Re: [SMARTY-DEV] mail() function modification

Hello, On 05/22/2003 09:11 PM, Jimmy Harlindong wrote:

More importantly if we can also add the script location, this will aid greatly in determining who did the spamming :) I also run a Web Hosting company and also interested in this. I will try to have a look and share my findings.

This is a very bad idea. If you want to disclose private details of your clients PHP applications, that is your problem. Hack the mail() function yourself. Now it is completely wrong to assume that everybody will want to disclose private details of their applications in the messages they send to PHP.

Thanks for the input. Why do you think the script location/path is/should be confidential?

Because it exposes private details of your server that may be used to attack it with current or future exploits.

If this is not to be sent out perhaps we can insert an integer ID that serves as a hash of the path, then write this hash + path to a log file so at least we can look it up if needed. What do you think?

Just do not make that the default behaviour. -- Regards, Manuel Lemos Free ready to use OOP components written in PHP http://www.phpclasses.org/