Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

MailHeaders patch with EA4

Discussion in 'E-mail Discussions' started by KV Karia, Aug 18, 2017.

  1. KV Karia

    KV Karia Member

    Joined:
    Jul 3, 2015
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Rajkot
    cPanel Access Level:
    Root Administrator
    Dear Staff Members, Users,

    Exim Configuration Manager -> Trust X-PHP-Script headers to determine the sender of email sent from processes running as nobody description says that If the MailHeaders patch is installed in EasyApache, cPanel will use the X-PHP-Script to determine the sender of a message for Email Archiving and Limits.

    Now, question is, with cpanel 64.0 (built 36) Easy Apache 4 -> how to check MailHeaders patch installed or not? and if not, how to install it?

    Earlier, in EA3 there is way to do so by WHM > EasyApache (Apache Update) > Step 6 Exhaustive Options List in the PHP section

    In EA4, there is no option like Exhaustive Options List. Please guide.
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,734
    Likes Received:
    1,706
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    The patch is installed by default as part of the core PHP installation in EasyApache 4. EX:

    Code:
    # /opt/cpanel/ea-php56/root/usr/bin/php -i|grep mail.add_x_header
    mail.add_x_header => On => On
    
    # /opt/cpanel/ea-php70/root/usr/bin/php -i|grep mail.add_x_header
    mail.add_x_header => On => On
    
    Thank you.
     
  3. advanta

    advanta Member

    Joined:
    Jun 19, 2004
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    151
    Hello,

    How to disable this patch?

    When I changed from
    Code:
    mail.add_x_header = On
    to
    Code:
    mail.add_x_header = Off
    at
    Code:
    /opt/cpanel/ea-php56/root/etc/php.ini
    The headers in e-mail were changed from

    Code:
    X-PHP-Script: URL/admin/index.php for IP_ADDRESS
    X-PHP-Originating-Script: 500:mail.php
    to

    Code:
    X-PHP-Script: URL/admin/index.php for IP_ADDRESS
    But how to disable X-PHP-Script?

    Thank you.
     
  4. cPWilliamL

    cPWilliamL cP Technical Analyst II
    Staff Member

    Joined:
    May 15, 2017
    Messages:
    257
    Likes Received:
    29
    Trophy Points:
    103
    Location:
    America
    cPanel Access Level:
    Root Administrator
    Did you confirm via 'phpinfo()' file in the same website/directory that 'mail.add_x_header' is in fact disabled?
     
  5. advanta

    advanta Member

    Joined:
    Jun 19, 2004
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    151
    Yes,
    mail.add_x_header Off Off
     
  6. cPWilliamL

    cPWilliamL cP Technical Analyst II
    Staff Member

    Joined:
    May 15, 2017
    Messages:
    257
    Likes Received:
    29
    Trophy Points:
    103
    Location:
    America
    cPanel Access Level:
    Root Administrator
    Have you also disabled "Trust X-PHP-Script headers" at WHM > Exim Configuration Manager? Initially, you were asking how to enable this, now you're asking how to disable this.
     
  7. advanta

    advanta Member

    Joined:
    Jun 19, 2004
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    151
    This has been changed:
    Code:
    Updating “Trust X-PHP-Script headers to determine the sender of email sent from processes running as nobody” from “On” to “Off”.
    “Trust X-PHP-Script headers to determine the sender of email sent from processes running as nobody” was updated.
    But,
    Code:
    X-PHP-Script: URL/admin/index.php for IP_ADDRESS
    is still added to the headers of e-mail.
     
  8. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,734
    Likes Received:
    1,706
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
  9. advanta

    advanta Member

    Joined:
    Jun 19, 2004
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    151
    It's not simply.
    Is any simply way? Like checkbox at easyapache etc.
     
  10. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,734
    Likes Received:
    1,706
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    There's no other supported method at this time, but I encourage you to open a feature request if you'd like to see an option to disable this module included in the EA4 interface:

    Submit A Feature Request

    Thank you.
     
Loading...

Share This Page