PrestaShop File Integrity Monitoring: optimizes your PrestaShop store with a clear, practical tool built to save time without adding complexity.
🛡
Monitoring
The file firewall missing of your PrestaShop
Anti-piracy · Real-time monitoring · Email alerts
⚠ Is your store really healthy?
Every day, some thousands of PrestaShop stores are silently compromised:
- Injection of backdoors in
/modules/ or /themes/
- Modification of
index.php to redirect your visitors to spam
- Malicious PHP files uploaded via an upload vulnerability
- And the worst part? You never see it , until the day Google blacklists your domain.
✅ Monitoring changes the game
Monitoring is a FIM (File Integrity Monitor) specially designed for PrestaShop.It calculates an SHA1 hash of every file in your shop and instantly alerts you to any suspicious modification.
Sleep soundly: if a file changes overnight, you will receive an email upon waking with the details.
🔍 How does it work?
1⃣
Installation
The module records the SHA1 hash of all PHP/HTML/JS files.This is your "official photo."
2⃣
Daily cron
Full rescan and comparison with baseline every night.No changes?RAS.Otherwise, email.
3⃣
You decide
Validate legitimate changes, quarantine suspicious files.In 1 click.
🚨 Automatic backdoor detection
Monitoring doesn't just detect changes.It Analyze content modified files and identify common backdoor signatures:
eval()
base64_decode()
shell_exec()
system() / passthru()
assert() / create_function()
$_POST['x']() / $_GET['x']()
preg_replace /e (obsolete)
Blobs base64 > 300 characters
Multiple patterns found = level CRITICAL .You can enable the automatic quarantine to neutralize the file instantly.
✨ Key Features
📊
100% AJAX Dashboard
No page reload.Background scan - you close the tab, it continues.Progression "xxx files browsed" in real time.Instant Cancel Button.
🔔
4 levels of severity
LOW · MEDIUM · HIGH · CRITICAL (flashing red light).Three intelligent: the most dangerous first.
🛑
Quarantine in 1 click
Move a suspicious file to a staging area outside the web.More executable, but kept for analysis.Restoration or permanent deletion at any time.
🔕
Permanent Whitelist
A file you edit often?Add it to the whitelist: never alert for this path again, even if it changes daily.
📧
Emails via the shop's SMTP
No reconfiguration.The module uses the SMTP already configured in Advanced Settings → Email : Brevo, Mailjet, SendGrid, PHP mail, it doesn't matter.
⚡
Smart Optimization
Only rehash files whose size or date has changed.Huge time savings on large catalogs (100k+ files).
🔍
File Details Modal
Click any alert path to view the first KBs of the plaintext file.Visually inspect the backdoor before taking action.
📈
30-Day Activity Chart
View modification activity over 30 days at a glance.Days with critical alerts appear in red.
🔐
Maximum module security
Unique token per shop, no admin controller exposed, invisible to non-admins.No external dependencies, zero telemetry.
🌍
Multilingual
Interface FR/EN, emails FR/EN.The module respects your store's default language.
🎯 Who is this module for?
- PrestaShop Merchants Who Have Already Been Hacked - never twice, I promise.
- Agencies who manage multiple client stores and want a security view.
- Webmasters who want to sleep soundly.
- All GDPR Shops File change tracking is part of good compliance practices.
⚙ Compatibility
| PrestaShop |
1.7.x → 8.x |
| PHP |
7.4 → 8.4 |
| Database |
MySQL 5.7+ / MariaDB 10.3+ |
| Multistore |
✅ Compatible |
| Dependencies |
None - no Composer, no third-party library |
| Hosting |
Shared or VPS - works wherever PrestaShop works |
🚀 3-Step Installation
- Download the file
- BO PrestaShop → Modules → Module Manager → "Upload a module" button → drag the zip
- Click Settings → you arrive at the dashboard.It's ready.
💡 Tip: activate the daily cron in 1 line (command provided on the module configuration page).
❓ Frequently Asked Questions
Will scanning slow down my shop?
No.The scan runs as a detached CLI process in the background and does not use web resources.Furthermore, the module only thoroughly analyzes files whose size or date has changed.
What happens in case of a false alarm?
You have 3 buttons: It's me Confirm change, Skip mark the alert as read without touching the baseline, "🔕 Always" Add the file to the whitelist to never be alerted again.
Can quarantine break my shop?
The quarantine is default manual - you click the button to quarantine a file.The "Automatic Quarantine" option for CRITICAL alerts is disabled by default.If enabled, and a false positive is quarantined, restoration is done in 1 click.
Compatible with my shared hosting?
Yes, in the vast majority of cases.The module only uses standard PHP functions.Some very restrictive hosts disable popen and execute - in this case the scan runs synchronously (a bit slower but functional).
Will my plugin updates trigger a lot of alerts?
Yes, this is normal and even desirable: any file change is reported.To validate quickly, use the button Validate All after an official update.
What emails will I receive?
An HTML pro summary at the end of each scan (manual or cron) that detected changes.Colored stats, file list, threat level, direct link to the dashboard.
A question?A bug?A suggestion?Our team is directly reachable.
Response within 24 business hours · Free updates during the support period
Module edited by
WebPoint ·
webpoint.frNo telemetry · No external dependencies · 100% in-house code
