Re: [PHP-DEV] mail() logging for PHP

2007-05-05 Thread Ilia Alshanetsky
It did not make it into 5.2.2, it will be in 5.3 most likely. On 5-May-07, at 12:39 AM, Mathieu Gagné wrote: Hi, Ilia Alshanetsky wrote: I am going to finalize the patch and add it to 5.2.2 in the coming weeks. Ilia There is no trace of such patch in PHP 5.2.2 changelog. Any news on it?

Re: [PHP-DEV] mail() logging for PHP

2007-05-04 Thread Mathieu Gagné
Hi, Ilia Alshanetsky wrote: I am going to finalize the patch and add it to 5.2.2 in the coming weeks. Ilia There is no trace of such patch in PHP 5.2.2 changelog. Any news on it? Thanks. Mathieu -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit:

Re: [PHP-DEV] mail() logging for PHP

2007-02-09 Thread Derick Rethans
On Thu, 8 Feb 2007, Mathieu Gagné wrote: Hi, Thanks for the update! Much appreciated. Is there any chances to get this patch for PHP 4.x too? Depends a bit on how much of a change it is. If it touches almost no exsisting code we might want to consider it. Derick -- Derick Rethans

Re: [PHP-DEV] mail() logging for PHP

2007-02-08 Thread Mathieu Gagné
Hi, Any news about it? This would be very interesting having this feature. As Richard Lynch said, ISPs would love it. Mathieu On 2006-12-14 15:50, Ilia Alshanetsky wrote: The full path is only for the log files, the header only contains the script name. As far as requests to include the

Re: [PHP-DEV] mail() logging for PHP

2007-02-08 Thread Mathieu Gagné
Hi, Any news about it? This would be very interesting having this feature. As Richard Lynch said, ISPs would love it. Mathieu On 2006-12-14 15:50, Ilia Alshanetsky wrote: The full path is only for the log files, the header only contains the script name. As far as requests to include the

Re: [PHP-DEV] mail() logging for PHP

2007-02-08 Thread Ilia Alshanetsky
I am going to finalize the patch and add it to 5.2.2 in the coming weeks. Ilia On 8-Feb-07, at 10:44 AM, Mathieu Gagné wrote: Hi, Any news about it? This would be very interesting having this feature. As Richard Lynch said, ISPs would love it. Mathieu On 2006-12-14 15:50, Ilia

Re: [PHP-DEV] mail() logging for PHP

2007-02-08 Thread Mathieu Gagné
Hi, Thanks for the update! Much appreciated. Is there any chances to get this patch for PHP 4.x too? Mathieu On 2007-02-08 10:50, Ilia Alshanetsky wrote: I am going to finalize the patch and add it to 5.2.2 in the coming weeks. Ilia On 8-Feb-07, at 10:44 AM, Mathieu Gagné wrote: Hi, Any

Re: [PHP-DEV] mail() logging for PHP

2007-02-08 Thread Francois Saint-Jacques
This is the tip of the iceberg. We're facing the problem with spam and php inclusion on a mass-hosting server. Not only I want to know how many times mail() was called but other dangerous function too! (exec,system,mail,etc...) What would be nice is a variable similar to disable_functions,

Re: [PHP-DEV] mail() logging for PHP

2006-12-14 Thread Markus Fischer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ilia Alshanetsky wrote: I'm thinking about this from an ISP point of view... we get a lot of abuse reports because people have poorly written form handlers. It would be great if we could have PHP insert the full URL, domain name included, in the

Re: [PHP-DEV] mail() logging for PHP

2006-12-14 Thread Stut
Markus Fischer wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ilia Alshanetsky wrote: I'm thinking about this from an ISP point of view... we get a lot of abuse reports because people have poorly written form handlers. It would be great if we could have PHP insert the full URL, domain

Re: [PHP-DEV] mail() logging for PHP

2006-12-14 Thread Sander Steffann
Hi Ilia, Is there any interest in adding support for logging of mail() calls and/or adding options that allow identification of who sent the e-mail. I've wrote a quick patch that enables this functionality via two ini settings controllable via php.ini or per-virtual host. Hehe. I was just

Re: [PHP-DEV] mail() logging for PHP

2006-12-14 Thread Sander Steffann
Hi, That is way too much information to include into an e-mail header, this would in fact be information disclosure vulnerability in many eyes. The log file that you can enable provides you with the full path to the script that called mail, which is more then enough to identify the offending

Re: [PHP-DEV] mail() logging for PHP

2006-12-14 Thread Rick Widmer
Stut wrote: Cracking point. Putting the domain in a header would make this far more useful, and I don't think that's too much info to include in a header. Ideally it would be the full URL, and I have to say that I don't think that's too much information for a mail header, and it's exactly

Re: [PHP-DEV] mail() logging for PHP

2006-12-14 Thread Richard Lynch
On Thu, December 14, 2006 11:29 am, Rick Widmer wrote: Cracking point. Putting the domain in a header would make this far more useful, and I don't think that's too much info to include in a header. Ideally it would be the full URL, and I have to say that I don't think that's too much

Re: [PHP-DEV] mail() logging for PHP

2006-12-14 Thread Richard Lynch
On Thu, December 14, 2006 4:21 am, Sander Steffann wrote: Is there any interest in adding support for logging of mail() calls and/or adding options that allow identification of who sent the e-mail. I've wrote a quick patch that enables this functionality via two ini settings controllable via

Re: [PHP-DEV] mail() logging for PHP

2006-12-14 Thread Ilia Alshanetsky
The full path is only for the log files, the header only contains the script name. As far as requests to include the domain name, we cannot do it reliably. In some instances value can be fakes or outright injected by the user, nor will this be at all useful for scripts running on the

[PHP-DEV] mail() logging for PHP

2006-12-13 Thread Ilia Alshanetsky
Is there any interest in adding support for logging of mail() calls and/or adding options that allow identification of who sent the e-mail. I've wrote a quick patch that enables this functionality via two ini settings controllable via php.ini or per-virtual host. The first option,

Re: [PHP-DEV] mail() logging for PHP

2006-12-13 Thread Stut
Ilia Alshanetsky wrote: Is there any interest in adding support for logging of mail() calls and/or adding options that allow identification of who sent the e-mail. I've wrote a quick patch that enables this functionality via two ini settings controllable via php.ini or per-virtual host. The

Re: [PHP-DEV] mail() logging for PHP

2006-12-13 Thread Ilia Alshanetsky
On 13-Dec-06, at 5:12 PM, Stut wrote: Ilia Alshanetsky wrote: Is there any interest in adding support for logging of mail() calls and/or adding options that allow identification of who sent the e-mail. I've wrote a quick patch that enables this functionality via two ini settings

Re: [PHP-DEV] mail() logging for PHP

2006-12-13 Thread Stut
Ilia Alshanetsky wrote: On 13-Dec-06, at 5:12 PM, Stut wrote: Ilia Alshanetsky wrote: Is there any interest in adding support for logging of mail() calls and/or adding options that allow identification of who sent the e-mail. I've wrote a quick patch that enables this functionality via two

Re: [PHP-DEV] mail() logging for PHP

2006-12-13 Thread Ilia Alshanetsky
On 13-Dec-06, at 5:53 PM, Stut wrote: I'm thinking about this from an ISP point of view... we get a lot of abuse reports because people have poorly written form handlers. It would be great if we could have PHP insert the full URL, domain name included, in the mail headers for anything it

RE: [PHP-DEV] mail() logging for PHP

2006-12-13 Thread Mike Robinson
Ilia Alshanetsky writes: Is there any interest in adding support for logging of mail() calls and/or adding options that allow identification of who sent the e-mail. I've wrote a quick patch that enables this functionality via two ini settings controllable via php.ini or per-virtual host.