Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:26944 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 91195 invoked by uid 1010); 13 Dec 2006 22:59:42 -0000 Delivered-To: ezmlm-scan-internals@lists.php.net Delivered-To: ezmlm-internals@lists.php.net Received: (qmail 91179 invoked from network); 13 Dec 2006 22:59:42 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 13 Dec 2006 22:59:42 -0000 Authentication-Results: pb1.pair.com smtp.mail=iliaal@gmail.com; spf=pass; sender-id=pass Authentication-Results: pb1.pair.com header.from=iliaal@gmail.com; sender-id=pass; domainkeys=good Received-SPF: pass (pb1.pair.com: domain gmail.com designates 64.233.162.226 as permitted sender) DomainKey-Status: good X-DomainKeys: Ecelerity dk_validate implementing draft-delany-domainkeys-base-01 X-PHP-List-Original-Sender: iliaal@gmail.com X-Host-Fingerprint: 64.233.162.226 nz-out-0506.google.com Linux 2.4/2.6 Received: from [64.233.162.226] ([64.233.162.226:44741] helo=nz-out-0506.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 28/AA-19506-89580854 for ; Wed, 13 Dec 2006 17:59:07 -0500 Received: by nz-out-0506.google.com with SMTP id k1so198269nzf for ; Wed, 13 Dec 2006 14:58:30 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:in-reply-to:references:mime-version:content-type:message-id:cc:content-transfer-encoding:from:subject:date:to:x-mailer:sender; b=kUSGxzdTpGoEhdPzkegQWOosyMQ8CJU1wooX93PRtu/ku3SwJpUTmR0EaiSjVf21381A656absZr6B9fjJYymnJaf1aQYUrWIc9ZB8hHeJ/CExDD1nNdPNmg/O7RzsxKetFMDr9QnfrtPivC+Fr2pOJmb6zSGk/f5XgOElBrUxk= Received: by 10.65.185.13 with SMTP id m13mr229075qbp.1166050710503; Wed, 13 Dec 2006 14:58:30 -0800 (PST) Received: from ?192.168.1.6? ( [74.108.69.82]) by mx.google.com with ESMTP id f16sm1574439qba.2006.12.13.14.58.29; Wed, 13 Dec 2006 14:58:30 -0800 (PST) In-Reply-To: <45808461.9070505@gmail.com> References: <10536315-883E-4C1A-AF35-386DF4D73F84@prohost.org> <45807AC8.8020907@gmail.com> <515375DA-C752-4F5D-A244-3394C56846DA@prohost.org> <45808461.9070505@gmail.com> Mime-Version: 1.0 (Apple Message framework v752.3) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-ID: <98F4FCCE-94A0-448D-AA27-EABF7E82A7DB@prohost.org> Cc: PHP internals Content-Transfer-Encoding: 7bit Date: Wed, 13 Dec 2006 17:58:21 -0500 To: Stut X-Mailer: Apple Mail (2.752.3) Sender: Ilia Alshanetsky Subject: Re: [PHP-DEV] mail() logging for PHP From: ilia@prohost.org (Ilia Alshanetsky) On 13-Dec-06, at 5:53 PM, Stut wrote: > I'm thinking about this from an ISP point of view... we get a lot > of abuse reports because people have poorly written form handlers. > It would be great if we could have PHP insert the full URL, domain > name included, in the mail headers for anything it sends. Would > that be possible? That is way too much information to include into an e-mail header, this would in fact be information disclosure vulnerability in many eyes. The log file that you can enable provides you with the full path to the script that called mail, which is more then enough to identify the offending script and/or application. Ilia Alshanetsky