AM Shield - PrestaShop File Integrity Monitor

Keep a clear view of the files that make up your PrestaShop store

A PrestaShop store changes constantly. Core updates replace files, modules add their own code, themes evolve and technical work can leave legitimate modifications behind. At the same time, an unexpected or malicious file can easily remain unnoticed among thousands of normal files. AM Shield brings file scanning, integrity monitoring and detection review together in one dedicated back-office workspace. It helps you understand what is present in the store, what has changed and which files deserve attention, without altering your catalogue, checkout or customer experience. The module is designed to provide useful information without making decisions on your behalf. It does not automatically delete, repair, execute or quarantine files. Every alert remains under your control and includes the context needed for a careful review.

Scan the store and focus on what matters first

A full scan progressively examines the relevant files in your PrestaShop installation. Results are given a risk level and clear reasons so that you can begin with the items that require the most attention instead of working through an unstructured list. The scan is divided into controlled batches to limit server load. Progress is stored, allowing an interrupted scan to continue safely whenever possible. From the dashboard, you can follow the current scan, open detailed results, filter previous detections and export useful information to CSV for your hosting provider, developer or security specialist. AM Shield reports suspicious indicators; it does not present every detection as a confirmed infection. A legitimate module file, a custom override or a recent technical change may require review without being harmful.

Detect added, modified and missing files

Once the first full scan has been reviewed, you can create an approved reference for the known state of your store. Later quick checks compare the current files with this reference and clearly identify files that have been added, modified or removed. This makes it easier to review a PrestaShop update, a module installation, a theme change or work carried out by a technical provider. The previous reference remains active while a replacement is being prepared, so the store is not left without a comparison point if the operation is interrupted. The approved reference stores fingerprints for comparison; it is not a backup and cannot restore files or the database. AM Shield can also import an official reference matching the exact installed PrestaShop version. This separate check helps identify modified or missing core files without confusing them with the modules, themes and custom files that belong specifically to your store.

Take every detection to a clear decision

AM Shield 1.7.0 gives each real-time detection an explicit review state:

• Action required - the file still needs to be examined, corrected or authorised.
• Correction verified - the reported file has been removed or its current contents no longer trigger the detected indicators.
• File authorised - one exact version has been confirmed as legitimate at one exact location.
• Historical detection - the event remains available for reference without being presented as a new pending action.

After correcting or replacing a file outside AM Shield, you can ask the module to verify its current state. The check is restricted to the current stable file located inside the store root. Unusual paths, symbolic links and files that are changing during verification are refused without incorrectly closing the detection. When a reported file is legitimate, authorisation is deliberately precise. It applies only to the combination of its exact relative path and exact SHA-256 fingerprint. The same contents placed elsewhere are not automatically trusted, and any later modification creates a new fingerprint that is assessed normally. Technical processing and human review remain separate. An event marked as Processed has been imported successfully; it is not automatically considered corrected or authorised. The dashboard therefore keeps the queue, the number of detections requiring action and watcher activity as three distinct indicators.

Add optional real-time monitoring on compatible Linux hosting

The optional AM Shield watcher monitors store files between traditional scans. Recent creations and modifications can be reported within seconds, depending on server load and the configured interval. A periodic full check also revisits the complete file set so that monitoring does not rely on a single detection method. During its first run, the watcher records the existing state without creating a detection for every file already present. Later events are recognised by their signature to avoid duplicate records and duplicate protected copies. If the service or server restarts, its private state allows monitoring to continue safely. An eight-step installation assistant guides you from creating the required private folder to receiving a valid running status. Instructions adapt to the access available on the hosting plan, whether the store uses shared hosting, a VPS, a dedicated or managed server, or a supervised environment. The assistant provides copy-ready commands and validates the folder, configuration, dependencies, private structure and watcher status before activation. The watcher is optional. Stores hosted on Windows/WAMP, or Linux plans that do not allow the required commands or startup method, can still use full scans, quick integrity checks, approved references, history, reports, email notifications and scheduled PHP processing.

Keep useful evidence private

Real-time events include a signed record of the stable information used during processing. When retention is enabled, AM Shield can also keep a protected copy of the detected file in the private watcher storage. The copy is downloaded from the back office as a .txt file only after permission, identity, size and fingerprint checks. Private storage paths, file contents and secrets are never exposed in the page or included in notification emails. Copies must still be treated as potentially dangerous evidence and should never be executed with PHP. You choose how long eligible private copies are retained. Automatic removal remains disabled until it is explicitly enabled, and confirmation is required before enabling it or shortening the retention period. Detection history and review results remain available after an expired private copy has been removed.

Stay informed without keeping the back office open

The scheduled PHP task can advance scans, import watcher events, prepare notifications and perform planned maintenance in controlled batches. It is explicitly enabled from the back office and uses a secret that can be renewed if necessary. Email summaries can be sent to between one and five recipients through the existing PrestaShop mail configuration. A successful test is required before activation. Events that occur close together may be grouped to reduce unnecessary messages, and delivery failures do not interrupt scanning or real-time monitoring. Emails contain no suspicious attachment, file contents, private storage path or secret.

A security tool that keeps you in control

AM Shield is designed for store owners and technical teams who want earlier visibility into suspicious files and unexpected changes while preserving a complete, readable history of what was found and what was decided. It is not a network firewall, a backup service or an automatic malware-cleaning service. Instead, it gives you a reliable workflow for scanning files, checking integrity, monitoring changes, preserving evidence and confirming the outcome of each review. The main scanning features require no external licence activation or permanent connection to an online scanning service. Real-time monitoring is optional and runs within a compatible Linux hosting environment using private storage outside the store and all Web-accessible directories. AM Shield is compatible with PrestaShop 8.1 to 9.x and PHP 7.4 or later.

Merchant benefits

• See the current security status, recent scans and items requiring attention from one dashboard.
• Notice suspicious files and unexpected changes earlier.
• Compare the shop quickly with a clean state that you have reviewed and approved.
• Keep a history of scans and file changes to support investigations.
• Export useful results to CSV for your hosting provider or technical partner.
• Follow each finding to an understandable business decision, separately from technical import.
• Verify a correction without deleting the finding, evidence or history.
• Authorise only an exact version of a legitimate file using path and SHA-256.
• Download a protected .txt copy for analysis without execution.
• Receive grouped email summaries without file content or secrets.
• Schedule limited automatic checks without placing the secret key in the task URL.
• Enable guided real-time monitoring when the hosting environment supports it.
• Stay in control: no automatic deletion, quarantine or file modification.

Customer benefits

• Earlier awareness of suspicious changes helps the merchant maintain a reliable shopping experience.
• File integrity tracking helps reduce the time an unexpected change may remain unnoticed.
• Checks run in the background and do not change the catalogue or checkout journey.

Features

• Full shop scan - progressive file inspection with risk levels and safe continuation after an interruption.
• Quick integrity check - comparison with the active clean reference to identify added, modified and deleted files.
• Clean reference state - controlled creation after an approved full scan; the previous reference remains active until the new one is complete.
• PrestaShop core verification - manual import of an official reference that exactly matches the installed version.
• Clear dashboard - overall status, latest scan, items to review and clean-reference status.
• History and filters - browse scans and detections by risk, path, date, review state and integrity result.
• Professional review lifecycle - Action required, Correction verified, File authorised and Historical detection states, independent from technical queue handling.
• Correction verification - secure inspection of the current file; removed, no longer triggering policy or still requiring action.
• Exact authorisation - trust limited to one exact relative path and SHA-256 fingerprint, with explicit confirmation.
• Protected copies - .txt download from event details after permission, size and fingerprint checks.
• CSV reports - export scan results and file-integrity changes.
• Email notifications - mandatory test, one to five recipients, grouped summaries and bounded retries.
• Secure scheduled execution - explicitly enabled PHP task, bounded batches and secret-key rotation from the back office.
• Optional real-time monitoring - fast path for recent files plus periodic exhaustive reconciliation on compatible Linux hosting.
• Signed manifests and durable overlay - deduplication, crash recovery and secure persistence of fast observations.
• Eight-step installation assistant - hosting-aware guidance, copy-ready commands, validation and running confirmation.
• Monitoring ECG - watcher health and activity, separate from action-required findings and queue depth.
• Controlled retention - explicit private-evidence period, with confirmation before automatic deletion.
• Back-office permissions - separate viewing and review-action rights for employee roles.

Requirements

Compatibility and requirements

• PrestaShop 8.1 to 9.x.
• PHP 7.4 or later.
• No online service is required for the main scanning features.
• Real-time monitoring is optional and requires Linux, Bash 4+, GNU find/stat/coreutils, OpenSSL, curl, jq, flock, iconv, a UUID source and a permitted startup method.
• On Windows/WAMP, full scans, quick checks, clean references, history and scheduled PHP execution remain available; only the live Linux watcher is unavailable.

Instructions

Installation steps

Install the module and prepare the first scan

1. Back up the store. Create a complete backup of the PrestaShop files and database before installing or upgrading the module.
2. Open Module Manager. In the PrestaShop back office, go to the module management page and choose the option to upload a module.
3. Upload the official AM Shield ZIP. Select the archive without unpacking it or changing its contents, then wait for the installation confirmation.
4. Open AM Shield. Go to Advanced Parameters > AM Shield, confirm that version 1.7.0 is displayed and check that no migration error appears.
5. Import the official PrestaShop core reference. From the Integrity page, select the reference that exactly matches the PrestaShop version installed on the store. This must be done before the initial full scan.
6. Run the first full scan. Return to Overview, start the scan and allow it to progress. AM Shield works in controlled batches so that the back office does not need to remain open continuously when scheduled execution is configured.
7. Review the results. Open important alerts, consider recent updates or technical work and request professional advice if a result is unclear.
8. Create the approved reference. Once the scan is complete and the store state has been reviewed, save it as the comparison point for future quick integrity checks.
9. Configure optional automation. You can then set up the scheduled PHP task, test and enable email summaries and, on compatible Linux hosting, install the real-time watcher.

When upgrading AM Shield, upload the new official ZIP over the installed version. Do not uninstall the existing module, as uninstalling may remove its configuration and stored data.

Install the optional Linux watcher

1. Select the hosting type. Tell the assistant which types of access are actually available so that it can provide suitable instructions.
2. Create the private folder. Manually create the suggested directory outside the store and every Web-accessible root, using the account and restrictive permissions shown by the assistant.
3. Save and verify its absolute path. AM Shield checks the location, object type, owner and permissions before allowing the setup to continue.
4. Prepare the private configuration. Depending on the available permissions, the module either installs the configuration or provides it for controlled manual copying.
5. Install and check the private layout. Copy the generated commands into the terminal, complete the installation and run --check to identify any missing dependency, incorrect path or permission problem.
6. Configure automatic startup. Use the method supported by the hosting environment, such as cron protected by flock, a supervisor, a system service or an administrator-managed process.
7. Start the watcher and wait for running. A recent signed heartbeat confirms that AM Shield is receiving current status information from the service.
8. Enable real-time processing in AM Shield. Activation becomes available only after the required installation checks have passed.

The first periodic full check records the existing state of the store and may take several minutes on a large installation. It does not create a detection for every file already present, and fast monitoring continues to follow recent changes. Always use the paths and commands generated by the assistant for the store being configured. The watcher is optional. If the hosting environment does not meet its Linux requirements, all main scanning, integrity, history, reporting, email and scheduled PHP features remain available.

Clear scope

• AM Shield is not a network firewall.
• AM Shield does not replace updates, backups or secure hosting.
• A detection is not automatically a confirmed infection.
• Files are never deleted, repaired or quarantined automatically.
• Real-time monitoring depends on the capabilities offered by the hosting environment.