This question already has an answer here:
- How do I deal with a compromised server? 13 answers
How can I prevent php scripts from overriding max_execution_time value ?
Someone found a way to inject malicious code on a server through wordpress... We are in the process of patching the vulnerability. That php code defines :
@ini_set('max_execution_time', 0); @set_time_limit(0);
That kept on crashing my apache server... Is there a way to disallow such override?