RE: PHP mail spam
Hi Carlos,
Carlos Acedo <mailto:carlos@pangea.org> wrote on Tuesday, May 22, 2007 12:36
PM:
> My server is being used by spammers who inject mail headers in php
> scripts to send spam, I have tried mod-security to block those
> injections but still remains.
>
> Is there a way to block this php header injections once for all?
> I've been thinking about suPHP, but this will only tell me
> where is the
> 'hole'
>
> Any solution?
Use suhosin protection, it has email spam protection as it doesn't allow
newlines in headers:
# apt-get install php5-suhosin
Unfortunately the website suhosin.org is down atm - however if up again:
http://www.hardened-php.net/suhosin/index.html
--
Mit freundlichen Grüßen
Soenke Ruempler
Development
NorthClick GmbH
Gasstr. 10 - 22761 Hamburg
Tel.: 040 8 22 44 999 - Fax: 040 8 22 44 998
Internet: http://www.northclick.de/
Geschäftsführer: F. Detzner | M. Henze | C. Springub
Amtsgericht Hamburg, HRB 94459
Reply to: