Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:28076
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain caedmon.net from 69.60.120.90 cause and error)
Message-ID: <45D9D7CB.7090707@caedmon.net>
Date: Mon, 19 Feb 2007 12:00:59 -0500
User-Agent: Thunderbird 1.5.0.9 (X11/20070103)
MIME-Version: 1.0
To: Kristoffer Hultenius <kristoffer@hultenius.com>
CC:  internals@lists.php.net
References: <49.62.10467.4A899D54@pb1.pair.com>
In-Reply-To: <49.62.10467.4A899D54@pb1.pair.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Subject: Re: [PHP-DEV] Reference in the mail header
From: sean@caedmon.net (Sean Coates)

Kristoffer Hultenius wrote:
> Hello everybody!
> 
> As a webhost that offer PHP-support for hundreds of customers, I have a 
> concern.
> The mail()-function is too easy to use for sending spam and even worse - 
> there is (sometimes) almost impossible to trace the sender-account.

You can solve this (mostly) in admin-space by setting the sendmail_path,
creatively, in php.ini.

For example, I can send mail with this:
sean@sarcasm:~$ php -d "sendmail_path=/home/sean/bin/mailwrap
uniquehosthere" -r 'mail("sean", "subject", "message body here");'

Here's /home/sean/bin/mailwrap:
(echo "X-host-tag: $1" ; cat -) | /usr/sbin/sendmail -t -i

And here's the resulting mail:
From sean@sarcasm  Mon Feb 19 11:54:22 2007
X-Original-To: sean
X-host-tag: uniquehosthere
To: sean@sarcasm
Subject: subject
Date: Mon, 19 Feb 2007 11:54:22 -0500 (EST)
From: sean@sarcasm (Sean)

message body here


... I'm not shooting down your idea, but there _is_ a way to solve this
right away. (Perhaps I'm missing something obvious, but I don't see an
obvious way to get around this tag in userspace.) The sendmail_path
value could be set with php_admin_value in your VirtualHost config.

S