I run shitload of wordpress installations on my server. I always do my best to keep wordpress up to date but it was hacked and infected many times.
I made custom script that guard my php files from being hacked:
Features:
e-mail/cell phone reporting of:
-
NEW php files (you are informed when attacker findout new security hole in your applications and uploads new files to your server)
-
CHANGED php files (you are informed when attacker modify your php files)
-
DELETED php files (you are informed when attacker delete some of your php files)
script is launched by cron every 10 minutes so I'm informed really fast about new security hole in my WP installation, it helps me to monitor thousands of php files I've on my server
I can install/sell it for you for only
$50 epass - (free updates of the script included)
bonus: simple .htaccess for wp protection
orders: icq 988 396 42
example of the mail report:
Code:
TOTAL NEW FILES: 0
===========================================
TOTAL CHANGED FILES: 3
===========================================
18.10.2008 09:32:58 /home/www/xxxblog/www/wp-includes/deprecated.php
18.10.2008 09:30:51 /home/www/xxxblog/www/index.php
18.10.2008 09:26:41 /home/www/zmcom/www/rekvalifikace-skoleni.php
TOTAL DELETED FILES: 0
===========================================