wf-hoover table
-
with the latest version of wordfence there is a problem between the wfhoover table and autoptimize. http://www.successfulflyfishing.com I just watched the wf hoover table dump over 9,000 records into the table on 3 page refreshes. So far this is the only site affected but I expect more. I would look for some xss or similar problem in WordFence as this has not been a problem before.
-
What is this table for anyway?
I found below info with a quick Google search. My wf_hoover table is empty so below makes sense.
“…The wf_hoover table is used to temporarily store URL’s found during a scan before we check them against the Google Safe Browsing (GSB) list of known malware and phishing URLs. This is used during a scan and in other places we check things against the GSB. It can be cleared manually but not during a scan. I would deactivate Wordfence and then do so. It should truncate and clear on each scan by itself. The size might be an indication you have many many url’s we have to check. Reactivate plugin after the clear and start a new scan. It might be really interesting to note what the size reports after the new scan.”
from — https://ww.wp.xz.cn/support/topic/emptying-wfhoover-database-tableBy the way, with a large website that’s well curated, the Wordfence scan option that checks URLs with the GSB is in my opinion a good thing to turn OFF while troubleshooting failed scans, and perhaps just leave it unchecked, that’s what we do. MTN
Thanks Mountainguy2. You did better than I searching out what the hoover table was for. Good info. This site is a small site and unless I got hacked which I do not believe happened, I think WF malfunctioned for some reason.
I deleted wf and all the tables, then reinstalled. Will see what happens. WF is my backup security not my main. But darn 9000 records in 3 page refreshes. The only time I have seen that is in 2010 when one of my sites did get hacked and an affiliate builder script threw 9000 accounts onto google index with my website address on it. Took 4 years to clean up.
to turn off the scan url are those the options under scan posts and comments. If not where do you turn off the google url scan?
I’m not highly impressed by the Worfence scanning, though I like Wordfence and use the P version on three websites. The scanning is reactive, it’s not essential. I’d suggest simply unchecking all scan options and see how it goes, then gradually introduce. As for using Worfence as “backup” I don’t understand, but if you mean you’re running it along with other major security plugins I’d advise caution. In my experience, Wordfence runs best without other security plugins active (and indeed, taking care with plugin conflicts in general). In my case, I’ve found that using a combination of Wordfence P, login hiding, .htaccess tweaks and server firewall (combined with best practices) gives me excellent security.
MTN
It’s right there on the WF Options page.
“Scan posts for known dangerous URLs and suspicious content”
Click on the info icon for infos.
MTN
Thanks for all the help. I use it with a plugin that manages htaccess files really well.
Hello,
I see that @mountainguy2 has been very helpful here.
This table should truncate and clear itself after each scan. If it doesn’t then you can manually clear it by:
- You must kill a scan if one is running.
- Deactivate Wordfence.
- Clear the wfHoover table.
- Activate Wordfence.
Can I ask why you think there is a conflict between Wordfence & Autoptimize please?
You can also choose to disable these scan options if you so wish:
- Scan comments for known dangerous URLs and suspicious content
- Scan posts for known dangerous URLs and suspicious content
If there is a way to send you a zip file of several screen captures, I will let you see why I think there is a problem. 269 pages in the wfhoover table and from page 5 on they are all autooptimaze cache refs. The first 4.5 pages appear to be readme.html of the same html with tons of ww.wp.xz.cn and wordpress.com on it
The never terminating scan of files for malware and google urls.
I let a scan run on the site that has 8900+ records in wfhoover for 45 minutes before killing it. This may part of the issue with the wfhoover table filling up or not. But it is an issue that needs to be addressed. It used to be that a scan would actually terminate without me killing it.
Hello,
Certainly, please send a zip file of your screenshots to phil [@] wordfence [dot] com and we can have a look for you.
Please remember to put your forum username in the subject field of your email.
Thank you.
The topic ‘wf-hoover table’ is closed to new replies.