AutoRestore|Quarantine Guide – Read Me First

Home Forums BulletProof Security Pro AutoRestore|Quarantine Guide – Read Me First

This topic contains 29 replies, has 12 voices, and was last updated by  AITpro Admin 5 days, 4 hours ago.

Viewing 15 posts - 1 through 15 (of 30 total)
  • Author
    Posts
  • #3307

    AITpro Admin
    Keymaster

    AutoRestoreAutoRestore|Quarantine (ARQ IDPS) General Help Info
    ARQ Intrusion Detection and Prevention System (ARQ IDPS) is a real-time file scanner that monitors all of your website files for any changes or modifications on an ongoing basis and will automatically autorestore and/or quarantine website files if any file changes or modifications are found that do not match your backed up files.  When a file has been autorestored by the ARQ Cron, a copy of that modified file (before it was autorestored) is sent to Quarantine. If a legitimate file is accidentally quarantined you can easily restore that file using the Quarantine Restore File Option. Or in other words, using the Quarantine Restore File Option is an Undo.

    ARQ IDPS uses a much more effective and reliable method of checking and monitoring website files instead of scanning file contents for malicious code. Hacker files that do not contain any malicious code will never be detected by any/all scanners, but will be detected by ARQ IDPS. ARQ IDPS quarantines all hacker files whether or not they contain malicious code.

    ARQ comes with a versatile extensive set of tools that allow you to Calibrate ARQ (choose files/folders to exclude from being checked by the ARQ Cron) in cases where website files or folders are dynamically updated and should not be checked by ARQ – see the Calibrating AutoRestore|Quarantine link below.

    If a file is autorestored and/or quarantined on your website you are immediately sent an email that a file has been autorestored and/or quarantined on your website. If this scenario does occur on your website (if the file is NOT a legitimate website file that was accidentally sent to Quarantine) you should change your FTP password and your WordPress Login password as soon as possible.  While you are in the process of changing your passwords AutoRestore|Quarantine will continue to protect your website and autorestore and/or quarantine any files that are being modified or uploaded to your website while you are changing your passwords.  After changing your FTP and WordPress Login passwords you should also change your WordPress database password for good measure.

    AutoRestore|Quarantine Manual File Editing/Uploading Procedural Steps
    AutoRestore Automation
    AutoRestore|Quarantine Troubleshooting
    Calibrating AutoRestore|Quarantine
    Quarantine Help Information

    NOTE: The Read Me Help buttons throughout BulletProof Security Pro contain extensive and detailed help information.


    WordPress Automatic Updates & AutoRestore
    AutoRestore works seamlessly with WordPress Automatic Updates and will automatically turn itself Off, backup updated WP Core files and turn itself back On when WordPress installs an automatic update on your website. ONLY WordPress Core files that have been installed during the WordPress Automatic Update are backed up to ARQ backup automatically. AutoRestore logs WordPress Automatic Updates in the BPS Pro Security Log. You can check your BPS Pro Security Log file to see when the WordPress Automatic Update occurred, which files were updated by WordPress and which WP Core files were automatically backed up to ARQ backup.

    AutoRestore|Quarantine Manual File Editing/Uploading Procedural Steps
    AutoRestore|Quarantine (ARQ IDPS) is a real-time file monitor that monitors all of your website files for any changes. When manually uploading or modifying files or folders with FTP use these simple procedural steps to avoid having those files autorestored and/or quarantined. If files are sent to Quarantine then use the Restore File option in Quarantine to restore those files. ARQ is amazing, but it cannot tell who you are if you are manually modifying or uploading files or folders outside of your WordPress Dashboard – that is not possible.

    1. Turn AutoRestore Off on the AutoRestore page.
    2. Manually upload files or manually modify/edit files or folders.
    3. Click the appropriate AutoRestore Backup Files button: Root Files, wp-admin Files, wp-includes Files or wp-content Files Backup Files button or run the Setup Wizards.
    4. Turn AutoRestore back On.

    BPS Pro Video Tutorials Link: https://forum.ait-pro.com/video-tutorials/

    ### END General Help Info About ARQ IDPS – BEGIN Technical Details About ARQ IDPS ###

    AutoRestore (ARQ IDPS) Automation
    Important Note: In order for AutoRestore Automation to work, the BPS Pro plugin MUST be activated and AutoRestore MUST be turned On

    BPS Pro 12.6+ Versions AutoRestore Automation for WP Core, Plugin & Theme Shiny, Manual, Bulk & Automatic Updates & Installations
    All WP Core, Plugin & Theme Shiny, Manual, Bulk & Automatic Updates & Installations are completely automated by AutoRestore Automation in BPS Pro 12.6. In previous versions of BPS Pro a few Plugin and Theme update or installation methods required an additional one-click step. BPS Pro 12.6 ARQ Automation is now completely seamless/automated for all WP Core, Plugin and Theme update or installation methods: Automated ARQ Turn Off, ARQ File Backup & ARQ Turn On. Note: ARQ Automation backward compatibility for WordPress <= 4.5.3 versions is also now completely seamless/automated.

    • ARQ Core|ARQ Fire Improvement: Flow & Processing Sequences|Performance & Resource Optimizations|Additional FailSafe Conditions: 
    Flow|Sequences: WP Core, Plugins & Themes: Shiny, Manual, Bulk & Automatic Updates & Installations

    • Rapid Succession Update Sequence: AJAX => AJAX => upgrader_pre_install => upgrader_post_install => upgrader_pre_install => upgrader_post_install => AFS Cron
    • Sequential Update Sequence: AJAX => upgrader_pre_install => upgrader_post_install => AJAX => upgrader_pre_install => upgrader_post_install => AFS Cron

    • Plugin & Theme Shiny, Manual, Bulk & Automatic Updates & Installations: Install or Update button click > ABT FailSafe Function > AJAX Action Function Triggered – ARQ Turned Off > upgrader_pre_install Filter Triggered – ARQ Turned Off FailSafe > upgrader_post_install Filter Triggered – ARQ File Backup > AFS Cron FailSafe – ARQ Turned On.

    • Plugin & Theme Automatic Update: upgrader_pre_install Filter Triggered – ARQ Turned Off > upgrader_post_install Filter Triggered – ARQ File Backup > AFS Cron FailSafe – ARQ Turned On.

    • WP Core Manual Update|Re-install: Update or Re-install button click > ABT FailSafe Function > AJAX Action Function Triggered – ARQ Turned Off > ABT Function > ARQ File Backup & ARQ Turned On > AFS Cron FailSafe check.

    • WP Core Automatic Update: ARQ Fire Function > WP AutoUpdate Function – ARQ Turned Off & ARQ File Backup > AFS Cron FailSafe check.

    • ARQ Cron|AFS Cron Improvements: The AFS Cron now turns on the ARQ Cron for: Shiny, Manual, Bulk & Automatic Updates. The BPS Pro Dashboard Status Display for ARQ will display Pending until the AFS Cron turns ARQ back On. Min: 15 seconds|Max: 60 seconds. Notes: If normal/standard WP Cron Jobs are being overridden by “direct” crons then the ARQ Pending status will be displayed until the “direct” cron job has been run.

    BPS Pro 12+ Versions AutoRestore AJAX Automation for WP 4.6+ Shiny Updates & AutoRestore Automation for WP Automatic Updates
    WP Shiny Updates and WP Automatic Updates are 2 completely different things. AutoRestore AJAX Automation handles WP Shiny Updates (WP Core, Plugins and Themes) and AutoRestore Automation for WP Automatic Updates (WP Core, Plugins and Themes) is handled by using WP upgrader_pre_install and upgrader_post_install filters and additional automation methods.

    AutoRestore AJAX Automation for WP 4.6+ Shiny Updates (WP Core, Plugins and Themes)

    BPS Pro 12+ uses AJAX to detect plugin, theme and WP Core Shiny updates and installations. This allows for improved seamless ARQ Automation when updating or installing plugins, themes and WP Core updates. The ARQ AJAX Automation code in BPS Pro 12+ is conditional to WP 4.6+. If you have an older WP version installed then older BPS Pro ARQ Automation will be used instead of the new ARQ AJAX Automation. ARQ AJAX Automation is conditional for Plugin and Theme updates. If ARQ is monitoring the plugins and/or themes folders/files then ARQ AJAX Automation will be used. If ARQ is not monitoring the plugins and/or themes folders/files then ARQ AJAX Automation will not be used since new updated Plugin and/or Theme files do not need to be backed up. The conditions are explicit matches (exact matches) for ARQ folder exclude rules: plugins and/or themes. Most ARQ Automation for WP Shiny Updates (WP Core, Plugins and Themes) is seamless using ARQ Automation: Automatic ARQ Shutdown, Automatic ARQ File Backup & Automatic ARQ Turn On. Some ARQ Automation such as automation for new Theme installations uses One-Click ARQ Automation: A BPS Pro AutoRestore (ARQ) Automatic Shutdown & Backup Notice is displayed with a clickable link to complete ARQ File Backup & ARQ Turn On.

    BPS Pro 12+ Versions AutoRestore Automation for WP Automatic Updates (WP Core, Plugins and Themes)
    BPS Pro 12+ AutoRestore Automation for WP Plugin and Theme Automatic Updates is now using the WP upgrader_pre_install and upgrader_post_install filters. AutoRestore Automation for WP Core Automatic Updates is still handled the same as it was in previous BPS Pro versions. ARQ Automation for all WP Automatic Updates (WP Core, Plugins and Themes) is seamless using ARQ Automation: Automatic ARQ Shutdown, Automatic ARQ File Backup & Automatic ARQ Turn On.

    BPS Pro and WP Backward|Forward Compatibility
    If you have a BPS Pro version below 12 installed and upgrade to WP 4.6+ then when you update or install themes, theme files will be quarantined. The reason for this issue/problem is that older BPS Pro versions below BPS Pro 12 do not have the newer BPS Pro 12 code for the new WP 4.6+ Shiny Updates. So it is very important to upgrade to BPS Pro 12+ if you have WP 4.6+ installed.

    WP Trivia Fact: There are 21 different ways to update or install plugins, themes and WP Core. If you count Network|Multisite separately then there are 35 different ways to update or install plugins, themes and WP Core.

    BPS Pro Versions Below BPS Pro 12 (Older ARQ Automation Information)
    WordPress Automatic updates: AutoRestore automatically handles background WordPress Automatic updates seamlessly. No further action is required by you.
    Manually upgrading WordPress by clicking the update now link on the WordPress Updates page: AutoRestore automatically handles this seamlessly. No further action is required by you.
    Manually upgrading or installing a Theme on the WordPress Updates page or Themes page: Requires one click by you to allow ARQ Automation to continue and complete.
    Manually upgrading a Plugin on the WordPress Updates page: Requires one click by you to allow ARQ Automation to continue and complete.
    Manually upgrading a Plugin on the WordPress Plugins page: No further action is required by you.

    AutoRestore (ARQ IDPS) Automatic Shutdown & Backup Notice displayed on the WordPress Updates page
    AutoRestore Automatic Shutdown & Backup Notice

    AutoRestore (ARQ IPDS) File Backup Completion & Turn On Notice on the WordPress About page
    AutoRestore Backup Completion & Turn On

    AutoRestore (ARQ IDPS) Security Log entries that you will see when a WordPress Automatic Update has completed

    [WP Core Automatic Update: Prior ARQ Cron Status: On | March 13, 2017 - 9:11 am]
    [WP Core Automatic Update: ARQ Cron was turned Off | March 13, 2017 - 9:11 am]
    
    [WP Core Automatic Update: ARQ Root File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/readme.html
    
    [WP Core Automatic Update: ARQ wp-admin File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-admin/plugins.php
    
    [WP Core Automatic Update: ARQ wp-admin File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-admin/about.php
    
    [WP Core Automatic Update: ARQ wp-admin File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-admin/js/common.js
    
    [WP Core Automatic Update: ARQ wp-admin File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-admin/js/customize-controls.js
    
    [WP Core Automatic Update: ARQ wp-admin File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-admin/js/editor.js
    
    [WP Core Automatic Update: ARQ wp-admin File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-admin/js/tags-box.js
    
    [WP Core Automatic Update: ARQ wp-admin File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-admin/js/tags-box.min.js
    
    [WP Core Automatic Update: ARQ wp-admin File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-admin/js/customize-nav-menus.min.js
    
    [WP Core Automatic Update: ARQ wp-admin File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-admin/js/customize-nav-menus.js
    
    [WP Core Automatic Update: ARQ wp-admin File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-admin/js/editor.min.js
    
    [WP Core Automatic Update: ARQ wp-admin File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-admin/js/customize-controls.min.js
    
    [WP Core Automatic Update: ARQ wp-admin File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-admin/js/common.min.js
    
    [WP Core Automatic Update: ARQ wp-admin File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-admin/includes/image.php
    
    [WP Core Automatic Update: ARQ wp-admin File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-admin/includes/media.php
    
    [WP Core Automatic Update: ARQ wp-admin File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-admin/includes/update-core.php
    
    [WP Core Automatic Update: ARQ wp-admin File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-admin/includes/class-wp-press-this.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/version.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/theme.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/pluggable.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/media.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/functions.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/formatting.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/class-wp-customize-setting.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/class-wp-customize-manager.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/js/tinymce/plugins/wpeditimage/plugin.min.js
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/js/tinymce/plugins/wpeditimage/plugin.js
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/js/tinymce/wp-tinymce.js.gz
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/js/customize-preview.js
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/js/customize-views.js
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/js/media-views.js
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/js/media-views.min.js
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/js/customize-preview.min.js
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/js/customize-views.min.js
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/js/customize-selective-refresh.min.js
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/js/customize-selective-refresh.js
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/js/wp-api.js
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/js/wp-api.min.js
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/class-wp-image-editor-imagick.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/class-wp-customize-widgets.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/class-wp-customize-nav-menus.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/rest-api/class-wp-rest-request.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/rest-api/endpoints/class-wp-rest-revisions-controller.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/embed.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/class-walker-page.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/rest-api.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/class-wp-http-requests-hooks.php
    
    [WP Core Automatic Update: ARQ wp-includes File Backup | March 13, 2017 - 9:11 am]
    File: /home/content/xxxxx/html/forum/private/wp-includes/class-wp-taxonomy.php
    
    [WP Core Automatic Update: PHP Error Log timestamp synchronized | March 13, 2017 - 9:11 am]
    
    [WP Automatic Update: WP Update Time | March 13, 2017 - 9:11 am]
    [WP Core Automatic Update: WP Version Synchronized]
    [WP Core Automatic Update: Last Modified Time | March 06 2017 13:30]
    [WP Core Automatic Update: BPS DB Value filemtime +15 | March 06 2017 13:45]
    [WP Core Automatic Update: Backup performed | March 13, 2017 - 9:11 am]
    [WP Core Automatic Update: ARQ Cron was turned On | March 13, 2017 - 9:11 am]

    Manually Performing AutoRestore File Backups – AutoRestore Backup Files Buttons

    Note: Running the BPS Pro Setup Wizard backs up all of your website files.  You can re-run the Setup Wizard at any time.  

    There are 4 separate AutoRestore Backup Files buttons:  Root Files, wp-admin Files, wp-includes Files and wp-content Files.  When manually using AutoRestore you will click individual Backup Files buttons or all 4 Backup Files buttons on the AutoRestore page to make backup copies of all of your actual website files.  Your files in backup match your actual website files identically when your perform file backups. Let’s say for example you are working on your website’s WordPress Theme and uploading new Theme files with changes that you have made to those Theme files to your website or you are installing a new WordPress Theme on your website.  If AutoRestore is turned On and you upload modified or new files or install a new Theme to your website then AutoRestore will see that these files do not match your backed up files and these files will be autorestored and quarantined or just quarantined.

    There are several different methods you could use to avoid having these modified or new files autorestored and/or quarantined.  The simplest method would be to turn AutoRestore Off while you are uploading new or modified files or installing a new Theme and then click the wp-content Backup Files button on the AutoRestore page before turning AutoRestore back On.  Since the WordPress themes folder is under the wp-content folder – /wp-content/themes/ – then by performing a File Backup for ONLY the wp-content folder you would not need to click any of the other AutoRestore Backup Files buttons.

    By compartmentalizing file backups for WP Core folders in AutoRestore there are two very important benefits:  1.  You will be backing up a much smaller number of files at any one time.  2.  When you turn AutoRestore back On and have ONLY backed up wp-content files then if any files have changed in the other folders:  Root Files, wp-admin Files or wp-includes Files these files will be autorestored and quarantined.  What this means is that even though AutoRestore was briefly turned Off to allow file modifications in the wp-content folder, all of your other WP Core folders will be checked again for any file differences, modifications or changes by comparing your backed up files for these particular folders.

    To make this a bit easier to understand here is an example:  Let’s say the worst case scenario has happened.  A hacker has stolen your FTP password and at the same time that you have turned Off AutoRestore to upload wp-content files to your website the hacker uploads hacker files to your Root folder, wp-admin folder and wp-includes folder or has modified files in any of these folders.  When you turn AutoRestore back On all of these hacker files or modified files will be autorestored and or quarantined.  If this scenario does actually happen on your website you will need to change your FTP password and your WordPress Login passwords as fast as you possibly can.  ARQ will continue to protect your website while you are changing your passwords and autorestore and or quarantine any additional files that the hacker uploads or modifies.

    Calibrating AutoRestore|Quarantine (excluding files or folders from being checked by ARQ)

    Note:  The BPS Pro Setup Wizard does this automatically during the Setup Wizard installation.

    When you first install BPS Pro you may need to exclude some additional files or folders from being checked by ARQ.  99.99% of your website files are static files and typically only 2 to 5 dynamic files and folders will need to excluded from being checked by ARQ.  This BulletProof Security Pro video tutorial shows how to exclude static files that are dynamically updated, how to exclude a dynamic folder from being checked by ARQ, how to use the Quarantine Restore Files option and how to correctly turn Off ARQ when upgrading WordPress.

    Click to view the BPS Pro AutoRestore|Quarantine Calibration Video Tutorial

    The 3 Primary Website File Types Are:

    1. Static Files – Most website files are static files that are not dynamically updated and will not change on a regular basis and should be monitored and protected by ARQ.  99.99% of your website files are static files and typically only 2 to 5 dynamic files and folders will need to excluded from being checked by ARQ.

    2. Static Files That Are Dynamically Updated – Static files such as sitemap files are actually dynamic files because they are updated regularly and typically automatically updated.  These types of files have a known specific file name that will not change.  These particular types of files do not need to be monitored by ARQ and can be excluded from being checked by ARQ using the Add / Exclude Static Files options.

    3. Dynamic Temp, Cache or Backup Files – Another type of dynamic files are temporary, cache or backup files (created by a backup plugin), which do not have a known specific file name because they are created / generated with random file names (typically with md5) or by adding a date to the filename (file backups).  These types of files can be excluded from being checked by ARQ by excluding the temp, cache, backup or other folder name by going to the AutoRestore Exclude wp-content Folders tab page.

    Exception:  Handling Files With No File Extensions If you have files that are not named with a file extension then in some cases these files will not be backed up using the Backup Files buttons (in most cases files without file extensions will be backed up by clicking the ARQ Backup Files buttons).  If these files are dynamically updated and are being quarantined on a regular basis and you want to exclude them from being checked by the ARQ Cron then you will need to manually copy the files to the relative autorestore backup folder path.  Example:  A Root file named “no-file-extension” would need to be manually copied to the relative backup folder path of /wp-content/bps-backup/autorestore/root-files/no-file-extension.  You can then use the Add / Exclude Static Files tool to exclude this file from being checked by ARQ.  See the example below for excluding an individual file from being checked by ARQ.

    QuarantineQuarantine Help Information (Read Me Help button)

    Forum Help Links:
    Quarantine Sort|Search
    Xternal Tools (XTF) Guide

    Quarantine General Concept
    The Quarantine folder is located in an isolated .htaccess protected directory that cannot be accessed by anyone other than you. When a file has been autorestored by the ARQ Cron, a copy of that modified file that was autorestored is sent to Quarantine before it was autorestored. This allows you to restore the modified file that is in quarantine and overwrite the autorestored file. Or in other words restoring a file from Quarantine is an Undo.

    A file has been sent to Quarantine:
    If you received a BPS Pro Quarantine email Alert and have confirmed that a hacker’s file was quarantined then you need to change all of your passwords as quickly as possible. See the help section below: Steps To Take When a Hacker’s File Has Been Quarantined. If you do not know whether or not a file in Quarantine is a hacker file or not then select the Quarantine View File Checkbox Form option for that file and click the Submit button. Copy the contents of the file you are viewing into an email and send it to info at ait-pro dot com with “Quarantine Help – is this hacker code?” in the Subject line of the email.

    Important Note:
    If you use a Select All checkbox for any table column (either Restore File or Delete File) then all files in Quarantine will use that Select All checkbox setting. If you want to restore and delete files at the same time DO NOT use the Select All checkbox for either of the table columns and instead check individual checkboxes. Example scenario: you have 1 file in Quarantine that you want to restore and you want to delete all the other files in Quarantine. The best way to do this would be to restore the file you want to restore first and then after that file is restored you can click the Select All checkbox for the Delete Files table column. You can of course restore and delete files at the same time as long as a Select All checkbox is not checked for either table column.

    Steps To Take When a Hacker’s File Has Been Quarantined:
    Change your WordPress password first, next change your FTP password, next change your WordPress Database password. To change your WordPress database password you will need to change the DB password in 2 places: your web host control panel using phpMyAdmin and also in your wp-config.php file. For good measure it is also recommended that you change your web host control panel login password.

    NOTES: If a new file is uploaded to your website and a copy of that uploaded file does not exist in backup then that file is sent to Quarantine. If there are no files in Quarantine the Quarantine Checkbox Form will display an empty table with this displayed message – No Files in Quarantine. If there are files in Quarantine the Quarantine Checkbox Form will display the file name, the time the file was quarantined, the source path where the file was quarantined from and Checkbox Form options: 1. View File, 2. Restore File or 3. Delete File. The Restore File option allows you to quickly and easily restore a file if it needs to be restored. Restore File and Delete File have Select All Checkboxes located above the Restore File and Delete File Column text.

    NOTE: The Quarantine Log logs the specific details about the action that was taken when a file is sent to Quarantine. View the Quarantine Log Read Me button for specific details about the Quarantine Log.

    NOTE: It is recommended that you first use the View File Checkbox Form option before choosing to restore or delete a file in Quarantine.

    Quarantine Sort|Search and Troubleshooting:
    See the Forum Help Links at the top of this Read Me help window for examples of how to use the Sort|Search feature:

    The Quarantine Sort|Search feature allows you to sort files by plugin folder name or theme folder name or other folder name and either restore or delete all of these files. If the total number of files in Quarantine exceeds 200, an error message will be displayed with a link to forum help information. If 200 files have been sent to Quarantine this usually means that an error or problem occurred and excessive files have been quarantined. Try restoring all files in Quarantine first. If all files cannot be restored at the same time, click the Quarantine Sort|Search and Troubleshooting link at the top of this Read Me help window for step by step instructions on how to fix this using the Quarantine Sort|Search feature or BPS Pro Xternal Tools (XTF) Form or manually copying folders and files from the Quarantine folder back to where the folders and files were quarantined from.

    View File Option:
    Selecting the View File Checkbox Form option will display the contents of the quarantined file that you have selected to view.

    Restore File Option:
    Selecting the Restore File Checkbox Form option does 3 things: 1. Copies the quarantined file to the autorestore backup folder and overwrites the backed up copy of the file. 2. Moves the file out of quarantine to the original source path where the file was quarantined from and overwrites the file that was autorestored. 3. Deletes the database entry for the quarantined file.

    NOTE: If you create a new folder with new files or upload a new folder with files in it to your website then using the Restore File option will NOT create that new folder in your autorestore backup folder for security reasons. You can restore the file, but the file or files in that new folder will continue to be quarantined because they will be seen as illegitimate website files based on the fact that the folder name does not exist in autorestore backup. To correct this issue turn Off the ARQ Cron, add your new folder and upload your new files and then click the appropriate Backup Files button on the AutoRestore|Quarantine Settings page if this new folder and files are WordPress files. Or if this new folder and files are non-WordPress files then use Add Folders & Files form on the AutoRestore Add|Exclude Files page to add this new folder and files to backup, then turn the ARQ Cron back On.

    Delete File Option:
    Selecting the Delete File Checkbox Form option does 2 things: 1. Deletes the file permanently from the Quarantine folder. 2. Deletes the database entry for the quarantined file.

    AutoRestore|Quarantine Troubleshooting Steps and Solutions (some of these issues/problems are obsolete, but will remain for folks using older versions of BPS Pro)

    The BulletProof Security Forum bbPress search feature is an enhanced search feature that will return relevant and useful Forum Topics in your search results.  The troubleshooting information below contains the most common issues/problems that occur with AutoRestore|Quarantine.  Use the Forum search feature to find specific solutions to specific issues or problems.

    Turn Off|Deactivate AutoRestore|Quarantine Without Being Logged Into Your Website

    Important Note: If you have BPS Pro 12.8 or higher versions of BPS Pro installed click this link for quickier and easier steps to fix quarantined files problems: https://forum.ait-pro.com/forums/topic/website-not-loading-after-wordpress-upgrade-or-theme-upgrade-500-error-files-quarantined/. BPS Pro 12.8+ versions automatically deactivate/turn ARQ Off when the /bulletproof-security/ plugin folder is renamed instead of having to use the BPS Pro XTF Form Tools to deactivate/turn ARQ Off.

    BPS Pro Xternal Tools (XTF) are intended to be used when you are unable to login to your website to fix an issue/problem.  You can turn Off BPS Pro features using the XTF Form options without having to be logged into your website.

    BPS Pro Xternal Tools (XTF) Guide
    https://forum.ait-pro.com/forums/topic/xternal-tools-xtf-guide/

    BPS Pro Xternal Tools (XTF) Video Tutorial
    https://forum.ait-pro.com/video-tutorials/#xternal-tools

    Issue|Problem:  Excessive files Sent to Quarantine Due to Some Error or Problem

    Solution 1: Manually Copying Folders and Files from the Quarantine Folder:
    As of BPS Pro 11.2, Quarantine creates a mirrored directory structure of the quarantine file source path in the protected Quarantine folder. If Excessive files have been quarantined you can copy the entire folder from the /wp-content/bps-backup/quarantine/ folder back to where the folder and files were quarantined from. Example: All files in folder: /example-folder/ were sent to this quarantine folder: /wp-content/bps-backup/quarantine/somewhere/example-folder/. Copy the /example-folder/ back to where it was quarantined from: /somewhere/example-folder/.  Notes:  AutoRestore should be turned Off before manually copying files from Quarantine back to where they were quarantined from.  After you have manually copied files from Quarantine you can run the Setup Wizard to back up all files and turn AutoRestore back On.  If you are unable to log into your site to turn Off AutoRestore you can use the BPS Pro Xternal Tools Form to turn Off AutoRestore.  You can also use the Xternal Tools Form to delete all files in Quarantine after you have manually copied them from Quarantine.

    Solution 2: Quarantine Sort|Search Feature:
    The Quarantine Sort|Search feature allows you to sort files by plugin folder name or theme folder name or other folder name and either restore or delete all of these files. If the total number of files in Quarantine exceeds 200, an error message will be displayed with a link to this forum help information. The reason this new Sort|Search feature is necessary is that when trying to restore or delete an extremely large number of files from Quarantine all at the same time (all plugin files/all theme files/WordPress Core files) the restore or delete may or may not complete successfully. What will ALWAYS complete successfully every time is using the Sort|Search feature to restore or delete files by folder name.

    How to Use Quarantine Sort|Search to Restore Files in Quarantine by plugin folder name. For this example I will using these example plugin folder names: pluginA, pluginB and pluginC. All plugin files for pluginA, pluginB and pluginC have been sent to Quarantine.  Plugin folder names/paths are displayed under the Quarantine “Source Path – File was Quarantined from this location” table column.  Example Plugin path/folder name:  /xxxx/xxxx/wp-content/plugins/pluginA/example-plugin-filename.php.  Example Theme path/folder name:  /xxxx/xxxx/wp-content/themes/themeA/example-theme-filename.php

    IMPORTANT NOTES:  If you restore files from Quarantine and they are quarantined again then there is a problem with your AutoRestore Exclude rules.  Go to the AutoRestore page, Turn Off AutoRestore and correct your AutoRestore Exclude rules on the Exclude wp-content Folders page before continuing to restore files from Quarantine.  If for some reason the Quarantine Sort|Search features is not working or you would like to mass restore or mass delete all files in Quarantine then use the BPS Pro Xternal Tools (XTF) Form:  BPS Pro Xternal Tools (XTF) Guide

    1. Copy the folder name of pluginA, which is “pluginA” in this example to the Quarantine Sort/Search window and click the Sort/Search button.
    2. The results of that Sort/Search are you will see all plugin files for pluginA ONLY.
    3. Click the Restore File CheckAll checkbox to select all pluginA files.
    4. Click the Submit button to restore all pluginA’s files back to the /pluginA plugin folder.
    5. Repeat these steps above for pluginB and pluginC.

    Solution 3: (see (XTF) Guide & (XTF) Video Tutorial links above):
    1.  Unzip the bulletproof-security.zip file on your computer.
    2.  Upload the xternal.php file from the BPS zip file to this folder: /bulletproof-security/admin/xternal/xternal.php.
    3.  Go to the Xternal Tools page in your Browser: example.com/wp-content/plugins/bulletproof-security/admin/xternal/xternal.php.
    4.  Select the Turn Off|Deactivate AutoRestore|Quarantine (ARQ) XTF Form option and click the Submit Xternal Tools Form button.
    5.  Reinstall BPS Pro plugin files using the XTF upload zip installer.
    6.  At this point you can use the Quarantine Sort|Search feature to restore all other plugin files.

    Solution 4:  If you are unable to use the XTF Form to deactivate/turn off AutoRestore

    1.  Login to your web host control panel.
    2.  Go to phpMyAdmin > search for this database option:  bulletproof_security_options_ARCM and delete it.  Deleting this database option deactivates/turns off AutoRestore.
    3.  Follow the help information in Solution 1 above and disregard any steps that have to do with turning off AutoRestore or XTF.  Basically you are simply manually copying folders and files back to where they were.

    Notes:
    • You can also use the Restore All Files in Quarantine XTF Form option to restore all other plugin files from Quarantine, but it is highly recommended that you use the Quarantine Sort|Search method above instead even though it will take longer to use the Quarantine Sort|Search Method.

    • BPS Pro is installed from the AITpro API Server and WordPress plugins and Themes are installed from the WordPress Server.  The Update Plugins WordPress feature should ONLY be used to update BPS Pro alone and should not be used to update BPS Pro and all other plugins at the same time.  During the process of updating all plugins at once causes all plugin files to be sent to Quarantine.  This is because the class.php file, which contains the AutoRestore|Quarantine Exclude filters is not installed right away and/or the automatic functions that grab and reinstate your AutoRestore|Quarantine Exclude filters does not happen in time to prevent ALL plugin files from being sent to Quarantine.  Or if you turn off AutoRestore first before updating all plugins at once then this issue/problem will not occur.  This is assuming that you have excluded the /plugins folder from being checked by ARQ.  If you have not excluded the plugins folder from being checked by ARQ then the standard ARQ procedural steps should be done:  Turn Off ARQ, update plugins, etc, click the AutoRestore Backup Files buttons and turn ARQ back On.

    Issue|Problem|Cause|Symptoms:  
    • May or may not be related to or caused by BPS.
    • Unable to log into the WP Dashboard/wp-admin area, but website is displaying correctly – not blank or white.
    • Unable to log back into the website or the website is displaying blank after restoring files from Quarantine. Some plugins and themes are designed in a way that if dependent files are missing (files sent to Quarantine) for that plugin or theme then your website will crash. This is a fairly rare issue/problem.

    Important Note: If you have BPS Pro 12.8 or higher versions of BPS Pro installed click this link for quickier and easier steps to fix quarantined files problems: https://forum.ait-pro.com/forums/topic/website-not-loading-after-wordpress-upgrade-or-theme-upgrade-500-error-files-quarantined/. BPS Pro 12.8+ versions automatically deactivate/turn ARQ Off when the /bulletproof-security/ plugin folder is renamed instead of having to use the BPS Pro XTF Form Tools to deactivate/turn ARQ Off.

    Solution:
    1.  The first thing to try is to FTP to your website and rename the /wp-content/plugins folder to /_plugins and log back into your WP Dashboard if you can at this point and go to the WordPress Plugins page which will deactivate all plugins.
    2.  Then using FTP rename the /_plugins folder back to /plugins.
    3.  Use the BPS Pro Xternal Tools (XTF) Form to deactivate AutoRestore|Quarantine (see (XTF) Guide & (XTF) Video Tutorial links above) first before activating the BPS Pro plugin.
    4.  Activate the BPS Pro plugin.  Activate all plugins again one by one and test that everything is ok by clicking on the Plugins Menu Link after activating each plugin.  If after activating a particular plugin causes the same issue/problem then FTP to your /plugins folder and delete that plugins folder.  You will need to reinstall that plugin again.  Doing a reinstall of a plugin should keep all of your database settings for that plugin and only new plugin files will be installed in the /plugins folder for that particular plugin.

    Issue|Problem|Cause|Symptoms:  
    • Plugin files are being sent to Quarantine when not using the default ARQ plugins folder exclude rule for the plugins folder.

    Solution:
    Go to the Quarantine page and restore plugin files using the Quarantine Restore File option. If you have chosen not to use the default ARQ plugins folder exclude rule and are monitoring your plugins folder with ARQ then you will need to turn off ARQ before installing new plugins and then click the wp-content Backup Files button before turning ARQ back On.

    Issue|Problem|Cause|Symptoms:
    • Specific Plugin, Theme or other files are being quarantined repeatedly.

    Solution:
    If Plugin, Theme or other files are being quarantined repeatedly then you will need to Calibrate ARQ (exclude these files from being checked by the ARQ Cron) by using the AutoRestore Calibration tools found on these AutoRestore pages:  Exclude wp-content Folders and Add|Exclude Other Folders & Files pages.  Plugin and Theme Temp or Cache files should be excluded from being checked by ARQ.  Backup files (created by a Backup Plugin) should be excluded from being checked by ARQ.  Sitemap or other dynamically updated files should be excluded from being checked by ARQ.  Click this link to go directly to Calibrating AutoRestore|Quarantine (excluding files from being checked by ARQ).

    Issue|Problem:
    • Website is displaying blank after upgrading/updating WordPress, a WordPress Automatic update occurred or unable to log into WordPress.

    Important Note: If you have BPS Pro 12.8 or higher versions of BPS Pro installed click this link for quickier and easier steps to fix quarantined files problems: https://forum.ait-pro.com/forums/topic/website-not-loading-after-wordpress-upgrade-or-theme-upgrade-500-error-files-quarantined/. BPS Pro 12.8+ versions automatically deactivate/turn ARQ Off when the /bulletproof-security/ plugin folder is renamed instead of having to use the BPS Pro XTF Form Tools to deactivate/turn ARQ Off.

    Solution:
    If your website is displaying a blank white page after upgrading WordPress or if a WordPress Automatic update occurred you should still be able to log into your WordPress Dashboard, but if you are not able to login then the steps below will fix this issue/probelm.  Use the BPS Pro Xternal Tools (XTF) Form (see (XTF) Guide & (XTF) Video Tutorial links above) to turn Off AutoRestore and manually upload WordPress Core folders and files to your website using FTP or your web host control panel File Manager.

    1.  Download the WordPress zip file from https://wordpress.org/download/ to your computer.
    2.  Unzip the WordPress zip file on your computer.
    3.  Use the BPS Pro Xternal Tools (XTF) Form (see (XTF) Guide & (XTF) Video Tutorial links above) to turn Off AutoRestore.
    4.  After using the XTF Form to deactivate/Turn Off AutoRestore, upload the WordPress Core folders and files that you unzipped on your computer.

    Upload the entire /wp-content folder to your website.
    Upload the entire /wp-admin folder to your website.
    Upload the entire /wp-includes folder to your website.
    Upload all the WordPress root files to your website root folder.  There are somewhere around 17 WordPress root files.  index.php, wp-activate.php, wp-app.php, wp-blog-header.php, etc.

    5.  Your website should be displaying normally at this point and you should be able to log into your WordPress Dashboard.
    6.  Log into your site and go to the Setup Wizard page, click the Pre-Installation Wizard button and click the Setup Wizard button.
    7.  If everything is working fine at this point and all of your plugins are showing as activated then go to Quarantine and choose the Delete Files select all checkbox to delete all files that are in Quarantine. You should not have any plugin files in Quarantine, but if you do then choose the Restore File option to restore only those plugin files.

    Issue|Problem:
    • Files in a wp-content folder are being quarantined. For this example I will use the /wp-content/managewp/ wp-content folder.

    Solution:
    Do these steps below to create an AutoRestore wp-content folder exclude rule for the managewp wp-content folder. Note: This example is using the managewp folder for the example. If files are being quarantined from a different wp-content folder name then use that folder name for your AutoRestore wp-content folder exclude rule.

    1. Go to the AutoRestore page and turn Off AutoRestore.
    2. Go to the Quarantine page and restore the managewp files that were quarantined.
    3. Go back to AutoRestore > click on the Exclude wp-content Folders tab page > type or copy and paste the name of the managewp wp-content folder: managewp
    4. Click the Save Folder Exclude Rules button.
    5. Turn AutoRestore back on.

    Video Tutorial For How to exclude files or folders from being checked by ARQ: https://forum.ait-pro.com/video-tutorials/#autorestore-quarantine

    Issue|Problem:
    • Files are being repeatedly quarantined. For this example I will use the error_log file.

    Solution:
    Do these steps below to create an AutoRestore single file exclude rule for /xxxxx/public_html/error_log file. Note: This example is using the error_log file path for this example. If the file and file path that is being quarantined is a different filename and file path then use that filename and file path for your AutoRestore single file exclude rule.

    1. Go to the AutoRestore page and turn Off AutoRestore.
    2. Go to the Quarantine page and restore the error_log file that was quarantined.
    3. Go back to AutoRestore > click on the Add|Exclude Other Folders & Files tab page > under the Exclude Folders & Files form > select Exclude an Individual File > Enter an Exclude Folder or File Path: /xxxxx/public_html/error_log
    4. Click the Exclude button.
    5. Turn AutoRestore back on.

    Video Tutorial For How to exclude files or folders from being checked by ARQ: https://forum.ait-pro.com/video-tutorials/#autorestore-quarantine

    Issue|Problem:
    • 500 error or website down after updating your Theme
    Note:  ARQ Automation will automatically turn ARQ Off and backup theme files when doing a Theme update from within your WordPress Dashboard.  If you are manually updating a theme by uploading a theme folder via FTP or remotely installing a theme then see the AutoRestore|Quarantine Manual File Editing/Uploading Procedural Steps:  https://forum.ait-pro.com/forums/topic/autorestore-quarantine-guide-read-me-first/#procedural-steps

    Important Note: If you have BPS Pro 12.8 or higher versions of BPS Pro installed click this link for quickier and easier steps to fix quarantined files problems: https://forum.ait-pro.com/forums/topic/website-not-loading-after-wordpress-upgrade-or-theme-upgrade-500-error-files-quarantined/. BPS Pro 12.8+ versions automatically deactivate/turn ARQ Off when the /bulletproof-security/ plugin folder is renamed instead of having to use the BPS Pro XTF Form Tools to deactivate/turn ARQ Off.

    Solution:
    1. Unzip the bulletproof-security.zip file on your computer or use FTP and download the /bulletproof-security/admin/xternal/xternal.php file from your website.
    2. Use FTP and rename the /bulletproof-security/ plugin folder to /_bulletproof-security.
    3. Upload your entire theme folder (all theme files) to your /themes/ folder and overwrite your existing theme folder.
    4. Use FTP and upload the xternal.php file to your website root folder (same folder where the wp-config.php file is).
    5. Go to the Xternal Tools page in your Browser: example.com/xternal.php.
    6. Enter your DB Username and Password from your wp-config.php file to view/access/unlock the BPS Pro Xternal Tools Form.
    7. Choose the Turn Off|Deactivate AutoRestore|Quarantine (ARQ) XTF Form option.
    8. Click the Lock Xternal Tools Form button after you are done using the XTF Form to lock the XTF Form.
    9.  Use FTP and rename the /_bulletproof-security/ plugin folder back to /bulletproof-security.
    10. Login to your website, go to Quarantine and delete all theme files that were quarantined (do not restore them).
    11. Run the Pre-Installation Wizard and Setup Wizard.

    #26720

    Paul
    Participant

    Just wondering why .maintenance got quarantined. Should i restore?

    #26721

    AITpro Admin
    Keymaster

    If the .maintenance htaccess file is the WordPress .maintenance file that is automatically added and deleted during WP upgrades you can delete it from Quarantine.  If a plugin or theme created the .maintenance file then you can probably also delete it.  I assume you would not want to restore the .maintenance htaccess file unless you want your site to be in Under Maintenance Status/not publicly viewable.

    https://codex.wordpress.org/Upgrading_WordPress#Step_1.5:_Remove_.maintenance_file

    #27936

    Krzysztof
    Participant

    [Topic has been merged into this relevant Topic]
    Hello,
    I have changed a link in my footer, uploaded the footer via FTP to the themes folder, and had to finish my work but I fought that ARQ will just quarantine that file, than I will restore it and it will be ok, but strangely I got 98 emails about file quarantine. And ARQ reported 98 file quarantined – this was the footer.php all the time. This has never happened previously. After a quarantine the suspected file was removed but 98 times… Strange thing 🙂

    And also a PHP error/warning:

    [27-Jan-2016 15:52:30 UTC] PHP Warning: copy(/xxxx/infolotnicze.pl/public_html/wp-content/themes/InfoLotnicze_3/view/footer.php): failed to open stream: Permission denied in /xxxx/infolotnicze.pl/public_html/wp-content/plugins/bulletproof-security/includes/arq-cron.php on line 1528
    #27939

    AITpro Admin
    Keymaster

    @ Krzysztof – See this help section about AutoRestore|Quarantine Manual File Editing/Uploading Correct Usage steps when manaully editing/uploading files:  http://forum.ait-pro.com/forums/topic/autorestore-quarantine-guide-read-me-first/#procedural-steps

    #28225

    Paul
    Participant

    Hi, i have had /public_html/core.694659 put to quarantine, unsure what this is so have not restored it yet?

    #28227

    AITpro Admin
    Keymaster

    If the file name is randomly generated then you cannot create an AutoRestore rule for that file and will have to keep manually restoring it from Quarantine.  If the file name is alawys the same then you can create an ARQ exclude rule for that file.

    #28233

    Paul
    Participant

    It is the first time i have seen it, so safe to restore?

    #28234

    AITpro Admin
    Keymaster

    core.xxx files are usually core dump files. This forum topic explains what they are are what to do about them if they are a recurring problem:  http://forum.ait-pro.com/forums/topic/core-dump-files-linux-core-dump-files-core-xxx-files-quararantined/

    #28576

    Mark
    Participant

    [Topic has been merged into this relevant Topic]
    I had to use updraftplus to do a restore of my site because an updated plugin broke embedding vimeo in my site. I didn’t know it was a plugin and the updraft restore was successful. I had AQR shut off at the time and when I turned it back on it quarantined over 8000 files. I have tried to delete those files and that has not worked. I have also tried to restore them and that doesn’t work either. What do I need to do to get rid of the quarantined files now that my site is working again.

    #28580

    AITpro Admin
    Keymaster

    To delete an extremely large number of files in Quarantine use the BPS Pro Xternal Tools (XTF) Form:

    http://forum.ait-pro.com/forums/topic/xternal-tools-xtf-guide/

    Delete All Files in Quarantine
    Usage: If excessive files have been sent to Quarantine and you are unable to delete all the files in Quarantine using the Quarantine Sort|Search Feature, select the Delete All Files in Quarantine XTF Form option and click the Submit Xternal Tools Form button. If excessive files have been quarantined you can turn off ARQ and either delete or restore all files by selecting the Delete All File In Quarantine or Restore All Files In Quarantine XTF Form options.

    For future reference, when manually modifying files (manual file editing, uploading files or restoring backup files) on your website use the ARQ procedural steps below.

    AutoRestore|Quarantine Standard Procedural Steps when manually modifying files
    http://forum.ait-pro.com/forums/topic/autorestore-quarantine-guide-read-me-first/#procedural-steps

    AutoRestore|Quarantine Manual File Editing/Uploading Correct Usage
    AutoRestore|Quarantine (ARQ IDPS) is a real-time file monitor that monitors all of your website files for any changes. When manually uploading files with FTP or manually modifying files or folders on your website follow these simple procedural steps to avoid having those files autorestored and/or quarantined. If files are sent to Quarantine then use the Restore File option in Quarantine to restore those files. ARQ is amazing, but it cannot tell who you are if you are manually modifying files or folders outside of your WordPress Dashboard – that is not possible.

    1. Turn ARQ Off on the AutoRestore page.
    2. Manually upload files or manually modify/edit files or folders.
    3. Click the appropriate AutoRestore Backup Files button: Root Files, wp-admin Files, wp-includes Files or wp-content Files Backup Files button.
    4. Turn ARQ back On.

    #28684

    growitsolutions
    Participant

    [Topic has been merged into this relevant Topic]
    Hi, I have recently updated my main Theme and received the message as usual, namely:
    BPS Pro AutoRestore (ARQ) Automatic Shutdown & Backup Notice…..
    Unfortunately, I cannot get rid of the notice now, I have tries switching auto restore on/off several times but no luck.
    Any help would be appreciated.
    Regards

    #28690

    AITpro Admin
    Keymaster

    @ growitsolutions – Reinstall WordPress: Dashboard menu > Updates menu > Re-install Now button.  Let me know if this works or not.

    #29252

    AbZu
    Participant

    Managed to delete the error logs but continue to get wp-admin/error_logs quarantined ¿? After believing I had successfully completed the configuration of BPS Pro I now get  htaccess quarantined as well.

    #29258

    AITpro Admin
    Keymaster

    Are you doing all of the AutoRestore single file exclude rule steps correctly:  http://forum.ait-pro.com/forums/topic/autorestore-quarantine-guide-read-me-first/#autorestore-exclude-rules  Since the single file you want to exclude is in the wp-admin folder then use the file path to the wp-admin folder (you can find the file path in the Quarantine Log file).  You can delete the htaccess file in quarantine since that is not related to anything and then just create a new htaccess file if necessary on the Security Modes page.

    Issue|Problem:
    • Files are being repeatedly quarantined. For this example I will use the error_log file.

    Solution:
    Do these steps below to create an AutoRestore single file exclude rule for /xxxxx/public_html/error_log file. Note: This example is using the error_log file path for this example. If the file and file path that is being quarantined is a different filename and file path then use that filename and file path for your AutoRestore single file exclude rule.

    1. Go to the AutoRestore page and turn Off AutoRestore.
    2. Go to the Quarantine page and restore the error_log file that was quarantined.
    3. Go back to AutoRestore > click on the Add|Exclude Other Folders & Files tab page > under the Exclude Folders & Files form > select Exclude an Individual File > Enter an Exclude Folder or File Path: /xxxxx/public_html/error_log
    4. Click the Exclude button.
    5. Turn AutoRestore back on.

Viewing 15 posts - 1 through 15 (of 30 total)

You must be logged in to reply to this topic.