Joomla core file integrity checks, even without official checksums
WordPress publishes checksums for its files, Joomla doesn't. That's why few tools really check the Joomla core. We compute the hashes from the official packages.
Without a reference, a changed file looks normal.
Joomla doesn't publish a list of hashes for its files. Without a reference you can't tell whether libraries/src/Factory.php is the original or a modified copy.
Then there are the files left over from earlier versions. After years of updates a Joomla site has quite a few, and nearly all of them are harmless.
We build the reference ourselves.
Official packages
We download the official Full Package of every Joomla version and hash its files.
Comparison on the site
The agent compares every core file with the hashes for the installed version.
Severity
A changed PHP file in the core is critical. Files left from earlier versions are recognised by their content and don't raise alarms.
Want to try it on a real site? The 30-day trial needs no credit card.
Start free trialFrequently asked questions
Does Joomla publish official file checksums?
No, Joomla doesn't publish hashes of its files. We compute them from the official Full Package of every version.
Does it work on Joomla 3?
Yes, with a separate plugin for Joomla 3.9 and 3.10 that runs even on PHP 7.1.
What about files from old versions?
We recognise them by comparing them with earlier releases. They appear in a separate list and don't trigger critical alerts.
Goes well with
- Joomla website monitoring for web agenciesA native Joomla agent, with the same features as the WordPress one.
- Joomla 3 has reached end of life: how to protect the sites still running itMonitoring, integrity and backups on Joomla 3.9 and 3.10, even with PHP 7.1.
- PHP malware in the uploads folder: how to find it quicklyPHP in uploads, including names like .php.jpg, and suspicious files.
- WordPress core file integrity checksEvery file compared with the official checksums, with the changed lines.
Try it on your clients' sites.
Connect your first sites today and see what SitePing finds on them.
- Every Complete feature except backups
- Up to 10 sites
- No credit card needed to start
- At the end you choose a plan or move to Free, and nothing is charged
Already have an account? Log in. Prefer to look at one site first? Free read-only audit.