Hotfix : Spamming through server using PHP application
Article ID: 2755
Last Review: Oct,6 2008
Author:
Last updated by:
system
APPLIES TO:
Parallels Pro Control Panel Linux
Additional information
View Knowledge
Knowledge ID 2086
Product : Ensim Pro for Linux
Version : 4.0.0
Topic : Hotfix
Title Hotfix : Spamming through server using PHP application
Summary Addresses the issue "Spamming is possible using address such as apache@localhost or apache@boxname.com using a perl or php script. The hotfix prevents relay of such emails".
Prevention
Details
Product:Ensim Pro for Linux
Version: 4.0.0 – 4.0.2 (Fedora Core 1,Fedora Core 2 & Red Hat Enterprise Linux 3ES) Date: September 06,2005
Patch Description: Addresses the issue: Spamming through server using PHP application Overview : Spamming is done through apache@localhost or apache@boxname.com. It is found that the spamming is done through some .pl or .php files.
Installation Procedure: Add the following to the virtualhost directives for each domain:
php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f user@domain.com"
edit the file /etc/httpd/conf/virtual/siteN and add the above after each occurence of"php_flag engine on".Specify the appropriate values for user and domain.
Restart httpd