Support » Plugin: Wordfence Security - Firewall & Malware Scan » Unknown file in WordPress core: xxx (+ 1 more) <- where do I find the 1 more?

  • Resolved Dandydahlia

    (@dandydahlia)


    Hi,

    I’ve googled this high and low so hoping someone might have some insight into HOW I find what the “1 more” item is?

    Wordfence has recently (last week) started saying:
    Unknown file in WordPress core: wp-admin/php.ini (+ 1 more)
    Type: File

    I’m not concerned about the php file as it’s the same file it was 2 years (even 4 years ago) so I’m confident it’s not a hack.. But it’s the 1 more file that’s got me concerned.

    Any ideas on how to see that 1 more file?

    Thank you πŸ™‚

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Support WFAdam

    (@wfadam)

    Hello @dandydahlia and thanks for reaching out to us!

    Could you post a screenshot of this result? Make sure to have it expanded so we can see all the details related to it.

    Did this start coming up after any updates or changes to your site?

    Thanks!

    Hi Adam,

    Thanks so much for replying.
    I saw Wordfence has just put out a new update so I’ll update it tonight when no users are online and let you know if the problem is still happening.

    As requested, here is the screenshot – https://tinyurl.com/y6leb7k9
    The first problem email I received about it was the other day – Thu, 3 Dec 12:37 – which was before I updated wordpress to (Version 5.5.3)
    However that day I did update some plugins, I just can’t remember what..

    I’ll write back later.
    Thanks!

    OK i’m back, had a moment with no one online so I updated Wordfence.

    Error sadly still there:
    https://tinyurl.com/y2gbc6gp

    Any ideas?

    Thank you πŸ™‚

    Plugin Support WFAdam

    (@wfadam)

    If you could try one more step for me. Navigate to Wordfence > All Options > Advanced Firewall Options and click “Manually Update Rules”, then run another scan to see if this is picked up.

    Let me know what you find!

    Thanks!

    Hi Adam,

    Done. I’ve updated the rules.

    I did another scan and sadly it’s still coming up:
    Unknown file in WordPress core: wp-admin/php.ini (+ 1 more)
    Type: File
    Issue Found December 8, 2020 10:54 pm
    High

    Is there any way to see what it’s thinking the 1 more file is? I’m not worried about ignoring the php.ini file, but don’t want to ignore the “1 more” file that might be a problem.

    Thanks again for your help πŸ™‚

    Plugin Support WFAdam

    (@wfadam)

    It would typically show those files in separate scan results. The fact that it says php.ini, makes me think it’s just that file.

    If you think the php.ini file is fine, I would recommend ignoring this result and seeing if another scan shows any other results.

    Let me know your findings!

    Thanks!

    Dandydahlia

    (@dandydahlia)

    Thanks Adam. I’ll let you know how I go.

    I saw there’s a new WordPress update out, so hopefully that will fix it too πŸ™‚

Viewing 7 replies - 1 through 7 (of 7 total)
  • You must be logged in to reply to this topic.