phpMyAdmin Causing Suspicious File Alert

4 posts Page 1 of 1
nswdllc
Junior Member
Posts: 1
Joined: 28 Oct 2018, 15:56


Since the last update to csf we've been getting multiple notifications every time a user accesses phpMyAdmin.
Code: Select all
lfd on xxxx.xxxxx.com: Suspicious File Alert
File: /tmp/pma_template_compiles_USERNAME/twig/9f/9f2b0868c0ee3bdb8fbcdba6e363515596d67849ea34a2ad71b70607edbb2a33.php
Reason: Script, file extension 
Owner: USERNAME:USERNAME (510:507) 
Action: No action taken 
I would normally just suppress the notification but the php file it flags changes constantly since it's a tmp file and I prefer not to have it ignore an entire folder.
ForumAdmin
Moderator
Posts: 1447
Joined: 01 Oct 2008, 09:24


Those are compiled phpMyAdmin templates which cPanel introduced in v76. They are currently being created in /tmp instead of ~user/tmp which cPanel is aware of and should be fixing in a future release.

In the meantime, if you want to ignore them you would need to create an entry in /etc/csf/csf.fignore and then restart csf and then lfd.
solidblueliquid
Junior Member
Posts: 7
Joined: 12 Nov 2018, 09:46


Thanks this now resolved
salmino
Junior Member
Posts: 4
Joined: 15 Apr 2019, 18:32


28 Oct 2018, 16:28ForumAdmin wrote:
Those are compiled phpMyAdmin templates which cPanel introduced in v76. They are currently being created in /tmp instead of ~user/tmp which cPanel is aware of and should be fixing in a future release.

In the meantime, if you want to ignore them you would need to create an entry in /etc/csf/csf.fignore and then restart csf and then lfd.
https://thegadgetwire.com/tutuapp/ https://www.oovoo.com/adam4adam/ https://thegadgetwire.com/appvalley/
thanks i were looking for that
4 posts Page 1 of 1