Re: [PHP-DEV] [patch] abuse-proof zif_mail()

2004-06-01 Thread Paul G
sara, - Original Message - From: "Sara Golemon" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 01, 2004 1:06 PM Subject: Re: [PHP-DEV] [patch] abuse-proof zif_mail() --- snip --- > The whole matter is moot because no matter how aggressively y

Re: [PHP-DEV] [patch] abuse-proof zif_mail()

2004-06-01 Thread Sara Golemon
> when it comes to mail(), it is a whole different story. if i disabled mail() > on just one box today, a *lot* of people would complain and with good > reason - the collateral inflicted by something that drastic (ie disabling a > very popular function to protect against a relative edge case) is wa

Re: [PHP-DEV] [patch] abuse-proof zif_mail()

2004-05-30 Thread Paul G
ilia, - Original Message - From: "Ilia Alshanetsky" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; "Paul G" <[EMAIL PROTECTED]> Sent: Sunday, May 30, 2004 2:07 PM Subject: Re: [PHP-DEV] [patch] abuse-proof zif_mail() > First of all if you

Re: [PHP-DEV] [patch] abuse-proof zif_mail()

2004-05-30 Thread Ilia Alshanetsky
First of all if you have people abusing the mail function one solution is to disable it via the disable_functions directive inside your php.ini file. If you must append headers then you could easily specify a path to a sendmail using a configuration that would append any header that you like to

Re: [PHP-DEV] [patch] abuse-proof zif_mail()

2004-05-30 Thread Paul G
- Original Message - From: "Ilia Alshanetsky" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, May 30, 2004 1:33 PM Subject: Re: [PHP-DEV] [patch] abuse-proof zif_mail() > Strong -1. > > Ilia ilia, out of curiosity, what are the arg

Re: [PHP-DEV] [patch] abuse-proof zif_mail()

2004-05-30 Thread Ilia Alshanetsky
Strong -1. Ilia -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] [patch] abuse-proof zif_mail()

2004-05-30 Thread Jeremy Johnstone
I have no say or pull around here, but I am +1 on the idea, but unsure on the implementation from below. -Jeremy On Sunday 30 May 2004 08:49 am, Paul G wrote: > folks, > > first post/patch, please be gentle . > > hosting companies using mod_php have a *very* hard time preventing and > tracking

[PHP-DEV] [patch] abuse-proof zif_mail()

2004-05-30 Thread Paul G
folks, first post/patch, please be gentle . hosting companies using mod_php have a *very* hard time preventing and tracking abuse of mail(). when sendmail is invoked from a suexeced cgi script, we get the username. with mod_php mail(), we get a big fat nothing, a ton of spam in the spool and a bu