Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

MailHeaders patch with EA4

Discussion in 'E-mail Discussion' started by KV Karia, Aug 18, 2017.

  1. KV Karia

    KV Karia Member

    Joined:
    Jul 3, 2015
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Rajkot
    cPanel Access Level:
    Root Administrator
    Dear Staff Members, Users,

    Exim Configuration Manager -> Trust X-PHP-Script headers to determine the sender of email sent from processes running as nobody description says that If the MailHeaders patch is installed in EasyApache, cPanel will use the X-PHP-Script to determine the sender of a message for Email Archiving and Limits.

    Now, question is, with cpanel 64.0 (built 36) Easy Apache 4 -> how to check MailHeaders patch installed or not? and if not, how to install it?

    Earlier, in EA3 there is way to do so by WHM > EasyApache (Apache Update) > Step 6 Exhaustive Options List in the PHP section

    In EA4, there is no option like Exhaustive Options List. Please guide.
     
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,803
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    The patch is installed by default as part of the core PHP installation in EasyApache 4. EX:

    Code:
    # /opt/cpanel/ea-php56/root/usr/bin/php -i|grep mail.add_x_header
    mail.add_x_header => On => On
    
    # /opt/cpanel/ea-php70/root/usr/bin/php -i|grep mail.add_x_header
    mail.add_x_header => On => On
    
    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. advanta

    advanta Member

    Joined:
    Jun 19, 2004
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    151
    Hello,

    How to disable this patch?

    When I changed from
    Code:
    mail.add_x_header = On
    to
    Code:
    mail.add_x_header = Off
    at
    Code:
    /opt/cpanel/ea-php56/root/etc/php.ini
    The headers in e-mail were changed from

    Code:
    X-PHP-Script: URL/admin/index.php for IP_ADDRESS
    X-PHP-Originating-Script: 500:mail.php
    to

    Code:
    X-PHP-Script: URL/admin/index.php for IP_ADDRESS
    But how to disable X-PHP-Script?

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. cPWilliamL

    cPWilliamL cP Technical Analyst II
    Staff Member

    Joined:
    May 15, 2017
    Messages:
    257
    Likes Received:
    29
    Trophy Points:
    103
    Location:
    America
    cPanel Access Level:
    Root Administrator
    Did you confirm via 'phpinfo()' file in the same website/directory that 'mail.add_x_header' is in fact disabled?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. advanta

    advanta Member

    Joined:
    Jun 19, 2004
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    151
    Yes,
    mail.add_x_header Off Off
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. cPWilliamL

    cPWilliamL cP Technical Analyst II
    Staff Member

    Joined:
    May 15, 2017
    Messages:
    257
    Likes Received:
    29
    Trophy Points:
    103
    Location:
    America
    cPanel Access Level:
    Root Administrator
    Have you also disabled "Trust X-PHP-Script headers" at WHM > Exim Configuration Manager? Initially, you were asking how to enable this, now you're asking how to disable this.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. advanta

    advanta Member

    Joined:
    Jun 19, 2004
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    151
    This has been changed:
    Code:
    Updating “Trust X-PHP-Script headers to determine the sender of email sent from processes running as nobody” from “On” to “Off”.
    “Trust X-PHP-Script headers to determine the sender of email sent from processes running as nobody” was updated.
    But,
    Code:
    X-PHP-Script: URL/admin/index.php for IP_ADDRESS
    is still added to the headers of e-mail.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,803
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  9. advanta

    advanta Member

    Joined:
    Jun 19, 2004
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    151
    It's not simply.
    Is any simply way? Like checkbox at easyapache etc.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  10. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,803
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    There's no other supported method at this time, but I encourage you to open a feature request if you'd like to see an option to disable this module included in the EA4 interface:

    Submit A Feature Request

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice