Knowledgebase
Strange File deletion
Posted by kshazad86, 10-17-2012, 04:37 AM | There is a file on the server called gbook.php which for some reason is automatically deleted between 11pm and 6.30am every day, and it has to be manually re-uploaded again.
The file is part of a guestbook php script and I cant seem to work out what would cause a file to be automatically removed from the server on a daily basis.
Note: Currently running a cPanel server.
Any ideas?
Last edited by kshazad86; 10-17-2012 at 04:42 AM.
|
Posted by Larry, 10-17-2012, 05:52 AM | Have you contacted your host? It's possible they're running something similar to ConfigServer firewall. The file could be automatically deleted due to a "Suspicious Line" in the code. See if they can create an exception.
|
Posted by RoseHosting, 10-17-2012, 05:56 AM | Yes, this file is known to be a false positive of an exploit but it's actually not. you should contact your host about this.
also, is it possible that you have a cronjob removing the file? you should check the log files for any clues.
HTH
|
Posted by kshazad86, 10-17-2012, 05:57 AM | Thanks, it looks like Linux Malware Detect picks this up as malware and automatically quarantines the file and moves it. If I add the path of the file to /usr/local/maldetect/ignore_paths will that help it from being ignored during the routine scan?
|
Posted by RoseHosting, 10-17-2012, 06:02 AM | yes, adding the path of the directory which holds this file in '/usr/local/maldetect/ignore_paths' should ignore it during the scan
|
Posted by BestServerSupport, 10-17-2012, 09:04 AM | Yes, you will have to add the file name in /usr/local/maldetect/ignore_paths to avoid auto deletion of file.
|
|
Add to Favourites
Print this Article |
Also Read
PHP Help (Views: 598)
new reseller (Views: 582)