How to prevent others using [email protected]

[hugo24]

I have a problem that user has been using [email protected] to send out email using PHP script. The email send out also shown our IP address as well.

How do I disable or prevent them from using [email protected] and restrict them to only using their own domain name?

 

[WebmastTroy]

Originally posted by hugo24
I have a problem that user has been using [email protected] to send out email using PHP script. The email send out also shown our IP address as well.

How do I disable or prevent them from using [email protected] and restrict them to only using their own domain name?

In Tweak Settings (in WHM):

Prevent the user 'nobody' from sending out mail to remote addresses (php and cgi scripts generally run as nobody if you are not using phpsuexec and suexec respectively.)

 

[hugo24]

Will this affect forum using PHP script such as Invision Board and PHPBB?

 

[SoftmegUK]

Originally posted by hugo24
Will this affect forum using PHP script such as Invision Board and PHPBB?

Yes...

 

[mpierre]

I you install PHPsuexec, this problem will be fixed.

 

[hugo24]

Is is difficult to install?

How does it work? And any idea where can I get the script?

 

[SoftmegUK]

Its not recommended for production use tho....

 

[hugo24]

Originally posted by SoftmegUK
Its not recommended for production use tho....

What do you mean by that? Care to share?

 

[SoftmegUK]

Its not really recommended you intall it on a server where you have clients as its kind of still experimental, i personally wouldn't recommend you install it unless you really have too.

 

[hugo24]

i.e. it is still not a stable version? Correct me if I am wrong.

 

[howard]

Well phpsuexec can cause some problems in some apache configs, some settings in say .htaccess and file/directory permissions however those can mostly be worked around if you pay careful attention to the apache error log / suexec_log, however generally after the inital problems its pretty much ok, ok you probably have one or two people who need to be explained the differences or why something isn't working the way it would usually however those are mainly eduation issues which can be got around

 

[SoftmegUK]

The only thing is that if you have say 200 clients per server and have 5 servers, thats a hell of a lot of people to try and tell them about the changes and try and help them figure out why there script doesnt work anymore, because in the end they will look to you as your the person who has played around with something not them :p

 

[howard]

well obviously you would have to test the water and plans out well ahead, or say have it only enabled on new servers with very little (say adventours ones maybe?) or no clients