Hi, mail function is one of the worst things php did. Not many language support such a feature. SMTP should be the way, but its a bit hard to code considering the single line mail function.
Possibility of disabling mail for only one website depends on how you are running php. If its with separate CGI processes, its easy, otherwise I am not sure about custom php.ini config for websites. cPanel can do it, so it should be possible. On Saturday 20 February 2016 12:11 PM, JeevZ wrote: > Hello All, > > thanks you for suggestions and help. > > So, the first step is to disable php mail and use SMTP for all > mails. Once mail is disabled, all requests to mail function can be > logged as an error. > > > @Manu, > > Is it possible to disable php mail function to particular account. All > of our projects are in our VPS but there is one particular website is > actually having this spamming problem. > > My doubt is if I disable this php mail function, would not it disable > mail functions in all other website projects resides in VPS ? > Is there any option to disable php mail function to a particular > website only in a VPS ? > > > > > To find the spam mail source from you application. first check the > email content from the mail queue. > postcat -q queue ID. > > > @Kevin > > thanks for the suggestions. We have inspected for the spamming php > files and we have cleared it many times. But the issue is each time we > clear an infected php file, after one week or so, another new spamming > php is being generated. > > Is there any way to fix this ? > > pls help, the issue is sever and gmail already blacklisted our IP :( > > ** > Jai Bhim > -- JeevZ -- > > *Jeevachaithanyan Sivanandan > +919446196667 > http://jeevanism.wordpress.com/ > -- I Take Refuge On The Enlightened Wisdom -- > -- ബുദ്ധം,ധർമം, സംഘം ശരണം ഗച്ഛാമി -- > * > > > > > > > > On Thu, Feb 18, 2016 at 3:01 PM, kevin sha <[email protected] > <mailto:[email protected]>> wrote: > > Hi, > > To find the spam mail source from you application. first check the > email content from the mail queue. > postcat -q queue ID. > > check the origin section, then you can see the location of php file. > > or > > it is better to scan the application using malware scanning tool > like maldect. maldect is a good tool. > > > https://www.rfxn.com/projects/linux-malware-detect/ > > http://www.woktron.com/secure/knowledgebase/145/Installation-Linux-Malware-Detect-Maldet-On-CentOS.html > > http://www.2daygeek.com/install-linux-malware-detect-lmd-on-ubuntu-centos-debian-fedora-mint-rhel-opensuse/# > > > Thank you > > > On Wed, Feb 17, 2016 at 10:24 AM, JeevZ <[email protected] > <mailto:[email protected]>> wrote: > > Hello, > > This is an offtopic, a help seeking message. > > We have done a project on OpenCart which is residing in our > VPS. Somehowm one malicious script is creating Spam Emails. We > have found out that php file and cleared it. But this repeats > again and dynamically such spam sending scripts are being > generated. This makes entire vps server fail and other serious > problems. > > We have inspected for base64 encryption and other normal > method find such malicious code but none to find. We have > changed passwords several times but still the issue persists. > > > Is there any one here who has some experience on this ? the > problem is we cannot locate which files creates spam sending > scripts dynamically. > > > please help > > > thank you > > > ** > Jai Bhim > -- JeevZ -- > > *Jeevachaithanyan Sivanandan > +919446196667 <tel:%2B919446196667> > http://jeevanism.wordpress.com/ > -- I Take Refuge On The Enlightened Wisdom -- > -- ബുദ്ധം,ധർമം, സംഘം ശരണം ഗച്ഛാമി -- > * > > > > > > > > This email has been sent from a virus-free computer protected > by Avast. > www.avast.com <https://www.avast.com/sig-email> > > -- > -- > "Freedom is the only law". > "Freedom Unplugged" > http://www.ilug-tvm.org > > You received this message because you are subscribed to the Google > Groups "ilug-tvm" group. > To control your subscription visit > http://groups.google.co.in/group/ilug-tvm/subscribe > To post to this group, send email to [email protected] > <mailto:[email protected]> > To unsubscribe from this group, send email to > [email protected] > <mailto:[email protected]> > > > > For details visit the google group page: > http://groups.google.com/group/ilug-tvm?hl=en > > --- > You received this message because you are subscribed to the > Google Groups "Free Software Users Group, Thiruvananthapuram" > group. > To unsubscribe from this group and stop receiving emails from > it, send an email to [email protected] > <mailto:[email protected]>. > For more options, visit https://groups.google.com/d/optout. > > > -- > -- > "Freedom is the only law". > "Freedom Unplugged" > http://www.ilug-tvm.org > > You received this message because you are subscribed to the Google > Groups "ilug-tvm" group. > To control your subscription visit > http://groups.google.co.in/group/ilug-tvm/subscribe > To post to this group, send email to [email protected] > <mailto:[email protected]> > To unsubscribe from this group, send email to > [email protected] > <mailto:[email protected]> > > > > For details visit the google group page: > http://groups.google.com/group/ilug-tvm?hl=en > > --- > You received this message because you are subscribed to the Google > Groups "Free Software Users Group, Thiruvananthapuram" group. > To unsubscribe from this group and stop receiving emails from it, > send an email to [email protected] > <mailto:[email protected]>. > For more options, visit https://groups.google.com/d/optout. > > > -- > -- > "Freedom is the only law". > "Freedom Unplugged" > http://www.ilug-tvm.org > > You received this message because you are subscribed to the Google > Groups "ilug-tvm" group. > To control your subscription visit > http://groups.google.co.in/group/ilug-tvm/subscribe > To post to this group, send email to [email protected] > To unsubscribe from this group, send email to > [email protected] > > > > For details visit the google group page: > http://groups.google.com/group/ilug-tvm?hl=en > > --- > You received this message because you are subscribed to the Google > Groups "Free Software Users Group, Thiruvananthapuram" group. > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected] > <mailto:[email protected]>. > For more options, visit https://groups.google.com/d/optout. -- Regards, Manu Krishnan T V Co-Founder | DayScholars Innovations <http://www.dayscholars.com> SysAdmin | Cool-Works Web Solutions <http://www.coolwrks.com> Blogs at Bizzard.info <http://www.bizzard.info> & can be found in social networks as *@tvmanukrishnan <http://www.twitter.com/tvmanukrishnan>* -- -- "Freedom is the only law". "Freedom Unplugged" http://www.ilug-tvm.org You received this message because you are subscribed to the Google Groups "ilug-tvm" group. To control your subscription visit http://groups.google.co.in/group/ilug-tvm/subscribe To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For details visit the google group page: http://groups.google.com/group/ilug-tvm?hl=en --- You received this message because you are subscribed to the Google Groups "Free Software Users Group, Thiruvananthapuram" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
