Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

prakash2raj's avatar

getting malicious files to my public folder of Laravel

Hi, I'm getting unwanted malicious files at my public folder just by today all files has been created, its random php files and because of that my cpanel has been suspended saying that I have a phishing page.. someone please help, I'm using laravel 7 and shared hosting.. Thanks

0 likes
5 replies
Peppermintology's avatar

Do you perform any sort of validation on the files that are being uploaded?

prakash2raj's avatar

I cannot understand why this is happening after checking all of my addon domains folder I can see all of them have unwanted files created even if it is a WordPress website or a laravel project

Peppermintology's avatar

It will depend on if you perform any file validation on upload. Doesn't matter the framework or platform used, if you don't validate things like file types or sizes for example, you're leaving yourself open to malicious users.

prakash2raj's avatar

at laravel validation I used file types of validations

prakash2raj's avatar

there are also automatic folder created at public folder and how is that possible. folders like "cranberry-platinum-rebus" and "strength-whmcs-a40"

Please or to participate in this conversation.