Module: Shop Integrity
This module checks whether your JTL-Shop core files are unmodified — a key indicator of whether an attacker has tampered with files.
How it works
The module calculates checksums (hashes) of your JTL-Shop core files and compares them against the official reference hashes for your JTL-Shop release. Deviations indicate a possible manipulation.
Note
Custom template modifications and changes to core files will be reported as deviations. Review such findings manually before taking action.
What is compared?
- JTL-Shop PHP core files
- Template base files (unless individually customised)
- Critical configuration files
Interpreting Results
| Finding | Possible Cause |
|---|---|
| File modified | Legitimate customisation or attacker manipulation |
| File missing | Failed update or deleted by attacker |
| New file found | Plugin file or webshell placed by attacker |
Always combine the results of this module with the Security Scan and Recommendations for a complete assessment.