Title: wp-config files changed
Last modified: August 31, 2016

---

# wp-config files changed

 *  [dlechner](https://wordpress.org/support/users/dlechner/)
 * (@dlechner)
 * [10 years, 1 month ago](https://wordpress.org/support/topic/wp-config-files-changed/)
 * In the email summary of security activity that I get from wordfence I’ve seen
   that the wp-config file has been changed in several of my websites in the past
   few days….but I don’t see any way to “look at the changes or revert to the original”
   from my wordfence dashboard. When I run a scan I get “Congratulations you have
   no problems”. Nothing looks wrong with my site. Everything is up to date. Should
   I be worried?
 * [https://wordpress.org/plugins/wordfence/](https://wordpress.org/plugins/wordfence/)

Viewing 2 replies - 1 through 2 (of 2 total)

 *  [WFBrian](https://wordpress.org/support/users/wfbrian/)
 * (@wfbrian)
 * [10 years, 1 month ago](https://wordpress.org/support/topic/wp-config-files-changed/#post-7195166)
 * Hi,
 * Do you have a backup you can compare to? Here is some information on securing
   wp-config.php.
 * [https://www.wordfence.com/learn/how-to-harden-wordpress-sites/#securing-your-database](https://www.wordfence.com/learn/how-to-harden-wordpress-sites/#securing-your-database)
 * After reading, try to determine if someone could have accessed wp-config.
 * Hope that helps,
    Brian
 *  Thread Starter [dlechner](https://wordpress.org/support/users/dlechner/)
 * (@dlechner)
 * [10 years, 1 month ago](https://wordpress.org/support/topic/wp-config-files-changed/#post-7195468)
 * Hi Brian,
    I compared several of the wp-config files with backups and they don’t
   look like they’ve been changed at all…but I keep getting new messages from wordfence
   saying that other sites I have also have changed wp-config files. I paid some
   guy who is a whiz at helping with hacked sites $80 to check my main site and 
   he didn’t find anything wrong. Now I’m also getting notices that error logs have
   been changed. I’m getting kind of freaked out. Could wordfence be comparing a
   version number on the wp-config or something like that? Is anyone else reporting
   that the wp-config has been changed? Over the past month I’ve had about 12 sites
   report that the wp-config file has been changed.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘wp-config files changed’ is closed to new replies.

 * ![](https://ps.w.org/wordfence/assets/icon.svg?rev=2070865)
 * [Wordfence Security - Firewall, Malware Scan, and Login Security](https://wordpress.org/plugins/wordfence/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wordfence/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wordfence/)
 * [Active Topics](https://wordpress.org/support/plugin/wordfence/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wordfence/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wordfence/reviews/)

## Tags

 * [wp-config](https://wordpress.org/support/topic-tag/wp-config/)

 * 2 replies
 * 2 participants
 * Last reply from: [dlechner](https://wordpress.org/support/users/dlechner/)
 * Last activity: [10 years, 1 month ago](https://wordpress.org/support/topic/wp-config-files-changed/#post-7195468)
 * Status: not resolved