On 2009-04-12, Uwe Dippel <[email protected]> wrote: > > chroot is the name, and isolation is the game.
it's not all that unusual for PHP hosts to disable mail(); most of the main CMS have some way to send mail without it, and these usually do allow smtp-auth. so you could install pear-Mail and tell people to use that or some alternative then, after a grace period, remove your /var/www/bin/sh thus breaking php's (popen-based) mail() function, forcing people to actually make the change.

