Support

Hello,

What do you exactly need?
The email is sent so you can get the alert, while you can review the full history of scans from the PHP scan page.

Technically speaking, the PHP File Change Scanner detects modified and added files. The Threat Score is merely a prioritization tool for manual inspection of these files, i.e. you should prioritize inspecting the files with a high Threat Score and you probably don't need to inspect the files with zero score.

Right now the email is sent to you with all the results, as they are generated. I took that decision thinking that in any other case you would not possibly know if the scanner found no change, it failed to run or a hacker compromised the file to do nothing when run. We can add a switch in the next version to prevent emails when there are zero added / modified / suspicious files but do keep in mind this caveat.

Finally, do note that you are also sent an email from your CRON daemon with the CLI output of the scanner script. This is something we have no control over. If you want to suppress that email append

1> /dev/null

to your CRON command line. This tells the shell under which PHP runs to suppress standard output. If no system errors are generated you get no email. Of course in case of a system error you will get an email, something very useful to grab your attention when something's failing in the server.