manually drop it from phpMyAdmin.
Then use the following SQL command to recreate it: (The create_database_tables() method in the better-wp-security/core/class-itsec-lib.php file contains all 3 create table commands).

CREATE TABLE wp_itsec_log (
	log_id bigint(20) UNSIGNED NOT NULL AUTO_INCREMENT,
	log_type varchar(20) NOT NULL DEFAULT '',
	log_function varchar(255) NOT NULL DEFAULT '',
	log_priority int(2) NOT NULL DEFAULT 1,
	log_date datetime NOT NULL DEFAULT '0000-00-00 00:00:00',
	log_date_gmt datetime NOT NULL DEFAULT '0000-00-00 00:00:00',
	log_host varchar(20),
	log_username varchar(20),
	log_user bigint(20) UNSIGNED,
	log_url varchar(255),
	log_referrer varchar(255),
	log_data longtext NOT NULL,
	PRIMARY KEY  (log_id),
	KEY log_type (log_type),
	KEY log_date_gmt (log_date_gmt)
	) DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;

Once executed you will probably need to refresh the phpMyAdmin left side navigation panel to actually see the new table listed\created.

Use the above SQL command only if DB_CHARSET and DB_COLLATE are left untouched in the wp-config.php file:

/** Database Charset to use in creating database tables. */
define('DB_CHARSET', 'utf8');

/** The Database Collate type. Don't change this if in doubt. */
define('DB_COLLATE', '');

To keep things in sync truncate(empty) the wp_itsec_lockouts and wp_itsec_temp tables.

Needless to say you should follow the above instructions at your own risk.

dwinden

@darrenchu

If you require no further assistance please mark the topic as ‘resolved’.

dwinden