Illegal strings offset scan

  • sontram

    (@sontram)


    9 years, 6 months ago

    I ran a scan today and suddenly Wordfence gave me a ton of warnings about some illegal strings in the wfConfig.php file. Then these warnings also appear on the pages of my site, so not just on the dashboard anymore. The scan returns all Secure results, but these warnings appear in the Scan details activity box. Some of these are:

    [Dec 08 12:40:03] Illegal string offset ‘scansEnabled_scanImages’ (2) File: /home/content/p3pnexwpnas12_data03/23/3640323/html/wp-content/plugins/wordfence/lib/wfConfig.php Line: 190
    [Dec 08 12:40:03] Illegal string offset ‘scansEnabled_highSense’ (2) File: /home/content/p3pnexwpnas12_data03/23/3640323/html/wp-content/plugins/wordfence/lib/wfConfig.php Line: 190
    [Dec 08 12:40:03] Illegal string offset ‘scan_maxDuration’ (2) File: /home/content/p3pnexwpnas12_data03/23/3640323/html/wp-content/plugins/wordfence/lib/wfConfig.php Line: 190
    [Dec 08 12:40:03] Illegal string offset ‘scansEnabled_highSense’ (2) File: /home/content/p3pnexwpnas12_data03/23/3640323/html/wp-content/plugins/wordfence/lib/wfConfig.php Line: 190

    What is happening? I didn’t modify any files in the wordfence folder. Did my site get compromised?

    • This topic was modified 9 years, 6 months ago by sontram.
Viewing 1 replies (of 1 total)
  • Plugin Author WFMattR

    (@wfmattr)

    9 years, 5 months ago

    Hi,

    It’s not likely that this is a sign of a compromise, so hopefully that is good news. The line where you were seeing errors was related to configuration, where we use part of WordPress’s object cache. We only use the cache throughout one request — so the values shouldn’t be saved from one pageview (or scan process) to the next.

    Do you use any caching plugin that includes “object caching”? If so, can you temporarily disable that plugin and see if any issues still remain?

    Also, if you previously used a caching plugin for object caching but uninstalled it, it’s possible it left behind a file that shouldn’t be in use anymore.

    -Matt R

Viewing 1 replies (of 1 total)

The topic ‘Illegal strings offset scan’ is closed to new replies.