Changed Files

[swguy]

Nope. Trust me, you'd *want* to know if someone uploaded bmz_cache/badguy_backdoor.php.

[Design75]

That's true, but right now the list of files is so long, it is impracticable to use.

Nope. Trust me, you'd *want* to know if someone uploaded bmz_cache/badguy_backdoor.php.

[davewest]

That's true, but right now the list of files is so long, it is impracticable to use.

Some ideas...
I like your change to table, my brain seams to like line numbers... I know I have around 4082 files in there somewhere...

I know date when I uploaded the files which sets the date of change I would want to flag from or I can set a date which would drop the 4082 list down to maybe 561 lines... Could add an input filed for the date and a refresh button maybe!

<!-- body //-->
<div class="container">
  <h1><?php echo HEADING_TITLE ?></h1>
<?php
  $maxdate = strtotime('2018-01-01');  //date changes after would be flagged  Y-m-d
  echo '<div>Files changed after: ' . date('Y-m-d H:i:s', $maxdate) . ' (or) ' . (string)$maxdate . '</div>'; 
?> 
<br />
  <table class="table">
<?php 
$i = 0;
foreach ($files as $file) {
   $i = $i + 1;
   if ($file['mtime'] > $maxdate) {
   $name = str_replace(DIR_FS_CATALOG, "", $file['name']); 
   echo '<tr>';
   echo '<td>' . (string)$i . '</td><td>'.$name . '</td><td>' . date('Y-m-d H:i:s', $file['mtime']) . "</td>";
   echo '</tr>';
   }
}
?>
</table>
</div>
<!-- body_eof //-->

[swguy]

Changed Files Report was just updated to prevent error-log-files being generated when files are unreadable because of permission issues.

[Jeff_Mash]

SWGUY - I just installed this on 1.5.5f, but it's getting the following error log:

PHP Fatal error: Allowed memory size of 67108864 bytes exhausted (tried to allocate 4304 bytes) in /home/servername/public_html/store/admin/changed_files.php on line 14

Any suggestions?

[Jeff_Mash]

SWGUY - I just installed this on 1.5.5f, but it's getting the following error log:

PHP Fatal error: Allowed memory size of 67108864 bytes exhausted (tried to allocate 4304 bytes) in /home/servername/public_html/store/admin/changed_files.php on line 14

Any suggestions?

Nevermind. I fixed it by adding the following line on the top of the changed_files.php:

ini_set('memory_limit', '2048M');

As a request, it would be great if we could IGNORE files which don't exist in the default installation. For example, your script is returning everything in the CACHE folders......which we really don't care about. We are mainly looking to see which ZenCart files were changed/modified in order to help with upgrades.

[lat9]

FWIW, there's an admin setting for the Max Execution Time: My Store->Admin Set max_execution_time for processes

[swguy]

Feel free to update it to your own tastes. By default I want people warned about files in cache because one of them might be cache/attack_file.php.

[Jeff_Mash]

FWIW, there's an admin setting for the Max Execution Time: My Store->Admin Set max_execution_time for processes

I totally forgot about that! Thanks for the helpful reminder of this setting!

[swguy]

In version 1.2 of the mod, there is a variable in admin/changed_files.php called $filetype_exclusions, which is a list of filetypes which should be skipped. By default it skips over .txt, .log and .sql files. Customize to taste.