Hi,
Previously users had to use SMTP Authentication in their code.
i.e. following fields
from:
host:
username:
password:
----------------------------------
I think after update 11.28
SMTP authentication is enabled and I've checked that I cannot send email via any email client without using SMTP authentication. I've also checked it via telnet and it confirms it.
But, if following code is used in a PHP file to send email it sends it. Even if the from: address / domain does not exist on the server.
--PHP Code:
<?
$to = "xxxxxxx@gmail.com";
$from = 'anyone@fakedomain.com';
$subject = "Mail Subject";
$message = 'This is a test message';
$headers = "MIME-Version: 1.0\r\n";
$headers .= "Content-type: text/html; charset=windows-1253, UTF-8\r\n";
$headers .= 'From: '.$from;
if (mail($to, $subject, $message, $headers))
{
echo "Email Sent : ". $to;
}
else
{
echo "Error Sending Email : ". $to;
}
?>
I also check the eximmainlog and it appears that the from: address being used to send these emails is the main user account.
I want to revert it back, as it was earlier that no one can send email without using SMTP authentication in the code.
Your help is highly appreciated.
--
Waqar



LinkBack URL
About LinkBacks
Reply With Quote




