The PHP file changes the extension to ".suspeced"

Question

I have two php files on the server that continue to change their extension over night. For example, file.php changes to a .php.suspected file

These two files have a mail () function. For instance,

$mail_success = mail($_POST["email_to"], stripslashes($_POST["email_subject"]), stripslashes($_POST["email_body"]), $_app["email_headers"]); 

There is nothing else that these files have in common. So, something on the server goes through the files overnight and, apparently, these files with the mail () function do not like it, change their extension or, rather, add the .suspected extension to the .php extension.

Answer 1

After a couple of minutes of searching on Google, it looks like a PHP file that changes file types is a sign of a hacked server. Here is a post on the CPanel forums where the guy has a similar problem and other commentators decide that his server has been hacked.

I personally cannot give you any recommendations for protecting your site, but maybe you should contact SysAdmin or another community and think about how to make your server more secure.