Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:57533
Return-Path: <mike503@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 75427 invoked from network); 27 Jan 2012 10:07:06 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 27 Jan 2012 10:07:06 -0000
Authentication-Results: pb1.pair.com header.from=mike503@gmail.com; sender-id=pass
Authentication-Results: pb1.pair.com smtp.mail=mike503@gmail.com; spf=pass; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.210.170 as permitted sender)
X-PHP-List-Original-Sender: mike503@gmail.com
X-Host-Fingerprint: 209.85.210.170 mail-iy0-f170.google.com  
Received: from [209.85.210.170] ([209.85.210.170:58830] helo=mail-iy0-f170.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 33/E2-33641-A47722F4 for <internals@lists.php.net>; Fri, 27 Jan 2012 05:07:06 -0500
Received: by iaoo28 with SMTP id o28so2194343iao.29
        for <internals@lists.php.net>; Fri, 27 Jan 2012 02:07:04 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=references:in-reply-to:mime-version:content-transfer-encoding
         :content-type:message-id:cc:x-mailer:from:subject:date:to;
        bh=SvdZkjwFnmMS610Jwu1XRJcG17sNXVYSHh/wH3ivbRQ=;
        b=uiDZBq8Ms4phgOuKMwAcWl9onQSLDcj5VMVe/0ebZYX3Fz7JpAUSRiwtrYLOe/nrHA
         +2Y3nW8sIk4R+4ZrQOQjo+bmDp/p7oPSd8DooyVha9v//55da8IEw0QWgSAL/CWsF1xu
         fZG3OOLrGF6TaIxNHu+fph7pNJO4J47hzdgvE=
Received: by 10.50.15.230 with SMTP id a6mr6370840igd.24.1327658824024;
        Fri, 27 Jan 2012 02:07:04 -0800 (PST)
Received: from [10.7.240.197] (mobile-198-228-222-024.mycingular.net. [198.228.222.24])
        by mx.google.com with ESMTPS id l28sm7292986ibc.3.2012.01.27.02.07.01
        (version=TLSv1/SSLv3 cipher=OTHER);
        Fri, 27 Jan 2012 02:07:02 -0800 (PST)
References: <4F227072.10004@divbyzero.net>
In-Reply-To: <4F227072.10004@divbyzero.net>
Mime-Version: 1.0 (1.0)
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii
Message-ID: <7B2F2E0C-0B61-41FE-B927-90DC6C8419EE@gmail.com>
Cc: "internals@lists.php.net" <internals@lists.php.net>
X-Mailer: iPhone Mail (9A405)
Date: Fri, 27 Jan 2012 02:06:55 -0800
To: Martin Jansen <martin@divbyzero.net>
Subject: Re: [PHP-DEV] mail.add_x_header set to on in php.ini-production
From: mike503@gmail.com (Michael Shadle)

Personally I would want to have an audit log of emails on production. That a=
ctually is probably more important to me than non-production environments :)=



On Jan 27, 2012, at 1:37 AM, Martin Jansen <martin@divbyzero.net> wrote:

> Is there any intention behind enabling the mail.add_x_header
> configuration directive in php.ini-production?
>=20
> http://lxr.php.net/opengrok/xref/PHP_TRUNK/php.ini-production#1018
>=20
> This setting exposes (sort of) sensitive information about application
> deployments to third parties while IMO having no apparent advantage for
> production environments. The trivial patch to revert this behavior is
> attached in case you agree with me.
>=20
> - Martin
> <php.ini-production.patch>
> --=20
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: http://www.php.net/unsub.php