[Defender Pro] Weird PHP files.

I’ve been getting some weird PHP files popping up under all my WP installs. This has been going for a few months, contacted My hosting provider about it, but they could not help.
Would you please help in figuring out what are those files and how to fix the issue?

  • Sohag Ronjon Dey
    • QA

    Hi 1337user ,

    Hope you are doing well :slight_smile:

    I can see you are using an older version of WordPress. I can see you have 2 plugins and 4 themes update available.

    It is always recommended to use Updated themes/plugins and WordPress itself. The updated versions fixes a number of bugs and security holes. Please try to update your plugins/themes and WordPress.

    Please make sure to take complete backup of your site files and database before making any updates or changes like deactivation/removal. This will help to get back to current state if anything breaks or any settings misses.

    Then try to increase your php max_execution_time. Currently it is set to 30. Which can be related to white screen of death issue on Defender Scan. We recommend to set it to atleast 180. It will be better if you can increase that to 300. You can increase that in your

    cPanel > Software > Select PHP Version

    There click on Switch to PHP Options button on the right corner and you will see the settings.

    I can see you have deactivated Defender Pro. Once you have updated all the plugins and increase the time limit try to activate Defender Pro and run a new file Scan in it. It will show any unknown files that is not related to WordPress Core and will also show suggestions to fix those. Follow those suggestions and fix the issues. Also please make sure to take complete backup before you make any changes.

    Once it is fixed try to activate and apply Defender features like Security Tweaks, IP Lockout, Mask Login and 2 Factor Authentication. Also try to set scheduled backups so if any issue happens in future you can restore any stable backup.

    Please feel free to contact us if you need any further help.

    Best Regards,
    Sohag