# Malicious Code on RapidWeaver Classic Site **URL:** \ **Category:** RapidWeaver Classic\ **Created:** [October 23, 2026, 5:15pm UTC](https://forums.realmacsoftware.com/t/malicious-code-on-rapidweaver-classic-site/57937 "2026-10-23T17:15:26Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![Printdevil](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/printdevil/32/29847_2.png) [@Printdevil](https://forums.realmacsoftware.com/u/Printdevil)\ **Post date:** [October 23, 2026, 5:15pm UTC](https://forums.realmacsoftware.com/t/malicious-code-on-rapidweaver-classic-site/57937/1 "2026-10-23T17:15:26Z")
It has been brought to my attention by the host of a website I have built, that there could be some malicious code in their site… > **[Willis - Branded Products for the Drinks Industry](https://willispublicity.co.uk/)** > > Anything and everything branded - 01582 764040 The code appears to be in… …/public\_html/rw\_common/plugins/stacks/serverdebug.php It’s been identified as… SMW-INJ-CLOUDAV-bkdr.phpinfo-id\_1d53a3a0-1 The following code has been provided maybe as a solution or maybe as the area of concern… ![Attachment](https://europe1.discourse-cdn.com/flex005/uploads/realmacsoftware1/original/3X/4/2/4232646bf06d7b24c9923275417ac6bfa5554dff.png) Can anyone offer some advice on how to resolve this. David ---
**Author:** ![differentdan](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/differentdan/32/33530_2.png) [@differentdan](https://forums.realmacsoftware.com/u/differentdan)\ **Post date:** [October 23, 2026, 5:45pm UTC](https://forums.realmacsoftware.com/t/malicious-code-on-rapidweaver-classic-site/57937/2 "2026-10-23T17:45:09Z")
Hi @Printdevil Thanks for the report. So it’s not a RapidWeaver Classic generated file, it’s a Stacks plugin generated file. I don’t believe it’s malicious, it looks like it just sets a php info page for helping to debug/troubleshoot any issues should they arise. I reckon some strict virus/malware scanners see that code and think it’s trying to maliciously enable the php info page, which if left enabled _can_ give malicious actors information about your server environment that might make it easier to hack. You can ask your host to add that file to their safe list, or you can just delete it if they get fussy about it. Hope that helps.