Monitor which php files are executed during a certain period of time

Dream weaving website articles and pictures are always deleted, I suspect there is a malicious php, what tools can monitor which php files are executed in a certain period of time?

Php
Mar.17,2021

phptrace

phptrace -p all > my.log
MySQL Query : SELECT * FROM `codeshelper`.`v9_news` WHERE status=99 AND catid='6' ORDER BY rand() LIMIT 5
MySQL Error : Disk full (/tmp/#sql-temptable-64f5-1b32b9e-2be4e.MAI); waiting for someone to free some space... (errno: 28 "No space left on device")
MySQL Errno : 1021
Message : Disk full (/tmp/#sql-temptable-64f5-1b32b9e-2be4e.MAI); waiting for someone to free some space... (errno: 28 "No space left on device")
Need Help?