I've just been working on a server that uses mod_php that had a vulnerable PHP script in an account that was being used to send spam, and had an idea...

The X-PHP-Script header can be enabled via EasyApache, so I wondered if it would perhaps be possible for the number of mails per account originating via PHP scripts to be tracked and counted towards the "Maximum Emails Per Hour" setting in Tweak Settings in WHM? Or perhaps a new one, targetting this specifically (maximum number of PHP emails per hour, etc).

Just a thought - might prevent some spam breakouts

Craig