Re: [PHP] Re: Possible hacker using php script to send e-mails?

2006-03-13 Thread Merlin
Hello Manuel, this seems to be the right track. However I do not have linebrakes in there, but the message gets passed by POST. This is my script error.php: ?php ### # requieres $hostpath= '../'; require $hostpath .

Re: [PHP] Re: Possible hacker using php script to send e-mails?

2006-03-13 Thread Jochem Maas
Merlin wrote: Hello Manuel, this seems to be the right track. However I do not have linebrakes in there, but the message gets passed by POST. This is my script error.php: ?php ### # requieres $hostpath= '../'; require $hostpath .

Re: [PHP] Re: Possible hacker using php script to send e-mails?

2006-03-13 Thread Manuel Lemos
Hello, on 03/13/2006 06:38 AM Merlin said the following: Hello Manuel, this seems to be the right track. However I do not have linebrakes in there, but the message gets passed by POST. This is my script error.php: Notice these two lines of your script: $from = $_POST[from];

[PHP] Re: Possible hacker using php script to send e-mails?

2006-03-11 Thread João Cândido de Souza Neto
If possible, i like to see this script to try to know exactly wath's happen. Merlin wrote: Hi there, I am running php 4.x on a suse 9.x machine. There is a php script which resides on a webapp that is responsible for sending e-mail to myself in case of errors like db-errors or similar.

Re: [PHP] Re: Possible hacker using php script to send e-mails?

2006-03-11 Thread Anthony Ettinger
It's possible that they are including in email headers in the body. On 3/11/06, João Cândido de Souza Neto [EMAIL PROTECTED] wrote: If possible, i like to see this script to try to know exactly wath's happen. Merlin wrote: Hi there, I am running php 4.x on a suse 9.x machine. There is

[PHP] Re: Possible hacker using php script to send e-mails?

2006-03-11 Thread Manuel Lemos
Hello, on 03/11/2006 09:39 AM Merlin said the following: I am running php 4.x on a suse 9.x machine. There is a php script which resides on a webapp that is responsible for sending e-mail to myself in case of errors like db-errors or similar. Called error.php This script does include

Re: [PHP] Re: Possible hacker using php script to send e-mails?

2006-03-11 Thread Rasmus Lerdorf
Manuel Lemos wrote: Hello, on 03/11/2006 09:39 AM Merlin said the following: I am running php 4.x on a suse 9.x machine. There is a php script which resides on a webapp that is responsible for sending e-mail to myself in case of errors like db-errors or similar. Called error.php This script

Re: [PHP] Re: Possible hacker using php script to send e-mails?

2006-03-11 Thread Manuel Lemos
Hello, on 03/11/2006 04:12 PM Rasmus Lerdorf said the following: I am running php 4.x on a suse 9.x machine. There is a php script which resides on a webapp that is responsible for sending e-mail to myself in case of errors like db-errors or similar. Called error.php This script does include