Filesman

Portal Home > Knowledgebase > Articles Database > Filesman

Posted by meashsoft, 05-28-2015, 02:27 AM
i found a file in one of my clients dir and that file shows every directory in the account and can edit them it also can determine the server hdd information , please help how can i disable these kind of files , is there any function that needs to be disabled , i know i can delete it but i want to make it disfuncional [PHP]
Posted by takserver, 05-28-2015, 05:06 AM
You need CXS on you server for such like this.
Posted by diman, 05-28-2015, 05:17 AM
that malware which may be either uploaded by client (intentionally or by its pc' malware) or uploaded using vulnerability of some server software like wordpress, php, webserver, etc. you may recursively grep FilesMan in all your docuement roots and just remove found file. Also you may ask clients with infected files found to run malware/antivirus software on their own devices. To detect such activity you may - regularly run maldet scans - always update all your server software incl cms, php, webserver to the latest production versions