apparently they belong in the includes folder, were they also are. could it be of any use for a hacker to have these two folders in the root?

I've been checking my drupal site and noticed in the root folder were two folders, database and filetransfer:

enter image description here

I dont know if this is hacked or belonging to some module or stuff, does anyone know something about this?

  • 1
    Start version tracking your code, like with Git. Then you'll know if anything new was added you haven't tracked before. – leymannx Apr 26 '18 at 8:07
  • we do, of course. but not the drupal core files. still gonna look into the tracked files, thanks – Alex Apr 26 '18 at 8:39
  • Rename these folder, check if your site is still running, if it is still running, delete them. – leymannx Apr 26 '18 at 8:43
  • 3
    Sorry, we can't provide individual hack-checking here - it's not going to be useful to the general population as each person's site could potentially be hacked in any number of different ways. The duplicate has a lot of useful general information in it, but the only way to be sure is to consult with a qualified security professional (preferably one that's very familiar with Drupal) – Clive Apr 26 '18 at 9:08

I don't know if you've been hacked, or just accidentally copied those folders to root, but they shouldn't be in root by default.

| improve this answer | |

Not the answer you're looking for? Browse other questions tagged or ask your own question.