Few hours back I was trying to login into my wordpress website, but it gave the error - Incorrect Password.
So, I ran a scan on my wordpress website with the command - "wp core verify-checksums"
It gave the Warning that wp-salt.php and wp-cli.yml file should not exist in public_html folder.
I checked the wp-salt.php file, it contains the content :-
<?php
/**#@+
* Authentication Unique Keys and Salts.
*
* Change these to different unique phrases!
* You can generate these using the {@link https://api.wordpress.org/secret-key/1.1/salt/ WordPress.org secret-key service}
* You can change these at any point in time to invalidate all existing cookies. This will force all users to have to log in again.
*
*/
define('AUTH_KEY', 'some value');
define('SECURE_AUTH_KEY', 'some value');
define('LOGGED_IN_KEY', 'some value');
define('NONCE_KEY', 'some value');
define('AUTH_SALT', 'some value');
define('SECURE_AUTH_SALT', 'some value');
define('LOGGED_IN_SALT', 'some value');
define('NONCE_SALT', 'some value');
When I deleted the files then the website became inaccessible. I want to know if these files are safe? Is my website hacked?