Re: mail() logging for PHP
| From: | Ilia Alshanetsky | Date: | Wed, 13 Dec 2006 22:58:21 +0000 |
| Subject: | Re: mail() logging for PHP | ||
| References: | 1 2 3 4 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-26944@lists.php.net to get a copy of this message | ||
On 13-Dec-06, at 5:53 PM, Stut wrote:
I'm thinking about this from an ISP point of view... we get a lot of abuse reports because people have poorly written form handlers. It would be great if we could have PHP insert the full URL, domain name included, in the mail headers for anything it sends. Would that be possible?That is way too much information to include into an e-mail header, this would in fact be information disclosure vulnerability in many eyes. The log file that you can enable provides you with the full path to the script that called mail, which is more then enough to identify the offending script and/or application. Ilia Alshanetsky