Can I go without the Cache directory?

Hi all,

The cache directory on a lot of my more popular Evo sites keep getting injected with malicious PHP files (or the existing PHP files within get altered).

Would there be any problems if I just deleted the directory?

MODX needs it to work.

You have an open vector into your site.

Check all your folders for newly created files, check if there are added mgr/web users!
Change passwords for FTP, database and MODX.

This could also help you: https://forums.modx.com/thread/91891/is-it-a-hack?page=2#dis-post-502182

Your site is compromised, and the attacker is likely exploiting a backdoor to exploit your site after it's corrected.

In order to address the problem you need to examine all of the files/folders on the server checking for backdoors. If you haven't already you need to make sure the site is using 1.0.14.

Additionally, as MrHaw noted you need to change all passwords (Control Panel, FTP/SFTP, SSH, Database, and MODX). If you're unfamiliar with checking your site for exploits consider hiring someone to do the cleanup. If it's not done right they will continue to exploit your site, which can lead to other potential problems.

I've cleaned up more sites than I care to admit, and in 99% of the cases simply upgrading MODX in advance would have avoided the problem entirely. On the bright side I've got the process down to an hour