Re: [SMARTY-DEV] mail() function modification
| From: | Patrick Gibson | Date: | Fri, 23 May 2003 00:07:29 +0000 |
| Subject: | Re: [SMARTY-DEV] mail() function modification | ||
| References: | 1 | Groups: | php.smarty.dev |
| Request: | Send a blank email to php-smarty-dev+get-1500@lists.php.net to get a copy of this message | ||
On 5/22/03 16:58, Manuel Lemos wrote:
> On 05/22/2003 07:30 PM, Jimmy Harlindong wrote:
>> More importantly if we can also add the script location, this will aid
>> greatly in determining who did the spamming :)
>> I also run a Web Hosting company and also interested in this.
>>
>> I will try to have a look and share my findings.
>
> This is a very bad idea. If you want to disclose private details of your
> clients PHP applications, that is your problem. Hack the mail() function
> yourself. Now it is completely wrong to assume that everybody will want
> to disclose private details of their applications in the messages they
> send to PHP.
Perhaps it would be better to log the script location into the Apache error
log or something like that, or encode the script location into something
that only the administrator would be able to decode, thus protecting any
private details.
But regardless, the original question is how to get access to the $_SERVER
array in the mail.c. I don't think anyone was suggesting that these changes
be committed back into the main PHP tree -- more for just a local
customization. I personally would like to add in the originating
$_SERVER['SERVER_NAME'] into the message headers (e.g.
X-Originating-Website), but I'm unsure of how this is done.