security issue with mail()
| From: | Christian Dechery | Date: | Mon, 04 Dec 2000 18:40:10 +0000 |
| Subject: | security issue with mail() | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-28609@lists.php.net to get a copy of this message | ||
I tried to create a formmail in PHP (as my first proggie) and the server
returned a warning like that:
"mail() has been disabled for security reasons"
so I contacted my webhost and they said mail() has been disabled because
it has a security flaw.
It allows the PHP script to access any file on the server including other
virtual hosts.
Is that true??
. [ Christian Dechery ]
. Webdeveloper @ Tá Na Mesa!
. Listmaster @ Gaita-L
. http://www.tanamesa.com.br