Re: Possible hacker using php script to send e-mails?

From: Date: Sat, 11 Mar 2006 12:55:19 +0000
Subject: Re: Possible hacker using php script to send e-mails?
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-231786@lists.php.net to get a copy of this message
If possible, i like to see this script to try to know exactly wath's happen. Merlin wrote: > Hi there, > > I am running php 4.x on a suse 9.x machine. There is a php script which > resides on a webapp that is responsible for sending e-mail to myself in > case of errors like db-errors or similar. Called error.php > This script does include phpmailer and uses it to send the e-mails to me. > Now I am receiving on the e-mail specified as TO: e-mails with different > subject than specified and different text?! All english text with wired > sentences, must be a bot or so. How is this possible? The subject line is > fixed and right after that commend send is executed. So no idea how they > do it and how I can prevent it. It looks like this: > $mail->Subject = 'Fehlerbericht'; > $mail->Send(); > How is it possible that they change this subject line? I checked the > server log and each time an e-mail has been sent to me of that kind there > is a logentry in apache log that says that this script has been executed. > So the e-mails definatelly come from that script?! > > Can anybody help? > > Regards, Merlin

« previous php.general (#231786) next »