# Mautic code in field\_helper.php identified as malware by MalCare

**URL:** <https://forum.mautic.org/t/mautic-code-in-field-helper-php-identified-as-malware-by-malcare/19371>\
**Category:** Product Support\
**Created:** [May 6, 2021, 8:34pm UTC](https://forum.mautic.org/t/mautic-code-in-field-helper-php-identified-as-malware-by-malcare/19371 "2021-05-06T20:34:17Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![alexrm1x](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/alexrm1x/32/2500_2.png) [@alexrm1x](https://forum.mautic.org/u/alexrm1x)\
**Post date:** [May 6, 2021, 8:34pm UTC](https://forum.mautic.org/t/mautic-code-in-field-helper-php-identified-as-malware-by-malcare/19371/1 "2021-05-06T20:34:17Z")

</div>

**Your software**  
My Mautic version is: 3.3.3  
My PHP version is: 7.4  
My Database type and version is: 5.7

**Your problem**  
My problem is:  
On some of my servers I have Mautic installed co-living with Wordpress (sharing the same https apache instance under www-data/mautic directory.

Running MalCare protection software, the system shows alarms about this file:  
./mautic/app/bundles/FormBundle/Views/Field/field\_helper.php

and marks it as malware.

Steps I have tried to fix the problem:  
Scanned other servers sharing Wordpress and Mautic, and the file is also detected as malware by MalCare.

Is this a false positive?

Thanks,

---

<div class="post-metadata">

**Author:** ![alexrm1x](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/alexrm1x/32/2500_2.png) [@alexrm1x](https://forum.mautic.org/u/alexrm1x)\
**Post date:** [July 20, 2021, 12:06pm UTC](https://forum.mautic.org/t/mautic-code-in-field-helper-php-identified-as-malware-by-malcare/19371/2 "2021-07-20T12:06:50Z")

</div>

Hello all,  
I tested again with the new Malcare version and the file field\_helper.php is still being detected as malware.  
Thanks,  
Alejandro.-

---

<div class="post-metadata">

**Author:** ![joeyk](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/joeyk/32/11164_2.png) [@joeyk](https://forum.mautic.org/u/joeyk)\
**Post date:** [July 21, 2021, 7:02am UTC](https://forum.mautic.org/t/mautic-code-in-field-helper-php-identified-as-malware-by-malcare/19371/3 "2021-07-21T07:02:59Z")

</div>

> [@alexrm1x](#):
>
> Malcare version

It is the same with Wordfence.  
It is a false positive, since it’s a tracking and monitoring tool,  
You need to whitelist it if you can.