checksum-command

checksum-command copied to clipboard

Verification checks skipped when plugin missing main PHP file

1

Recently ran into a situation where a website had malware reinfection issues which required a bit of a deep dive to resolve. During the process I discovered that `wp plugin...

austinginder

Add `--exclude=<file>,<file>` argument to skip files

7

https://wordpress.slack.com/archives/C02RP4T41/p1557867276075100 I will make a PR if this would be useful for everyone 😎 ## Purpose - (In my case) I wanted to ignore ./readme.html file cos we have always...

kwbtdisk

Plugin checksum issue

3

I installed the latest version (3.2.2) of https://wordpress.org/plugins/duplicate-post/ to my WordPress. While running plugin checksum with cli version 1.5.1 I get the following error: | duplicate-post | duplicate-post-jetpack.php | File...

timoleinio

Error: RuntimeException: Failed to get url when using `wp core verify-checksums`

6

## Bug Report - [x] Yes, I reviewed the [contribution guidelines](https://make.wordpress.org/cli/handbook/contributing/). - [x] Yes, more specifically, I reviewed the guidelines on [how to write clear bug reports](https://make.wordpress.org/cli/handbook/bug-reports/). **Describe the current,...

rumspeed

`--format` argument fails to change output of command

7

### Summary While trying to use the `--format` argument with the `wp plugin verify-checksums` commands I found the output wouldn't change. I've tried [all format options listed](https://github.com/wp-cli/checksum-command#wp-plugin-verify-checksums) and none of...

holtjohnson

Add support for checksum verification of must-use plugins

3

As discussed in https://github.com/wp-cli/checksum-command/pull/26#discussion_r158490573 , the plugin checksum verification currently ignores must-use plugins. Should these be checked by default? ... or only through an additional flag? I think I'd prefer...

schlessera

gh-64 added exclude argument in checksums

1

Added argument "--excluded" to the wp core verify-checksums to rule out any false positives when we have extra files in the core. Related: https://github.com/wp-cli/checksum-command/issues/64 https://github.com/wp-cli/wp-cli/issues/5955

ethicaladitya

Feat/checksum added exclude parameter

1

iDschepe

Fix plugin verification to detect directories without main PHP files

3

## Summary Fixes security issue where `wp plugin verify-checksums` skipped plugin directories without valid main plugin files, allowing malware to hide in these "shadow" directories. ## Changes ### 1. Enhanced...

Copilot