[wp-trac] [WordPress Trac] #47528: Site Health: Add test for file checksums (was: Site Health: Add test for core file checksums)

[WordPress Trac]

#47528: Site Health: Add test for file checksums
-------------------------------------+-----------------------------
 Reporter:  swissspidy               |       Owner:  (none)
     Type:  enhancement              |      Status:  new
 Priority:  normal                   |   Milestone:  Future Release
Component:  Site Health              |     Version:
 Severity:  normal                   |  Resolution:
 Keywords:  site-health needs-patch  |     Focuses:
-------------------------------------+-----------------------------

Old description:

> For a while now there has been [https://github.com/wp-cli/checksum-
> command a WP-CLI command] to verify the current installation's integrity
> by comparing checksums. This makes it easy to detect suspicious
> modifications to core files and even plugins (if the plugin is hosted on
> WordPress.org)
>
> I think Site Health would be a good place to possibly add such a checksum
> verification to WordPress core itself.
>
> If a user is presented with a warning that core files have been modified,
> they could be offered the opportunity to re-install WordPress (just like
> you can do under Dashboard -> Updates)

New description:

 For a while now there has been [https://github.com/wp-cli/checksum-command
 a WP-CLI command] to verify the current installation's integrity by
 comparing checksums. This makes it easy to detect suspicious modifications
 to core files and even plugins (if the plugin is hosted on WordPress.org)

 I think Site Health would be a good place to possibly add such a checksum
 verification to WordPress core itself.

 If a user is presented with a warning that core files have been modified,
 they could be offered the opportunity to re-install WordPress (just like
 you can do under Dashboard -> Updates)

 The same goes for plugin checksums.

--

Comment (by swissspidy):

 Updated the description to indicate that this can be applied to both
 plugins and core.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/47528#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform