Re: security issue with mail()
| From: | Teodor Cimpoesu | Date: | Thu, 07 Dec 2000 10:43:15 +0000 |
| Subject: | Re: security issue with mail() | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-29087@lists.php.net to get a copy of this message | ||
Hi Alex!
On Wed, 06 Dec 2000, Alex Black wrote:
> We run so it only accept connections from localhost, and send the mails
> through the port, we don't call the app correctly.
>
> my system/security guru tells me it's because spawning sendmail like that is
> dangerous (it sets uid as root)
then a switch to qmail would be welcome ;)
-- teodor