How can we help?

Search for answers or browse our knowledge base.

Table of Contents

Getting started with Melapress File Monitor

Melapress File Monitor offers a complete WordPress website file changes monitor plugin that alerts you whenever a change in WordPress website files is detected. Using its hashing algorithm, it can scan any type of file, including custom code and third-party files.

Use Melapress File Monitor scans to effortlessly uncover code changes, leftover files, malicious code, and malware injections with pinpoint accuracy. The plugin also offers instant email notifications for hands-off monitoring.

Step 1: Install and activate Melapress File Monitor

First, log in to your WordPress admin dashboard and navigate to Plugins > Add New Plugin. In the search text box, type Melapress File Monitor and click Install Now, as shown in the screenshot below.

Step 1: Install and activate Melapress File Monitor

Once you’ve installed the plugin, activate it to start the initial configuration wizard, which will walk you through the plugin setup process.

Step 2: Configure Melapress File Monitor

Configuring Melapress File Monitor is easy, thanks to the initial configuration wizard. Once the plugin has been activated, the wizard will kick in, starting with the welcome screen.

Configure Melapress File Monitor

Click on Next Step to continue.

Set schedule

Melapress File Monitor has been highly optimized to be as resource-efficient as possible. Even so, you should consider running scans during off-peak hours, especially if you have a larger website with many files.

Set schedule

Select the frequency and time from their respective drop-down menu and click on Next Step once ready.

Core files modifications

Melapress File Monitor can be configured to check for modifications to the WordPress core files by comparing the files on your website with the official files in the WordPress.org repository. To enable this type of scan, ensure that the Enable WordPress core file scanning is switched to the on position, as shown in the screenshot below.

IMPORTANT: When this option is disabled, Melapress File Monitor will check for modifications to the core files using past hashes instead of comparing them to the files in the WordPress.org repository.

Core files modifications

Once you’ve made your selection, click on Next Step to continue.

E-mail notifications

Melapress File Monitor sends an email notification whenever it detects file changes during a scan. By default, this email is sent to the admin email address configured in WordPress. If you would like to send this notification to another email address or addresses, you can add them here.

E-mail notifications

When ready, click Next Step to save changes and move to the next screen.

File exclusions

By default, Melapress File Monitor excludes different file types from its scan. These are shown as selected options in the file types exclusion list. You can add any of these file types to the scan by unticking the box next to them. You can also add new file types not currently listed by typing the extension in the textbox and clicking Add.

File exclusions

When ready, click Next Step to save changes and move to the next screen.

Scan history

By default, Melapress File Monitor keeps the scan results of the last scan, overwriting them with each new scan. To keep a more extended history, enter the number of past scans you want the plugin to keep in the available textbox.

Scan history

Click on Next Step to continue.

Finishing up

That’s it! All that’s left to do now is to run your first scan. Click on Complete setup & run scan to continue.

Finishing up

Your first Melapress File Monitor scan

Once you complete the initial configuration wizard, Melapress File Monitor will automatically initiate its first scan.

Your first Melapress File Monitor scan

If no changes are detected, the scan will complete with no notifications other than a File scan complete notification. You will also receive an email with the results of the scan:

This concludes the scan. Melapress File Monitor will run another scan at the next scheduled date and time.

Scheduled date

How Melapress File Monitor reports changes

If a change is detected, you will see an alert detailing which file has been changed.

How Melapress File Monitor reports changes

If you are aware of the change and want to exclude the file or its directory from being included in future scans:

  • Click the x in the File modified field to exclude the file 
  • Click the x  in the Directory field to exclude the directory
directory permissions

You will also receive an email with the scan results.

Viewing scan results in the WordPress activity log

If you have WP Activity Log installed, you will also be able to see this change detection in the activity log:

Viewing scan results in the WordPress activity log

Clicking on More details… will show you the metadata associated with that event.

Event details

Learn more about Melapress File Monitor

How Melapress File Monitor detects file changes on WordPress

How to change the maximum file size to scan

Excluding files, file types, and directories from the file changes scan