Hall of Fame

[cognit21]

Yesterday I installed PHPVibe on my VPS server!
And today I was notified that there are some problems with the file cron.php:
Please review the script on cron.php file as its recently updated and could be malware and if the script is good please consider its schedule because it doesnt get the chance to properly close and crashes the VPS and the entire hardware node.
Why did this happen? And what to do?

[PHPVibe A.]

Hi, move the cron from shell_exec to a cpanel cron (or other panel you use).

Hi, does the cron last run option get updated?
Look in tools -> Options api

cron_lastrun and cron_interval values.

You can also remove it from index.php (root):

Code Select Expand

/* Crons trigger */
if(function_exists('exec')) {
$time_passed = time() - get_option('cron_lastrun');
$cron_interval = get_option('cron_interval');

if( $time_passed  > $cron_interval) {
$arrOutput = '';
update_option('cron_lastrun', time());
$binpath = get_option('binpath','/usr/bin/php');
$command = $binpath." -f ".ABSPATH."/cron.php";
exec( "$command > /dev/null &", $arrOutput );
}
}

and execute it (later if needed) from the cpanel cron tab.

[cognit21]

I will try this method. I hope it will solve the problem. But at the moment, due to this problem,  my VPS server has a status: suspended!!!

In any case, I will inform you if the problem will not be solved!

[PHPVibe A.]

Remove it and contact your hosting, tell them the issue is fixed.

[cognit21]

Options API is :

cron_lastrun   1404345672   yes
cron_interval   0                       yes

[PHPVibe A.]

Doesn't matter, if it executes continuously, there's nothing you can do except remove that code and add cron.php to a cpanel cron (don't set it up for minutes, it's pointless, maybe twice a day tops).