New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add a checksum check for plugins from the official plugin directory #55

Open

Zodiac1978 opened this issue Jan 17, 2024 · 1 comment

Contributor

Zodiac1978 commented Jan 17, 2024

There is an official Plugin API endpoint to get the checksums.

Sample file: https://downloads.wordpress.org/plugin-checksums/plugin-report/2.1.1.json

As I use Plugin Report to check an installation for issues, highlighting modified plugins could be a great addition to this plugin.

For example implementations (for core), we could look at the Health Check plugin:
https://github.com/WordPress/health-check/blob/trunk/HealthCheck/Tools/class-health-check-files-integrity.php

I think there are more plugins that do that and with WP Cerber (not in the directory anymore, I think) there is also an implementation for plugins.

What do you think?

Owner

roytanck commented Jan 23, 2024

Thanks for this suggestion. I'll have to look into this when I have more time, but at first glance it does sound like an interesting new feature.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment