Hello Loupida,

This is most likely generated by your cronjob. How does your cronjob currently look like? It should be something like this,

/usr/bin/wget -O /dev/null "http://site.com/index.php?option=com_easysocial&cron=true"; >/dev/null 2>&1

Hello Mark,

Here is my cronjob : wget -q https://DOMAIN/index.php?option=com_easysocial&cron=true

But i've another cronjob like yours : wget -O /dev/null "http://DOMAIN/index.php?option=com_invitex&tmpl=component&task=mailto&pkey=azer" >/dev/null 2>&1;
And i've also files in server root related to Invitex probably caused by this cronjob.

So, i think these files don't result from some malicious behaviors, right ?

Hello Loupida,

Change your cronjob for EasySocial to the following:

wget -O /dev/null "https://DOMAIN/index.php?option=com_easysocial&cron=true" >/dev/null 2>&1

Hello Mark,

Thanks for the tip, i really appreciate. But, my domain has SSL certificate that my cron can't stand. I must place this : --no-check-certificate, but i don't know where in the cronjob above. And, does it work if i replace https by http in my cronjob ?

Hello Loupida,

Try this,

wget --no-check-certificate -O /dev/null "https://DOMAIN/index.php?option=com_easysocial&cron=true"; >/dev/null 2>&1

Hello Mark,

Mails are sent, but i receive this every 5 minutes :

--2014-08-12 14:20:02-- https://DOMAIN/index.php?option=com_easysocial&cron=true&phrase=XXX
Resolving http://www.DOMAIN.com... 45.156.165.870
Connecting to http://www.DOMAIN.com|45.156.165.870|:443... connected.
WARNING: cannot verify http://www.DOMAIN.com’s certificate, issued by “/C=US/O=GeoTrust,...”:
Unable to locally verify the issuer’s authority.
HTTP request sent, awaiting response... 303 See other
Location: https://www.DOMAIN.com/fr/?option=com_easysocial&cron=true&phrase=XXX [following]
--2014-08-12 14:20:03-- https://www.DOMAIN.com/fr/?option=com_easysocial&cron=true&phrase=XXX
Reusing existing connection to http://www.DOMAIN.com:443.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/x-json]
Saving to: “/dev/null”

0K 42.7M=0s

2014-08-12 14:20:04 (42.7 MB/s) - “/dev/null” saved [403]

Hello Loupida,

Hm, try this instead (Sorry there was some typo earlier)

wget --no-check-certificate -O /dev/null "https://DOMAIN/index.php?option=com_easysocial&cron=true" >/dev/null 2>&1

Hello,

If you talk about semicolon typed twice, i've seen it; i removed the second one before

Hello Loupida,

Hm, you need to remove them both. There shouldn't need to be a ; . Not really sure why Joomla is adding the ; though.

Hello Mark,

It's fine now. Thank you.

You are most welcome