ConfigServer Community Forum

Posted: **17 Aug 2015, 05:57**

I am getting a lots of alerts like below

Executable:

/usr/bin/php


Command Line (often faked in exploits):

/usr/bin/php /home/username/public_html/wp-admin/admin-ajax.php

I do not want to get this kind of alerts therefore I have added following in my csf.pignore list

cmd:/usr/bin/php /home/*/public_html/wp-admin/admin-ajax.php

and restarted csf and lfd but still I am getting alerts. How to do this correctly??

Posted: **19 Aug 2015, 11:08**

Hi,
If you want the csf.pignore to be ignored do "csf -r" from the command line and also restart "service lfd".

Hope this will help you.

ignore process in csf.pignore with wildcard