Noticed this morning some reports that clearly ran this morning (August 7) were dated August 5 by a php cron job. We (hopefully) are aware of all code added to the Apache server. We know of no code added to the system that changes the system date, but have added php code that only reads the system date.
Have you seen this happen before?
Is there a way we can determine what changed the system date and how?
What can we do to prevent this from happening in the future?