note 110837 added to function.mail

mail() is a real nightmare from the view point of security. I am using apparmor and I noticed that php-cgi wants to run the shell itself. Too bad, as I have a custom wrapper to replace sendmail for PHP, but php wants to run it with the shell. Enabling the shell itself in the apparmor profile is not so nice, I am not sure if I can understand while php needs the shell and why can't directly execute the given binary :( ---- Server IP: 69.147.83.199 Probable Submitter: 72.52.91.2 (proxied: 213.163.0.181) ---- Manual Page -- http://php.net/manual/en/function.mail.php Edit -- https://master.php.net/note/edit/110837 Del: integrated -- https://master.php.net/note/delete/110837/integrated Del: useless -- https://master.php.net/note/delete/110837/useless Del: bad code -- https://master.php.net/note/delete/110837/bad+code Del: spam -- https://master.php.net/note/delete/110837/spam Del: non-english -- https://master.php.net/note/delete/110837/non-english Del: in docs -- https://master.php.net/note/delete/110837/in+docs Del: other reasons-- https://master.php.net/note/delete/110837 Reject -- https://master.php.net/note/reject/110837 Search -- https://master.php.net/manage/user-notes.php