Answers.Body: <p>CiviCRM is <em>not</em> warning you about a file named <code>Array.php</code>, the confusing error message is because it's rendering a PHP array to a text string.</p>
  
  <p>I've opened an issue in JIRA about this and submitted a suggested quick fix: </p>
  
  <p><a href="https://issues.civicrm.org/jira/browse/CRM-17909">CRM-17909: File 'Array' presents a security risk and should be deleted.</a></p>
  
  <p>It looks like the fix is as simple as adding <code>[0]</code> as shown <a href="https://github.com/xurizaemon/civicrm-core/commit/50208d1e0d3bea9c0f45ff52bbfe0a31ad81ed2c">in this Github commit</a>.</p>
  
  <p>If you can test the fix from that issue on your site, and confirm that the error message shows a more helpful result when you've done so, that will help us get the fix into the next 4.7.x release.</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-01-31T03:31:36.453Z
Answers.Text: The files reported after the fix in Joomla are `/administrator/components/com_civicrm/packages/dompdf/dompdf.php` and `/administrator/components/com_civicrm/packages/html2text/class.html2text.inc`. Removing them cleared the warnings.
Answers.UserDisplayName: isherwood
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-01-30T20:01:10.657Z
Answers.LastActivityDate: 2016-01-30T20:01:10.657Z
Answers.UserDisplayName: Chris Burgess
Body: <p>After some brief difficulty upgrading from Civi 4.6.x to 4.7.0, we managed to get it done, with one small hiccup.  Post-installation, we got a notification saying:</p>
  
  <pre><code>File 'Array' presents a security risk and should be deleted.
  </code></pre>
  
  <p>I looked in our CiviCRM directory, and found 2 files called "Array.php" I tried temporarily relocating both of those files, but no luck; the error still displayed.  Any leads as to how to resolve this issue would help--it makes me uncomfortable to have the system status as "Critical."</p>
  
  <p>Thanks!</p>
  
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2016-01-30T07:45:08.970Z
Comments.Text: Me too. Upgrade ran through flawlessly, but the System status page shows the error described here.
  
  Joomla 3.4.8, CiviCRM
Comments.UserDisplayName: Jern
Tags: <upgrade><4.7>
Title: What to do about "File 'Array' presents a security risk and should be deleted." on 4.7?
ThreadText: # What to do about "File 'Array' presents a security risk and should be deleted." on 4.7?
  
  (Asked by: username_0 on 2016-01-29)
  
  After some brief difficulty upgrading from Civi 4.6.x to 4.7.0, we managed to get it done, with one small hiccup.  Post-installation, we got a notification saying:
  File 'Array' presents a security risk and should be deleted.
  
  I looked in our CiviCRM directory, and found 2 files called "Array.php" I tried temporarily relocating both of those files, but no luck; the error still displayed.  Any leads as to how to resolve this issue would help--it makes me uncomfortable to have the system status as "Critical."
  Thanks!
  
  **Tags:** upgrade, 4.7
  
  > **Comments:**
  > **username_1**: Me too. Upgrade ran through flawlessly, but the System status page shows the error described here.  Joomla 3.4.8, CiviCRM  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_2 on 2016-01-30. Score: 6 | Accepted answer
  
  CiviCRM is *not* warning you about a file named `Array.php`, the confusing error message is because it's rendering a PHP array to a text string.
  
  I've opened an issue in JIRA about this and submitted a suggested quick fix:
  
  [CRM-17909: File 'Array' presents a security risk and should be deleted.](https://issues.civicrm.org/jira/browse/CRM-17909)
  
  It looks like the fix is as simple as adding `[0]` as shown [in this Github commit](https://github.com/xurizaemon/civicrm-core/commit/50208d1e0d3bea9c0f45ff52bbfe0a31ad81ed2c).
  
  If you can test the fix from that issue on your site, and confirm that the error message shows a more helpful result when you've done so, that will help us get the fix into the next 4.7.x release.
  
  > **Comments:**
  > **username_3**: The files reported after the fix in Joomla are `/administrator/components/com_civicrm/packages/dompdf/dompdf.php` and `/administrator/components/com_civicrm/packages/html2text/class.html2text.inc`. Removing them cleared the warnings.  
  
  ---
  
  