Daily cleanup process
A daily cleanup process cleans up unneeded files from your WordPress installation.
Access to certain types of files like.bak,.sql, and others are blocked via the firewall module. These files are not necessary for the functioning of your WordPress site but are sometimes created automatically. For example, a plugin might make a copy of your wp-config.php file before making changes.
If backup files are not removed, they can be located and exploited by attackers. This could give them access to sensitive information like your database password, leading to complete control over your site. Although simple, the step of removing these files is often overlooked. Security Ninja assists in this by identifying and deleting common file names that pose a risk.
Files Tested for and Removed:
wp-config.php.old- Config backup: can contain critical credentials
wp-config.php_bak- Config backup: can contain critical credentials
wp-config.php~- Config backup: can contain critical credentials
wp-config.php-- Config backup: can contain critical credentials
wp-config.php,- Config backup: can contain critical credentials
wp-config.php.- Config backup: can contain critical credentials
wp-config.php.bkp- Config backup: can contain critical credentials
wp-config.php_revision- Config backup: can contain critical credentials
php_errorlog- May expose server details or errors
php_mail.log- May expose user details or errors
.htaccess.sg- SiteGround.htaccess backup: may expose server config
.htaccess_swift_backup- Swift Performance.htaccess backup: may expose server config
phpinfo.php- Exposes full PHP environment details
info.php- Dev leftover: should not exist on a live site
test.php- Dev leftover: should not exist on a live site
readme.html- Default WordPress readme file
license.txt- Default WordPress license file
*.sql- Database dumps: may contain sensitive data
*.bak- Old file copies: may contain server or site secrets
By removing these files, Security Ninja helps ensure that critical information is not inadvertently exposed, thereby bolstering the security of your WordPress site.