How to Identify and Restore Files from Quarantine
When cPFence quarantines a file, it’s important to identify which website the file belongs to and restore it if necessary. This guide will walk you through the steps to locate the website, restore the quarantined file, and whitelist it to prevent future quarantines.
Step 1: Identify the Website Using the Website ID
Every website on your server has a unique ID, which is part of the file path. To find the website associated with a specific ID:
-
Log in to your Enhance control panel.
-
Go to the "Manage Websites" page.
-
Enter the Website ID (found in the quarantined file path) in the search field.
-
The website with this ID will appear, and you can review the affected files.
Step 2: Restore the Quarantined File
Once you’ve identified the website, you can restore the quarantined file by moving it back to its original location.
For example, to restore a quarantined file, use the following command:
mv /opt/cpfence/quarantined/example-file.php /var/www/xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/public_html/wp-content/plugins/example-plugin/example-file.phpThis will move the file from the quarantine folder back to its original directory.
Step 3: Whitelist the File (Optional)
If you are confident that the file is safe and do not want it to be quarantined in the future, you can whitelist it using the following command:
cpfence --exclude-path /example-file.phpThis will exclude the file from future scans and prevent it from being flagged or quarantined again.
Step 4: Report a False Positive (Optional)
If you believe the file was quarantined in error and this is a false positive, you can report it to our support team. Attach the file to your support ticket for further investigation.
Need Further Assistance?
If you encounter any issues or have additional questions, feel free to reach out to our support team via your client portal.
