How to Verify WordPress File Integrity

There are cases where you may wish to verify the integrity of your WordPress files, such as when you’ve made custom changes to the standard WordPress core files or when you believe your website may be compromised.

cPanel WordPress Management Method

In the Hawk Host cPanel, we provide a WordPress Management interface that makes it easy to perform a variety of functions you typically run using the WP CLI.

1. Log in to your cPanel account.

2. To access this interface, navigate to the WordPress Management section in your cPanel.

3. Once there, you’ll see a list of your WordPress installations. On the interface you’ll see an option Check WordPress Integrity

4. On the Check WordPress Integrity pop-up, there will be a Verify Checksums option which you can click to verify the integrity of your WordPress files.

   

WP CLI Method

To use the WP CLI method, you will need to be logged in to your account via SSH or the cPanel terminal.

Checksum Verification

1. Navigate to the location of your WordPress installation.

2. Run the following command to verify the integrity of your WordPress files:

   wp core verify-checksums

3. Expected Output

   Success: WordPress installation verifies against checksums.

Checksum Verification and check for non-core files

Caution

The --extra-files flag will check for files that are not part of the standard WordPress core files. This can be useful to identify any custom files that may have been added to your WordPress installation.

1. Navigate to the location of your WordPress installation.

2. Run the following command to verify the integrity of your WordPress files and check for non-core files:

   wp core verify-checksums --extra-files

3. Expected Output

   Warning: File should not exist: .user.ini
   Warning: File should not exist: php.ini
   Warning: File should not exist: index.hawkhost
   Success: WordPress installation verifies against checksums.

Hawk Host Non-Core Files

On Hawk Host servers, there could be several files that, while they are non-core files, are part of the standard operation of a Hawk Host account.

• .user.ini - This file is part of the MultiPHP INI editor in cPanel. It overrides certain PHP settings on your account.
• php.ini - This file is part of the MultiPHP INI editor in cPanel. It overrides certain PHP settings on your account.
• index.hawkhost - This file is added to your account when it is set up to display a custom welcome message when visiting your website before you upload your files. You can safely remove this file.

WordPress Hosting Made Easy

Fast NVMe Storage • Free Migrations • 24/7 Expert Support

Explore our WordPress Plans