"Watch my site": Admin-Tool to check permanent if files have changed

[chio]

yepp. As you can see, my english is not the best...
Please: Someone may have a look at the EN-language files (german is original)

the really dangerous way to hack sites is not defacement, but invisible manipulation of files; embedding iFrames with manipulated PDFs or javascript.
You and your visitors dont even realize it - if you dont use an older browser..

This tool makes a hash value of the most used files and the checks permanent, if one has changed. If so, it sends an eMail.

Here is version 0.3. Install it, go to Admin-Tools->Watch my site and then follow the instruction.

//EDIT:
New version 0.4
You can change the eMail and [check], if it works.
Better Language files

[crnogorac081]

wow, great module... I had an issue with 2 of my temp sites, they have been hacked with js..

[Argos]

How does that work, "checks permanent"? Does it use cron or something?

[erpe]

As far as I know it starts one proove with each call of the homepage (frontend).

rgds

erpe

[oeh]

Correct. I loads the script in the index file.

[chio]

Yes, it uses your visitors as Cronjob

[Argos]

Ah, I see! 
So if a hacker does his dirty job and no one visits your site, you won't get any alarms?

Does the script have noticable impact on loading time, traffic, etc?

[chio]

Ah, I see! 
So if a hacker does his dirty job and no one visits your site, you won't get any alarms?

No. But I guess: a typical Website has some visitors. at least the google-bot..

Does the script have noticable impact on loading time, traffic, etc?

Not much. One database request to check the last call. If there is more than 10 minutes gone: a bit more, but not much. its a small script.

[sky writer]

I am excited about this module.  I followed the instructions and all seems to be working in the admin.

But I can't seem to get a warning email sent.  I've tried changing my template index.php file through the WB admin... and then through my webhost, but I never get an email.

Is there something I'm doing wrong?

As it says in the module I put this in my WB root index.php file:
if (file_exists(WB_PATH.'/modules/watchmysite/dowatch.inc.php')) {include(WB_PATH.'/modules/watchmysite/dowatch.inc.php');}

[crnogorac081]

@chio
Does the module use simple phpmail or $wb->mail ?

@sky writer
If module is using simple phpmailer maybe your host doesnt allow it..

Also it could be that they are coming with delay..

cheers

[chio]

It uses:

Code:

$wb->mail(SERVER_EMAIL,$admin_email,$mail_subject,$mail_message);

$admin_email = eMail of user 1
I plan to make this editable in the next version.

Did you check the SERVER_EMAIL ? (Options)
Did you _ever_ get a mail from your website?

I know, there are sometimes problems with sending eMails. I have different eMails, if I use my GMX account, I always get the mail, if I use another, I never get the mails.

[sky writer]

Hi, thanks for following up.  I did eventually see the warning in the module admin, and did receive ONE warning email.  But I have continued to change the template/index.php file and it has shown the warning a couple of times in the admin, but hasn't sent me another email.

Is there a certain cycle of time that each page is checked?
What do these items (Nr: 4. Full loops: 3) mean?

[chio]

When a visitor opens a page (any page) the tool first asks, if at least some time has passed since the last check. if yes: it checks. In the beginning this time is 0, but its getting more; simply not to slow down your site.

When it finds an error, it also checks if there passed some time since the last warning. (I think its 1 hour).
This is necessary, because if a hacker really was on your site, he might have changed masses of files - and you would get masses of mails, which could hang in the spamfilter.

What do these items (Nr: 4. Full loops: 3) mean?

List-Entry Nr 4 was last checked; all entries (the whole list) was checked 3 times.

[sky writer]

Thanks so much for your explanation.  I really like the potential of this module.

[chio]

Thanks! I will include it in the next version.

[sky writer]

There was one line in the help file I couldn't fully translate:
Nach einem Upgrade von WebsiteBaker ändern sich natürlich sehr viele Dateien.
  Sie können diese dann einzeln reseten oder dieses Tool einfach neu installieren.

I figured it meant: If you upgrade WB, or alter files yourself, you should install this module again to ensure it functions properly.

Am I even close?

[chio]

Not exactly.It means:
If you upgrade websitebaker, there will be altered a lot of files. you can reset each single entry, or reinstall this tool (to reset the list fully)

[sky writer]

I have attached my revised interpretation of the EN language files.  Hope this helps.

[oeh]

Norwegian language files.

[chio]

Thanks!

[chio]

I have uploaded version 0.4 (see first post)

You can now change eMail-address and send a test-mail. (to reset the eMail, simply change it to "@")

Thanks to oeh & sky-writer for their language files (I did some changes now, because of the new options)

NOTE: I have realised, that most problems with eMail sending is a wrong Server-eMail in the WB-Options: In some cases it MUST be an existing address and/or fitting to your domain.

[oeh]

Updated Norwegian language files.

[sky writer]

Just wanted to follow up and say that I really like this module.  It's great peace of mind to know that I don't have to be checking for hackers and injections like I used to (one of my main website was hacked on a regular basis).  It's funny, I will do some code work on a site, and then a little while later I'll get a warning email... and I'll think "uh oh", then I'll remember that it was "I" who changed the code.  But it's nice to be reminded that the module is working.

Cheers!

[Vidar]

Hey,

Execellent idea, thanks for the peace of mind!
I created finnish language files.

One problem: It can't reset the file status from the backend. When I click the "OK" on a changed file nothing happens. Tried this on chrome and opera browsers.