A PHP code template is reusable server-side code written in PHP that can be added to a website to perform a task. For example, it may process requests or redirect visitors to another page. Because PHP runs on the server, its actions may not be visible in the page source a visitor receives.
Templates can simplify legitimate site maintenance, but attackers may also place them on compromised websites to automate redirects or route visitors into scams. Reusing the same code across multiple sites can make an operation easier to scale and harder to spot by checking only one page. Defenders should investigate unexpected PHP files and changes, review server-side behavior and redirect chains, and remove unauthorized code while addressing how the site was compromised.