WP Manifestindependent plugin directory
manifest / security / wp-file-guardian

WP File Guardian

detects changes to wp core, automatically fixes

by Brendan @ Infinus · github.com/brendancarr/wp-file-guardian · website

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/brendancarr/wp-file-guardian/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/brendancarr/wp-file-guardian ↗

Real-time scan of file integrity and unknown files in your WordPress directory.

Does not require external verification, and uses a recursive directory iterator to cross-reference against checksums from WordPress.org.

Currently has a short whitelist for unknown files:

  • '.htaccess', // Apache configuration
  • 'php.ini', // PHP configuration
  • 'wp-config.php', // WordPress configuration
  • 'robots.txt', // Search engine directives
  • 'favicon.ico', // Site favicon
  • '.user.ini', // User-specific PHP configuration
  • 'web.config', // IIS configuration
  • '.well-known', // SSL and other verification files directory
  • 'sitemap.xml', // XML sitemap
  • 'humans.txt', // Team credits file
  • 'error_log', // Error logging
  • 'php_errorlog' // PHP error logging