Can you run a cronjob on your server? If not, just get the Wordpress waf plugin and hope for the best.
> On May 11, 2021, at 3:25 PM, David Schwartz via PLUG-discuss <plug-discuss@lists.phxlinux.org> wrote:
>
> I have had a shared hosting WHM (“reseller”) type account for years, and I’m constantly getting my Wordpress sites hacked.
>
> I just discovered another new WP site got hacked. I’m so sick of this. I notified my hosting provider and of course, they said they ran a scan and found nothing.
>
> It takes me just a couple of minutes to poke around using the cPanel File Manager to find litter the hacker has left. This time they added a new mailbox.
>
> I’m sick and tired of the hosting providers being so damn narrow-minded that they think scanning files looking for matching file signatures is effective. They have found exactly NONE of the files I’ve discovered over the past few years that hackers have left. NOT A SINGLE ONE!
>
> Also, as inept as they are, they do provide a lot of admin stuff I don’t want to deal with, and I do not have any interest in self-hosting on a dedicated machine (physical or virtual). It’s just a headache I don’t want to deal with.
>
> What I’d like to do is install a script or program that can scan through my file tree from …/public_html/ down and look for changes in the file system since the last scan, which is what tripwire does.
>
> Installing tripwire usually requires root access, but that’s impossible on a shared server.
>
> All it would do is something like an ‘ls -ltra ~/public_html’ with a CRC or hash of the file added to the lines. (Is there a flag in ls that does that?) The output would be saved to a file.
>
> Then you’d run a diff on that and the previous one, and send the output to an email, then delete the prvious one. Or keep them all and only compare the two latest ones. Whatever.
>
>
> As an aside, I know that Windows has a way of setting up a callback where you can get an event trigger somewhere whenever something in a designated part of the file system has changed.
>
> Is this possible in Linux?
>
> -David Schwartz
>
>
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
> To subscribe, unsubscribe, or to change your mail settings:
> https://lists.phxlinux.org/mailman/listinfo/plug-discuss
---------------------------------------------------
PLUG-discuss mailing list -
PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
https://lists.phxlinux.org/mailman/listinfo/plug-discuss
(text/plain)