IskFileGuardian monitors the integrity of files on a MODX 3 site. On a schedule it hashes the files, finds modified, new and deleted ones and compares the MODX core with the official distribution of your version. Findings are sent by email and to Telegram.
A replaced or added PHP file is a common sign of a hack. IskFileGuardian shows it on the next check rather than when the site is already sending spam.
Features
- Site files. Hashes of all files in the chosen folders; every check lists modified, new and deleted files. The first check only records the baseline and reports nothing.
- MODX core. The component downloads the official distribution of your version, builds reference hashes from it and compares them with the core files on the site.
- Exclusions by masks (as in .gitignore): cache, logs, thumbnails, etc. — separately for the site and the core.
- Notifications by email (subject and body are chunks) and to Telegram, separately for the site and the core; only when something changed.
- History: site and core hashes, a report for every check and logs — on the component tabs.
- Runs by cron, files are processed in batches; parallel runs are blocked.
Manager tabs
| Tab | What is there |
|---|---|
| Site hashes | Site files, their hashes and status (added, modified, deleted, current). Changed the scan folders — clear the table. |
| Core hashes | Reference core hashes; the “Download core” button downloads the distribution of your version and builds the reference. |
| Notifications | Check reports with the list of files. |
| Logs | The component’s log. |
Requirements: MODX 3, PHP 7.2+ (8.x recommended), the curl and zip extensions, cron.