[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

RE: PHP mail spam

Hi Carlos,

Carlos Acedo <mailto:carlos@pangea.org> wrote on Tuesday, May 22, 2007 12:36

> My server is being used by spammers who inject mail headers in php
> scripts to send spam, I have tried mod-security to block those
> injections but still remains. 
> Is there a way to block this php header injections once for all?
> I've been thinking about suPHP, but this will only tell me
> where is the
> 'hole'
> Any solution?

Use suhosin protection, it has email spam protection as it doesn't allow
newlines in headers:

# apt-get install php5-suhosin

Unfortunately the website suhosin.org is down atm - however if up again:



Mit freundlichen Grüßen
Soenke Ruempler

NorthClick GmbH

Gasstr. 10 - 22761 Hamburg
Tel.: 040 8 22 44 999 - Fax: 040 8 22 44 998
Internet: http://www.northclick.de/

Geschäftsführer: F. Detzner | M. Henze | C. Springub
Amtsgericht Hamburg, HRB 94459

Reply to: