Title: File render_engine.php may contain malicious executable code
Last modified: August 22, 2016

---

# File render_engine.php may contain malicious executable code

 *  Resolved [peopleinside](https://wordpress.org/support/users/peopleinside/)
 * (@peopleinside)
 * [11 years, 6 months ago](https://wordpress.org/support/topic/file-render_enginephp-may-contain-malicious-executable-code/)
 * render_engine.php
 * This file is a PHP executable file and contains the word ‘eval’ (without quotes)
   and the word ‘base64_decode(‘ (without quotes). The eval() function along with
   an encoding function like the one mentioned are commonly used by hackers to hide
   their code.
 * This is the report for a security software i use for protect my wordpress.
 * So i want delete this file because is dangerous for my scan.
    What this file 
   is, if i remove newsletter plug in stop to work?
 * [https://wordpress.org/plugins/wysija-newsletters/](https://wordpress.org/plugins/wysija-newsletters/)

Viewing 3 replies - 1 through 3 (of 3 total)

 *  [Jonathan Labreuille](https://wordpress.org/support/users/jon1op/)
 * (@jon1op)
 * [11 years, 6 months ago](https://wordpress.org/support/topic/file-render_enginephp-may-contain-malicious-executable-code/#post-5398022)
 * Hi peopleinside,
 * I think this is a false positive in your case. The “security software” you are
   using seems to be pretty limited and doesn’t actually try to exploit the file.
   It just looks for commonly used functions.
 * The render engine file is actually a template engine (much like Smarty). the 
   base64 functions are used as variable modifiers and the eval() is there for handling
   conditions.
 * If you remove the file, you might as well remove the whole plugin as it handles
   the visual editors (forms & newsletters) and also their respective rendered version.
 * Let me know if you have any question 🙂
 *  Thread Starter [peopleinside](https://wordpress.org/support/users/peopleinside/)
 * (@peopleinside)
 * [11 years, 6 months ago](https://wordpress.org/support/topic/file-render_enginephp-may-contain-malicious-executable-code/#post-5398023)
 * Ok so no security problem on this file?! Thanks
 *  [Wysija](https://wordpress.org/support/users/wysija/)
 * (@wysija)
 * [11 years, 5 months ago](https://wordpress.org/support/topic/file-render_enginephp-may-contain-malicious-executable-code/#post-5398232)
 * Nope!

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘File render_engine.php may contain malicious executable code’ is closed
to new replies.

 * ![](https://s.w.org/plugins/geopattern-icon/wysija-newsletters_ffddcc.svg)
 * [MailPoet Newsletters (Previous)](https://wordpress.org/plugins/wysija-newsletters/)
 * [Support Threads](https://wordpress.org/support/plugin/wysija-newsletters/)
 * [Active Topics](https://wordpress.org/support/plugin/wysija-newsletters/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wysija-newsletters/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wysija-newsletters/reviews/)

 * 3 replies
 * 3 participants
 * Last reply from: [Wysija](https://wordpress.org/support/users/wysija/)
 * Last activity: [11 years, 5 months ago](https://wordpress.org/support/topic/file-render_enginephp-may-contain-malicious-executable-code/#post-5398232)
 * Status: resolved