Re: [PHP] Re: Possible hacker using php script to send e-mails?

2006-03-13 Thread Manuel Lemos
Hello, on 03/13/2006 06:38 AM Merlin said the following: > Hello Manuel, > > this seems to be the right track. However I do not have linebrakes in > there, but the message gets passed by POST. This is my script error.php: Notice these two lines of your script: > $from = $_POST[from]; >

Re: [PHP] Re: Possible hacker using php script to send e-mails?

2006-03-13 Thread Jochem Maas
Merlin wrote: Hello Manuel, this seems to be the right track. However I do not have linebrakes in there, but the message gets passed by POST. This is my script error.php: 'they' are posting stuff to your mailer that includes fullblown mail headers ... you're going to have to strip out the c

Re: [PHP] Re: Possible hacker using php script to send e-mails?

2006-03-13 Thread Merlin
Hello Manuel, this seems to be the right track. However I do not have linebrakes in there, but the message gets passed by POST. This is my script error.php: IsHTML(false); $mail->From = $mailadress_webmaster; $mail->FromName = $email_from_name_2; $mail->AddAddress($mailadress_webmaster); $m

Re: [PHP] Re: Possible hacker using php script to send e-mails?

2006-03-11 Thread Manuel Lemos
Hello, on 03/11/2006 04:12 PM Rasmus Lerdorf said the following: >>> I am running php 4.x on a suse 9.x machine. There is a php script which >>> resides >>> on a webapp that is responsible for sending e-mail to myself in case of >>> errors like db-errors or similar. Called error.php >>> This scrip

Re: [PHP] Re: Possible hacker using php script to send e-mails?

2006-03-11 Thread Rasmus Lerdorf
Manuel Lemos wrote: Hello, on 03/11/2006 09:39 AM Merlin said the following: I am running php 4.x on a suse 9.x machine. There is a php script which resides on a webapp that is responsible for sending e-mail to myself in case of errors like db-errors or similar. Called error.php This script doe

[PHP] Re: Possible hacker using php script to send e-mails?

2006-03-11 Thread Manuel Lemos
Hello, on 03/11/2006 09:39 AM Merlin said the following: > I am running php 4.x on a suse 9.x machine. There is a php script which > resides > on a webapp that is responsible for sending e-mail to myself in case of > errors like db-errors or similar. Called error.php > This script does include php

Re: [PHP] Re: Possible hacker using php script to send e-mails?

2006-03-11 Thread Anthony Ettinger
It's possible that they are including in email headers in the body. On 3/11/06, João Cândido de Souza Neto <[EMAIL PROTECTED]> wrote: > > If possible, i like to see this script to try to know exactly wath's > happen. > > Merlin wrote: > > > Hi there, > > > > I am running php 4.x on a suse 9.x mach

[PHP] Re: Possible hacker using php script to send e-mails?

2006-03-11 Thread João Cândido de Souza Neto
If possible, i like to see this script to try to know exactly wath's happen. Merlin wrote: > Hi there, > > I am running php 4.x on a suse 9.x machine. There is a php script which > resides on a webapp that is responsible for sending e-mail to myself in > case of errors like db-errors or similar.