IntegriFix – File Integrity Check & Repair
| 开发者 | consilioweb |
|---|---|
| 更新时间 | 2026年10月1日 00:38 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- WordPress files that were modified, added or deleted.
- Plugin and theme files that differ from their official version, including files that should not be there.
- Code where code never belongs: PHP files in your media library, PHP hidden inside images, translation files that run code, code files in folders next to WordPress (a favourite hiding place for intruders' tools).
- Dangerous settings: a
wp-config.phpthat runs code,.htaccessrules that send search engines elsewhere, a PHP setting that loads a file before every page. - A security plugin that is still active but whose files have disappeared.
- Replace a modified WordPress, plugin or theme file with its official copy from WordPress.org, or put back an official file that was deleted.
- Set aside ("quarantine") a code file that has nothing to do where it is, such as PHP in your media library.
- Reinstall from WordPress.org an active plugin whose files have disappeared.
wp-config.php, .htaccess...) are never changed automatically, nothing is written when your site forbids file changes (DISALLOW_FILE_MODS), and a repair is offered only to people allowed to update WordPress, plugins or themes (and to install plugins, for a reinstallation).
Every repair is available in this plugin, without limit. IntegriFix Pro, a separate paid add-on, repairs several points at once.
Automatic scans and e-mail alerts
IntegriFix checks your site on its own every week (or every day), in short steps in the background with the scheduled tasks of WordPress (WP-Cron), and e-mails the administration address when a new problem appears: a point that needs your attention or deserves a look and that the previous scan did not find. One e-mail per scan, in plain words, with a link to the results and without the names or the content of your files. The frequency and the addresses can be changed in the settings, and the automatic scans or the e-mail turned off.
Built to avoid false alarms
- Always the reference of the installed version, never "the latest".
- Localised WordPress builds, bundled themes, translation files and files transferred by FTP in text mode are recognised.
- Each finding says what happens, why it matters and what to do.
wp integrifix scanandwp integrifix verify core|plugin|themefor WP-CLI.- A JSON report for your own tools.
屏幕截图:
常见问题:
Does "no problem found" mean my site is safe?
It means every file that has an official reference matches it and no known warning sign was found. Software running on a server that has been compromised can be deceived; for a check from outside, use the IntegriFix rescue tool.
Where do I find the rescue tool?
The rescue tool runs the same checks without WordPress, from the command line of your server. Its instructions are at https://integrifix.fr/en/rescue (in French: https://integrifix.fr/secours). It is meant for your provider or developer, when the site is unreachable or its results cannot be trusted.
What is IntegriFix Pro?
A separate plugin, paid once per site, with no subscription. This plugin is complete without it: every scan, finding, comparison and repair is available here, without limit, and nothing is locked. IntegriFix Pro adds:
- Grouped repair: every file that can get its official version back is repaired in one action, with the same checks and a single undo.
- The rescue tool in the browser, which also repairs, for when the administration no longer opens.
- Updates from the Plugins screen, and support by e-mail.
Which languages are available?
English and French.
Does IntegriFix slow down my site?
No. No page of your visitors waits for a scan. A scan runs in short steps: when you start it, from the IntegriFix screen or WP-CLI, and in the background through the scheduled tasks of WordPress (WP-Cron) for the automatic scans, every week by default. You can make them daily or turn them off in the IntegriFix settings. The other background task is a daily cleanup of expired backups and references.
When do I get an e-mail?
When an automatic scan finds a point that needs your attention or deserves a look and that the previous scan did not find, one e-mail per scan, sent to the administration address of the site unless you set other addresses. Points you chose to ignore and points of low importance never send an e-mail, and a scan you start yourself sends none: you see its result on the screen.
Does it work on multisite?
Yes. IntegriFix is activated for the whole network and appears in the network admin, for super admins only: the files of WordPress, plugins and themes are shared by all the sites of the network.
Why doesn't IntegriFix use the WordPress HTTP functions?
It calls the Requests library bundled with WordPress directly, so that no other plugin can intercept the checksums IntegriFix compares your files with.
What happens to my files?
A scan only reads them. A file changes only when you ask for a repair: IntegriFix then keeps a copy of it in the database for 30 days, so that you can undo the repair.
更新日志:
- Automatic scans, every week by default (or every day, or off), run in short steps by WP-Cron with the same checks as the screen; an automatic scan waits for a scan you started, and is given up cleanly after repeated failures, which the dashboard shows.
- An e-mail when an automatic scan finds a new point that needs your attention or deserves a look: one per scan, in the language of the site, without the names or the content of your files, to the administration address or the addresses you choose. A test e-mail can be sent from the settings.
- The dashboard, the WordPress dashboard box and the settings show the last and the next automatic scan; the introduction offers the frequency.
- New "IntegriFix Pro" tab after Settings: what the separate paid plugin adds, what stays free and how to get it. It sends no request to any server and can be turned off in the settings, with the other suggestions.
- The IntegriFix Pro suggestion above the results says how many files could be repaired at once; the guided mode shows one line with the same conditions. "Hide" hides both for good.
- Nothing mentions IntegriFix Pro while it is active. Links to integrifix.fr follow your language.
- Fix: a redirect to the site's own address in .htaccess (HTTP to HTTPS, adding www) is no longer reported as cloaking; the lines shown include the browser conditions.
- A scan that stops shows the server's answer in its technical details (status, error code, message), and the first step says what it does.
- First version: scan of core, plugins, themes and sensitive files, readable comparison with the official copy, WP-CLI commands.
- Repair of one point at a time from WordPress.org (official copy, missing file, quarantine, plugin reinstallation), with a 30-day backup and a one-click undo.