Hi wernfried,

That's an idea I like :-) With a few issues:

* if you have a hacked file (for example include/config_defaults.inc.php) the Piwigo update may overwrite it and you would not see your Piwigo was hacked (but the hack would be partially erased)

* the current [extension by plg] Check Files Integrity does not check for "unexpected" files, and this is quite complicated because a plugin could perfectly add a directory in "_data" and that would not mean your Piwigo was hacked

* files local/config/*.php are not checked (and I write it publicly here because we know some hackers already know it and we have seen some modifications in database.inc.php)